xl777 Privacy Policy

1 Who We Are

xl777 is an online gaming platform accessible at https://xl777.pro, offering cricket betting, live casino games, slots, and related gaming services to players in Pakistan and other permitted jurisdictions. For the purposes of this Privacy Policy, xl777 acts as the data controller in respect of all personal data processed in connection with your use of the platform.

xl777 operates under international gaming regulations and applies data protection standards consistent with recognised best practices for online gaming platforms. If you have any questions or concerns about this Policy or about how xl777 handles your personal data, please contact our support team using the details provided in Section 16 of this Policy.

2 Data We Collect

xl777 collects the following categories of personal data from players. We collect only what is necessary for the purposes described in this Policy:

xl777 does not collect special category data (such as health information, political opinions, or biometric data) unless this is specifically required by a regulatory authority and you are notified in advance.

3 How We Collect Your Data

xl777 collects your personal data through the following channels:

• Directly from you — when you complete the xl777 registration form, submit KYC documentation, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically through the platform — when you visit xl777 or log in to your account, our servers automatically collect technical data including your IP address, device identifier, and session activity through cookies and server logs.
• From payment providers — when you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment provider shares a transaction reference and confirmation with xl777 to reconcile your account. xl777 does not receive or store your full payment account credentials.
• From identity verification services — where xl777 uses a third-party KYC service to verify the authenticity of identity documents, that service may share a verification result and risk score with xl777 as part of the process.

4 Why We Use Your Data

xl777 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Policy:

• Account creation and management — to register your xl777 account, maintain your player profile, and provide access to the platform.
• Identity and age verification (KYC) — to confirm that you are aged 21 or above and that your identity matches the information provided at registration, as required by our regulatory obligations.
• Transaction processing — to securely process your PKR deposits and withdrawal requests via JazzCash, EasyPaisa, and other supported payment methods.
• Fraud prevention and platform security — to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the xl777 platform.
• Customer support — to respond to your queries, resolve complaints, and maintain a record of your support interactions for quality and compliance purposes.
• Responsible gaming obligations — to monitor your gaming activity for signs of problem gambling, apply the self-exclusion and deposit limit settings you have chosen, and comply with responsible gaming standards.
• Platform improvement and analytics — to analyse aggregate usage patterns and improve the performance, navigation, and game offering of the xl777 platform. Analytics data is processed at an aggregate level and does not identify individual players.
• Regulatory compliance and legal obligations — to maintain records as required by our gaming licence and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

5 Legal Basis for Processing

xl777 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity — processing your identity data, contact data, and financial data is necessary to perform the contract between you and xl777, namely to provide you with a functioning xl777 gaming account.
• Legal obligation — KYC verification, fraud monitoring, transaction record-keeping, and responsible gaming compliance are required by our regulatory framework and applicable law.
• Legitimate interests — platform security monitoring, fraud detection, and aggregate analytics serve the legitimate interests of xl777 and its player community, provided those interests do not override your fundamental privacy rights.
• Consent — marketing communications and the use of non-essential cookies are processed on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

xl777 does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the transaction data necessary to process your deposit or withdrawal. Each payment provider operates under its own privacy policy and is independently responsible for the data it processes.
• KYC and identity verification providers — xl777 may use an accredited third-party verification service to authenticate the identity documents you submit. This service receives your document images and personal details solely for the purpose of verification and is contractually prohibited from using them for any other purpose.
• Game software providers — providers of certified RNG slot games and live casino software may receive a session token and anonymised player identifier to facilitate gameplay. These providers do not receive your name, CNIC, or financial details.
• Regulatory and law enforcement authorities — xl777 will disclose personal data to competent regulatory or law enforcement authorities where required to do so by law, court order, or our licensing obligations. xl777 will notify you of any such disclosure where legally permitted to do so.
• Professional advisers — xl777's legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

7 International Data Transfers

The xl777 platform and its core data infrastructure are operated with data protection as a primary design consideration. Where personal data is processed or stored in a jurisdiction outside Pakistan, xl777 ensures that appropriate safeguards are in place — including data processing agreements with contractual obligations equivalent to recognised international data protection standards — prior to any such transfer.

Game software providers whose servers are located outside Pakistan process only anonymised session tokens, not personally identifiable information. If you have questions about where your specific data is stored or processed, please contact our support team.

