Data Protection · Privacy · Pakistan

XC 777 Privacy Policy – How We Protect Your Personal Data

Your privacy matters to us. This policy explains in plain language what personal data XC 777 collects from Pakistani players, why we collect it, how we use it, who we share it with, and what rights you have over your own information. No jargon, no runaround — just straight answers.

Effective: 1 January 2025 SSL Encrypted Pakistan (PKR)
xc 777

Our Privacy Commitments at a Glance

Six things XC 777 commits to on your data — before you read a single legal clause.

We Never Sell Your Data

Your personal information is never sold to advertisers, data brokers, or any third party for commercial purposes. XC 777 does not operate a data marketplace. Your details stay with us and the partners we need to run the platform.

Minimum Necessary Collection

XC 777 collects only the personal data we genuinely need to operate your account, process payments, comply with legal obligations, and keep the platform secure. We do not collect data for the sake of it.

You Control Your Data

Pakistani players registered on XC 777 have clear rights over their personal data — the right to access it, correct it, request deletion, and opt out of certain uses. We explain exactly how to exercise those rights in this policy.

No Unnecessary Tracking

XC 777 uses session cookies essential for platform functionality. We do not deploy invasive third-party advertising trackers or cross-site behavioural profiling systems that follow you around the internet after you leave.

Payment Data Is Secured

Easypaisa, JazzCash, and bank payment data is processed through encrypted channels. XC 777 does not store full payment credentials on its servers. All financial data handling uses industry-standard encryption protocols.

Plain Language Policy

This policy is written to be read and understood by Pakistani players, not just lawyers. Where legal or technical terms are unavoidable, we explain what they mean. If anything is unclear, contact our support team.

1Who We Are

XC 777, operating at xc777.click, is an online sports betting and casino platform built specifically for players in Pakistan. When this Privacy Policy refers to "XC 777", "we", "us", or "our", it means the operator of the XC 777 platform responsible for processing the personal data of registered users.

This Privacy Policy applies to all personal data collected through the XC 777 website at xc777.click, including all products and services offered on the platform — cricket betting, PSL betting, sports betting, online casino, live dealer games, Aviator, and the XC 777 VIP Club. It also applies to data collected through any correspondence you have with XC 777 via live chat, email, or WhatsApp.

By registering an account on XC 777 and using the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described here. If you have questions about how your data is handled, the support team can be reached at support@xc777.click at any time.

This Privacy Policy should be read alongside the XC 777 Terms and Conditions, which govern the overall legal relationship between you and the platform.

2Personal Data We Collect

XC 777 collects personal data only where it is necessary for the purpose stated at the time of collection. The categories of personal data we collect are set out below.

2.1 Registration Data

When you create an XC 777 account, we collect the following information:

  • Full name as it appears on your CNIC or passport
  • Date of birth (for age verification purposes)
  • Pakistani mobile number
  • Email address
  • Username and password (stored in hashed form — we cannot read your password)
  • City and province of residence

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, and in certain other circumstances, XC 777 conducts identity verification checks. For this purpose, we may collect:

  • A copy of your CNIC (front and back) or Pakistani passport
  • A selfie photograph to confirm identity document ownership
  • Proof of payment method ownership (e.g., Easypaisa account screenshot showing your registered mobile number)

2.3 Transaction & Financial Data

XC 777 records all financial transactions on your account, including deposits, withdrawals, bets placed, casino game rounds, and bonus activity. This includes the amounts, dates, payment methods used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard), and transaction reference numbers. Full payment credentials such as card numbers or mobile wallet PINs are processed by our payment partners and are not stored on XC 777's servers.

