Privacy Policy – xy777 Online Gaming Platform Pakistan

This Privacy Policy applies to all users of the xy777 platform, including the website at xy777.onl, the Android application, and the iOS application. It covers personal data collected during the registration process, during the use of the platform, and in connection with financial transactions made through the platform.

By creating an account on xy777 and using the platform, you confirm that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not consent, you should not register an account or use the platform.

This policy applies specifically to Pakistani users and is written with the context of Pakistani payment methods, identity documentation, and data practices in mind. Data protection practices described here reflect how xy777 operates in relation to its user base.

xy777 collects personal information in several contexts. The table below summarises what categories of data are collected and at which point in your use of the platform:

xy777 does not collect data that is not necessary for the purposes described in this policy. You are not required to provide data beyond what is asked during registration and verification. If you choose not to complete KYC, your account will be restricted from withdrawals until verification is done.

Every category of data collected by xy777 has a specific and legitimate purpose. The main reasons we collect and process your personal data are:

• Account creation and management: To register your account, verify your identity, and maintain your profile securely.
• Processing transactions: To handle deposits and withdrawals through your chosen PKR payment method — whether JazzCash, Easypaisa, Raast, bank transfer, or card.
• Fraud prevention and security: To detect unusual activity, prevent unauthorised account access, and protect against financial fraud or multi-accounting.
• Platform operation: To provide the sports betting, live casino, bingo, and other gaming features you use on xy777.
• Customer support: To respond to queries, investigate disputes, and resolve issues with your account or transactions.
• Responsible gaming: To monitor account activity, apply deposit limits and session controls you have set, and enforce self-exclusion requests.
• Platform improvement: To analyse how the platform is used in aggregate so we can improve features, fix issues, and develop new content.
• Bonus and promotion management: To verify eligibility, track wagering activity against bonus requirements, and prevent bonus abuse.

xy777 does not use your personal data for third-party marketing, profiling for resale, or any purpose not listed here. The data we collect is the minimum necessary to run a safe, functional gaming platform.

Know Your Customer (KYC) verification is required before any withdrawal can be processed from your xy777 account. KYC may also be requested at any time if xy777 has reason to verify account ownership, for example if unusual activity is detected or if a large transaction is initiated.

Documents typically requested for KYC include:

• A clear photograph or scan of your CNIC (Computerised National Identity Card) showing both front and back.
• A selfie holding your CNIC with your face clearly visible.
• In some cases, proof of address or confirmation of your registered payment method.

Failure to complete KYC when requested will result in withdrawal restrictions on your account until the process is completed. If KYC reveals that account information does not match what was provided at registration — for example, a different name or date of birth — your account may be suspended pending further investigation.

When you deposit or withdraw funds on xy777, financial transaction data is processed. This includes your JazzCash mobile number, Easypaisa wallet number, bank account number, card details, or Raast ID depending on which method you use.

Important points about how payment data is handled:

• Payment processing for JazzCash, Easypaisa, Raast, and bank transfers is handled through third-party payment processors. These providers operate under their own security and privacy standards and are responsible for the security of data transmitted to them.
• xy777 stores transaction records — amounts, dates, methods, and outcomes — as part of your account history. These records are retained for the period described in the Data Retention section.
• Full card numbers, CVV codes, and complete bank account credentials are not stored on xy777's servers. Where card payments are processed, card data goes directly to the payment processor.
• Your transaction history on xy777 is visible to you through your account's transaction log at any time.

xy777 uses cookies and similar technologies on the website and in the app. Cookies are small data files stored on your device that help the platform function correctly and allow us to understand how it is being used.

The types of cookies used on xy777:

• Essential Session cookies — Keep you logged in during your session. Without these, the platform cannot function. These are not optional.
• Functional Preference cookies — Remember your settings such as language preference and display options across visits.
• Analytics Analytics cookies — Collect anonymous, aggregated data about how the platform is used. This helps improve performance and identify issues. Individual users cannot be identified from analytics data.

Essential cookies cannot be disabled as they are required for the platform to work. Preference and analytics cookies can be managed through your browser settings. On the mobile app, cookie-equivalent tracking can be managed through your device's app privacy settings.

xy777 does not use advertising cookies, retargeting pixels, or tracking technologies that build profiles for resale to third-party advertisers.

xy777 does not sell personal data to any third party under any circumstances. Your data is shared only in the specific and limited circumstances below:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, Raast, bank networks, and card processing providers as necessary to complete deposits and withdrawals.
• Identity verification services: Where third-party KYC verification tools are used, relevant identity documents are shared with those services for the sole purpose of verification.
• Fraud prevention services: Anonymised or encrypted data may be shared with fraud detection services to identify and prevent account abuse, multi-accounting, and financial fraud.
• Legal obligations: If xy777 receives a lawful order, court direction, or legitimate legal request requiring disclosure of user data, we are obligated to comply. We will inform affected users where legally permitted to do so.
• Business operations: Service providers who support the technical operation of the platform — such as hosting, database management, or customer support tools — may process data on our behalf under data processing agreements that restrict them to the purposes we define.

xy777 applies technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• SSL/TLS encryption on all connections between your device and xy777 servers. Data transmitted to and from the platform is encrypted in transit.
• One-way password hashing: Passwords are hashed using a secure algorithm and stored as irreversible hashes. No xy777 staff member can read your password.
• Two-factor authentication for new device logins, helping prevent unauthorised access even if your password is compromised.
• Encrypted document storage for KYC files, with access restricted to authorised verification staff only.
• Session timeout to automatically log out inactive sessions and reduce the risk of unauthorised access from shared devices.
• Fraud monitoring systems that flag unusual activity patterns for review.

xy777 retains personal data for as long as it is necessary for the purposes for which it was collected and for a period thereafter as required by operational and legal considerations. General retention periods:

• Active account data: Retained for the duration of your account's active period plus a defined period after closure.
• Transaction records: Financial transaction records are retained for an extended period for fraud prevention, dispute resolution, and financial record-keeping purposes.
• KYC documents: Retained for the period required to meet identity verification obligations, then deleted or anonymised.
• Support communications: Retained for a reasonable period to allow for follow-up, dispute resolution, and quality monitoring.
• Analytics data: Aggregated analytics data is retained for platform improvement purposes. This data does not individually identify users.

When your account is closed — either voluntarily or due to a terms violation — personal data may be retained for a defined period for fraud prevention, legal compliance, and dispute resolution before being deleted or anonymised.

As an xy777 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact support through the Help section of the platform:

xy777 may update this Privacy Policy from time to time to reflect changes in platform operations, data practices, or applicable requirements. When material changes are made, the "Last Updated" date at the top of this page will be revised. For changes that significantly affect how your data is used, registered users will be notified through the platform or via their registered contact details.

We encourage you to review this policy periodically, particularly if you are considering making a significant transaction or updating your account details. Continued use of xy777 after a policy update constitutes acceptance of the revised terms.

For any questions or concerns about this Privacy Policy or how your data is handled, please contact support through the Help section inside your account.