8 Data Retention

xl777 retains personal data for as long as your account remains active and for a defined period thereafter in accordance with our regulatory obligations. Specific retention periods are as follows:

• Account and identity data — retained for the duration of your active xl777 account plus a minimum of 5 years following account closure, as required by anti-money laundering and gaming licence regulations.
• Transaction records — deposit and withdrawal records are retained for a minimum of 5 years from the date of each transaction.
• Support communications — live chat transcripts and email correspondence are retained for 2 years from the date of the interaction.
• Technical and usage data — server logs and session data are retained for 12 months and then securely deleted or anonymised.
• Responsible gaming records — self-exclusion records are retained for the full duration of any exclusion period plus 2 years thereafter to prevent inadvertent re-registration.

Once the applicable retention period has elapsed, xl777 will securely delete or anonymise your personal data. Anonymised data — which can no longer identify you — may be retained indefinitely for statistical and compliance reporting purposes.

9 Cookies & Tracking Technologies

xl777 uses cookies and similar technologies on the platform for the following purposes:

• Essential cookies — required for the xl777 platform to function. These maintain your login session, prevent cross-site request forgery, and ensure the security of your account. These cookies cannot be disabled without breaking platform functionality.
• Preference cookies — store your in-platform settings such as language preference, display options, and recently played games. These improve your experience but are not strictly necessary.
• Analytics cookies — collect anonymised aggregate data about how players navigate the xl777 platform, which pages are most visited, and where technical errors occur. This data is used internally to improve the platform and is not shared with third-party advertising networks.

xl777 does not use third-party behavioural advertising cookies or cross-site tracking technologies. You may manage or disable non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from remaining logged in to your xl777 account.

10 Marketing Communications

With your consent, xl777 may send you promotional communications including bonus offers, tournament announcements, and platform updates via SMS to your registered mobile number or email to your registered address. You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences within your xl777 account settings.
• Replying "STOP" to any promotional SMS from xl777.
• Contacting xl777 support directly with an opt-out request.

Withdrawing consent to marketing does not affect your ability to use the xl777 platform or receive transactional messages relating to your account (such as deposit confirmations or withdrawal updates), which are sent on the basis of contractual necessity.

11 Children & Minors

The xl777 platform is strictly intended for adults aged 21 and above. xl777 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at the point of registration and again prior to processing the first withdrawal from any new account.

If xl777 discovers or is notified that a registered account belongs to a minor, we will immediately suspend the account, delete all associated personal data, and — where funds were deposited — return them to the originating payment method after deducting any losses incurred. Parents or guardians who believe a minor has registered on xl777 should contact our support team immediately.

12 Security Measures

xl777 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and xl777 servers.
• Encrypted storage of sensitive personal data including CNIC details and payment references.
• Hashed and salted password storage — xl777 does not store your account password in plain text.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security reviews and penetration testing of the xl777 platform infrastructure.
• Automatic session timeouts to protect accounts on shared or unattended devices.

While xl777 applies industry-standard security measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xl777 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

13 Your Data Rights

As an xl777 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the email address in the footer of this page. xl777 will respond to all verified requests within 30 calendar days:

• Right of access — you may request a copy of all personal data xl777 holds about you, provided free of charge for the first request in any 12-month period.
• Right of rectification — you may request that xl777 correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xl777's overriding regulatory retention obligations.
• Right to restriction — you may request that xl777 restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data held.
• Right to object — you may object to xl777 processing your data for direct marketing purposes at any time, with immediate effect.
• Right to data portability — you may request that xl777 provide your account data in a structured, machine-readable format where technically feasible.

Please note that some rights may be limited where xl777 is required to retain data by law or to protect the interests of other players or third parties. xl777 will explain any applicable limitation when responding to your request.

14 Third-Party Links & Services

The xl777 platform does not contain links to external third-party websites or social media platforms within the main platform interface. Where third-party game software providers operate embedded game windows within the xl777 environment, those providers are subject to contractual data processing obligations and are not permitted to use any player data obtained through xl777 for independent purposes.

xl777 is not responsible for the privacy practices of any third party outside of the xl777 platform environment. This Privacy Policy applies solely to data processed by xl777 in connection with your use of the xl777 platform at https://xl777.pro.

15 Updates to This Privacy Policy

xl777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Material changes to this Policy will be communicated to registered players via email notification to the address on file, no less than 7 days before the updated Policy takes effect.

The current version of this Policy is always accessible at https://xl777.pro/privacy-policy and is identified by the "Last Updated" date displayed at the top of this page. Your continued use of the xl777 platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data xl777 holds about you, please contact our support team. xl777 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days.

For data access requests, rectification requests, or erasure requests, please include your registered email address and a brief description of your request. xl777 may ask you to verify your identity before processing any data rights request.