2.4 Activity & Usage Data

XC 777 automatically records information about how you use the platform, including:

  • Login timestamps and session duration
  • Device type, operating system, and browser type
  • IP address at the time of login
  • Pages visited and features used within the platform
  • Betting history, favourite sports, and preferred casino games

2.5 Communications Data

When you contact XC 777 via live chat, email, or WhatsApp, we retain records of those communications including the date, time, content, and resolution. This data is used for quality assurance, dispute resolution, and to provide continuity of service when you contact us again in the future.

xc 777

3How We Use Your Personal Data

Every piece of personal data collected by XC 777 is used for one or more of the following specific purposes:

PurposeData UsedWhy It's Necessary
Account creation & management Registration data To create and maintain your XC 777 account and enable you to log in
Age & identity verification KYC documents, date of birth Legal obligation — 18+ requirement and fraud prevention
Payment processing Transaction & financial data To process deposits and withdrawals via Easypaisa, JazzCash, and other methods
Platform security & fraud prevention Activity data, IP address, device info To detect and prevent unauthorised access, fraud, and money laundering
Responsible gaming monitoring Betting history, session data To identify problem gambling patterns and apply appropriate safeguards
Customer support Communications data, account data To resolve queries and disputes efficiently
Platform personalisation Activity & usage data To display relevant cricket and casino content, including PSL promotions
Legal & regulatory compliance All categories as required To comply with applicable legal obligations and cooperate with authorities
Marketing communications Email, mobile number With your consent — to send promotional offers and platform updates

XC 777 does not use your personal data to make fully automated decisions that have significant legal effects on you without human oversight.

4Legal Basis for Processing

XC 777 processes your personal data under one or more of the following legal bases depending on the purpose of processing:

  • Contractual necessity: Processing required to fulfil the agreement with you — creating and managing your account, processing deposits and withdrawals, and providing the betting and casino services you have signed up for.
  • Legal obligation: Processing required to comply with legal requirements — including age verification, anti-money laundering (AML) checks, Know Your Customer (KYC) obligations, and regulatory reporting.
  • Legitimate interests: Processing necessary for XC 777's legitimate business interests, provided those interests do not override your rights — including fraud detection, platform security, responsible gaming monitoring, and improving our services.
  • Consent: Where you have given explicit consent — primarily for marketing communications. You may withdraw consent at any time.

Where processing is based on consent, withdrawing that consent does not affect the lawfulness of any processing carried out before the withdrawal.

5Who We Share Your Data With

XC 777 does not sell your personal data to any third party. We share data only where necessary for the following purposes, and only with parties that are required to handle it securely and in compliance with applicable data protection standards.

5.1 Payment Processors

Your financial transaction data is shared with our payment processing partners — including the operators of Easypaisa, JazzCash, NayaPay, SadaPay, IBFT infrastructure, and Visa/Mastercard networks — to the extent necessary to process deposits and withdrawals. These partners operate under their own privacy policies and are bound by the data security requirements of the payment networks they operate within.

5.2 Identity Verification Services

KYC documents submitted for age and identity verification may be shared with third-party identity verification service providers. These providers process your documents solely for the purpose of verifying your identity and are contractually prohibited from using them for any other purpose.

5.3 Fraud Prevention & Security

XC 777 may share activity data, IP addresses, and device information with fraud detection and security services to identify and prevent fraudulent account activity, unauthorised access, and money laundering. This sharing is in XC 777's legitimate interests and is necessary for the security of all players on the platform.

5.4 Legal & Regulatory Authorities

XC 777 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order. In such cases, XC 777 will disclose only the minimum data required to comply with the specific legal obligation.

5.5 Responsible Gaming Support Services

Where a player requests self-exclusion or where XC 777 refers a player to external problem gambling support, limited data may be shared with responsible gaming organisations to facilitate that support. Such sharing is always in the player's interest and handled with the highest discretion.

All third parties with whom XC 777 shares personal data are required to maintain appropriate security measures and are prohibited from using your data for any purpose beyond what XC 777 specifies.

xc 777

6Cookies & Tracking Technologies

XC 777 uses cookies and similar technologies to enable essential platform functionality and to understand how players use the site. We do not deploy invasive cross-site advertising trackers.

6.1 Essential Cookies

These cookies are strictly necessary for the XC 777 platform to function. They maintain your login session, store your language preference, and handle security tokens. Without these cookies, you cannot be logged in or use any features of the platform. You cannot opt out of essential cookies while using the platform.

6.2 Analytics Cookies

XC 777 uses privacy-respecting analytics to understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and how new features are being used. This data is aggregated and anonymised. Analytics cookies can be declined through your browser settings or via the cookie preference option available on your first visit to xc777.click.

