Contents
Quick Summary
✓ We do not sell your data
✓ CNIC used only for verification
✓ 256-bit SSL on all transfers
✓ No data shared with advertisers
✓ You can request deletion anytime
✓ Urdu support for data queries
Your privacy matters to xh777. We understand that trusting an online platform with your personal information — including identity documents and payment details — is a significant decision, and we take that responsibility seriously. This Privacy Policy is written in plain English to make it easy to understand exactly what information xh777 holds about you, what we do with it, and how you can exercise control over it. If any part of this policy is unclear, our support team is available 24/7 in Urdu and English to answer your questions before you register.
This policy applies to all personal data collected by xh777.bet in connection with the registration and use of the xh777 platform by Pakistani players. By creating an xh777 account, you acknowledge that you have read and understood this Privacy Policy. Your continued use of xh777 after any update to this policy constitutes acceptance of the revised version.
01Introduction
xh777 is committed to protecting the personal data of every player who registers on the platform. This Privacy Policy has been written in accordance with internationally recognised data protection standards, adapted for the practical reality of operating a Pakistan-focused online gaming platform. It covers all personal data collected through xh777.bet, including through the website, live chat, email communications and any other channel through which you interact with xh777.
This policy should be read alongside xh777's Terms and Conditions, which govern your overall use of the platform. The Terms and Conditions incorporate this Privacy Policy by reference. Accepting the Terms and Conditions means you have also accepted this Privacy Policy.
Plain English: We collect the minimum data needed to run a safe, legal, functional platform for Pakistani players. We protect it carefully, we do not sell it, and we delete it when we no longer need it.
02Who We Are
xh777 operates the online casino and sports betting platform at xh777.bet. For the purposes of this Privacy Policy, xh777 is the data controller — meaning we are the organisation that determines the purposes and means of processing your personal data.
If you have any questions about how xh777 handles your data, or if you wish to exercise any of your data rights, you can contact our dedicated data team at support@xh777.bet. Our support team can also assist in Urdu if you prefer to communicate in your first language.
03What Data We Collect
xh777 collects the following categories of personal data from registered players and visitors to xh777.bet:
Registration Data
- Full name (as it appears on your CNIC)
- Date of birth
- Pakistani mobile number
- Email address
- Username and encrypted password
- City and province of residence
Identity Verification Data (KYC)
- CNIC number
- CNIC front and back images
- Any additional verification documents requested by the compliance team
Payment & Transaction Data
- Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay)
- Bank account details and IBAN (for IBFT transfers)
- Visa/Mastercard last four digits and card type (full card numbers are handled by PCI-DSS certified processors and are never stored on xh777 servers)
- Deposit and withdrawal history with timestamps and amounts in PKR
Gaming & Betting Activity Data
- Game session history, bet records, game outcomes and account balance history
- Sports betting selections, stakes, odds and settlement records
- Bonus usage and wagering progress records
Technical & Usage Data
- IP address at login and during active sessions
- Device type, operating system and browser version
- Session duration and pages visited within xh777.bet
- Login timestamps and session activity logs
Communications Data
- Live chat transcripts
- Email correspondence with xh777 support
- Any voluntary information you provide during support interactions
Minimum necessary. xh777 collects only the data that is genuinely necessary for operating the platform, verifying identities, processing payments and meeting compliance obligations. We do not collect data speculatively or for purposes beyond those stated in this policy.
04How We Collect Data
xh777 collects personal data through the following means:
- Directly from you: Information you provide when registering an account, completing CNIC verification, making deposits or withdrawals, contacting support or completing any form on xh777.bet.
- Automatically during platform use: Technical data including IP address, device information, session logs and cookie data collected as you browse and use xh777.bet.
- From payment processors: Confirmation and reference data from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors and card networks relating to the processing of your deposits and withdrawals.
- From compliance and fraud prevention services: Where necessary for identity verification or anti-money laundering compliance, xh777 may obtain data from third-party verification providers to cross-reference the information you have provided.
05Why We Use Your Data
xh777 uses your personal data for the following purposes. For each purpose, the legal basis on which we rely is noted in brackets:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your xh777 account | Contract performance |
| Processing PKR deposits and withdrawals | Contract performance |
| CNIC identity verification (KYC) | Legal obligation & contract performance |
| Anti-money laundering (AML) compliance checks | Legal obligation |
| Verifying you meet the minimum age requirement (18+) | Legal obligation & legitimate interest |
| Providing customer support in Urdu and English | Contract performance |
| Fraud prevention and account security | Legitimate interest |
| Detecting prohibited activity (multiple accounts, bonus abuse) | Legitimate interest & contract performance |
| Responsible gaming monitoring and player wellbeing | Legitimate interest & legal obligation |
| Sending transaction confirmations and account notices | Contract performance |
| Sending promotional communications (with your consent) | Consent |
| Platform analytics and service improvement | Legitimate interest |
| Responding to legal requests from authorities | Legal obligation |
You can withdraw consent for promotional communications at any time by updating your notification preferences in your account settings or by contacting support at support@xh777.bet. Withdrawing this consent does not affect the processing of data for any other purpose listed above.
