Privacy Policy — xxc777

This Privacy Policy ("Policy") sets out the data practices of xxc777 ("xxc777", "the Platform", "we", "us", "our") in relation to the personal information of individuals ("Users", "you", "your") who access or use the website located at xxc777.cam and its associated services.

xxc777 is an online gaming information and entertainment platform serving English-speaking users in Pakistan, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations. The protection of your personal data is a responsibility we take seriously.

By accessing and using the xxc777 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, to the extent such consent is the applicable lawful basis for processing. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably identify a living individual, directly or indirectly, including name, identification number, contact details, location data and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. xxc777 is the Data Controller for all personal data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of xxc777 under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" means Know Your Customer verification procedures, including identity documentation, proof of address and source-of-funds checks mandated by applicable anti-money laundering regulations.
• "Cookie" means a small text file placed on a User's device by the Platform to support functionality, session management or analytics purposes.
• "Special Category Data" means sensitive categories of personal data including health information, which xxc777 may process in limited circumstances related to responsible gambling assessments.

xxc777 acts as the Data Controller in respect of all personal data collected through and in connection with the operation of the xxc777.cam platform. As Data Controller, xxc777 is responsible for ensuring that personal data is processed lawfully, fairly and in a transparent manner in accordance with applicable data protection legislation.

All data protection queries, subject access requests and rights-exercise requests should be directed to xxc777 via the contact details set out in Section 16 of this Policy. xxc777 will respond to all such requests within the timeframes required by applicable law.

xxc777 collects personal data through several channels, including the account registration process, account usage activity, KYC verification submissions, customer support interactions and technical data generated automatically by your device and browser.

When you create an account, we collect: full legal name, date of birth, residential address, email address, mobile telephone number, preferred currency and username.

To comply with anti-money laundering (AML) obligations and verify your identity, we may collect: copies of government-issued identification (such as your Pakistani CNIC), proof of residential address (such as a utility bill), a self-portrait photograph (selfie), and documentation relating to the source of deposited funds.

We collect data relating to your deposits, withdrawals and wager activity, including transaction amounts in PKR or other currencies, payment method identifiers (such as the last four digits of a card or a mobile wallet reference), transaction timestamps and processing status. Payment provider names including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah may appear in transaction records as familiar references to the methods available for Pakistani users.

Automatically collected data includes: IP address, browser type and version, operating system, device model, screen resolution, session duration, referring URLs, pages visited and interaction events (clicks, scrolls). This data is used for security monitoring, fraud detection and performance optimisation.

Records of your communications with xxc777's support team — including live chat transcripts, email correspondence and complaint submissions — are retained to resolve disputes, monitor service quality and comply with regulatory recordkeeping requirements.

Where you utilise responsible gambling tools — such as setting deposit limits, activating self-exclusion or completing problem gambling assessments — we record the relevant data to enforce your chosen controls and to comply with our duty of care obligations. This may constitute Special Category Data in certain jurisdictions.

xxc777 identifies a lawful basis for every category of personal data processing. The following table summarises the primary processing activities and their applicable lawful bases:

xxc777 processes your personal data for the following purposes:

• Account operation: creating and maintaining your account, authenticating your identity at login and managing your profile settings.
• Service delivery: enabling access to sports betting markets (including Pakistan cricket, PSL T20, ICC tournaments and other sports), casino games, live dealer tables and instant game features.
• Financial processing: handling deposits, withdrawals, bonus credits and transaction recordkeeping.
• Legal compliance: fulfilling AML, KYC and regulatory obligations imposed by xxc777's applicable licensing framework.
• Fraud prevention: detecting, investigating and preventing fraudulent activity, bonus abuse, multi-accounting and money laundering.
• Responsible gambling: implementing and enforcing player-requested limits, self-exclusions and monitoring for indicators of problem gambling behaviour.
• Communications: sending transactional notifications (e.g., deposit confirmations, withdrawal status, KYC requests), service updates and, where consented, promotional communications.
• Platform improvement: analysing aggregated usage patterns to improve site performance, user experience and content relevance for Pakistani users.

xxc777 does not sell or rent your personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for the stated purposes:

Third-party companies engaged by xxc777 to provide operational services, including: identity verification and KYC providers, payment processing platforms, cloud hosting and data storage providers, customer support software providers, fraud detection services and analytics platforms. All Data Processors are bound by data processing agreements requiring them to handle your data strictly in accordance with xxc777's instructions and applicable law.

xxc777 may be required to disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies or courts where required by applicable law, a valid court order, a regulatory investigation or our AML/CTF reporting obligations. xxc777 will provide only the minimum data necessary to satisfy the legal requirement.

