xl777 Privacy Policy

xl777 (operating at xl777.club) is the data controller responsible for the personal data of all registered players and website visitors. As data controller, xl777 determines the purposes and means by which personal data is processed in connection with the operation of the xl777 online casino and sports betting platform.

xl777 operates under an international gaming license framework. Our data practices are governed by the privacy and data protection standards required by that licensing framework, as well as applicable international data protection principles. Players in Pakistan are served under these combined standards.

xl777 collects the following categories of personal data from players and site visitors. In each case, the data is collected only to the extent necessary for the stated purpose.

xl777 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide during account registration, KYC document upload, deposit and withdrawal requests, support conversations, and any other direct interaction with the xl777 platform.
• Automated Collection: Technical and usage data collected automatically when you access the xl777 platform, including IP addresses, device identifiers, and session data collected via server logs and first-party cookies.
• Third-Party Verification: Where necessary to complete KYC or AML checks, xl777 may cross-reference identity data with licensed identity verification service providers. These providers are contractually bound to handle your data in accordance with our privacy standards.
• Payment Processors: When you deposit or withdraw via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, or USDT TRC20, the relevant payment processor shares limited transaction confirmation data with xl777 to facilitate payment matching and fraud prevention.

xl777 uses your personal data for the following specific purposes. We do not use personal data for any purpose that is incompatible with what is described below without first obtaining your consent or updating this Privacy Policy:

• Account Creation and Management: To register your xl777 account, authenticate your logins, maintain your account settings, and deliver the core platform Services to you.
• Identity and Age Verification: To confirm you are who you say you are and that you meet the 21+ age requirement mandated by our international gaming license. This is a legal obligation we cannot waive.
• Payment Processing: To process PKR deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records for each account.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, multi-account abuse, money laundering, and unauthorised access. This includes automated monitoring of transaction patterns and login behaviour.
• Regulatory Compliance: To comply with our obligations under our international gaming license, including AML record-keeping, responsible gaming monitoring, and cooperation with licensing authority audits.
• Customer Support: To respond to your support queries, resolve disputes, and maintain a record of communications for quality assurance and regulatory compliance purposes.
• Responsible Gaming Monitoring: To identify patterns of behaviour that may indicate problem gambling, and to apply or recommend responsible gaming tools where appropriate under our license obligations.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the xl777 platform, identify technical issues, and optimise the player experience for users across Pakistan.
• Marketing Communications: To send you promotional communications about xl777 bonuses, new features, and special events — but only where you have opted in or where permitted under applicable rules. You can opt out at any time.

xl777 relies on the following legal bases to process your personal data, in accordance with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and xl777 — i.e., to operate your account, process payments, and deliver the Services you signed up for.
• Legal Obligation: Processing required to comply with our international gaming license obligations, including KYC, AML record-keeping, age verification, and responsible gaming requirements.
• Legitimate Interests: Processing carried out for xl777's legitimate business interests, including fraud prevention, platform security, multi-account detection, and anonymised analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

xl777 does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and cryptocurrency payment processors receive the transaction data necessary to complete your deposit or withdrawal. These providers process data under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Licensed KYC and AML compliance partners may receive your identity documents and CNIC data for the purpose of completing verification checks. All such providers are contractually bound to process data only for the specified purpose.
• Regulatory and Licensing Authorities: xl777 may be required to share player data with the authority that issued our international gaming license for audit, compliance review, or investigation purposes. xl777 cooperates fully with all lawful regulatory requests.
• Law Enforcement: Where xl777 receives a lawful order from a competent law enforcement authority, we will disclose the minimum data required to comply. Where legally permitted, xl777 will notify affected players of such disclosures.
• Responsible Gaming Organisations: In limited circumstances, xl777 may share anonymised or pseudonymised data with responsible gaming research bodies operating under our license framework for the purpose of improving responsible gaming tools industry-wide.

xl777 uses first-party cookies and similar tracking technologies to operate the platform securely, maintain your login session, and analyse platform performance. We do not use third-party advertising cookies or tracking pixels that transmit your data to external advertising networks.

The types of cookies used by xl777 include:

• Essential Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and security cookies. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: Remember your platform preferences such as preferred language, display settings, and last-used payment method. These improve your experience but are not strictly essential.
• Analytics Cookies: First-party analytics cookies that collect anonymised data about how players use the xl777 platform, including pages visited, session duration, and features accessed. This data is used exclusively to improve the platform.

