777xc Privacy Policy —
Your Data, Handled With Care

For the purposes of applicable data protection legislation, the data controller responsible for the personal information collected through the 777xc platform is the operator of the website located at https://777xc.club. As data controller, 777xc determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, access requests, and complaints should be directed to our support team at [email protected], clearly marked "Data Protection Enquiry" in the subject line to ensure prompt routing to the appropriate team.

777xc collects personal data across several touchpoints. The categories of information we collect, and the circumstances in which each category arises, are set out below.

We do not collect special categories of sensitive personal data — such as health information, biometric data, religious beliefs, or political opinions — unless you voluntarily provide such information in the context of a responsible gaming self-assessment or a support interaction. Where such data is provided, it is processed solely for the purpose for which it was shared and is not retained beyond the resolution of that matter.

777xc processes personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account Creation and Management: To register your player account, verify your identity and age (21+), and maintain accurate account records throughout our relationship.
• Transaction Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to facilitate timely withdrawal of winnings to your registered Pakistani payment method.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) requirements imposed by our licensing authority.
• Fraud Prevention and Platform Integrity: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance in English during Pakistan Standard Time business hours.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, enforce self-imposed limits, and administer cooling-off or self-exclusion requests in accordance with our Responsible Gaming Policy.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the design, speed, and content of the 777xc platform — including game selection and promotional relevance for our Pakistani player base.
• Marketing Communications: Where you have opted in to receive marketing communications, to send you information about 777xc promotions, new games, and special offers via email or SMS. You may withdraw consent at any time by clicking "unsubscribe" in any marketing email or contacting support.

Every instance of personal data processing by 777xc is grounded in one of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and 777xc — including account creation, game access, and payment processing — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with AML, KYC, licensing, and other regulatory requirements is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service analytics is carried out on the basis of 777xc's legitimate interests, provided such interests are not overridden by your fundamental data protection rights.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

777xc shares personal data with third parties only where strictly necessary and only with parties bound by appropriate data protection obligations. The categories of recipients are as follows:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other Pakistani payment processors receive the transaction and account data required to process your deposits and withdrawals. These providers operate under their own regulated privacy and security frameworks.
• Game Software Suppliers: Certified third-party game providers whose titles are hosted on the 777xc platform may receive anonymised session data necessary for game operation, jackpot synchronisation, and RNG certification purposes.
• KYC and Identity Verification Partners: Third-party identity verification services may receive copies of your identity documents and contact details for the sole purpose of completing required KYC checks.
• Fraud Prevention and AML Screening Services: We may share transactional and identity data with specialist fraud detection and financial crime screening providers to fulfil our regulatory obligations.
• Regulatory and Law Enforcement Authorities: 777xc will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• IT Infrastructure and Hosting Providers: Our servers, databases, and cloud infrastructure are managed by contracted technical partners who process data solely on our documented instructions under strict confidentiality agreements.

777xc uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and — where you have consented — to analyse how the platform is used and deliver relevant promotional content.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 777xc platform, including your ability to log in and access your account.

777xc retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, in line with AML record-keeping requirements.
• KYC Documents: Retained for five years following the end of the customer relationship or the date of the relevant transaction, whichever is later.
• Transaction Records: Retained for five years from the date of each transaction.
• Support Communications: Retained for three years from the date of the final interaction in any given support case.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus two years following opt-out, to evidence consent history if required.
• Technical and Usage Logs: Retained for up to 13 months in identified form, after which they are aggregated and anonymised for long-term analytics.

Upon expiry of the applicable retention period, data is securely deleted using methods that prevent reconstruction or recovery. Where deletion is not technically feasible in the short term — for example in backup systems — the data is isolated from active processing and scheduled for deletion at the earliest practicable opportunity.

777xc takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• TLS 1.2 or higher encryption for all data in transit between your device and 777xc servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and payment credentials;
• Role-based access controls ensuring that internal staff can only access personal data relevant to their specific function;
• Two-factor authentication requirements for all 777xc administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• A documented data breach response procedure with a target notification timeline consistent with regulatory requirements.

Subject to applicable data protection law and certain legal exceptions, you have the following rights in relation to your personal data held by 777xc:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how and why it is processed.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You can update many details directly in your account profile; for changes requiring verification, contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain records as described in Section 7.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is under review.
• Right to Data Portability: You may request that we provide a copy of your personal data in a structured, machine-readable format, or that we transfer it directly to another controller where technically feasible.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Marketing objections are processed immediately; other objections are assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with written notice.

777xc strictly prohibits the use of its platform by persons under the age of 21 years. We do not knowingly collect, store, or process personal data belonging to minors. Age verification is performed as part of the KYC process, and accounts where the holder is found to be under 21 will be immediately closed with any real-money balance returned to the originating payment method.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account or accessed 777xc's services, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of any data collected from the minor, within five business days of receiving your notification.

In the ordinary course of operating the 777xc platform, it may be necessary to transfer your personal data to service providers or infrastructure partners located outside Pakistan. Such transfers may include game software vendors, cloud hosting providers, and KYC verification platforms operating from jurisdictions in Asia, Europe, or elsewhere.

Where personal data is transferred internationally, 777xc ensures appropriate safeguards are in place, which may include:

• Contractual data protection clauses that impose obligations on recipient organisations equivalent to those we ourselves are bound by;
• Transfers only to countries or organisations that maintain data protection standards consistent with applicable international frameworks;
• Binding corporate rules where transfers occur within a multinational group structure.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our support team.

777xc reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Material changes — those that meaningfully affect your rights or the manner in which your data is processed — will be communicated to you via email notification to your registered address and by prominent notice on the 777xc platform, with a minimum of seven days' advance notice before the change takes effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without prior notice. The "Last Reviewed" date at the top of this document will be updated with each revision. Continued use of 777xc's services following the effective date of any updated Policy constitutes your acknowledgement of and agreement to the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 777xc processes your personal data, please reach out to our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

If you are not satisfied with our response to any privacy complaint, you have the right to escalate the matter to the independent data protection or dispute resolution body designated by 777xc's licensing authority. Details of this body are available on request from our support team.