77xp Privacy Policy

This Privacy Policy applies to the 77xp online gaming and sports betting platform, accessible at https://77xp.pro and all associated subdomains, mobile interfaces, and applications (collectively referred to as "the Platform", "77xp", "we", "us", or "our").

77xp operates as an internationally licensed online gaming platform serving players across Pakistan, including in Karachi, Lahore, Islamabad, Faisalabad, and other cities. We are committed to handling the personal data of all registered players and platform visitors in a lawful, fair, and transparent manner consistent with internationally recognised data protection principles.

By registering an account on 77xp, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, please do not use the Platform.

77xp collects personal data that falls into the following categories. We only collect what is genuinely necessary to provide the services described in this Policy.

77xp collects personal data through the following means:

• Direct submission: Information you actively provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or filling in any form on the Platform.
• Automated technical collection: Data collected automatically as you interact with the Platform, including through cookies, web beacons, server log files, and similar tracking technologies. This includes your IP address, session data, and device identifiers. See Section 7 for full details on cookies.
• Third-party sources: Data received from identity verification providers (used for KYC), payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast), fraud prevention services, and responsible gaming databases (such as self-exclusion registers) where you have provided appropriate consent or where 77xp is required to check such registers by its licensing obligations.
• Public sources: In limited circumstances related to fraud prevention, 77xp may cross-reference information against publicly available records, such as sanction lists or court records, where required under applicable law or licensing conditions.

77xp processes your personal data only for defined, legitimate purposes. The table below sets out each processing purpose alongside the category of data used and the legal basis on which we rely:

For each processing activity described in this Privacy Policy, 77xp relies on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 77xp — i.e., to operate your account, process transactions, and deliver the gaming services you have registered for. Without this processing, 77xp cannot provide the Platform to you.
• Legal obligation: Processing required for 77xp to comply with applicable law, including gaming licensing requirements, anti-money-laundering (AML) obligations, and know-your-customer (KYC) regulations. This processing cannot be refused or restricted by you as it is mandated by law.
• Legitimate interests: Processing that 77xp has determined serves a legitimate business interest that is not overridden by your data protection rights. This includes fraud detection, platform security, abuse prevention, and internal analytics used to improve service quality. When relying on this basis, 77xp has conducted a balancing assessment to confirm the processing is proportionate and does not unduly impact your rights.
• Consent: Processing for which 77xp has obtained your explicit, freely given, informed consent — most notably for marketing communications and for the use of non-essential cookies. Where consent is the basis for processing, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

77xp does not sell your personal data to any third party. We share your data only in the specific and limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast receive the financial and identity data strictly necessary to process your deposit and withdrawal transactions in PKR. These providers operate under their own privacy policies and regulatory obligations.
• KYC and identity verification providers: Third-party verification services receive your identity documents and biometric data (where applicable) for the purpose of age and identity verification. These providers are contractually bound to process your data only for this purpose.
• Fraud prevention and AML screening services: We share data with specialist screening providers to check transactions and account activity against known fraud patterns, sanctions lists, and anti-money-laundering databases. This processing is a legal obligation under our gaming licence.
• Technology and infrastructure providers: Cloud hosting, content delivery, and platform software providers may have incidental access to personal data held on 77xp's systems. All such providers are required to sign data processing agreements that restrict their use of your data to the purposes for which it is shared.
• Regulatory and law enforcement authorities: 77xp will disclose personal data to gaming regulators, financial intelligence units, or law enforcement bodies where required to do so by law, court order, or valid regulatory demand. Where legally permitted, we will notify you of such a disclosure.
• Responsible gaming registers: Where required under our licensing obligations, 77xp checks player details against national or industry self-exclusion registers. Data shared for this purpose is handled under strict confidentiality obligations.

77xp uses cookies and similar tracking technologies to operate the Platform, maintain session security, analyse usage patterns, and (where you have consented) personalise your experience. The following categories of cookies are used:

You may manage your cookie preferences at any time by accessing the Cookie Settings panel available in the footer of the 77xp website. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform. Disabling strictly necessary cookies will prevent you from using the Platform altogether.

