777xp8 Privacy Policy

1. Data Controller

For the purposes of this Privacy Policy, the data controller is 777xp8 ("777xp8", "the Platform", "we", "us", "our"), the operator of the online gaming platform accessible at https://777xp8.app. 777xp8 is responsible for determining the purposes and means by which the personal data of users ("you", "Player") is processed in connection with your use of the platform.

By registering an account on 777xp8, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. If you do not agree with the practices described herein, you should refrain from registering an account or submitting personal data to the platform.

2. Personal Data We Collect

777xp8 collects personal data in the following categories depending on your level of engagement with the platform:

Registration Data:

• Mobile phone number (used as primary account identifier and for SMS verification)
• Username chosen at registration
• Date of birth (collected for age verification purposes — you must be 18 or older)
• Password (stored only as a cryptographic hash; the plaintext password is never retained)

Identity Verification (KYC) Data: Where a withdrawal request triggers KYC requirements, we may additionally collect:

• Full legal name as it appears on a government-issued identity document
• CNIC (Computerised National Identity Card) number
• Copy of a government-issued photo ID
• Proof of address document

Financial Data:

• JazzCash or Easypaisa mobile wallet number used for deposits and withdrawals
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other supported institutions) where bank transfer is used
• Transaction history: deposit amounts, withdrawal amounts, timestamps, and payment method references

Technical and Usage Data:

• IP address and approximate geolocation at login
• Device type, browser version, and operating system
• Pages visited, game sessions initiated, bet placement logs, and session duration
• Cookies and similar tracking technologies (see Section 6)

Communications Data: The content of any support chat conversations, emails sent to [email protected], or other written communications you initiate with 777xp8 customer support.

3. How We Use Your Personal Data

777xp8 processes your personal data for the following purposes:

• Account management: Creating, verifying, maintaining, and securing your 777xp8 account.
• Transaction processing: Processing PKR deposits, withdrawals, and bet settlements through your selected payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or other supported channels).
• Age verification: Confirming that you are at least 18 years old before allowing participation in real-money gaming activity.
• Identity verification (KYC): Fulfilling anti-money laundering obligations and verifying account ownership before processing withdrawals above defined thresholds.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, and applying account restrictions where requested by the player or required under our responsible gaming obligations.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of your support interactions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game availability, and user experience.
• Regulatory compliance: Retaining records as required by applicable laws and regulations.

777xp8 does not use your personal data for unsolicited marketing to third parties, and we do not sell, rent, or trade your personal data to any external marketing organisations.

4. Legal Basis for Processing

777xp8 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to register your account, process your transactions, and provide the gaming services you have requested.
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and data retention obligations applicable to online gaming operators.
• Legitimate interests: Processing for fraud prevention, platform security, and the detection of prohibited conduct — where our legitimate interests in protecting the platform and its users do not override your data protection rights.
• Consent: Where we rely on consent for specific processing activities (such as optional marketing communications), we will obtain your explicit consent separately and you may withdraw it at any time.

5. Data Sharing and Disclosure

777xp8 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: Your financial details are shared with the relevant payment service provider (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or other providers) solely to the extent required to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Where identity verification is required, documents may be processed by a third-party KYC service provider operating under a data processing agreement with 777xp8.
• Technology and infrastructure providers: Cloud hosting, database, and CDN service providers who process data on 777xp8's behalf under contractual data protection obligations.
• Legal and regulatory authorities: Where we are required by law, court order, or a lawful regulatory request to disclose personal data to a competent authority.
• Fraud prevention networks: Where there is reasonable suspicion of fraudulent activity, account information may be shared with relevant fraud prevention services.

All third-party service providers who process personal data on 777xp8's behalf are contractually required to process such data only as directed by 777xp8 and in accordance with applicable data protection standards.

6. Cookies and Tracking Technologies

777xp8 uses cookies and similar tracking technologies to operate the platform effectively. Cookies are small text files placed on your device when you visit the website. The categories of cookies used by 777xp8 are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your active session. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Store your preferences such as language settings, display preferences, and previously used payment methods to improve your experience.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which pages are visited most, where users drop off — to help 777xp8 improve the user experience. No personally identifiable information is transmitted via analytics cookies.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

You may configure your browser to block or delete cookies, but please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. 777xp8 does not currently use cross-site advertising or retargeting cookies.

7. Data Retention

777xp8 retains personal data for as long as your account is active and for a defined period following account closure, in accordance with our legal obligations. Specific retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with standard record-keeping obligations applicable to online gaming platforms.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or such longer period as may be required by applicable law.
• Support communications: Retained for up to three (3) years from the date of each interaction.
• Technical and usage logs: Typically retained for up to twelve (12) months for security monitoring purposes, after which they are aggregated or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Data Security

777xp8 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the 777xp8 platform.
• Cryptographic hashing of account passwords — plaintext passwords are never stored.
• Role-based access controls limiting internal staff access to personal data on a strictly need-to-know basis.
• SMS-based account verification for registration and password reset, adding an additional layer of identity confirmation.
• Automated detection of suspicious login activity, with SMS alerts to registered users where anomalies are detected.

Despite these measures, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying 777xp8 immediately at [email protected] if you suspect unauthorised access to your account.

9. Your Data Rights

As a user of 777xp8, you have the following rights with respect to your personal data, subject to applicable law:

• Right of access: You may request a copy of the personal data 777xp8 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations. Note that data subject to mandatory retention periods cannot be erased until those periods have elapsed.
• Right to restrict processing: You may request that 777xp8 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request a structured copy of your data in a commonly used machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact 777xp8 via live chat or by emailing [email protected]. We will respond to verified data subject requests within a reasonable period.

10. Children's Privacy

777xp8 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation that you are at least 18 years of age. If 777xp8 becomes aware that personal data has been submitted by a minor, that account will be immediately suspended, the data will be deleted, and any associated funds will be returned less any applicable processing costs. If you are a parent or guardian and believe a minor has registered an account, please contact us immediately at [email protected].

11. Third-Party Services and Links

The 777xp8 platform does not contain links to external third-party websites for commercial or navigational purposes. Payment processing integrations (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah) involve transmission of financial data directly between your financial institution and 777xp8's payment processing infrastructure, governed by the privacy policies of the respective payment service providers. 777xp8 is not responsible for the privacy practices of third-party payment service providers, and we recommend you review their respective privacy notices.

12. Updates to This Privacy Policy

777xp8 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, registered users will be notified via a notification within the platform or by SMS to the registered mobile number. The "Last updated" date at the top of this policy will be revised accordingly. Continued use of the 777xp8 platform following notification of a revised Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this policy periodically.

13. Contact Us

For any privacy-related enquiries, data subject requests, or concerns about how 777xp8 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 within the 777xp8 platform after login.
• Email: [email protected] (plain text — not a clickable link)

When submitting a data-related request by email, please include your registered mobile number (not your password) so our team can locate your account. We aim to acknowledge all privacy requests within 5 business days.