6.3 Preference Cookies

These cookies remember your settings on XC 777 — such as your preferred deposit method or your default sport view — so you do not need to re-enter them on each visit. They enhance your experience but are not strictly necessary. You may decline them without affecting core platform functionality.

6.4 Managing Cookies

You can manage cookie settings at any time through your browser's privacy settings. Most browsers allow you to view, delete, and block cookies from specific sites. Note that blocking essential cookies will prevent you from logging in to your XC 777 account. Instructions for managing cookies in the most common browsers are available in each browser's help documentation.

7Data Retention

XC 777 retains personal data only for as long as necessary for the purposes for which it was collected, subject to any longer retention period required by legal or regulatory obligations.

  • Account data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, in line with standard anti-money laundering record-keeping requirements.
  • KYC documents: Retained for a minimum of 5 years from the date of submission, as required for regulatory compliance.
  • Transaction records: Retained for a minimum of 5 years from the date of each transaction.
  • Communications data: Live chat and email records are retained for 2 years from the date of each communication.
  • Activity & usage data: Session and usage logs are retained for 13 months on a rolling basis.

When personal data is no longer required and the retention period has expired, it is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised data that cannot be linked back to any individual may be retained indefinitely for statistical analysis.

8Data Security

XC 777 takes the security of your personal data seriously and implements technical and organisational measures appropriate to the risk involved in processing it. These measures include:

  • SSL/TLS encryption: All data transmitted between your device and xc777.click is encrypted using Transport Layer Security (TLS). The padlock icon in your browser confirms this protection is active.
  • Password hashing: Passwords are stored using industry-standard one-way hashing. XC 777 staff cannot read your password. If you forget it, it must be reset — not retrieved.
  • Access controls: Personal data is accessible only to XC 777 staff who need it for their specific job functions. Access is logged and reviewed regularly.
  • Payment security: Payment credentials are processed by certified payment processors under PCI DSS standards. XC 777 does not store full card numbers or mobile wallet PINs.
  • Regular security reviews: XC 777 conducts regular reviews of its security infrastructure and responds promptly to identified vulnerabilities.

While XC 777 takes every reasonable precaution to protect your data, no internet transmission is completely secure. You also play an important role in keeping your account secure — use a strong unique password, do not share your login details, and contact support immediately if you suspect unauthorised access to your account.

XC 777 will never ask for your password via email, live chat, WhatsApp, or any other channel. If you receive such a request, do not respond and report it to support@xc777.click immediately.

9Your Data Rights

As a player registered on XC 777, you have the following rights in relation to your personal data. To exercise any of these rights, contact XC 777 via the live chat on xc777.click or email support@xc777.click with the subject line "Data Rights Request".

Right of Access

Request a copy of all personal data XC 777 holds about you. We will provide this within 30 days of your verified request.

Right to Rectification

Request correction of any personal data we hold about you that is inaccurate or incomplete. Most account details can be updated directly in your account settings.

Right to Erasure

Request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal retention obligations may mean some data cannot be immediately deleted.

Right to Restrict Processing

Request that we limit how we use your personal data in certain circumstances, for example while the accuracy of data is being investigated.

Right to Data Portability

Request a copy of the personal data you have provided to XC 777 in a machine-readable format where technically feasible.

Right to Withdraw Consent

Where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time by contacting support or using the unsubscribe link in any marketing email.

XC 777 will respond to all verified data rights requests within 30 calendar days. For complex requests, a one-time extension of up to 30 additional days may be applied with notification. We may ask you to verify your identity before processing a data rights request.

10Children's Privacy

XC 777 is strictly for adults aged 18 years and over. The platform does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration process. If XC 777 becomes aware that personal data has been collected from a person under 18, that account will be immediately closed and all associated data deleted.

If you are a parent or guardian and believe that a minor has created an account on XC 777, please contact us immediately at support@xc777.click. We will investigate and take appropriate action promptly.

XC 777 does not direct any marketing or promotional communications to individuals who have identified themselves as being under the age of 18, and the platform does not target underage users through any channel.

