777xk Privacy Policy

777xk ("the Platform", "we", "us", "our") is committed to respecting and protecting the privacy of every player who interacts with our platform. This Privacy Policy sets out in full how 777xk collects, stores, processes, and protects the personal data of players accessing the platform at 777xk.app.

We recognise that Pakistani players trust us with sensitive personal information — including identity documents, financial details, and gaming activity records. That trust is not taken lightly. Every data processing decision at 777xk is evaluated against the principle of whether it genuinely serves the player or a legitimate operational or regulatory purpose. If it does not, the data is not collected.

This Policy applies to all personal data processed in connection with your 777xk account, whether you are based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan.

For the purposes of this Privacy Policy, 777xk is the data controller in respect of all personal data collected through the 777xk platform. As data controller, 777xk determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection standards.

All data protection queries, rights requests, and complaints should be directed to the 777xk support team using the contact details provided in Section 15 of this Policy.

777xk collects the following categories of personal data from players:

777xk does not collect any special category data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — unless specifically required by applicable law and with your explicit prior consent.

777xk collects personal data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys.
• Automated Technologies: Technical data collected automatically when you visit 777xk.app, including IP address, device identifiers, browser information, and session activity logs gathered via cookies and similar technologies.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when processing your deposits and withdrawals. 777xk does not store full payment credentials — only transaction reference identifiers.
• Third-Party Verification Providers: Identity verification data from KYC service providers engaged by 777xk to authenticate CNIC documents and verify player age. These providers are bound by strict data processing agreements.
• Fraud Detection Systems: Behavioural and technical signals generated by 777xk's internal fraud monitoring tools during platform use.

777xk processes your personal data for the following purposes, each supported by a recognised legal basis:

• Account Registration & Management — To create and maintain your 777xk account, authenticate your identity at login, and manage your account settings. Legal basis: performance of a contract.
• Payment Processing — To process PKR deposits via JazzCash, EasyPaisa, and bank transfer, and to execute verified withdrawal requests to your nominated payment method. Legal basis: performance of a contract.
• Identity Verification (KYC) — To verify that you are who you say you are, that you meet the 21+ age requirement, and that your payment methods are legitimately yours. Legal basis: legal obligation and legitimate interest.
• Anti-Money Laundering (AML) Compliance — To monitor transactions for signs of money laundering, terrorist financing, or other financial crime in accordance with applicable AML regulations. Legal basis: legal obligation.
• Responsible Gaming — To maintain records of your responsible gaming tool preferences, enforce self-exclusion orders, and monitor for signs of problematic gaming behaviour. Legal basis: legal obligation and legitimate interest.
• Fraud Prevention & Security — To detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of platform systems. Legal basis: legitimate interest.
• Customer Support — To respond to your queries, handle complaints, and maintain records of support interactions for quality assurance. Legal basis: performance of a contract.
• Platform Improvement — To analyse aggregated, anonymised usage data to improve the performance, design, and game offering of the 777xk platform. Legal basis: legitimate interest.
• Promotional Communications — To send you information about 777xk promotions, bonuses, and new games where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time.

777xk does not sell your personal data. We share data with third parties only where strictly necessary, and only with parties who are contractually bound to handle your data with an equivalent level of protection. Third-party recipients include:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposit and withdrawal instructions. These institutions operate under their own privacy frameworks and applicable Pakistani financial regulation.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by 777xk to validate CNIC authenticity and confirm player age. Data shared is limited to what is necessary for the verification task.
• Fraud Prevention & AML Partners: Specialist fraud detection and anti-money laundering screening services that help 777xk identify suspicious activity. Data shared is transactional and behavioural in nature.
• IT Infrastructure & Cloud Service Providers: Hosting and data storage providers who process data on 777xk's behalf under binding data processing agreements that prohibit independent use of your data.
• Regulatory & Law Enforcement Authorities: Where 777xk is legally required to disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies, we will comply with such obligations. 777xk will notify you of any such disclosure where legally permitted to do so.
• Professional Advisors: Lawyers, auditors, and accountants engaged by 777xk who require access to relevant data to provide their professional services. Such advisors are bound by confidentiality obligations.

777xk uses cookies and similar tracking technologies on the 777xk.app platform. Cookies are small text files stored on your device that help us recognise returning players, maintain login sessions, and understand how the platform is used.

777xk employs the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without affecting your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and display preferences. These improve your experience but are not strictly required.
• Analytical Cookies: Collect anonymised data about how players navigate the 777xk platform — which pages are visited, how long sessions last, and where players encounter difficulties. This data is used exclusively to improve the platform.
• Security Cookies: Support fraud detection and session integrity features by identifying anomalous access patterns that may indicate account compromise or bot activity.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the 777xk platform. Disabling analytical cookies will not affect platform functionality.

