This Privacy Policy ("Policy") describes how xb777 ("xb777", "we", "us", "our") collects, uses, stores, and protects the personal information of all users ("you", "your", "Member") who access or use the xb777 platform at xb777.ws. By registering or continuing to use xb777, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms and Conditions.
Plain-language commitment: We have written this Privacy Policy to be genuinely readable, not just legally defensible. If any section is unclear, contact xb777 support and we will explain it to you in straightforward terms. Your privacy matters to us and we do not treat this document as a formality.
1. Introduction
xb777 is Pakistan's dedicated online gaming and sports betting platform. Operating at xb777.ws, xb777 provides games including Teen Patti, Poker, Fishing Games, Ludo, and a full sports betting section covering cricket, football, and other major sports. All transactions on xb777 are conducted in Pakistani Rupees (PKR) using local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard cards.
In the course of providing these services, xb777 necessarily collects and processes certain personal information about you. We take this responsibility seriously. We collect only what we genuinely need. We use it only for the purposes described here. We protect it with serious technical and organisational measures. And we give you meaningful control over it.
This Policy applies to all personal data collected through the xb777 website, the xb777 mobile web platform, our email communications, and any customer support interactions. It does not apply to third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.
2. Data We Collect
2.1 Information You Give Us Directly
When you register on xb777, you provide information that we need to create and manage your account. This includes:
- Full name as it appears on your government-issued ID.
- Date of birth (to verify you are 18 or older).
- Mobile phone number (used as your primary contact and for OTP verification).
- Preferred username and password (password is stored as a one-way cryptographic hash — we cannot see your actual password).
- Email address (if provided — used for account notifications and support communication).
- Identity documentation submitted during KYC verification, such as your CNIC, passport, or driving licence.
- Payment method details — mobile wallet numbers or bank account details used for deposits and withdrawals.
2.2 Information We Collect Automatically
When you use the xb777 platform, certain technical data is generated and collected automatically. This includes:
- IP address and approximate geographic location (city-level, not precise address).
- Device type, operating system, and browser version.
- Session data including login and logout timestamps.
- Pages visited and features used within the xb777 platform.
- Game and betting activity including stakes, outcomes, and timing.
- Transaction records — deposits, withdrawals, bonus claims, and balance history.
2.3 Information From Third Parties
In some cases, xb777 receives information about you from third parties. This occurs when:
- A payment processor confirms or flags a transaction.
- An identity verification service validates your KYC documents.
- A fraud prevention service flags activity associated with your device or IP address.
- Another xb777 member refers you via our referral programme (we receive only basic registration confirmation, not detailed personal data about you from the referrer).
3. How We Use Your Data
xb777 uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a member. We do not use your data for unrelated commercial purposes, and we do not use it to build advertising profiles.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & management | Name, DOB, mobile, username | Contract |
| Identity & age verification (KYC) | CNIC, passport, DOB | Legal obligation |
| Processing deposits & withdrawals | Payment method details, transaction history | Contract |
| Fraud prevention & security | IP address, device data, activity patterns | Legitimate interest |
| Responsible gaming monitoring | Betting activity, session data | Legal obligation |
| Customer support | Contact details, account history, correspondence | Contract |
| Platform improvement | Anonymised usage data, aggregated activity | Legitimate interest |
| Promotional communications (opted-in members only) | Mobile number or email | Consent |
xb777 does not use your personal data to create targeted advertising profiles or to share your data with advertising networks. Promotional communications from xb777 about our own promotions, bonuses, and events are sent only to members who have opted in to receive them and can be unsubscribed from at any time.
4. Legal Basis for Processing
xb777 processes your personal data on the following legal bases, each of which applies to specific types of processing as shown in the table above:
- Contract: Processing that is necessary to provide the xb777 service you have signed up for — account management, payment processing, and customer support all fall under this basis.
- Legal obligation: Processing required for xb777 to comply with applicable laws and regulations, particularly around age verification, identity verification, anti-money-laundering (AML) checks, and responsible gaming obligations.
