xx77 Privacy Policy — Your Data, Handled With Care

This Privacy Policy applies to xx77, the online gaming platform operated at https://xx77.life. When this policy uses the terms "xx77", "we", "us", or "our", it refers to the operator of the xx77 platform. When it uses "you" or "your", it refers to any registered player or visitor who uses the xx77 platform.

xx77 is the data controller for personal information collected through the platform. This means we are responsible for deciding how and why your personal data is collected and processed. If you have any questions about how we handle your data, contact us at support@xx77.life or through the live chat on the platform.

xx77 collects only the data necessary to operate the platform, comply with legal requirements, and provide you with a secure, personalised gaming experience. Here is a breakdown of what we collect and when.

2.1 Data You Provide Directly

When you register an account on xx77, you provide us with:

• Full legal name as it appears on your CNIC or passport.
• Date of birth — used to verify you meet the minimum age requirement of 18 years.
• Mobile phone number — used for account verification and support communication.
• Email address — used for account notifications and correspondence.
• City and province of residence — used for regional personalisation and compliance.
• Payment method details — such as your Easypaisa or JazzCash account number, or bank account details for IBFT withdrawals. We do not store full card numbers for Visa/Mastercard transactions; these are handled by certified payment processors.

2.2 Identity Verification Data (KYC)

As part of our Know Your Customer (KYC) process — which may be triggered before certain withdrawal amounts or on request — we may ask for:

• A copy of your National Identity Card (CNIC) or passport.
• A selfie or photo for identity confirmation.
• Proof of payment method ownership, such as a screenshot of your Easypaisa account screen showing your name and number.
• In some cases, proof of income or source of funds for large transactions.

2.3 Data Collected Automatically

When you use the xx77 platform, we automatically collect certain technical data:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Session data including login times, pages visited, and features used.
• Game activity data — which games you played, bet amounts, and outcomes. This data is used for account statement purposes and fraud detection.
• Cookies and similar tracking technologies — see Section 6 for full details.

2.4 Data from Third Parties

xx77 may receive limited data from payment processors (to confirm successful deposits or withdrawals) and from identity verification service providers (to confirm the authenticity of your KYC documents). We do not purchase data lists or receive data from social media platforms.

xx77 uses your personal data for the following purposes only:

xx77 does not use automated decision-making or profiling that produces legal effects on your account without human review. If your account is flagged by automated fraud detection, a member of the xx77 team will review the case before any action is taken.

Every instance of data processing at xx77 is conducted on one of the following legal grounds:

• Contractual necessity: Processing your account data, payment details, and game activity is necessary to fulfil the contract between xx77 and you as a registered player. Without this data, we cannot provide the service.
• Legal obligation: Certain data processing — particularly KYC verification, anti-money laundering checks, and record-keeping — is required by applicable law and regulation. xx77 has a legal duty to conduct these checks.
• Legitimate interests: Fraud detection, platform security, and responsible gaming monitoring are conducted on the basis of xx77's legitimate interest in protecting its players and the integrity of the platform.
• Consent: Sending you promotional communications by email or SMS is done only with your explicit consent, given at the time of registration or through your account notification settings. You can withdraw consent at any time by updating your notification preferences or contacting support.

xx77 does not sell, rent, or share your personal data for third-party marketing purposes. We share your data only in the following strictly defined circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard networks receive the minimum data necessary to process your deposit or withdrawal transaction. These partners operate under their own privacy and security frameworks.
• Identity verification providers: Where KYC verification is required, your identity documents may be processed by a certified third-party verification service. This provider acts under strict data processing agreements with xx77.
• Game software providers: Third-party game developers who supply titles on the xx77 platform may receive anonymised session data (such as bet amounts and outcomes) to operate the game software. They do not receive your name, CNIC, or contact details.
• Law enforcement and regulatory bodies: xx77 may disclose player data to competent authorities if required by a valid legal order, court warrant, or regulatory request. We will notify affected players where legally permitted to do so.
• Business transactions: In the event of a merger, acquisition, or sale of the xx77 business, player data may be transferred to the acquiring entity under equivalent data protection commitments.

xx77 uses cookies and similar technologies to keep your session active, remember your preferences, and understand how players use the platform so we can improve it. A cookie is a small data file stored on your device by your browser.