777xk retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure or last account activity, whichever is later, in compliance with AML and gaming regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for AML, tax, and audit purposes.
• KYC documents: Retained for a minimum of five (5) years from account closure. Where an account was subject to a regulatory investigation, KYC documents are retained for the duration of the investigation plus five years.
• Support communications: Retained for three (3) years from the date of the most recent interaction in the relevant support thread.
• Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration by excluded players. Other responsible gaming tool records are retained for five (5) years.
• Technical and session data: Log files and IP address records are retained for thirteen (13) months from the date of collection, after which they are deleted.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years to demonstrate consent compliance.

Where retention beyond these periods is required by a specific legal obligation or ongoing investigation, 777xk will retain the relevant data for as long as that obligation subsists.

777xk implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your device and 777xk servers is protected using 256-bit SSL/TLS encryption. This applies to all platform pages, payment flows, and API communications.
• Encryption at Rest: Sensitive personal data — including CNIC records and financial account details — is encrypted at rest using industry-standard AES-256 encryption on our database infrastructure.
• Access Controls: Access to personal data within 777xk is governed by a strict role-based access control (RBAC) policy. Employees access only the data necessary for their specific job function. All access is logged.
• Two-Factor Authentication: All internal 777xk staff accounts with access to production data require two-factor authentication. We also strongly recommend that players enable 2FA on their own accounts.
• Regular Security Audits: 777xk engages third-party security specialists to conduct periodic penetration testing and vulnerability assessments of the platform's infrastructure.
• Incident Response: 777xk maintains a documented data breach response procedure. In the event of a breach affecting your personal data, affected players will be notified promptly in accordance with applicable notification obligations.

While 777xk takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 777xk account and to enable two-factor authentication.

As an internationally certified gaming platform, 777xk's infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, 777xk ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required under this Policy.

Safeguards for international transfers include binding data processing agreements with all third-party recipients that impose data protection obligations at least equivalent to those applied by 777xk, and the use of standard contractual clauses where applicable.

You may request information about the specific safeguards in place for any international transfer of your data by contacting 777xk support at [email protected].

As a 777xk player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with a clear description of your request. 777xk will respond within 30 calendar days:

• Right of Access: You may request a copy of all personal data that 777xk holds about you, along with information about how it is processed.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data held about you. Some corrections (such as name changes) may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interest grounds. This right is subject to 777xk's legal retention obligations — AML-mandated data cannot be erased on request.
• Right to Restrict Processing: You may request that 777xk limits the processing of your data while a dispute about accuracy or legitimate interest is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that 777xk provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest grounds. 777xk will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

777xk is strictly an adult platform. The minimum age to register and use the 777xk platform is 21 years. 777xk does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted during the KYC process using CNIC-based identity checks. Any account found to belong to a person under the age of 21 will be permanently closed immediately upon discovery, and all data associated with that account will be handled in accordance with 777xk's responsible gaming and AML obligations.

If you believe that a minor has created a 777xk account, please contact [email protected] immediately. We will investigate and take appropriate action as a matter of priority.

Responsible gaming is a core operational commitment at 777xk, and personal data plays an important role in delivering our responsible gaming obligations. Specifically:

• Your responsible gaming tool settings — including deposit limits, session time reminders, cooling-off periods, and self-exclusion status — are stored permanently in your account record to ensure they are consistently enforced across all sessions and devices.
• Self-exclusion records are retained indefinitely. If you request self-exclusion from 777xk, your contact details and account identifiers are retained specifically to prevent re-registration, even after your account has been closed.
• 777xk's responsible gaming monitoring systems analyse your gaming activity patterns — including session frequency, deposit velocity, and wager escalation — to identify potential indicators of problematic play. This analysis is conducted to protect your wellbeing, not for commercial profiling purposes.
• Where responsible gaming monitoring identifies a player who may be experiencing harm, a 777xk responsible gaming team member may make contact via your registered mobile number or email. This outreach is conducted in accordance with our duty of care obligations.

For more information about 777xk's responsible gaming tools and support resources, please visit our Responsible Gaming page.

777xk reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to how we collect, use, or share your personal data, we will notify you via your registered email address or through an in-platform notification prior to the change taking effect.

The effective date at the top of this Policy reflects when the most recent version came into force. We encourage you to review this Policy periodically to remain informed about how 777xk is protecting your data. Continued use of the platform following publication of an updated Policy constitutes your acceptance of the revised terms.

For any queries, concerns, or rights requests relating to this Privacy Policy or the processing of your personal data by 777xk, please contact our support team using the details below. All formal data protection correspondence must be submitted in writing via email.

• Email: [email protected]
• Response Time: Within 30 calendar days of receipt of your request
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu

When submitting a rights request or data protection query, please include your registered email address, the nature of your request, and any relevant account details to help us locate your data promptly and verify your identity.

For general platform support, account assistance, or payment queries, our full support team is available via live chat on the 777xk platform and by email at [email protected], around the clock.