Privacy Policy — xk777 Online Casino Pakistan

1Who We Are — The Data Controller

xk777.im is operated by xk777 ("we", "us", "the Platform"). As a registered online gaming and betting service, xk777 acts as the data controller for all personal information collected through xk777.im. This means xk777 determines the purposes for which your data is used and the means by which it is processed.

xk777 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only what we need, we hold it only as long as we need it, and we protect it at every stage.

2What Personal Data xk777 Collects

The personal information xk777 collects falls into four categories:

2.1 Registration Data

• Full legal name (as it appears on your CNIC or passport)
• Date of birth
• Pakistani mobile number
• Email address
• Username and password (password stored as a one-way hash — never readable)
• City and province of residence

2.2 Identity Verification (KYC) Data

• CNIC number and scanned copy, or passport, or driving licence
• Proof of address (utility bill or bank statement dated within 3 months)
• Selfie or video confirmation in some high-value verification cases

2.3 Financial Data

• Easypaisa or JazzCash account number (last 4 digits stored; full number is tokenised)
• NayaPay or SadaPay account reference
• Bank account IBAN (for IBFT withdrawals)
• Visa/Mastercard last 4 digits and expiry date (full card number is never stored by xk777 — handled by PCI-compliant payment processors)
• Deposit and withdrawal history in PKR

2.4 Usage & Technical Data

• IP address and device fingerprint (for fraud detection)
• Browser type and version
• Session duration and pages visited on xk777.im
• Game history and betting records (required for regulatory compliance)
• Cookies and session tokens (see Section 8)

3How xk777 Collects Your Data

xk777 collects your personal data through three channels:

3.1 Directly From You

When you register at xk777, submit KYC documents, make a deposit or withdrawal, contact support, or respond to promotions — you provide data directly. xk777 only requests information that is genuinely necessary for the purpose stated at the time of collection.

3.2 Automatically During Your Session

When you visit xk777.im, our servers automatically log your IP address, device type, browser, and pages visited. This is standard practice for all websites and is essential for security monitoring, fraud detection, and diagnosing technical issues.

3.3 From Trusted Third Parties

xk777 may receive limited data from payment partners (for example, transaction confirmation from Easypaisa or JazzCash) and from identity verification services used during KYC. These third parties are contractually bound to share only the minimum data required and to handle it securely.

4Why xk777 Uses Your Data

xk777 uses your personal data for the following clearly defined purposes:

• Account Management — to create, maintain, and secure your xk777 account.
• Transaction Processing — to execute PKR deposits and withdrawals via Easypaisa, JazzCash, and other supported methods.
• Identity Verification (KYC) — to confirm you are who you say you are, in compliance with anti-money laundering requirements.
• Fraud Prevention — to detect and prevent cheating, money laundering, and multiple-account violations.
• Customer Support — to investigate and resolve account queries, payment disputes, and technical issues.
• Responsible Gaming — to monitor for problematic gambling patterns and proactively offer support tools where appropriate.
• Legal Compliance — to meet record-keeping and reporting obligations under applicable financial regulations.
• Service Improvement — to understand how players use xk777 and improve the platform's games, speed, and features.
• Marketing Communications — to send bonus offers, PSL betting promotions, and platform updates, but only where you have given consent. You can opt out at any time.

5Legal Basis for Processing

xk777 relies on the following legal grounds to process your personal data:

1. Contract Performance — processing your name, payment details, and account data is necessary to fulfil the service agreement when you register at xk777.
2. Legal Obligation — xk777 is required by applicable financial and gaming regulations to collect KYC data and maintain transaction records.
3. Legitimate Interests — fraud prevention, security monitoring, and service improvement are legitimate interests of xk777 that do not override your privacy rights.
4. Consent — marketing communications are sent only where you have explicitly opted in. You may withdraw consent at any time by contacting support@xk777.im or updating your account preferences.

6Data Sharing — Who xk777 Shares Data With

xk777 does not sell your personal data. Full stop. The only circumstances in which xk777 shares your data are:

6.1 Payment Processors

To complete your PKR deposits and withdrawals, xk777 must pass the necessary transaction data to your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network. These processors receive only the data needed to execute the specific transaction.

6.2 Identity Verification Partners

For KYC verification, xk777 may use a specialist identity verification service. Your CNIC or passport data is shared securely and used solely for verification purposes. xk777 selects KYC partners that operate under strict data protection agreements.

6.3 Legal and Regulatory Requirements

xk777 may be required by law enforcement, courts, or regulatory authorities to disclose player data. xk777 will comply with lawful requests and, where permitted, will notify the affected player before disclosure.

6.4 Business Transfers

In the event xk777 is acquired by or merges with another entity, your data may be transferred as part of that transaction. Any successor entity will be bound by this Privacy Policy unless you are notified of changes with adequate notice.