06Sharing Your Data
xh777 does not sell your personal data to third parties. We do not share your data with advertisers or marketing networks. Your personal information is only shared with third parties in the following limited and necessary circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks and Visa/Mastercard networks receive only the data necessary to process your specific transaction. Each processor operates under its own privacy and security obligations.
- Identity verification providers: Where additional KYC checks are required, xh777 may share relevant data with regulated identity verification service providers. These providers are contractually bound to process your data only for the stated verification purpose.
- Game software providers: Pragmatic Play, Evolution Gaming and other certified game providers receive technical session data necessary to deliver their games through the xh777 platform. They do not receive your payment details or CNIC information.
- Fraud prevention and security services: xh777 uses third-party fraud detection tools that may process IP addresses, device fingerprints and session patterns. These services are used exclusively for platform security purposes.
- Law enforcement and regulatory authorities: xh777 will disclose personal data in response to a valid legal request — court order, regulatory instruction or law enforcement demand — without prior notice to the account holder in cases involving suspected fraud or financial crime.
- Business transfers: In the event of a merger, acquisition or sale of xh777's business or assets, player data may be transferred to the acquiring organisation. Players will be notified of any such transfer via the email address registered to their account.
We do not sell your data. This is a firm commitment. xh777 has never sold player data to any third party and has no intention of doing so. Your information exists in xh777's systems to make the platform work for you — nothing else.
07CNIC & KYC Verification
xh777 requires CNIC (Computerised National Identity Card) verification for all accounts before processing withdrawals. This requirement exists for three reasons: to confirm you are who you say you are, to verify you are 18 years or older, and to comply with anti-money laundering (AML) obligations.
What We Do with Your CNIC
- CNIC images are used solely for identity verification by the xh777 compliance team
- CNIC data is stored in an encrypted, access-controlled environment separate from your general account data
- Access to CNIC images is restricted to authorised compliance staff only — general support agents do not have access to your CNIC documents
- CNIC data is never shared with third parties other than regulated identity verification providers where additional checks are required
- CNIC images are not used for any marketing, profiling or analytical purpose
What We Do Not Do
- We do not use your CNIC number for any purpose other than identity verification
- We do not sell or transfer CNIC data to any commercial third party
- We do not use CNIC data to build advertising profiles
CNIC documents are stored with highest-level access controls. Only the xh777 compliance team can view submitted documents. Verification is completed by trained staff and the document images are not accessible through the general platform interface.
08Payment Data & PKR Transactions
All xh777 transactions occur in Pakistani Rupees (PKR). The way xh777 handles payment data reflects the nature of each payment method:
Mobile Wallets (Easypaisa, JazzCash, NayaPay, SadaPay)
Your mobile wallet number is stored against your xh777 account to enable withdrawals to the correct destination. The processing of the actual payment is handled by the respective wallet provider. xh777 retains a transaction reference number and confirmation status — we do not have access to the internal records of your mobile wallet account beyond what the wallet provider confirms to us about the transaction.
Bank Transfers (IBFT)
For IBFT withdrawals, your IBAN and bank account name are stored to process payments to the verified account in your name. Bank account details are used only for withdrawal processing and are not shared with any party other than the processing bank.
Visa / Mastercard
Full card numbers are never stored on xh777 servers. Card processing is handled by PCI-DSS (Payment Card Industry Data Security Standard) certified payment processors. xh777 retains only the last four digits of the card number and the card type for reference purposes.
Transaction Records
xh777 maintains complete records of all deposit and withdrawal transactions for compliance, dispute resolution and responsible gaming monitoring purposes. These records are retained for a minimum of five years in accordance with standard financial record-keeping requirements.
09Cookies & Tracking
xh777.bet uses cookies and similar tracking technologies to make the platform work correctly and to understand how it is being used. Below is an explanation of the types of cookies used on xh777.bet:
You can manage cookie preferences through your browser settings. Note that disabling essential or security cookies may prevent xh777 from functioning correctly. For instructions on managing cookies in common Pakistani mobile browsers (Chrome, Samsung Internet), contact xh777 support.
