77xp Privacy Policy — How We Collect, Use & Protect Your Data

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by 77xp ("we", "us", "our") in connection with the operation of the 77xp online betting and casino platform accessible at 77xp.app ("the Platform"). It sets out the types of personal information we collect, the purposes for which we use it, the circumstances in which we may share it, and the rights available to you as a data subject.

By registering an account or using any feature of the 77xp platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 77xp Terms & Conditions, which are incorporated by reference.

We are committed to handling your personal data responsibly. Our approach to data protection is designed to ensure that information about you is accurate, kept securely, used only for legitimate and disclosed purposes, and retained only for as long as necessary.

2. Personal Data We Collect

77xp collects the following categories of personal data from players:

2.1 Registration Data

• Full legal name
• Date of birth (for age verification)
• Pakistani mobile number
• Email address (if provided)
• Username and encrypted password
• Residential city or region (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad)

2.2 Identity Verification (KYC) Data

• Copy of valid Pakistani CNIC (Computerised National Identity Card)
• Proof of address (utility bill, bank statement)
• Selfie or facial photograph where required for identity matching

2.3 Financial Data

• JazzCash or Easypaisa mobile wallet number used for transactions
• Bank account name and account number (for bank transfer requests)
• Masked card details (last four digits and expiry only — full card data is not stored by 77xp)
• Cryptocurrency wallet address (for USDT TRC20 transactions)
• Transaction history: deposits, withdrawals, bonuses, and bet settlements in PKR

2.4 Gaming Activity Data

• Bets placed, games played, session duration, win/loss records
• Game preferences and browsing behaviour within the platform
• Responsible gaming limits and self-exclusion status

2.5 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookie identifiers and analytics data

2.6 Communications Data

• Support chat transcripts and email correspondence
• Survey responses and feedback submissions

3. How We Collect Your Data

77xp collects personal data through the following means:

• Directly from you — at account registration, during KYC submission, when you contact support, or when you complete any form on the Platform.
• Automatically — through cookies, session tracking, and platform analytics as you use the 77xp website and services.
• From third-party payment processors — JazzCash, Easypaisa, and banking partners confirm transaction status and associated account details as required for payment processing.
• From identity verification providers — where third-party KYC verification services are used to confirm the authenticity of identity documents submitted.

4. Legal Basis for Processing

77xp processes your personal data on the following legal grounds:

• Contract performance — Processing necessary to deliver the services you have requested, including account management, payments, and bet settlement.
• Legal obligation — Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations.
• Legitimate interests — Processing for fraud prevention, platform security, analytics, and improving our services where these interests do not override your rights.
• Consent — Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time.

5. How We Use Your Personal Data

77xp uses the personal data we collect for the following purposes:

• Creating and managing your 77xp account, including authentication and security.
• Processing PKR deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and other supported methods.
• Verifying your identity and age as required by responsible gaming and compliance obligations.
• Detecting and preventing fraud, money laundering, and prohibited platform conduct.
• Settling bets, awarding bonuses, and managing promotional offers.
• Providing customer support and responding to account enquiries.
• Sending service-related communications, including security alerts, transaction confirmations, and account notices.
• Sending marketing communications where you have opted in to receive them.
• Improving platform performance, personalising the user experience, and conducting internal analytics.
• Complying with any applicable legal, regulatory, or law enforcement obligations.

6. Data Sharing with Third Parties

77xp does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with third parties only in the following limited circumstances:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks, and cryptocurrency gateway providers receive the minimum data necessary to process your transactions.
• Identity verification providers — Third-party KYC and AML screening services receive identity document data solely to verify the authenticity of submissions.
• Game providers — Casino game suppliers (e.g. Pragmatic Play, Evolution Gaming) receive session data necessary to deliver games and ensure fair play. These providers operate under data processing agreements with 77xp.
• Legal and regulatory authorities — 77xp will disclose data to law enforcement, regulatory bodies, or courts where legally required to do so, or where disclosure is necessary to protect the rights and safety of 77xp, its players, or the public.
• Business transfers — In the event of a merger, acquisition, or sale of all or substantially all of 77xp's assets, player data may be transferred as part of the transaction. Affected players will be notified in advance of any such transfer.

All third parties with whom we share personal data are contractually obligated to use it only for the specified purpose and to maintain appropriate security standards.

