xk777 Privacy Policy

1 Data Controller

For the purposes of applicable data protection legislation, xk777 ("we", "us", "our") is the data controller responsible for personal data collected through xk777.asia and all associated services. xk777 is operated under international online gaming licensing frameworks. Players may contact xk777 regarding data matters at [email protected].

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data submitted by or collected from users who register accounts, visit xk777.asia, or otherwise interact with xk777's services. By registering an account with xk777, you acknowledge that you have read and accepted this Privacy Policy in full. If you do not accept this policy, you must not register or continue to use xk777.

2 Personal Data We Collect

xk777 collects personal data in the following categories, depending on how you interact with our platform:

• Registration data: Full name, date of birth, email address, mobile number, and country of residence provided at the time of account creation.
• Identity verification (KYC) data: Government-issued identification documents (such as CNIC, passport, or driving licence), proof of address, and, where required, source-of-funds documentation.
• Financial data: Payment method details, transaction history, deposit and withdrawal records. Full payment card numbers are never stored by xk777; card processing is handled by PCI-DSS-compliant third-party processors.
• Device and usage data: IP address, device type, browser type and version, operating system, session duration, pages visited, and game history. This data is collected automatically when you access xk777.
• Communications data: Records of any correspondence you send to or receive from xk777 support, including live chat transcripts and emails.
• Responsible gaming data: Deposit limits, loss limits, self-exclusion requests, and related tool interactions. This data is retained for regulatory compliance and player protection purposes.

3 How xk777 Uses Your Data

xk777 processes personal data only for lawful purposes directly related to the provision of our services. Specifically, xk777 uses your personal data to:

• Create, manage, and secure your xk777 player account.
• Verify your identity and age in fulfilment of KYC obligations and the 18+ requirement.
• Process deposits, withdrawals, and all financial transactions in your xk777 account.
• Personalise your experience and recommend relevant games, promotions, or betting markets.
• Detect, investigate, and prevent fraud, money laundering, and other prohibited activity.
• Administer responsible gaming tools and intervene where problem gambling indicators are identified.
• Comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
• Send service-related communications, including account security alerts and transaction confirmations.
• Send promotional communications where you have opted in to receive them. You may opt out at any time via account settings.

4 Legal Basis for Processing

xk777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account agreement between xk777 and the Player, including account management and transaction processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and responsible gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by the Player's privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where the Player has given explicit, freely revocable consent.

5 KYC Identity Verification

xk777 is required to verify the identity of all players before processing any withdrawal. KYC verification at xk777 involves submission of a valid government-issued identity document and, in some cases, a recent proof of address. Pakistani players most commonly submit their CNIC (Computerised National Identity Card) as the primary identity document.

KYC documents submitted to xk777 are processed by xk777's internal compliance team and, where necessary, by a regulated third-party identity verification provider. These documents are stored in encrypted form and are not accessible outside the compliance function. KYC documents are retained for a minimum period required by applicable regulations, typically five to seven years from the date of account closure.

xk777 will never use KYC documents for any purpose other than identity verification, age confirmation, fraud prevention, and regulatory compliance. KYC documents are never sold, licensed, or transferred to any third party for commercial purposes.

6 Payments & Financial Data

xk777 processes payments through JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, and Skrill. When you initiate a transaction, xk777 passes the necessary payment data to the relevant payment processor to complete the transaction. xk777 does not store full payment card numbers or banking credentials on its own servers.

Transaction records — including deposit amounts, withdrawal amounts, dates, and payment methods — are retained in your xk777 account history and in xk777's financial records. These records are retained for a minimum of five years for regulatory compliance and are available to you via your account dashboard.

xk777 may be required to report certain financial transactions to relevant authorities in fulfilment of AML obligations. Such reporting is made only where legally required and does not constitute a discretionary disclosure of your financial data.

7 Cookies & Tracking Technologies

xk777 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used by xk777 include:

• Strictly necessary cookies: Required for core Platform functionality, including maintaining your login session and processing transactions. These cannot be disabled without preventing Platform use.
• Performance cookies: Used to collect anonymised data on how players navigate xk777, enabling us to identify and fix performance issues.
• Functional cookies: Used to remember your language preference, display settings, and similar personalisation choices.
• Analytics cookies: Used to understand aggregate user behaviour on xk777, supporting product development decisions. Analytics data is processed in anonymised or pseudonymised form.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality or personalisation of your xk777 experience.

8 Third-Party Data Sharing

xk777 does not sell, rent, or trade your personal data with third parties for their independent marketing purposes. xk777 shares personal data with third parties only in the following circumstances:

• Service providers: Third-party vendors who process data on xk777's behalf, including payment processors, identity verification providers, cloud hosting providers, and customer support platform operators. All such vendors are bound by data processing agreements and are prohibited from using your data for any purpose other than the service they provide to xk777.
• Regulatory and legal disclosure: Where xk777 is required by law, court order, or regulatory authority to disclose personal data. xk777 will notify the Player of any such request where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of xk777's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and their rights in connection with it.

9 Data Retention

xk777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods applicable at xk777 are:

• Active account data is retained for the duration of your account's active status plus five years following permanent account closure.
• KYC and identity verification documents are retained for a minimum of five years following account closure.
• Financial transaction records are retained for a minimum of five years in accordance with AML regulatory requirements.
• Support and communications data is retained for three years from the date of the last communication.
• Responsible gaming records, including self-exclusion data, are retained for a minimum of five years to prevent circumvention of exclusion measures.

Following the expiry of the applicable retention period, xk777 will securely delete or anonymise your personal data.

10 Your Data Rights

Subject to applicable data protection law, you have the following rights in respect of personal data held by xk777:

• Right of access: You may request a copy of the personal data xk777 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to xk777's legal retention obligations.
• Right to restrict processing: You may request that xk777 restricts processing of your personal data in certain circumstances.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to xk777.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact xk777 at [email protected]. xk777 will respond to all data rights requests within 30 days of receipt.

11 Data Security

xk777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Measures in place at xk777 include:

• TLS encryption for all data transmitted between the Player's device and xk777's servers.
• Encrypted storage of sensitive personal data, including passwords (stored as irreversible hashes) and KYC documents.
• Access controls restricting personal data access to authorised personnel on a need-to-know basis.
• Regular internal security reviews and vulnerability assessments.

While xk777 takes reasonable and industry-standard security precautions, no transmission of data over the internet can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own login credentials and devices used to access xk777.

12 Updates to This Privacy Policy

xk777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address on file or via a prominent notice on xk777.asia prior to the change taking effect. The date of the most recent revision is displayed at the top of this policy. Continued use of xk777 following a policy update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which xk777 processes your personal data, please contact our support team at [email protected].