We use the following categories of cookies:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your xx77 account. Functional and analytics cookies can be disabled without affecting your ability to use the platform, though some preference features will not be saved between sessions.

xx77 does not use third-party advertising cookies or share cookie data with advertising networks.

xx77 implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the xx77 platform.
• Encrypted storage for sensitive data fields including payment details and identity document copies — data is encrypted at rest using industry-standard algorithms.
• Access controls — xx77 staff access to player data is strictly role-based. Support agents can only see the information necessary to resolve your query. Senior-level access is required to view KYC documents.
• Intrusion detection systems monitor platform access for unusual patterns that may indicate a security breach or unauthorised access attempt.
• Regular security reviews are conducted internally and by independent assessors to identify and address vulnerabilities.
• Two-factor authentication (2FA) is available for player accounts and is strongly recommended. Enable it from your account security settings.

While xx77 takes data security seriously and maintains strong protective measures, no online platform can guarantee 100% security against all possible threats. In the event of a data breach that poses a risk to your personal data, xx77 will notify affected players promptly and take immediate remedial action.

xx77 retains your personal data only for as long as it is necessary for the purposes described in this policy. Specific retention periods are as follows:

• Active account data — retained for the full duration of your registered account and for a period of five years following account closure, in line with standard financial record-keeping requirements.
• Transaction records — deposits, withdrawals, and bet history are retained for a minimum of five years after the date of the transaction. This is required for anti-money laundering compliance and dispute resolution.
• KYC documents — identity verification documents are retained for five years after the last transaction associated with the account, after which they are securely deleted.
• Customer support communications — emails and chat transcripts are retained for two years from the date of the conversation.
• Marketing consent records — records of when you gave or withdrew consent for promotional communications are retained for three years from the date of the consent action.
• Anonymised analytics data — aggregated, anonymised usage data that cannot be linked back to any individual is retained indefinitely for platform improvement purposes.

When your data reaches the end of its retention period, it is securely and permanently deleted or anonymised so that it can no longer be associated with you.

As an xx77 player, you have rights over your personal data. Here is what those rights mean in practice and how to exercise them.

xx77 is strictly an adult platform. The minimum age to register and use xx77 is 18 years. We do not knowingly collect personal data from anyone under 18 years of age.

If xx77 discovers or has reason to believe that an account has been registered by a person under 18, the account will be immediately closed and all data associated with it will be deleted, except where retention is required for legal or compliance reasons related to the underage access incident itself.

If you are a parent or guardian and believe your child may have registered on xx77, please contact us immediately at support@xx77.life. We will investigate and take appropriate action without delay.

The xx77 platform does not contain links to external third-party websites as a general rule. Where references to payment providers or game developers are made on the platform, these are made in the context of the services they provide to xx77 and do not constitute endorsements of those parties' own privacy practices.

If you navigate to a third-party website from any reference on xx77, that website's own privacy policy will govern how your data is handled from that point. xx77 is not responsible for the privacy practices of third-party websites or services.

xx77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address on their account and/or through a notice on the platform.

The updated policy will be published on this page with a revised "Last Updated" date at the top. If you continue to use the xx77 platform after a Privacy Policy update, this constitutes your acceptance of the revised policy. We recommend checking this page periodically — particularly when you see the Last Updated date has changed from what you last reviewed.

If you disagree with a material change to this policy, you have the right to close your account and request deletion of your data, subject to the retention obligations described in Section 8.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how xx77 is handling your personal information, please get in touch:

• Email: support@xx77.life — mark your email "Privacy Query" for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week, via the chat icon on any xx77 page. Live chat is the fastest way to get an initial response.

xx77 takes privacy queries seriously. All privacy-related requests are handled by a dedicated member of the support team. We aim to acknowledge your query within 24 hours and provide a substantive response within five working days for complex requests. Simple corrections or preference updates are typically processed immediately.