xb777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data
At xb777, the privacy of every Pakistani player who uses the platform is taken seriously. This Privacy Policy explains in plain terms what personal data xb777 collects, the lawful basis on which it is processed, how it is stored and secured, who it may be shared with, and what rights you have over your own information.
Our Privacy Commitments
Six Core Privacy Principles at xb777
These principles summarise how xb777 approaches your data. The full policy detail follows below — please read every section carefully.
xb777 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with its gaming licence obligations. We do not collect data for its own sake.
xb777 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is used exclusively for operating your xb777 account and fulfilling the platform's legal obligations.
All personal data held by xb777 is stored on secured servers protected by 256-bit SSL encryption, access controls, and regular security audits. Data at rest is encrypted. Access is restricted to authorised personnel only.
As an xb777 account holder, you have the right to access, correct, and request deletion of your personal data, subject to xb777's legal retention obligations. All rights requests are processed within 30 calendar days of receipt.
xb777 retains personal data only for as long as it is required for the purposes for which it was collected, or for as long as required by applicable law and licence conditions — typically a minimum of five years for transaction records.
In the unlikely event of a data security breach affecting your personal information, xb777 will notify affected account holders promptly in accordance with its legal obligations and will take immediate remediation action.
Table of Contents
- 1. Introduction
- 2. Who We Are
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Cookies & Tracking
- 8. Data Sharing & Disclosure
- 9. International Data Transfers
- 10. Data Retention
- 11. Your Data Rights
- 12. Children's Privacy
- 13. Marketing Communications
- 14. Security Measures
- 15. Third-Party Links
- 16. Policy Amendments
- 17. Contact Us
Introduction
This Privacy Policy ("Policy") describes how xb777 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals who register accounts on, access, or otherwise interact with the xb777 online gaming platform available at xb777.bio ("the Platform").
xb777 operates as an online casino and sports betting platform serving players in Pakistan and is operated under an international gaming licence. As a licensed gaming operator, xb777 is required to collect and process personal data in order to fulfil its obligations under that licence, including identity verification, age verification, anti-money laundering controls, and responsible gaming requirements.
By registering an xb777 account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or use any xb777 service. This Policy forms part of, and should be read alongside, the xb777 Terms & Conditions.
Who We Are
xb777 is an online gaming platform operated under an international gaming licence and accessible to Pakistani players at xb777.bio. The platform provides online casino games (including live dealer tables), sports betting markets with a primary focus on cricket, slot games, and the Pearls of Bingo section — all denominated in Pakistani Rupees (PKR).
For the purposes of this Privacy Policy, xb777 acts as the data controller in respect of personal data collected from account holders and platform visitors. As data controller, xb777 determines the purposes and means of processing personal data collected through the xb777 platform.
For privacy-related enquiries, data access requests, or data deletion requests, contact xb777's designated privacy point of contact at [email protected]. Please include "Privacy Request" in the subject line of your message to ensure it is routed to the correct team.
Personal Data We Collect
xb777 collects the following categories of personal data from registered account holders and platform visitors:
3.1 Identity and Registration Data
- Full legal name as it appears on your Pakistani CNIC
- Date of birth (for age verification purposes)
- Pakistani CNIC number (front and back image for KYC verification)
- Residential address (street address, city, province)
- Nationality
- Gender
3.2 Contact Data
- Pakistani mobile number (primary account identifier and 2FA delivery channel)
- Email address (if provided as an alternative registration identifier)
3.3 Financial and Payment Data
- JazzCash mobile account number linked to your registered mobile
- EasyPaisa mobile account number linked to your registered mobile
- Bank account details where bank transfer is used as a deposit or withdrawal method (bank name, account title, account number, IBAN)
- Transaction history — deposits, withdrawals, and internal balance movements
- Amounts deposited and withdrawn, dates, and payment method used
3.4 Gaming Activity Data
- Bet history — game type, stake, result, and time of each wager placed on xb777
- Session data — login timestamps, session duration, and logout timestamps
- Responsible gaming tool usage — deposit limits set, cooling-off periods activated, self-exclusion requests
- Bonus and promotional activity — which offers were claimed, wagering progress, and bonus outcomes
3.5 Technical and Device Data
- IP address at time of account registration and at each login
- Device type, operating system, and browser type and version
- Device identifiers where applicable
- Geographic location data derived from IP address (not GPS-level location)
- Pages visited on xb777.bio, click patterns, and navigation sequences
3.6 Communication Data
- The content of communications you send to xb777 customer support, including live chat transcripts and email exchanges
- Any feedback, survey responses, or complaints you submit through the xb777 platform
How We Collect Your Data
xb777 collects personal data through the following methods:
- Directly from you — when you complete the xb777 registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or interact with any feature of the xb777 platform that requires you to provide information.
