This Privacy Policy explains what personal data xy777 collects from players, how it is used, who it is shared with and what rights you hold over your information. We are committed to handling your data responsibly and transparently.
These cards highlight the core principles of xy777's approach to data privacy. They complement — but do not replace — the full policy text below.
xy777 collects only the personal data that is necessary to operate your account, verify your identity, process transactions and comply with applicable legal obligations. We do not collect data beyond what is required for these defined purposes.
xy777 does not sell, rent or trade your personal data to third parties for commercial purposes. Data may be shared with trusted service providers under strict contractual obligations, as described in Section 7 of this policy, but never sold as a commercial product.
All data transmitted between your device and the xy777 platform is protected by 256-bit SSL/TLS encryption. Stored data is secured using industry-standard encryption and access controls. Our security protocols are reviewed and updated regularly.
You have the right to access, correct, delete or restrict the processing of your personal data, subject to our legal obligations. You may also request data portability. Requests are handled by our support team within a reasonable timeframe and at no charge.
xy777 uses essential, functional and analytical cookies to operate and improve the platform. Tracking or advertising cookies are used only where permitted and disclosed. You may manage non-essential cookie preferences via your browser settings at any time.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods vary by data category and are detailed in Section 8 of this policy.
This Privacy Policy ("Policy") is issued by xy777 ("xy777", "we", "us", "our") and applies to all personal data collected, stored, processed or otherwise handled in connection with your use of the xy777 website at https://xy777.cam and all associated services, features and content offered thereon ("Platform").
xy777 is committed to protecting the privacy and security of all players who access the Platform. This Policy explains in plain, formal terms what personal data we collect from you, why we collect it, how it is used, with whom it may be shared, how long it is retained and what rights you hold regarding your own data.
By accessing the Platform, registering an account or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.
Note for Pakistani Players: xy777 does not claim that its data processing practices are regulated or approved by any Pakistani authority, including the PTA, State Bank of Pakistan or any provincial body. This Policy is issued under the laws of the jurisdiction in which xy777 operates. Pakistani players may have additional rights or obligations under local law. This Policy does not constitute legal advice.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
xy777 collects the following categories of personal data in connection with your use of the Platform:
xy777 collects personal data through the following means:
xy777 processes personal data only where a lawful basis for doing so exists. The applicable legal bases are as follows:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and operation | Performance of a contract (the account agreement between you and xy777) |
| Identity verification (KYC) | Legal obligation; performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering screening | Legal obligation |
| Fraud detection and prevention | Legitimate interest of xy777 and protection of players |
| Responsible gambling monitoring | Legal obligation; legitimate interest |
| Marketing communications | Consent (where obtained); legitimate interest |
| Platform analytics and improvement | Legitimate interest of xy777 |
| Compliance with legal proceedings | Legal obligation; vital interests |
xy777 uses the personal data we collect for the following purposes:
xy777 does not use your personal data to make fully automated decisions that have a legal or similarly significant effect on you without human oversight, except as necessary for fraud or AML screening where required by applicable obligations.
xy777 does not sell your personal data. We may share personal data with the following categories of third party only where necessary and under appropriate safeguards:
Third-party service providers engaged to assist in Platform operations, including KYC identity verification platforms, payment processing partners, cloud hosting providers, email delivery services and customer support software providers. All such providers are bound by data processing agreements requiring them to process your data only on xy777's documented instructions.
Payment method names familiar to Pakistani players — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced across the Platform as contextual references only. xy777 does not claim affiliation, endorsement or a data-sharing relationship with any of these providers for gambling services. Verify available payment methods in your account cashier.
xy777 may disclose personal data to competent regulatory authorities, law enforcement agencies or courts where required by applicable law, a valid legal order or to protect the rights, property or safety of xy777, its players or the public.