7. Payment Data & PKR Transactions

77xp takes the security of financial data extremely seriously. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, or any other supported payment method, transactions are processed through PCI-DSS compliant payment gateways. 77xp does not store full debit or credit card numbers, CVV codes, or mobile wallet PINs on its own infrastructure.

Transaction records in PKR — including amounts, timestamps, and associated payment method references — are retained as part of your account record for a period of at least five years for financial compliance and dispute resolution purposes.

All financial data processed by 77xp is subject to encryption in transit and at rest using industry-standard protocols.

8. KYC & Identity Verification Data

Where 77xp requests identity documents — including a copy of your Pakistani CNIC — these documents are used exclusively for the purpose of verifying your identity, confirming your age (18+ requirement), and fulfilling our obligations under applicable anti-money laundering standards.

Identity documents submitted to 77xp are stored securely with access restricted to authorised personnel only. Documents are retained for a minimum period as required by applicable compliance obligations and are not shared with any third party except as described in Section 6 of this Policy.

If your KYC submission is rejected or your account is closed, identity documents will be deleted in accordance with our data retention schedule unless retention is required by law.

9. Cookies & Tracking Technologies

The 77xp platform uses cookies and similar tracking technologies for the following purposes:

• Strictly necessary cookies — Required for the platform to function. These include session management cookies that keep you logged in and security tokens. These cookies cannot be disabled.
• Analytics cookies — Used to understand how players navigate and use the platform, enabling us to improve the user experience. Analytics data is aggregated and anonymised where possible.
• Preference cookies — Store your platform settings (e.g. language, display preferences) so they are remembered between sessions.

You can manage and disable non-essential cookies through your browser settings at any time. Disabling analytics or preference cookies will not prevent you from using the 77xp platform but may affect certain user experience features.

10. Data Retention

77xp retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In general:

• Account registration and identity data is retained for the duration of the account relationship and for a minimum of five years following account closure.
• Financial transaction records are retained for a minimum of five years from the date of the transaction.
• Support and communications records are retained for a maximum of three years unless subject to an ongoing dispute or regulatory investigation.
• Analytics and technical data is retained in aggregated or anonymised form and is not subject to defined retention limits.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

11. Data Security

77xp implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 77xp platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls ensuring that personal data is only accessible to personnel with a legitimate operational need.
• Regular security audits and penetration testing of the platform infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a data breach that poses a risk to your rights and freedoms, 77xp will notify affected players and relevant authorities within the timeframe required by applicable law.

12. Your Rights as a Data Subject

Subject to applicable data protection law and certain exemptions, you have the following rights in relation to the personal data 77xp holds about you:

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may request correction of inaccurate or incomplete personal data.
• Right to erasure — In certain circumstances, you may request deletion of your personal data. Note that legal retention obligations may prevent full erasure in all cases.
• Right to restriction — You may request that we restrict processing of your data pending the resolution of a complaint or dispute.
• Right to object — You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 77xp at [email protected]. We will respond within 30 days of receipt of a valid request. We may require you to verify your identity before actioning a data request.

13. Children and Minors

The 77xp platform is strictly prohibited for individuals under the age of 18. We do not knowingly collect or process personal data from minors. If we become aware that personal data has been collected from an individual under 18, we will delete that data immediately and close the associated account.

If you believe a person under the age of 18 has registered a 77xp account or submitted personal data to us, please contact us at [email protected] immediately so that we can investigate and take appropriate action.

14. Cross-Border Data Transfers

77xp operates in an international environment. Some of our service providers — including payment processors, game providers, and cloud infrastructure partners — may process data in jurisdictions outside Pakistan. In such cases, 77xp ensures that appropriate contractual safeguards are in place to maintain the level of data protection described in this Policy, including standard contractual clauses or equivalent mechanisms where applicable.

By using the 77xp platform, you acknowledge that your personal data may be transferred to and processed in countries other than Pakistan, subject to the safeguards described above.

15. Changes to This Privacy Policy

77xp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via their registered mobile number or email address before the changes take effect.

The current version of this Privacy Policy will always be accessible at 77xp.app/privacy-policy with the effective date displayed prominently. Your continued use of the 77xp platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

16. Contact & Data Enquiries

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data, please contact the 77xp data team:

• Email: [email protected]
• Live Chat: Available 24/7 within the platform via your logged-in account dashboard.

We aim to acknowledge all written privacy enquiries within 24 hours and to provide a substantive response within 30 days. Complex data subject requests may require additional time; we will keep you informed of progress.