Privacy Policy — xf777

This Privacy Policy ("Policy") is issued by xf777 ("xf777", "we", "us", "our") and applies to all personal data collected through the xf777 website at https://xf777.org, the xf777 mobile application, and all associated services including the online casino, sportsbook, payment facilities, customer support channels, and promotional communications (collectively, the "Platform").

xf777 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need, retain it only for as long as necessary, and maintain appropriate technical and organisational safeguards to protect it at all times.

This Policy should be read alongside the xf777 Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the Platform. By registering an account with xf777 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

xf777 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the categories of data we collect and their primary purposes:

We do not collect sensitive personal data such as biometric data, health information, or political or religious affiliations, except where explicitly required by applicable law or regulatory obligation and with your prior informed consent.

xf777 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when completing the registration form, updating your account profile, submitting identity verification documents, or contacting our support team.
• Transactional Activity: Data generated automatically when you make deposits, withdrawals, or place bets through the Platform, including transaction references from JazzCash, EasyPaisa, bank transfers, and USDT TRC20 networks.
• Automated Technical Collection: Data collected automatically by our servers and analytics systems as you browse and interact with the Platform, including IP addresses, device identifiers, session duration, and page interaction logs.
• Cookies and Similar Technologies: Data collected via browser cookies, local storage, and similar tracking mechanisms as described in Section 11 of this Policy.
• Third-Party Verification Services: Data received from identity verification and anti-fraud service providers that we engage to assist with KYC and AML compliance obligations.
• Payment Processors: Confirmation data and transaction references returned by our integrated payment partners upon completion of deposit or withdrawal requests.

xf777 uses your personal data for the following specific purposes. We process personal data only where we have a valid legal basis for doing so, as described in Section 5:

• Account Management: Creating, maintaining, and administering your xf777 player account, including processing login requests, account updates, and password resets.
• Identity and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity as required by our KYC procedures. Age verification is a non-negotiable prerequisite for any active account on the Platform.
• Payment Processing: Processing your deposit and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 in a secure, accurate, and timely manner.
• Service Delivery: Operating the sports betting, casino, live dealer, and instant game features of the Platform and ensuring that game outcomes, bet settlements, and bonus applications are recorded and delivered correctly.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for suspicious patterns, conducting enhanced due diligence where required, and maintaining records as mandated by applicable financial regulations.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problematic gambling behaviour, applying deposit and loss limits you have set, enforcing self-exclusion requests, and reaching out to players who may benefit from responsible gaming support.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Customer Support: Responding to support queries, resolving disputes, and maintaining a record of communications for quality assurance and training purposes.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw your marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to inform product development, feature enhancements, and user experience improvements.
• Legal Compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from regulatory and law enforcement authorities.

xf777 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered Member — including account management, payment processing, bet settlement, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and xf777.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC, AML, age verification, and record-keeping obligations — is carried out on the basis that it is required by law.
• Legitimate Interests: Processing carried out for fraud prevention, security monitoring, responsible gaming oversight, and platform optimisation is based on xf777's legitimate interests in operating a secure, compliant, and responsible gaming platform, where those interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and for the use of non-essential cookies is based on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

xf777 does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: We share the payment data necessary to process your transactions with our integrated payment partners including JazzCash, EasyPaisa, SadaPay, HBL, UBL, and Meezan Bank. These providers are contractually bound to use your data only for the purpose of processing your transaction and are prohibited from using it for any other purpose.
• Identity Verification and KYC Providers: We engage regulated third-party KYC and identity verification service providers to assist with document verification, age checks, and AML screening. These providers process data strictly in accordance with their own data protection obligations and our data processing agreements with them.
• Game Content Suppliers: Where xf777 incorporates games and live dealer content from third-party software providers, minimal technical data (such as session tokens and game round identifiers) may be shared with those providers for the purpose of delivering game content. No personally identifiable data beyond what is strictly necessary is shared with game suppliers.
• Legal and Regulatory Authorities: xf777 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or in response to a lawful request. Where permitted, we will notify you of such a disclosure.
• Group Companies: xf777 may share data within its corporate group for internal administrative, compliance, and risk management purposes. All group companies are bound by data protection standards consistent with this Policy.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of xf777's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the applicable privacy terms before your data is transferred and becomes subject to a different privacy policy.