- Automatically from your device — through cookies, web beacons, and similar tracking technologies that record your device information, IP address, and browsing behaviour on xb777.bio.
- From payment processors — when you initiate a JazzCash, EasyPaisa, or bank transfer transaction, xb777 receives confirmation and reference data from the relevant payment processor to reconcile your account balance.
- From identity verification services — where xb777 uses a third-party KYC verification service to validate CNIC documents, that service may return verification status data to xb777.
- From fraud detection systems — automated systems that analyse patterns across xb777 account activity may generate risk scores or flags that are associated with your account record for compliance review purposes.
Legal Basis for Processing Personal Data
xb777 processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract between you and xb777 |
| Identity and age verification (KYC) | Legal obligation under xb777's gaming licence conditions |
| Processing deposits and withdrawals | Performance of contract; legitimate interests in financial record-keeping |
| Anti-money laundering checks | Legal obligation under applicable AML regulations |
| Responsible gaming monitoring and tools | Legal obligation; legitimate interests in player welfare |
| Fraud detection and account security | Legitimate interests of xb777 in protecting platform integrity |
| Customer support communications | Performance of contract; legitimate interests |
| Marketing communications (where opted in) | Consent (opt-in basis only) |
| Analytics and platform improvement | Legitimate interests of xb777 in improving platform services |
| Compliance with regulatory requests | Legal obligation |
How xb777 Uses Your Personal Data
xb777 uses the personal data it collects for the following specific purposes:
- To create, maintain, and manage your xb777 account and all associated services
- To verify your identity and age as required by xb777's gaming licence and responsible gaming obligations — this includes confirming that you are 21 years of age or older before allowing access to real-money gaming
- To process deposits you make via JazzCash, EasyPaisa, and bank transfers, and to process withdrawal requests to your verified payment accounts
- To detect, investigate, and prevent fraud, money laundering, account takeover, and other prohibited activities as defined in the xb777 Terms & Conditions
- To administer bonuses, promotions, and the xb777 loyalty programme where applicable, and to verify compliance with applicable bonus terms
- To provide responsive customer support and resolve account queries and disputes
- To monitor player activity for responsible gaming purposes — including identifying patterns that may indicate problematic gambling behaviour and proactively offering responsible gaming support tools
- To generate anonymised and aggregated analytics for the purpose of improving the xb777 platform, user experience, and product offerings
- To send transactional communications about your account — including deposit confirmations, withdrawal notifications, security alerts, and changes to these Terms or this Policy
- To send marketing communications, including promotions and bonus offers, only where you have explicitly opted in to receive them from xb777
- To comply with requests from regulatory authorities, law enforcement, or courts of competent jurisdiction under applicable law
Cookies & Tracking Technologies
xb777 uses cookies and similar web tracking technologies on xb777.bio to provide a functioning platform experience, to maintain your logged-in session, and to understand how players use the platform. The categories of cookies xb777 uses are as follows:
- Strictly Necessary Cookies: Required for the xb777 platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without impairing the platform's functionality.
- Functional Cookies: Used to remember your preferences and personalise your xb777 experience — for example, remembering your preferred deposit method or which games you have recently played. These are optional but improve usability.