Personal data may be shared within the xxc777 corporate group for the purposes of operational management. In the event of a merger, acquisition or sale of assets, personal data may be transferred to a successor entity, subject to equivalent privacy protections being maintained.

xxc777 may transfer personal data to countries outside Pakistan for processing or storage purposes, including to countries where xxc777's servers, Data Processors or licensing authorities are located. Where such transfers occur, xxc777 takes appropriate measures to ensure that your personal data receives an adequate level of protection, including:

• Transferring data only to countries with data protection frameworks recognised as adequate by applicable regulatory standards.
• Entering into contractual clauses with Data Processors that impose equivalent data protection obligations.
• Ensuring that any transferred data is subject to access controls, encryption and security standards equivalent to those applied within xxc777's primary operations.

xxc777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with xxc777's data disposal procedures.

xxc777 uses cookies and similar technologies (including pixel tags and local storage) to operate the Platform and improve user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Essential for core Platform functionality including user authentication, session management and security features. These cookies cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences, such as language settings, display options and responsible gambling limit configurations. Disabling these may reduce Platform personalisation.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — pages visited, time on site, navigation paths. This data helps xxc777 improve content and performance for Pakistani users.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic and account takeover attempts.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. xxc777 does not deploy third-party advertising or cross-site tracking cookies.

Subject to applicable law and certain legitimate exceptions (such as AML legal hold obligations), you have the following rights in respect of your personal data held by xxc777:

To exercise any of these rights, please contact xxc777 using the contact details in Section 16. We may need to verify your identity before processing the request. xxc777 will not charge a fee for handling a rights request unless the request is manifestly unfounded or excessive.

xxc777 is strictly an adults-only platform. Access is prohibited to individuals under the age of 18 years, or the higher minimum age required by the applicable operator or licensing jurisdiction. xxc777 does not knowingly collect personal data from minors.

Where xxc777 discovers that personal data has been collected from an individual who is or was below the applicable minimum age at the time of collection, we will take immediate steps to delete that data and close the associated account. Any funds deposited by a minor will be handled in accordance with xxc777's Terms and Conditions and applicable legal requirements.

xxc777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include:

• SSL/TLS encryption on all data transmitted between user devices and the Platform.
• Encryption at rest for sensitive data including KYC documents and financial records.
• Access controls limiting staff access to personal data to those with a legitimate operational need, governed by role-based permission systems.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Intrusion detection and monitoring systems operating continuously to identify and respond to security incidents.
• Regular security testing including vulnerability assessments of Platform infrastructure.

Notwithstanding these measures, no internet-based system is wholly immune from security risks. You are responsible for maintaining the security of your own login credentials and for notifying xxc777 promptly if you suspect any unauthorised access to your account.

The xxc777 Platform integrates third-party services for specific operational functions, including game delivery, payment processing, identity verification and analytics. While xxc777 exercises due diligence in selecting service providers, we are not responsible for the independent data practices of third-party companies.

Third-party Data Processors engaged by xxc777 are required by contract to process personal data only for the purposes specified by xxc777, to implement adequate security measures and to comply with applicable data protection obligations. xxc777 does not permit Data Processors to use your data for their own commercial purposes.

The xxc777 Platform does not contain links to external third-party websites beyond its own operational pages. Should any external reference appear in content for contextual purposes, xxc777 is not responsible for the privacy practices of those external sites.

xxc777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where material changes are made — particularly those affecting your rights or the categories of data we collect — xxc777 will notify registered Users via email or a prominent notice on the Platform, providing reasonable advance notice before the changes take effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

For all privacy-related queries, data subject rights requests, complaints or concerns about how xxc777 processes your personal data, please contact our support team. We aim to acknowledge all privacy-related requests within 72 hours and to resolve them within the timeframe required by applicable law.

If you are not satisfied with xxc777's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.