xy777 ("we", "us", "our", "the Company") operates the online gaming platform available at xy777.ws (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, visitors, and prospective customers in Pakistan and internationally.
This Privacy Policy ("Policy") describes how xy777 collects, uses, stores, shares, and protects your personal data. It also sets out your rights in relation to that data and how you may exercise them. This Policy applies to all personal data processed by xy777 in connection with the Platform and any associated services.
This Policy should be read alongside xy777's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and xy777. By registering for an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.
Scope: This Policy covers data processed through xy777.ws and the xy777 mobile application. It does not cover third-party websites or services that may be linked from the Platform. xy777 has no control over and accepts no responsibility for the privacy practices of any third-party site.
xy777 collects the following categories of personal data, depending on your level of engagement with the Platform:
| Category |
Examples |
When Collected |
| Identity Data |
Full name, date of birth, CNIC / passport number, photograph |
Registration & KYC verification |
| Contact Data |
Email address, mobile number, city of residence (e.g., Karachi, Lahore, Islamabad) |
Registration |
| Financial Data |
JazzCash / EasyPaisa wallet ID, bank account reference, USDT wallet address, transaction history |
Deposit & withdrawal processing |
| Technical Data |
IP address, device type, browser, operating system, session duration, login timestamps |
Automatically on Platform use |
| Usage Data |
Games played, bets placed, wagering history, pages visited, feature interactions |
Automatically during Platform use |
| Communications Data |
Support chat transcripts, emails sent to xy777, survey responses |
Customer support & feedback |
| Marketing Preferences |
Consent records, opt-in/opt-out status for promotional communications |
Registration & account settings |
xy777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where disclosure of health-related information is voluntarily made in the context of a responsible gaming self-exclusion request, in which case it is processed solely for the purpose of applying the requested restriction.
xy777 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or respond to surveys.
- Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you browse and interact with the Platform. See Section 7 for full details on cookies.
- From third parties — including identity verification providers, payment processors (such as JazzCash and EasyPaisa payment networks), fraud prevention agencies, and, where permitted, publicly available databases for the purpose of verifying your identity or detecting fraudulent activity.
- From game providers — xy777's third-party slot and live casino game providers may transmit session data (such as game round IDs and bet outcomes) to xy777 for settlement, dispute resolution, and responsible gaming monitoring purposes.
Accuracy: It is your responsibility to ensure that the personal data you provide to xy777 is accurate and kept up to date. If your contact details, payment information, or identity documents change, please update your account promptly or notify us at
[email protected].
xy777 processes your personal data for the following specific purposes:
- Account creation and management — to register your player account, verify your identity, and maintain your account in accordance with our Terms & Conditions.
- Transaction processing — to process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records.
- Regulatory compliance and KYC — to fulfil our obligations under our international gaming licence, including Know Your Customer (KYC) checks, anti-money-laundering (AML) screening, and age verification (21+ requirement).
- Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, and misuse of the Platform.
- Responsible gaming — to monitor betting patterns, apply self-exclusion restrictions, enforce deposit limits, and identify players who may be exhibiting signs of problem gambling.
- Customer support — to respond to your enquiries, process complaints, and provide technical assistance.
- Platform improvement — to analyse aggregated usage data, identify bugs, improve the user experience, and develop new features.
- Marketing communications — where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about new games or platform features. You may withdraw consent at any time.
- Legal obligations — to comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our legal rights.
No Unnecessary Processing: xy777 does not use your personal data for any purpose incompatible with those listed above. If we intend to use your data for a materially new purpose, we will notify you and, where required, obtain your consent before doing so.
xy777 processes personal data on the following legal grounds, depending on the activity involved:
- Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions, including account management, transaction processing, and customer support.
- Legal obligation — processing required to comply with applicable laws and our gaming licence conditions, including KYC, AML, and age verification obligations.
- Legitimate interests — processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your fundamental rights and freedoms.
- Consent — processing for direct marketing communications and the use of non-essential cookies, which relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
xy777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:
- Identity verification providers — third-party KYC and AML screening services that assist xy777 in verifying player identities and screening against sanctions lists.
- Payment processors — payment networks including JazzCash, EasyPaisa, and affiliated banking institutions (HBL, UBL, Meezan Bank, SadaPay) that process your financial transactions.
- Game content providers — licensed slot and live casino game studios whose products are integrated into the xy777 Platform, to the extent necessary for game operation and dispute resolution.
- Technology and infrastructure providers — hosting, cloud, and cybersecurity vendors that support the operation of the xy777 Platform, all of whom are contractually bound to handle data only on our instructions.
- Fraud prevention agencies — industry bodies and fraud detection services that maintain shared databases of known fraudulent actors in the online gaming industry.
- Regulatory and law enforcement authorities — where we are legally required to disclose data by our gaming licence conditions, by court order, or by lawful request from a competent authority.