You may manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in to your xl777 account. xl777 does not use cookies to serve targeted advertising or to track your activity outside of xl777.club.

xl777 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by our international gaming license obligations. The following retention periods apply:

When the applicable retention period expires, xl777 securely deletes or anonymises personal data in accordance with its data disposal procedures. Anonymised data (data from which all identifying information has been removed and cannot be re-identified) may be retained indefinitely for statistical and platform improvement purposes.

xl777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• AES-256 encryption for all personal data stored at rest on xl777 servers.
• TLS 1.3 encryption for all data transmitted between your device and xl777 servers.
• Bcrypt hashing of all account passwords — xl777 staff cannot see your plaintext password under any circumstances.
• Multi-factor authentication requirements for all xl777 administrative staff accounts with access to player data.
• Role-based access controls ensuring that staff can only access player data required for their specific job function.
• Regular automated vulnerability scanning and periodic third-party penetration testing of the xl777 platform.
• A documented incident response plan with defined escalation procedures and player notification obligations in the event of a data breach.
• Formal data processing agreements with all third-party vendors who process player data on xl777's behalf.

xl777 operates globally under an international gaming license, and some processing of your personal data may occur in countries outside of Pakistan. Where personal data is transferred internationally, xl777 ensures that appropriate safeguards are in place to maintain the same level of data protection that applies within our platform standards.

Safeguards used for international transfers include:

• Standard contractual clauses incorporated into data processing agreements with all international third-party vendors.
• Transfer only to jurisdictions or providers that offer equivalent data protection standards as required by our gaming license framework.
• Encryption of all data in transit across all international transfer channels using TLS 1.3.

xl777 strictly enforces a minimum age requirement of 21 years for all registered players. The xl777 platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21.

xl777 employs automated age screening during registration and requires CNIC verification to confirm age before any withdrawal is processed. Any account found to belong to a person under 21 years of age will be:

• Immediately and permanently suspended without prior notice.
• All associated funds, including deposits and winnings, will be forfeited.
• All personal data associated with the underage account will be deleted from xl777 systems, except where retention is required for regulatory reporting purposes.
• The incident will be reported to relevant authorities where required under our gaming license obligations.

xl777 may send you promotional communications about bonuses, new games, special events such as PSL betting promotions, and platform updates. Marketing communications are sent only where you have opted in during registration or have subsequently given consent via your account notification settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the xl777 account dashboard.
• Clicking the unsubscribe link included in any xl777 marketing email.
• Contacting xl777 support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and KYC status updates. These transactional messages are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

To exercise any of your data rights described in this Privacy Policy — including access, rectification, erasure, portability, objection, or restriction — please contact xl777 using one of the following methods:

• Live Chat: Available 24/7 from your xl777 account dashboard. This is the fastest way to raise a data rights request. Average first response time is under 90 seconds.
• Email: Send your request to [email protected] with the subject line "Data Rights Request" and your registered account email address. (Plain text — not a clickable link.)

When submitting a data rights request, please include your full registered name and the email address associated with your xl777 account so that we can verify your identity and locate your records efficiently. xl777 may ask for additional identity verification before processing a data erasure or portability request to protect against fraudulent requests.

xl777 will acknowledge all data rights requests within 5 business days and aim to resolve them fully within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days, in which case we will notify you in writing before the initial deadline expires.

xl777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. When material changes are made to this Privacy Policy, xl777 will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to all registered players via email and/or in-platform notification at least 14 days before the updated policy takes effect.
• Maintain an archived version of the previous Privacy Policy available on request via live chat for a period of 12 months following any update.

Your continued use of the xl777 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Privacy Policy, you may close your account by contacting xl777 support prior to the effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or xl777's data practices, please contact us through the following channels. All contact details below are plain text only and are not clickable links:

• Live Chat: 24/7 support available from your xl777 account dashboard. Average response time under 90 seconds.
• Email: [email protected]
• Subject Line: Use "Privacy Policy Enquiry" for fastest routing to our Data Protection team.

xl777 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with our response, you have the right to escalate the matter to the relevant supervisory authority under our international gaming license framework. Details of the applicable supervisory authority are available upon request from our support team.