- Analytics Cookies: Used by xb777 to understand aggregate user behaviour on the platform — which pages are most visited, where users exit, and which features are most used. This data is anonymised and used solely for platform improvement. xb777 uses its own analytics systems and does not pass this data to third-party advertising networks.
- Security and Fraud Detection Cookies: Used to assign a session identifier and device fingerprint for the purpose of detecting unusual login patterns, identifying potentially fraudulent sessions, and protecting your account against unauthorised access.
You can manage cookie preferences through your browser settings. However, disabling strictly necessary cookies will prevent you from logging in to your xb777 account and using the platform.
Data Sharing & Disclosure
xb777 does not sell, rent, or trade your personal data. xb777 may share your personal data with third parties only in the following limited circumstances:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and Bank Alfalah receive the transaction data necessary to process your deposits and withdrawals. Each payment processor operates under its own privacy policy and data protection obligations.
- KYC and Identity Verification Providers: Where a third-party identity verification service is used to validate CNIC documents, your identity data is shared with that provider for the sole purpose of verification and is not retained by the provider for any other use.
- Gaming Software Providers: The licensed game studios whose content is available on xb777 (such as Pragmatic Play, NetEnt, Playtech, and others) may receive a session token and bet data necessary to render and operate their games within the xb777 environment. These providers do not receive your identity or payment data.
- Fraud Detection and Security Services: Third-party security and fraud detection tools may receive anonymised or pseudonymised session data to generate risk assessments. These providers are contractually prohibited from using this data for any purpose other than providing the security service to xb777.
- Regulatory and Legal Authorities: xb777 will disclose personal data to gaming regulators, law enforcement agencies, courts, or government authorities where required to do so by applicable law, court order, or the conditions of xb777's gaming licence. xb777 will not disclose more data than is required by the specific legal request.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of xb777's operations, personal data held by xb777 may be transferred to the successor entity as part of that transaction. Affected account holders would be notified in advance of such a transfer.
International Data Transfers
xb777 is operated under an international gaming licence, and some of the third-party service providers used by xb777 — including gaming software providers and platform infrastructure services — may process data in jurisdictions outside Pakistan. Where personal data is transferred internationally, xb777 ensures that appropriate safeguards are in place, including:
- Contractual data protection clauses that bind the recipient to processing standards equivalent to those described in this Policy
- Transfers only to service providers whose data handling practices have been reviewed and approved by xb777's compliance function
- Use of pseudonymisation and data minimisation practices when data must cross jurisdictional boundaries
By using the xb777 platform, you acknowledge that your data may be processed in jurisdictions outside Pakistan where privacy laws may differ from those in your home country. xb777 takes reasonable steps to ensure your data receives an equivalent level of protection regardless of where it is processed.
Data Retention
xb777 retains personal data for the following periods, after which data is securely deleted or anonymised:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and KYC documents | 5 years from account closure | AML legal obligation / licence condition |
| Financial transaction records | 5 years from transaction date | Financial record-keeping obligation |
| Bet history and gaming activity | 5 years from the date of activity | Licence condition; dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing consent records | Until withdrawal of consent + 1 year | Consent compliance evidence |
| Technical / device / IP data | 13 months from collection | Security and fraud prevention |
| Self-exclusion records | Indefinite (cannot be deleted) | Responsible gaming compliance |
Following the expiry of the applicable retention period, xb777 will either securely delete the data or render it irreversibly anonymous so that it can no longer be linked to any individual.
Your Data Rights
As a data subject whose personal data is processed by xb777, you have the following rights. To exercise any of these rights, contact xb777 at [email protected] with the subject line "Data Rights Request". All requests are processed within 30 calendar days of receipt.
Right of Access
Request a copy of the personal data xb777 holds about you, along with details of how it is being used and the legal basis for processing.
Right of Rectification
Request correction of any personal data held by xb777 that is inaccurate or incomplete. Name corrections require supporting CNIC documentation.
Right of Erasure
Request deletion of your personal data where it is no longer required for the purposes it was collected, subject to xb777's legal retention obligations.
