XY777 Privacy Policy – How We Protect Your Data

1. Introduction

XY777 is committed to protecting the privacy of every player who uses the platform. This Privacy Policy sets out how we collect, process, store, and protect personal information provided by users in Pakistan and elsewhere. It also explains the choices available to you regarding your personal data and how to exercise those choices.

When we say "XY777", "we", "us", or "our" in this policy, we are referring to the XY777 platform accessible at xy777.win and any associated mobile applications. When we say "you" or "your", we mean any person who visits, registers on, or uses the XY777 platform.

2. Data We Collect

Depending on how you use XY777, we may collect the following categories of personal information:

3. How We Collect Your Data

We collect personal information through the following means:

• Registration: When you create an XY777 account, you provide your name, contact details, and date of birth directly.
• KYC Verification: When you submit identity documents such as a CNIC copy or proof of payment method, we collect and store those documents securely.
• Transactions: Every deposit, withdrawal, bonus redemption, and bet you place generates transaction records linked to your account.
• Platform Usage: Our servers automatically log technical data such as your IP address, device, browser type, and pages visited when you use the platform.
• Cookies and Similar Technologies: As described in Section 7, we use cookies to collect data about how you interact with XY777.
• Support Interactions: When you contact our support team via live chat or email, we record the content of those conversations for quality assurance and dispute resolution.

4. How We Use Your Data

XY777 uses your personal data only for legitimate, clearly defined purposes. We do not process your data in ways that are incompatible with the reasons for which it was collected. Specifically, we use your data to:

• Create and manage your player account.
• Verify your identity in line with KYC requirements and anti-money laundering best practices.
• Process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards, and other supported methods.
• Deliver bonuses, promotions, and any other offers you are eligible for.
• Provide customer support and respond to your queries or complaints.
• Monitor betting and gaming activity to detect and prevent fraud, collusion, and other prohibited behaviour.
• Support responsible gaming by tracking session lengths and flagging unusual patterns for internal review.
• Improve the platform through analysis of usage data — for example, understanding which Casino games or Cricket betting markets are most popular among Pakistani players.
• Send transactional notifications such as deposit confirmations, withdrawal updates, and security alerts.
• Send marketing communications if you have opted in to receive them — you can withdraw this consent at any time.

5. Data Sharing

XY777 does not sell or rent your personal data to third parties. We may share your data only in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party vendors who help us operate the platform — for example, payment processors, identity verification services, game providers, and cloud hosting companies. These vendors access only the data necessary to perform their contracted services and are bound by strict confidentiality obligations.

5.2 Legal Obligations

We may disclose personal data when required to do so by applicable law, court order, or when we believe disclosure is necessary to protect the safety and security of the platform or its users. We cooperate fully with relevant authorities in such cases.

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale involving XY777, your personal data may be transferred as part of that transaction. You will be notified via email or a prominent on-site notice before your data becomes subject to a different privacy policy.

6. Payment Data

All financial transactions on XY777 are processed in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank account, or a debit/credit card, the relevant payment credentials are transmitted through secure, encrypted channels.

XY777 does not store your full card number or mobile wallet PIN on its servers. Payment tokenisation is used where applicable so that sensitive financial credentials are handled by the payment processor rather than stored directly by XY777. Transaction records — including amounts, dates, and payment method types — are retained for account management and fraud prevention purposes.

You are required to use payment accounts registered in your own name. Using a third party's JazzCash account, bank account, or card to fund your XY777 account is not permitted and may trigger a compliance review.

7. Cookies & Tracking Technologies

XY777 uses cookies and similar technologies to provide a functional and personalised experience. A cookie is a small text file placed on your device when you visit the platform. We use the following types of cookies:

• Essential cookies: These are required for the platform to function. They maintain your login session and keep your account secure. These cannot be disabled.
• Functional cookies: These remember your preferences — such as your preferred language or last-visited section — so you do not have to reset them every visit.
• Analytics cookies: These help us understand how players navigate the platform so we can improve the user experience. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

Most browsers allow you to control or delete cookies through their settings. Disabling essential cookies may affect your ability to log in or use certain platform features. XY777 does not use cookies to track your activity outside of our own platform.

8. Data Retention

XY777 retains your personal data for as long as your account is active and for a reasonable period thereafter, in line with our internal data retention schedules. Specific retention periods include:

• Account data: Retained for the duration of your account plus up to 5 years after closure, to comply with financial record-keeping requirements.
• KYC documents: Retained for up to 5 years following account closure or the completion of a transaction, in line with anti-money laundering best practices.
• Transaction records: Retained for up to 5 years for financial audit and dispute resolution purposes.
• Support communications: Retained for up to 2 years to assist with ongoing or future disputes and quality assurance.
• Technical and usage logs: Typically retained for 12 months, after which they are aggregated or deleted.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you.

9. Security Measures

Protecting your data is something we take seriously at XY777. We have put in place a range of technical and organisational measures to guard against unauthorised access, accidental loss, alteration, or disclosure of your personal information. These include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage for sensitive personal and financial data at rest.
• Access controls ensuring only authorised personnel can access personal data, on a need-to-know basis.
• Regular security audits and vulnerability assessments of the platform.
• Two-factor authentication options available to all players for account login.
• Automated monitoring systems that detect unusual login attempts and suspicious account activity in real time.

While we take all reasonable precautions, no online system can be guaranteed to be 100% secure. We encourage you to use a strong, unique password for your XY777 account and to enable two-factor authentication for an extra layer of protection.

10. Your Rights

As an XY777 player, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any information we hold is inaccurate or incomplete, you can ask us to correct it.
• Right to Erasure: You may request deletion of your personal data. Note that we may need to retain certain data for legal and financial compliance reasons even after account closure.
• Right to Restrict Processing: In certain circumstances, you can ask us to limit the way we use your data while a dispute or review is ongoing.
• Right to Data Portability: You may request your data in a structured, machine-readable format where technically feasible.
• Right to Object: You can object to us processing your data for marketing purposes at any time. We will act on such requests promptly.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact our support team via live chat or the email address listed in the footer. We aim to respond to all data requests within 30 days.

11. Minors

XY777 is strictly an adult platform intended for players aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has registered an account or provided personal data, we will immediately close the account and delete the associated information. Parents and guardians who believe a minor may have accessed XY777 should contact our support team right away.

12. Changes to This Policy

XY777 may update this Privacy Policy from time to time to reflect changes in how we operate, new data practices, or updated requirements. When we make material changes, we will notify registered players via email or an on-site notice at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects the current version. We encourage you to review this policy periodically. Continued use of XY777 after any changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how your personal information has been handled, please get in touch with our support team. We are available 24/7 via live chat on the platform, or you can reach us at the email address shown in the footer of this page.

For account-related data requests, please have your registered mobile number and account username ready so we can process your request efficiently. You may also find answers to common questions on our FAQ page.