10Data Retention
xh777 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| CNIC and KYC documents | Duration of account + 5 years after closure |
| Transaction records (deposits & withdrawals) | Minimum 5 years from transaction date |
| Betting and gaming history | Duration of account + 2 years after closure |
| Support communications | 3 years from date of last communication |
| Technical session logs | 12 months rolling |
| Marketing consent records | Duration of consent + 3 years |
| Self-exclusion records | Duration of exclusion + 5 years |
When data is no longer required, xh777 deletes or anonymises it securely. In some cases, regulatory obligations may require xh777 to retain data beyond the periods stated above. In such cases, data is stored in a restricted archive with access limited to the compliance team.
11Data Security
xh777 implements multiple layers of technical and organisational measures to protect your personal data from unauthorised access, loss, alteration or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and xh777.bet
- Encrypted storage for all sensitive data at rest, including CNIC documents and payment details
- Role-based access controls ensuring staff can only access data necessary for their specific function
- Two-factor authentication available for all player accounts and required for all administrative access
- Regular third-party penetration testing to identify and address security vulnerabilities
- Intrusion detection systems monitoring for unusual access patterns 24/7
- Secure development practices including regular code reviews and security audits of platform updates
In the event of a data breach that affects Pakistani players' personal data and poses a risk to their rights, xh777 will notify affected players as quickly as practicable and take immediate steps to contain the breach and secure affected data.
No online system can be guaranteed completely immune to security incidents. However, xh777 maintains the highest practical standard of data security and continuously invests in keeping that standard up to date.
Your responsibility: Protect your own xh777 account password and never share it with anyone. xh777 will never ask for your full password. If you receive any communication claiming to be from xh777 and asking for your password, treat it as fraudulent and contact us immediately.
12Your Data Rights
As an xh777 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact xh777 at support@xh777.bet with the subject line "Data Rights Request" and a description of your request. xh777 will respond within 30 days.
Right of Access
You can request a copy of all personal data xh777 holds about you. We will provide this in a readable format within 30 days of your verified request.
Right to Rectification
If any of your personal data held by xh777 is inaccurate or out of date, you have the right to request correction. For name or CNIC corrections, you will need to provide updated documentation.
Right to Erasure
You can request deletion of your personal data. Note that data subject to legal retention obligations (transaction records, KYC documents) cannot be deleted before the applicable retention period ends.
Right to Restrict Processing
You can request that xh777 restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
Right to Data Portability
You can request a copy of the personal data you provided to xh777 in a structured, machine-readable format (CSV or JSON) for transfer to another service.
Right to Object
You can object to xh777 processing your data on the basis of legitimate interests. You can also withdraw consent for marketing communications at any time.
xh777 support can assist with data rights requests in both Urdu and English. If you prefer to communicate in Urdu, simply start your live chat or email in Urdu and an Urdu-speaking agent will handle your request.
13Children & Minors
xh777 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 18. Age verification through CNIC is a mandatory part of the xh777 registration and withdrawal process precisely to ensure compliance with this requirement.
If xh777 discovers that personal data has been collected from a person under 18, that data will be immediately and permanently deleted, the associated account will be closed and any deposits will be returned to the originating payment method. If you have reason to believe that a minor has registered an xh777 account, please contact us immediately at support@xh777.bet. We will investigate promptly and take appropriate action.
Parents and guardians in Pakistan are encouraged to use parental control tools available on Android and iOS devices to restrict access to age-restricted websites. If you have specific concerns about a family member's use of xh777, our support team can advise on the steps available.
14Policy Updates
xh777 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes to the platform or updated regulatory guidance. When material changes are made, registered players will be notified via the email address registered to their account at least 7 days before the updated policy takes effect.
The "Last updated" date at the top of this page indicates when the current version was published. Minor clarifications — such as corrections to typographical errors or additions that improve clarity without changing the substance of the policy — may be made without prior notification and take effect upon publication.
You are encouraged to review this Privacy Policy periodically. The most current version is always available at xh777.bet/privacy-policy. If you do not agree with an updated Privacy Policy, you may close your account before the effective date of the change by contacting xh777 support.
15Contact & Data Requests
For any questions about this Privacy Policy, to exercise your data rights or to raise a privacy-related concern, please contact xh777 through the following channels:
- Email: support@xh777.bet — include "Privacy Request" or "Data Rights Request" in the subject line for fastest routing to the relevant team
- Live Chat: Available 24/7 directly on xh777.bet — start your message with "Privacy question" and you will be connected to an agent with the appropriate access
xh777 commits to responding to all privacy-related enquiries within 5 business days and to completing data rights requests within 30 days of verification of your identity. For complex requests — such as full data access requests — we may require up to 60 days but will communicate this timeline to you.
All privacy communications with xh777 can be conducted in Urdu or English, according to your preference.