7KYC, Payments & Financial Data

Financial data deserves special attention because it's what players at xk777 are understandably most concerned about. Here is exactly how xk777 handles it:

• Easypaisa & JazzCash: Your wallet number is tokenised. xk777 stores a reference token, not your actual wallet number. The token can be used to initiate future transactions but cannot be used to access your wallet directly.
• Bank IBFT: Your IBAN is stored encrypted and is only accessible to the xk777 payments team when processing a specific withdrawal you have requested.
• Visa/Mastercard: Full card numbers are never stored on xk777 servers. Card processing is handled by a PCI-DSS Level 1 certified payment gateway. xk777 stores only the last 4 digits, card type, and expiry date for reference.
• CNIC: Your CNIC number and document scan are stored in an encrypted, access-controlled vault. Only the KYC compliance team can access these documents and only for verification purposes.
• Transaction History: Your PKR deposit and withdrawal history is stored for a minimum of 5 years as required by applicable financial regulations and is accessible to you through your xk777 account dashboard at all times.

8Cookies & Tracking Technologies

8.1 What Cookies xk777 Uses

xk777.im uses the following categories of cookies:

8.2 What xk777 Does Not Use

xk777 does not use third-party advertising cookies, Facebook Pixel, Google Ads remarketing tags, or any other cross-site tracking technology. The cookies we use stay on xk777.im and are not shared with any advertising network.

8.3 Managing Cookies

You can control or delete cookies through your browser settings. Disabling all cookies on xk777.im will prevent you from staying logged in and may affect some platform features. Disabling analytics cookies will have no effect on your ability to play or transact at xk777.

9How xk777 Secures Your Data

xk777 employs multiple layers of technical and organisational security measures to protect your personal data:

• Encryption in Transit: All data between your device and xk777.im is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock in your browser confirms this.
• Encryption at Rest: Sensitive data fields (CNIC, IBAN, wallet tokens) are encrypted at the database level using AES-256. Even xk777 staff cannot read raw sensitive values.
• Access Controls: xk777 staff access to player data is role-based and logged. Only the minimum number of staff necessary for a specific function can access specific data categories. All access is audited.
• Multi-Factor Authentication: xk777 staff accounts use mandatory MFA. Players are encouraged to enable MFA on their own xk777 accounts for additional protection.
• Intrusion Detection: xk777 servers are continuously monitored by an intrusion detection system that flags abnormal access patterns in real time.
• Penetration Testing: xk777 conducts regular third-party security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Breach Response: In the unlikely event of a data breach affecting your personal data, xk777 will notify you within 72 hours of discovering the breach and provide full details of what was affected and what we have done to address it.

10Data Retention — How Long We Keep Your Data

xk777 retains personal data for the minimum period necessary for the relevant purpose. Specific retention periods are:

• Active Account Data: Retained for the lifetime of your xk777 account plus 12 months after account closure.
• Transaction & Financial Records: Retained for a minimum of 5 years from the date of each transaction to meet regulatory requirements.
• KYC Documents: Retained for 5 years from account closure or as required by applicable anti-money laundering regulations.
• Support Communications: Email and chat logs retained for 2 years from the date of the communication.
• Security Logs: IP logs and access records retained for 12 months and then automatically deleted.
• Anonymised Analytics: Stripped of all personal identifiers and retained indefinitely for platform improvement purposes.

When your data reaches its retention limit, xk777 securely deletes or anonymises it so it can no longer be linked to you.

11Your Privacy Rights

As an xk777 player, you have the following rights over your personal data. To exercise any of these rights, email support@xk777.im with the subject line "Privacy Rights Request". xk777 will respond within 14 days.

12Children's Privacy

xk777 does not knowingly collect personal data from anyone under the age of 18. Our platform is strictly for adults. If xk777 discovers that a user under 18 has registered and provided personal data, we will immediately suspend the account, delete the data, and refund any balance in accordance with our Terms and applicable law.

If you believe a minor has accessed xk777, please notify us immediately at support@xk777.im with the subject line "Underage Account Report". We will investigate and act within 48 hours.

13International Data Transfers

xk777's primary servers are located within secure data centres. Some third-party service providers — such as our KYC verification partner and cloud infrastructure provider — may process data in servers located outside Pakistan. In all such cases, xk777 ensures that appropriate contractual protections are in place to safeguard your data to the same standard as this Privacy Policy requires.

xk777 does not transfer your personal data to any country for the purpose of lower privacy standards or reduced legal protections. All international transfers are governed by data processing agreements that include standard contractual clauses for data protection.

14Changes to This Privacy Policy

xk777 reviews this Privacy Policy regularly and updates it when there are changes to how we collect or use data, or when regulations require it. When we make material changes, we will notify registered players by email and/or account notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to bookmark this page and check back periodically. Continued use of xk777.im after a policy update constitutes acceptance of the revised terms.

15Contact xk777 About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how xk777 has handled your personal information, please get in touch:

• Email: support@xk777.im
• Subject Line for Privacy Requests: "Privacy Rights Request"
• Response Time: xk777 commits to acknowledging all privacy requests within 2 business days and resolving them within 14 days.
• Languages: English and Urdu
• Availability: 24/7

If you feel xk777 has not handled a privacy concern to your satisfaction after contacting us, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.