- Legitimate interest: Processing for purposes that are genuinely necessary for xb777 to operate safely and improve its service — fraud detection, security monitoring, and anonymised platform analytics. In each case, we have assessed that our legitimate interest does not override your privacy rights.
- Consent: Processing that you have specifically agreed to, namely optional promotional communications. This consent can be withdrawn at any time.
5. Data Sharing
xb777 does not sell your personal data. We do not share it with advertisers. We share it only in the specific, limited circumstances described here, and only to the extent strictly necessary for the stated purpose.
5.1 Service Providers
xb777 works with a small number of third-party service providers who process data on our behalf under strict contractual data processing agreements. These providers include:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks — receive only the transactional data necessary to process your deposit or withdrawal.
- Identity verification providers: Receive your KYC documents solely to perform verification checks as required for account compliance.
- Fraud prevention services: Receive device fingerprint data and IP information to assess fraud risk. These services do not receive your full personal profile.
- Cloud infrastructure providers: Store platform data on our behalf under agreements that prohibit any use of that data for their own purposes.
5.2 Legal Requirements
xb777 may disclose your personal data to government agencies, law enforcement bodies, or regulatory authorities where required to do so by applicable law, a valid court order, or a lawful regulatory request. We will notify you of any such disclosure to the extent permitted by law.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of xb777's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify all affected members before their data is transferred and before it becomes subject to a different privacy policy.
Clear commitment: xb777 has never sold member data. We will not start. No data broker, advertiser, or unrelated commercial entity receives personal information about xb777 members.
6. Retention Periods
xb777 keeps your personal data only for as long as it is genuinely needed. Different types of data have different retention requirements based on their purpose and applicable legal obligations.
- Account data (name, contact details, username): Retained for the duration of your account plus five years after closure, in line with standard financial record-keeping requirements.
- Identity verification documents (KYC): Retained for five years from the date of verification or account closure, whichever is later, as required by anti-money-laundering regulations.
- Transaction records (deposits, withdrawals, bets): Retained for five years from the date of each transaction.
- Customer support correspondence: Retained for two years from the date of the last interaction in a given support case.
- Technical and session logs: Retained for 12 months for security and fraud investigation purposes, then deleted or anonymised.
- Marketing consent records: Retained for the duration of your consent plus one year after withdrawal, to demonstrate compliance.
When retention periods expire, xb777 securely deletes or irreversibly anonymises the data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.
7. Security Measures
xb777 implements technical and organisational security measures appropriate to the sensitivity of the data we hold. Security is not a box we tick once — it is an ongoing operational priority.
7.1 Technical Measures
- All data in transit is protected with 256-bit TLS/SSL encryption — the same standard used by major banks.
- Passwords are stored as one-way cryptographic hashes using industry-standard algorithms — we cannot retrieve your password, only reset it.
- Payment details are handled through PCI-DSS compliant processors and are not stored on xb777's own servers in full.
- Access to member data within xb777 is restricted on a strict need-to-know basis with role-based access controls and full audit logging.
- Regular security testing and vulnerability assessments are conducted on the xb777 platform.
7.2 Your Role in Security
Security is a shared responsibility. You can protect your xb777 account by keeping your password private, never sharing your login credentials with anyone, using a strong unique password, and notifying xb777 support immediately if you believe your account has been accessed without your authorisation. xb777 will never ask for your password in any communication.
Security notice: If you receive any message claiming to be from xb777 and requesting your password, payment details, or personal documents through an unusual channel, treat it as fraudulent. Contact xb777 support directly through the platform to verify any communication you are unsure about.
8. Cookies & Tracking Technologies
xb777 uses cookies and similar technologies on the platform to make it work correctly, improve performance, and understand how members use the service. This section explains what we use and why.
xb777 does not use third-party advertising cookies or allow advertising networks to place tracking technologies on the platform. You can manage cookie preferences through your browser settings. Blocking essential cookies will affect the functionality of xb777.
9. Your Data Rights
As an xb777 member, you have meaningful rights over your personal data. These are not just legal obligations on our side — we treat them as genuine commitments. You can exercise any of these rights by contacting xb777 support at support@xb777.ws or through the in-platform chat.