In the event of a merger, acquisition, restructuring or sale of all or part of xy777's business, personal data held at the time of such transaction may be transferred to the acquiring entity. Players will be notified of any material change to the Data Controller's identity.
xy777 participates in industry-standard fraud and AML prevention networks. Where permitted by applicable law, information about accounts or transactions linked to confirmed fraud may be shared with other operators or fraud prevention bodies to protect the wider player community.
xy777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal or regulatory obligations, or to resolve disputes and enforce our agreements. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal / regulatory obligation |
| KYC / identity documents | 5 years from account closure or last transaction | AML / legal obligation |
| Financial transaction records | 5 years from transaction date | Legal / regulatory obligation |
| Responsible gambling records | Duration of any active restriction + 5 years | Player protection obligation |
| Support communications | 3 years from last contact | Legitimate interest / dispute resolution |
| Marketing preferences | Until withdrawal of consent or account closure | Consent |
| Technical / log data | 12 months from collection | Legitimate interest / security |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures. Anonymised, aggregated data may be retained indefinitely for analytical and reporting purposes.
xy777 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, disclosure or alteration. Security measures in place include, but are not limited to:
While xy777 takes reasonable steps to protect your data, no internet-based system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your account login credentials. If you believe your account has been compromised, contact our support team immediately.
xy777 support staff will never ask you to share your password by email, chat or telephone. Do not disclose your password to anyone claiming to represent xy777.
xy777 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the Platform, remember your preferences and analyse usage patterns.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential / Strictly Necessary | Maintain your login session, enable navigation and operate core Platform functions. Without these, the Platform cannot function. | Yes |
| Functional / Preference | Remember your language preference, display settings and responsible gambling tool configurations. | No |
| Analytical / Performance | Collect aggregated, anonymised data on how players interact with the Platform to identify areas for improvement. xy777 uses privacy-respecting analytics tools. | No |
| Security | Help detect and prevent fraudulent login attempts and bot activity on the Platform. | Yes |
You may manage or disable non-essential cookies through your web browser settings. Note that disabling essential cookies may impair or prevent your use of the Platform. Most browsers provide guidance on cookie management in their help documentation. Clearing cookies will end your current session and may reset saved preferences.
Subject to applicable law and certain exceptions, you hold the following rights in relation to your personal data held by xy777. To exercise any of these rights, contact our support team at [email protected].
xy777 will respond to valid data rights requests within a reasonable period, typically within 30 days of receipt. We may request proof of your identity before processing a request to ensure data is not disclosed to unauthorised persons.
Some requests — particularly erasure requests — may be subject to limitations where xy777 is required by law to retain specific data, for example KYC records retained for AML compliance purposes. Where a request cannot be fulfilled in full, we will explain the reason clearly.
The xy777 Platform is strictly intended for adults aged 18 or over, or the higher minimum age required by the applicable operator or license jurisdiction. xy777 does not knowingly collect, process or retain personal data from individuals below the minimum eligible age.
Age verification is conducted as part of the account registration and KYC processes. If xy777 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be immediately closed. Any funds deposited by an underage player may be withheld pending investigation and returned to the originating payment source.
If you believe that an underage individual has registered on the Platform or submitted personal data to xy777, please report it to our support team immediately at [email protected].
xy777 operates globally and your personal data may be stored or processed in jurisdictions outside the country in which you are located, including jurisdictions that may have different data protection standards to those in your home country.
Where personal data is transferred to a third country or territory, xy777 takes appropriate safeguards to ensure that the transfer complies with applicable data protection requirements. Such safeguards may include standard contractual clauses, data processing agreements or transfers to jurisdictions recognised as providing an adequate level of data protection.
By using the Platform, you acknowledge and accept that your personal data may be processed in jurisdictions outside Pakistan. xy777 does not represent that such transfers are regulated or authorised by any Pakistani authority.
xy777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulation, business practices or Platform functionality. The date of the most recent revision is displayed at the top of this page.
Where amendments are material, xy777 will endeavour to notify registered players by email or by posting a prominent notice on the Platform prior to the revised Policy taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically to stay informed about how xy777 handles your personal data. If you disagree with any amendment, you may close your account by contacting our support team.
If you have any questions, concerns or requests relating to this Privacy Policy or xy777's handling of your personal data, please contact our Data Protection team using the details below. All written communications should be in English; Urdu-language assistance is available on request.
Data Protection Contact
xy777 Data Protection Team
We aim to acknowledge all data rights requests within 5 business days and to provide a full response within 30 days. For urgent security concerns — such as suspected unauthorised access to your account — contact support immediately for priority handling.
For responsible gambling queries, including self-exclusion requests, please visit the Responsible Gambling page or contact support directly. For general account and platform queries, the FAQ page addresses the most common questions from Pakistani players.
Now that you understand how xy777 handles your data, take a look at our Terms & Conditions and Responsible Gambling policy before creating your account. We believe informed players make better decisions.