11Marketing Communications

XC 777 sends promotional emails, SMS messages, and WhatsApp notifications to players who have opted in to marketing communications during registration or subsequently through their account settings. Marketing communications from XC 777 may include:

  • Welcome bonuses and deposit match promotions
  • PSL season promotions and cricket betting offers
  • VIP Club tier upgrades and cashback notifications
  • New game launches and platform feature updates
  • Cricket match reminders for upcoming Pakistan fixtures

11.1 Opting Out of Marketing

You can opt out of marketing communications at any time through any of the following methods:

  • Click the "Unsubscribe" link at the bottom of any XC 777 marketing email
  • Update your communication preferences in the "Settings" section of your XC 777 account
  • Contact support via live chat or at support@xc777.click to request removal from all marketing lists

Opting out of marketing does not affect transactional communications — you will still receive important account messages such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts regardless of your marketing preferences.

XC 777 respects your communication preferences. If you opt out of marketing, that preference is applied within 48 hours and you will not receive promotional material after that point.

12Changes to This Privacy Policy

XC 777 may update this Privacy Policy from time to time to reflect changes in how we process data, changes in our services, or changes in applicable legal requirements. The "Effective" date shown at the top of this page indicates when the current version came into force.

When we make material changes to this policy, we will notify registered players via email to their registered address and by displaying a notice on the XC 777 platform. The notice will describe the nature of the changes and the date they take effect, giving you sufficient time to review the updated policy before it comes into force.

Continued use of XC 777 after a revised Privacy Policy comes into force constitutes acceptance of the updated policy. If you do not agree to the changes, you should stop using the platform and request account closure before the effective date of the revised policy.

Previous versions of the XC 777 Privacy Policy are available on request by contacting support@xc777.click. We maintain records of all previous versions and the dates on which they were effective.

13Contact Us About Privacy

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact XC 777 using any of the following methods. We aim to respond to all privacy-related enquiries within 5 business days.

  • Email: support@xc777.click (subject: Privacy Query)
  • Live Chat: Available 24/7 on the XC 777 website
  • WhatsApp: Available for Gold and Diamond VIP members via their personal account manager

For formal data rights requests (access, erasure, rectification, portability), please use the subject line "Data Rights Request" in your email so that it is routed to the correct team. We will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days.

Responsible Gaming & Privacy

Data collected for responsible gaming purposes is handled with the highest sensitivity. Visit the Responsible Gaming page to learn about the tools available to you and how your welfare data is protected.

How XC 777 Keeps Your Data Safe — Step by Step

From the moment you register to every transaction you make, here is how your data is protected at each stage on XC 777.

1
Encrypted Registration

Your registration details are transmitted to XC 777's servers over TLS encryption. Your password is immediately hashed — converted to an irreversible string — and the original is discarded. No one at XC 777 can read your password.

2
Verified Identity, Stored Securely

KYC documents you submit for age verification are stored in an encrypted document vault with access restricted to verification staff only. Documents are retained for the legally required period and then securely deleted.

3
Payment Processing Without Storing Credentials

When you deposit via Easypaisa, JazzCash, or bank transfer, the transaction is processed by a certified payment partner over an encrypted connection. XC 777 receives a transaction confirmation and reference — not your payment credentials.

4
Activity Monitoring for Security, Not Surveillance

XC 777 monitors account activity to detect fraud, unauthorised access, and problem gambling. This monitoring is done to protect you, not to build advertising profiles. The data is reviewed by security systems and relevant staff only.

5
Controlled Data Access Within XC 777

Internally, your personal data is accessible only on a need-to-know basis. Payment teams see transaction data. Support teams see communication history. Security teams see activity logs. No single staff member has access to your complete data profile.

6
Secure Deletion When Retention Ends

When data retention periods expire, personal data is either securely deleted or anonymised so that it can never be linked back to you. XC 777 maintains deletion schedules and audits compliance regularly.

Your Rights Made Simple

Data rights language can be confusing. Here's what your rights actually mean in practical terms for your XC 777 account.

Email support@xc777.click with the subject "Data Access Request". Include the mobile number and email address linked to your XC 777 account to help us verify your identity. We will compile your data and provide it to you within 30 days. This includes your registration details, KYC records, transaction history, betting history, and any support communications on file.

