xy777 Privacy Policy

1.Who We Are

xy777 is an internationally operated online casino and sports betting platform accessible at xy777.pro. We provide registered players across Pakistan — including those in Karachi, Lahore, Faisalabad, Islamabad, and surrounding cities — with access to live dealer casino games, slot games, cricket and PSL sports betting markets, and PKR payment services via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.

For the purposes of this Privacy Policy, xy777 is the data controller responsible for the personal information collected through the xy777 Platform. All questions, requests, and complaints relating to this Privacy Policy should be directed to xy777 via the contact details set out in Section 16.

2.Personal Data We Collect

xy777 collects the following categories of personal data from players, either directly or through automated means during your use of the Platform:

xy777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where expressly required by applicable regulatory obligations or responsible gaming assessments.

3.How We Collect Your Data

xy777 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting xy777 support via live chat or email;
• Automated technologies: Technical and usage data collected automatically when you access the xy777 Platform via cookies, server logs, pixel tags, and session tracking technologies;
• Third-party service providers: Identity and document verification data returned by KYC/AML verification partners following submission of your identity documents; transaction confirmation data returned by payment processors such as JazzCash and EasyPaisa;
• Fraud prevention systems: Device fingerprinting, IP geolocation, and duplicate account detection systems that process technical data to protect the integrity of the xy777 Platform and its player community.

4.How We Use Your Personal Data

xy777 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and administer your xy777 player account, including processing deposits and withdrawals in PKR and maintaining your betting history;
• Identity verification: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations by verifying your identity, age (21+), and payment method ownership before processing withdrawals;
• Platform operation: To provide access to casino games, sports betting markets, live dealer services, and all other xy777 features you use;
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels, in English or Urdu;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, duplicate accounts, bonus abuse, money laundering, and other prohibited conduct as described in the xy777 Terms and Conditions;
• Regulatory compliance: To meet all obligations imposed on xy777 under applicable international gaming regulations, including record-keeping, reporting, and audit requirements;
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, apply responsible gaming tools activated by the player, and fulfil self-exclusion requests promptly;
• Platform improvement: To analyse aggregated, anonymised usage data to improve the xy777 Platform, optimise game performance, and enhance the overall player experience;
• Marketing communications: To send you promotional offers, bonus notifications, and xy777 news where you have given explicit consent to receive such communications. You may opt out at any time.

5.Legal Basis for Processing

xy777 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our contract with you as a registered xy777 player — including account creation, game access, payment processing, and support services;
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and other applicable regulatory requirements under xy777's international gaming licence framework;
• Legitimate interests: Processing carried out for xy777's legitimate business interests, including fraud prevention, platform security, duplicate account detection, and internal analytics, provided these interests are not overridden by your fundamental privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.Third-Party Sharing

xy777 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners, to facilitate your deposits and withdrawals in PKR;
• KYC and AML service providers: Third-party identity and document verification companies engaged by xy777 to carry out player due diligence checks required under applicable gaming regulations;
• IT and hosting providers: Cloud infrastructure, data storage, and cybersecurity service providers that process data on behalf of xy777 under strict data processing agreements;
• Regulatory and law enforcement authorities: Where xy777 is legally required to disclose player data in response to a lawful request from a regulatory body, court order, or law enforcement agency;
• Fraud prevention networks: Industry-standard fraud detection and responsible gaming databases, to protect xy777 and its players from fraudulent activity and problem gambling.

7.International Data Transfers

As xy777 operates under an international gaming regulatory framework, your personal data may be transferred to, stored, or processed in countries outside Pakistan. Where such international transfers occur, xy777 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries recognised as providing an adequate level of data protection under applicable international standards;
• Use of standard contractual clauses or equivalent data transfer mechanisms with recipient entities in countries that do not meet an adequacy threshold;
• Binding internal data protection policies applied to transfers within the xy777 group of companies and service providers.

If you have questions about the specific safeguards applied to any international transfer of your data, please contact xy777 support using the details in Section 16.

8.Data Retention

xy777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, accounting, and reporting requirements. Specific retention periods include:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in accordance with applicable AML and gaming regulatory requirements;
• KYC verification documents: Retained for the duration of your account plus five (5) years following closure or the last transaction, whichever is later;
• Customer support communications: Retained for three (3) years from the date of the relevant communication, unless a longer period is required for the resolution of an ongoing dispute;
• Responsible gaming records: Retained for the duration of any self-exclusion period plus five (5) years, to prevent re-registration during an active exclusion and to fulfil regulatory obligations;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter to demonstrate compliance.