All third parties with whom we share personal data are required to maintain appropriate security standards and to process personal data only for the specified and agreed purpose.

xf777 supports cryptocurrency deposits and withdrawals via the USDT TRC20 network. Players who use crypto payment methods should be aware of the following specific privacy considerations applicable to blockchain transactions:

• Public Blockchain Transparency: All transactions on the TRON (TRC20) blockchain are publicly recorded on an immutable, distributed ledger. While your personal identity is not inherently attached to a blockchain address, the transaction history associated with any wallet address you use to transact with xf777 is permanently visible on the public blockchain.
• Wallet Address Records: xf777 maintains records of the USDT TRC20 wallet addresses you use for deposits and withdrawals as part of our KYC and AML record-keeping obligations. These records are retained for the periods specified in Section 8.
• On-Chain Analytics: xf777 may use blockchain analytics tools to verify the source of crypto funds deposited into the Platform and to screen for addresses associated with known illicit activity, as part of our AML compliance programme.
• Irreversibility of Transactions: xf777 cannot reverse, recall, or modify a blockchain transaction once it has been broadcast and confirmed. Users are advised to double-check wallet addresses before initiating any crypto transfer.

xf777 retains personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following general retention periods apply:

Where personal data is no longer required for any valid purpose, xf777 will securely delete or irreversibly anonymise it. Anonymised, aggregated data derived from your personal data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

In the event that a regulatory investigation, legal dispute, or law enforcement request is ongoing at the time a retention period expires, the relevant data will be preserved until the matter is fully resolved.

xf777 employs a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to:

• TLS Encryption: All data transmitted between your device and the xf777 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher) protocols.
• Data Encryption at Rest: Sensitive personal data stored on xf777's servers — including identity documents and payment references — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. xf777 staff are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Two-Factor Authentication: xf777 offers and encourages two-factor authentication (2FA) for all player accounts to prevent unauthorised account access.
• Intrusion Detection: xf777 operates automated intrusion detection and monitoring systems that flag and alert on anomalous activity patterns in real time.
• Security Testing: xf777 conducts periodic vulnerability assessments and penetration tests on its Platform infrastructure to identify and remediate security weaknesses proactively.
• Staff Training: All xf777 staff who handle personal data receive regular data protection and security awareness training as part of their role responsibilities.

xf777 respects your rights over your personal data. Depending on your jurisdiction and the nature of the processing, you may be entitled to exercise the following rights:

• Right of Access: You may request a copy of the personal data xf777 holds about you, along with information about how and why it is being processed. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Many data fields can be updated directly from your account settings.
• Right to Erasure: In certain circumstances, you may request that xf777 delete your personal data. Note that this right is not absolute — we may be required to retain certain data to comply with legal and regulatory obligations, and the right to erasure does not apply to data we are required by law to keep.
• Right to Restrict Processing: You may request that xf777 restrict the processing of your personal data in specific circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. xf777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the xf777 support team at [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request. We will respond within 30 calendar days and will notify you promptly if an extension of time is required.

xf777 uses cookies and similar technologies on its Platform for the following purposes:

• Essential Cookies: Required for the core functionality of the Platform, including maintaining your login session, remembering your language and currency preferences, and ensuring secure navigation between pages. These cookies cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, including which pages are visited most frequently and how long users spend on each section. This data helps us improve the Platform experience. These cookies require your consent.
• Functional Cookies: Used to remember preferences and settings you have configured, such as your preferred game lobby layout or notification settings. These cookies enhance your experience but are not strictly essential. They require your consent.
• Analytics Cookies: Used to track usage patterns across the Platform in order to understand player behaviour at an aggregate level and inform product development decisions. These cookies require your consent.

On your first visit to the xf777 Platform, you will be presented with a cookie consent notice allowing you to accept or customise your cookie preferences. You may update your cookie preferences at any time via the cookie settings accessible from the footer of the Platform. Withdrawing consent for non-essential cookies will not affect your ability to use the core functions of the Platform.

Please note that disabling certain categories of cookies may impair the performance or personalisation features of the Platform.

xf777 operates a strict 21+ age policy. The Platform is not intended for, and must not be accessed by, any person under the age of 21. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the xf777 registration process, and accounts cannot be fully activated without successful age confirmation.

If xf777 becomes aware or has reasonable grounds to suspect that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated account, reverse any transactions where possible, and securely delete the personal data collected, subject to any applicable legal retention obligations.

If you believe a person under the age of 21 has accessed the xf777 Platform, please notify our support team immediately at [email protected]. We take such reports seriously and will act on them promptly.

We also recommend that households with minors make use of parental control software to restrict access to online gambling platforms as a precautionary measure.

xf777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or Platform features. When we make material changes to this Policy — meaning changes that significantly affect your rights or the way we handle your personal data — we will notify you in advance via email to your registered address and/or via an on-Platform notification.

Non-material changes such as typographical corrections, formatting updates, or minor clarifications may take effect immediately upon publication without advance notice. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision.

We encourage you to review this Policy periodically. Your continued use of the Platform after any updated version of this Policy has taken effect will be taken as your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and close your account in accordance with the procedure described in the xf777 Terms and Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way xf777 handles your personal data, please contact us via the following channels:

• General Privacy Enquiries: [email protected] — subject line: "Privacy Enquiry"
• Data Rights Requests: [email protected] — subject line: "Data Rights Request"
• Urgent Security Concerns: [email protected] — subject line: "Security Concern — Urgent"
• Live Chat: Available 24/7 directly within your logged-in xf777 account dashboard.

xf777 takes all privacy complaints seriously. We aim to acknowledge receipt of any complaint within 3 business days and to provide a substantive response within 30 calendar days. Where a matter is complex or requires additional investigation, we will notify you of the expected timeline for resolution.