Right to Restrict Processing
Request that xb777 temporarily restrict processing of your data while a dispute about its accuracy or the lawfulness of its use is resolved.
Right to Data Portability
Request a structured, machine-readable export of the personal data you provided to xb777, where technically feasible and where processing is based on consent or contract.
Right to Object
Object to processing of your personal data carried out on the basis of xb777's legitimate interests, including direct marketing communications where you have previously opted in.
Children's Privacy
xb777 strictly enforces a 21+ age policy and does not knowingly collect or process personal data from individuals under the age of 21. The xb777 registration process includes age verification steps designed to identify and prevent underage registration.
If xb777 discovers or is notified that an account has been registered by a person under 21 years of age, that account will be permanently closed immediately, all associated personal data will be deleted to the extent not required to be retained for legal and licence compliance purposes, and all balances will be handled in accordance with xb777's terms for underage account closure as set out in the Terms & Conditions.
If you believe a minor may have registered or attempted to register on xb777, please notify xb777 support immediately at [email protected].
Marketing Communications
xb777 will send you marketing communications — including information about bonuses, promotions, and new platform features — only if you have explicitly opted in to receive such communications at the time of registration or through your account settings at any subsequent time.
xb777 may send marketing communications via SMS to your registered Pakistani mobile number and via email to your registered email address, where these channels have been explicitly opted into. You can withdraw your marketing consent at any time by updating your communication preferences in your xb777 account settings or by replying STOP to any marketing SMS received from xb777.
Withdrawal of marketing consent does not affect xb777's ability to send you transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of marketing preference as they are necessary for the operation of your account.
Security Measures
xb777 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and xb777.bio
- Encryption of sensitive personal data at rest on xb777 servers
- Role-based access controls that limit which xb777 personnel can access personal data, restricted to those with a legitimate operational need
- Two-factor authentication available for all xb777 player accounts and enforced for all xb777 administrative accounts
- Continuous monitoring for unusual account activity, suspicious login attempts, and anomalous transaction patterns
- Regular third-party security audits and penetration testing of the xb777 platform infrastructure
- Secure deletion procedures for data that has reached the end of its retention period
While xb777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your xb777 login credentials and for notifying xb777 immediately if you suspect your account has been compromised.
Third-Party Links
The xb777 platform does not contain links to third-party websites. All content and navigation on xb777.bio is internal to the xb777 platform. This Privacy Policy applies only to data collected and processed by xb777 through xb777.bio. xb777 is not responsible for the privacy practices of any third-party payment provider whose platform you access independently to complete a JazzCash, EasyPaisa, or bank transfer transaction.
Amendments to This Privacy Policy
xb777 reserves the right to update this Privacy Policy at any time. When material changes are made, xb777 will notify registered account holders via the mobile number or email address registered on their xb777 account at least 14 days before the updated Policy takes effect, except where a shorter notice period is required by applicable law or regulatory obligation.
The effective date of the current version of this Policy is stated at the top of the document. The most current version of this Privacy Policy is always available on this page. Continued use of the xb777 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must contact xb777 to close your account.
Contact Us
For any questions, concerns, or requests related to this Privacy Policy or the personal data xb777 holds about you, please contact the xb777 privacy team using the details below. Please note that all contact details are provided as plain text — none of the details below are clickable links.
- Privacy Enquiries: [email protected] — use subject line "Privacy Request"
- Data Access / Deletion Requests: [email protected] — use subject line "Data Rights Request"
- Platform: xb777.bio
- Terms & Conditions: /terms-conditions
- Responsible Gaming: /responsible-gaming
- FAQ: /faq
xb777 aims to respond to all privacy-related requests within 30 calendar days of receipt. Complex requests may require additional time, in which case xb777 will notify you of the expected response timeline within the initial 30-day window.
Your xb777 Account
Play at xb777 with Full Confidence
Live casino, cricket betting, 500+ slots, and Pearls of Bingo — all in PKR, all under one xb777 account. Your data is protected. Your identity is secure. Strictly 21+ only.