77xp retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Active account data (identity, contact, gaming activity, financial records): Retained for the full duration of your account being open and active on the Platform.
• KYC documents and identity verification records: Retained for a minimum of five (5) years from the date of your last transaction, as required under applicable anti-money-laundering regulations. This retention period applies even after account closure.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations under our gaming licence.
• Responsible gaming records (self-exclusion, limits, cooling-off history): Retained for a minimum of five (5) years to ensure that self-exclusion obligations can be enforced and to support responsible gaming compliance audits.
• Customer support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service quality improvement.
• Marketing consent records: Retained for as long as your consent remains active, plus three (3) years thereafter as evidence of the consent obtained.
• Technical / server log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Where data is no longer required for the purposes stated above and no legal obligation requires its continued retention, 77xp will securely delete or anonymise the data in a manner that prevents reconstruction.

77xp employs a multi-layered security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• TLS/SSL encryption on all data transmissions between your browser or app and 77xp's servers;
• AES-256 encryption at rest for all personally identifiable information and financial records stored in our databases;
• Strict access controls ensuring that 77xp staff can only access personal data on a need-to-know basis, with all access logged and audited;
• Two-factor authentication (2FA) available to all players and mandatory for all internal administrative accounts;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Automated fraud detection systems that flag and investigate anomalous account activity in real time;
• Incident response procedures that ensure prompt detection, containment, and notification of any personal data breach in accordance with applicable regulatory requirements.

As a data subject, you hold the following rights in respect of your personal data processed by 77xp. These rights may be exercised by contacting our support team through the channels set out in Section 14:

• Right of Access: You may request a copy of all personal data that 77xp holds about you. We will provide this information within five (5) business days of receiving a verified request.
• Right to Rectification: If any personal data held by 77xp is inaccurate or incomplete, you have the right to request that it be corrected. Most account details can be updated directly from your account profile; others require a support request.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to overriding legal obligations — for example, 77xp cannot delete KYC and financial records that must be retained under anti-money-laundering law. Where erasure is not fully possible, we will delete all data that can lawfully be removed and explain what must be retained and why.
• Right to Restriction of Processing: In certain circumstances (e.g. where you contest the accuracy of data, or where processing is unlawful but you prefer restriction over deletion), you may request that 77xp restricts the processing of your data while the relevant issue is resolved.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided directly to 77xp (such as account registration data and transaction history) for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on legitimate interests (including profiling for fraud prevention) or for direct marketing purposes at any time. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The 77xp platform is strictly intended for adults aged 21 years and over. 77xp does not knowingly collect personal data from any person under the age of 21. This is not merely a policy preference — it is a legal obligation under 77xp's gaming licence and a core responsible gaming commitment.

As part of the account registration and KYC process, 77xp requires all players to confirm their age and to provide government-issued identity documentation (such as a CNIC) to verify that they meet the minimum age requirement. Accounts found to belong to persons under the age of 21 will be closed immediately upon discovery, all deposits will be returned to the original payment method, and any winnings accrued will be forfeited.

Parents and guardians are encouraged to use parental control software to restrict access to online gaming platforms on devices used by minors. 77xp supports all efforts to keep gambling products away from young people.

77xp's infrastructure is hosted on servers located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than the country in which you reside. This includes the jurisdiction in which 77xp holds its international gaming licence, as well as the locations of our cloud infrastructure and third-party service providers.

When transferring your data internationally, 77xp ensures that an adequate level of protection is maintained through one or more of the following mechanisms:

• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by an applicable regulatory authority;
• Standard contractual clauses or equivalent contractual protections incorporated into agreements with data processors located in other jurisdictions;
• Binding corporate rules or other approved transfer mechanisms where applicable.

If you would like further information about the safeguards applied to your data when it is transferred internationally, please contact the 77xp support team using the details in Section 14.

77xp may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to how we communicate our privacy commitments to you.

When material changes are made to this Policy, 77xp will notify registered players by displaying a notice within the Platform and updating the "Last Updated" date shown at the top of this page. We may also, at our discretion, send a notification to the email address associated with your account where we consider the change to be sufficiently significant to warrant direct communication.

Minor amendments, such as typographical corrections or clarifications that do not alter the substance of how your data is processed, may be made without specific notice beyond the update to the effective date. Your continued use of the 77xp Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and may request closure of your account in accordance with the procedures set out in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 77xp's handling of your personal data, please reach out to our dedicated data protection support team. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• Email: [email protected]
• Live Chat: Available 24/7 from within the Platform after logging in to your 77xp account
• Response Time: We aim to respond to all privacy-related enquiries within two (2) business days, and to all formal data rights requests within five (5) business days.

When contacting us about a data rights request, please include your registered email address and a brief description of your request so that we can verify your identity and process your enquiry efficiently. 77xp takes all privacy enquiries seriously and will never penalise a player for exercising their data rights.