You can request deletion of your personal data by emailing support@xc777.click. However, some data cannot be deleted immediately even if you request it — specifically, financial transaction records and KYC documents are subject to legal retention requirements of at least 5 years. After your retention period ends, this data will be securely deleted. All other personal data not subject to legal retention requirements can be deleted upon valid request.

Use the "Unsubscribe" link at the bottom of any marketing email from XC 777. Alternatively, update your communication preferences in the Settings section of your account, or contact support via live chat. Your opt-out preference is applied within 48 hours. You will continue to receive transactional messages (deposit confirmations, withdrawal notifications, security alerts) regardless of your marketing preferences — these are necessary for your account management.

Minor details like your email address and phone number can be updated directly in your XC 777 account settings. Corrections to your registered name or date of birth require identity verification and must be requested through support via live chat or at support@xc777.click. You will need to provide documentation showing the correct information (e.g., a copy of your CNIC showing the correct spelling of your name).

The XC 777 Data Promise to Pakistani Players

Six plain-language commitments we make and keep on every account, every day.

Your Data Never Gets Sold

XC 777 does not operate a data marketplace. Your personal information stays within our platform and the trusted partners necessary to run it. Full stop.

Encryption on Every Transaction

Every Easypaisa, JazzCash, and bank transfer on XC 777 passes through encrypted channels. Your financial credentials never touch our servers unprotected.

No Advertising Trackers

XC 777 does not deploy cross-site behavioural advertising trackers. You won't find XC 777 following you around the internet based on your betting activity.

Real Humans Handle KYC

Your CNIC and identity documents are reviewed by trained verification staff, not stored in an unsecured bulk database. Access is strictly controlled and logged.

Your Opt-Outs Are Honoured

When you unsubscribe from marketing or update your communication preferences, XC 777 applies that change within 48 hours — no second-guessing, no dark patterns.

Privacy Questions Get Real Answers

Contact support about your data rights and you get a substantive response, not an auto-reply. Our team knows data privacy and can actually help you exercise your rights.

Privacy Questions Pakistani Players Ask Most

Straight answers to the questions XC 777 players ask most often about privacy and data.

Your CNIC data is shared only with our certified identity verification partner for the purpose of confirming your age and identity as part of our legal KYC obligations. This partner processes your documents solely for verification and is contractually prohibited from using them for any other purpose. Your CNIC details are not shared with advertisers, data brokers, or any party not involved in the verification process. In the event of a valid legal order from a Pakistani law enforcement or regulatory authority, XC 777 may be required to disclose identity data as legally mandated.

XC 777 records your registered mobile number as part of your account profile, and may see the mobile wallet number used for a specific transaction in order to process withdrawals. Your full mobile wallet credentials — specifically your JazzCash or Easypaisa MPIN (PIN) — are never transmitted to or stored by XC 777. All payment authentication happens directly between you and the Easypaisa or JazzCash system. XC 777 sees the transaction confirmation, not the authentication credentials used to approve it.

When your XC 777 account is closed, your account is deactivated and you will no longer be able to log in. Your personal data is not immediately deleted — financial transaction records, KYC documents, and associated account data are retained for a minimum of 5 years from account closure in line with standard anti-money laundering record-keeping requirements. After this retention period, the data is securely deleted. Marketing communications are stopped immediately upon account closure. If you have questions about your data following account closure, email support@xc777.click.

When XC 777 makes material changes to this Privacy Policy, registered players are notified by email to their registered address. The email will describe what has changed and when the new version takes effect. A notice is also displayed on the XC 777 platform. The "Effective" date shown at the top of this page is always updated to reflect the current version. If you have opted out of marketing communications, you will still receive policy update notifications as these are considered transactional/account communications, not marketing.

Join XC 777 — Your Privacy Protected from Day One

Register on XC 777 in under 2 minutes. Your data is encrypted, your identity verified securely, and your privacy respected throughout. Deposit via Easypaisa or JazzCash and claim your 100% welcome bonus up to Rs 25,000.

18+ only. Please gamble responsibly. Terms apply.

Data Never Sold

SSL Encrypted

Your Data Rights

24/7 Support