When retention periods expire, xy777 securely deletes or anonymises the relevant personal data in accordance with our internal data destruction procedures.

9.Your Data Rights

Subject to applicable law and certain regulatory restrictions, you have the following rights in respect of your personal data held by xy777:

• Right of access: You may request a copy of the personal data xy777 holds about you, together with information about how it is being used;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you in your xy777 Account;
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to xy777's legal obligations to retain certain data for regulatory compliance purposes, which may override an erasure request;
• Right to restriction: You may request that xy777 restricts the processing of your personal data in certain defined circumstances, such as where you contest the accuracy of the data or object to its processing;
• Right to data portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request that xy777 provides your personal data in a structured, machine-readable format;
• Right to object: You have the right to object to xy777's processing of your personal data where that processing is based on legitimate interests. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time;
• Right to withdraw consent: Where xy777 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.

10.Cookies & Tracking Technologies

The xy777 Platform uses cookies and similar tracking technologies to operate correctly and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the operation of the xy777 Platform. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Used to remember your preferences, language settings, and account display options to personalise your experience on the xy777 Platform;
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the xy777 Platform, including which pages are visited most frequently and how long sessions last. This helps xy777 improve the Platform over time;
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, automated betting tools, and duplicate session creation.

xy777 does not use third-party advertising or behavioural targeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of your xy777 Account.

11.Children & Minors

The xy777 Platform is strictly intended for adults aged 21 years and older. xy777 does not knowingly collect personal data from any person under the age of 21. If xy777 discovers or is notified that personal data has been collected from a person under the age of 21, the relevant account will be immediately suspended, all associated data will be securely deleted, and any deposits will be returned subject to verification.

If you are a parent or guardian and believe that a minor has registered or used an xy777 account, please contact xy777 support immediately via live chat so that appropriate action can be taken without delay.

12.Security Measures

xy777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and xy777's servers;
• AES-256 encryption for personal and financial data stored in xy777's databases;
• Two-factor authentication (2FA) available for all player accounts;
• Role-based access controls limiting xy777 staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits conducted by independent cybersecurity professionals;
• Continuous monitoring of server infrastructure for intrusion attempts and anomalous activity;
• Incident response procedures to detect, contain, and notify players of any data breach in a timely manner.

While xy777 takes all reasonable precautions to secure your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and should notify xy777 support immediately if you suspect any unauthorised access to your account.

13.Marketing Communications

xy777 may send you promotional communications — including bonus offers, free bet promotions, PSL season specials, and platform updates — where you have given your explicit consent to receive such communications at the time of registration or through your Account preferences.

Marketing communications from xy777 may be delivered via:

• Email to your registered email address;
• SMS to your registered Pakistan mobile number;
• On-platform notifications within your xy777 Account dashboard.

You may opt out of any or all marketing communications at any time by:

• Clicking the unsubscribe link included in any xy777 marketing email;
• Updating your communication preferences within your Account settings;
• Contacting xy777 support via live chat or at [email protected] (plain text — not a link).

Please note that opting out of marketing communications will not affect transactional notifications that are necessary for the operation of your account, such as deposit confirmations, withdrawal updates, and security alerts.

14.Responsible Gaming & Data

xy777 takes its responsible gaming obligations seriously. As part of our duty of care to players, xy777 uses your usage data — including betting frequency, deposit patterns, session duration, and loss history — to identify potential indicators of problem gambling behaviour.

Where such indicators are identified, xy777 may:

• Display responsible gaming prompts or cooling-off recommendations within your Account;
• Proactively contact you via live chat or email to discuss available responsible gaming tools;
• Share anonymised data with responsible gaming research bodies or regulatory authorities where required by xy777's regulatory obligations.

Responsible gaming data — including self-exclusion status, deposit limits, and loss limits — is treated with the highest level of confidentiality within xy777. This data is not used for any commercial or marketing purpose. For full details on xy777's responsible gaming tools, please visit the Responsible Gaming page.

15.Policy Amendments

xy777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or xy777's data processing practices. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are significant, xy777 will endeavour to notify registered players via email or an on-platform notification prior to the changes taking effect. Continued use of the xy777 Platform following the updated effective date constitutes your acceptance of the revised Privacy Policy.

xy777 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

16.Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or xy777's handling of your personal data, please contact us through the following channel:

If you are not satisfied with xy777's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in the jurisdiction applicable to xy777's regulatory framework. Details of the applicable authority are available on request from xy777 support.

This Privacy Policy was last reviewed and updated on 1 January 2026.