- Professional advisors — legal counsel, auditors, and insurers, under duties of confidentiality, in connection with the operation and protection of xy777's business.
No Unauthorised Disclosure: Any third party that receives personal data from xy777 is required by contract to maintain appropriate security measures and to use the data solely for the stated purpose. xy777 does not authorise third parties to use your data for their own marketing purposes.
xy777 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate the Platform, enhance your experience, and gather analytical data. The following categories of cookies are used:
- Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled as they are integral to Platform operation.
- Functional cookies — used to remember your preferences, such as language settings, interface preferences, and responsible gaming tool configurations, to personalise your experience.
- Analytical cookies — used by xy777 and trusted analytics partners to understand how players interact with the Platform, identify usability issues, and improve content. Data collected is aggregated and not used to identify individual users.
- Marketing cookies — used, subject to your consent, to deliver relevant promotional content about xy777 offers. xy777 does not use third-party advertising networks for cross-site tracking.
On your first visit to the Platform, you will be presented with a cookie consent notice. You may manage your cookie preferences at any time through the Cookie Settings option in the Platform footer or your browser's built-in privacy controls. Please note that disabling strictly necessary cookies will impair Platform functionality.
xy777 employs a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- TLS 1.2 or higher encryption for all data in transit between your device and the xy777 Platform
- AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
- Multi-factor authentication requirements for player account login and internal administrative access
- Role-based access controls ensuring that only authorised xy777 personnel with a legitimate business need can access personal data
- Regular penetration testing and vulnerability assessments of the Platform infrastructure
- Incident response procedures, including notification protocols in the event of a data breach that poses a risk to affected individuals
While xy777 takes all reasonable precautions, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your xy777 account, enable two-factor authentication where available, and never share your login credentials with any third party. If you suspect unauthorised access to your account, contact [email protected] immediately.
xy777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:
- Account and identity data — retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in accordance with anti-money-laundering regulatory requirements.
- Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, as required by financial record-keeping obligations under our international gaming licence.
- Customer support communications — retained for three (3) years from the date of the last communication, to support dispute resolution and service improvement.
- Technical and usage data (logs) — retained for up to twelve (12) months, after which logs are anonymised or deleted.
- Marketing consent records — retained for the duration of your consent and for three (3) years thereafter, to evidence compliance with consent obligations.
- Self-exclusion records — retained indefinitely or for the period specified in the applicable responsible gaming programme, to prevent a self-excluded player from being re-admitted to the Platform in error.
Anonymisation: Where personal data is no longer required but may be useful for statistical or analytical purposes, xy777 will anonymise the data so that it can no longer be used to identify any individual. Anonymised data is not subject to this Privacy Policy.
As a data subject, you have the following rights in relation to your personal data held by xy777. These rights are subject to certain legal limitations and exceptions, which will be communicated to you if applicable when you submit a request.
- Right of access — you may request a copy of the personal data xy777 holds about you, along with information about how it is used.
- Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to erasure ("right to be forgotten") — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
- Right to restriction of processing — you may request that xy777 limit the processing of your personal data in certain circumstances, such as while a dispute about accuracy is pending.
- Right to data portability — you may request that xy777 provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
- Right to object — you may object to the processing of your personal data on grounds of legitimate interests, including profiling for direct marketing purposes.
- Right to withdraw consent — where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". xy777 will respond within thirty (30) days of receipt. We may need to verify your identity before processing your request.
No Fees: xy777 does not charge a fee for processing data rights requests, unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
The xy777 Platform is strictly intended for individuals aged 21 years and above. xy777 does not knowingly collect, store, or process personal data belonging to any person under the age of 21.
As part of our registration process and ongoing KYC obligations, xy777 actively verifies the age of all players. Any account found to belong to an individual under the age of 21 will be immediately suspended, all data associated with that account will be securely deleted (except where retention is required for regulatory compliance), and any deposited funds will be returned to the original payment source.
Report Underage Access: If you are a parent or guardian and believe that a minor has registered on the xy777 Platform, please contact us immediately at
[email protected]. We take such reports very seriously and will investigate and act without delay.
xy777 operates under an international gaming licence, and certain aspects of our Platform infrastructure, including hosting, fraud detection, and game provider integrations, may involve the transfer of personal data to servers or processors located outside Pakistan.
Where personal data is transferred internationally, xy777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include:
- Data processing agreements incorporating standard contractual clauses recognised by the applicable licensing authority
- Transfers only to jurisdictions that are assessed by xy777 as providing an adequate level of data protection in the context of gaming operations
- Encryption of all data in transit across international connections
If you have questions about the specific safeguards applied to any particular transfer of your personal data, you may contact us at [email protected] to request further information.
xy777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, our gaming licence conditions, operational practices, or the services we offer. Any material changes to this Policy will be communicated to registered players via email or via a prominent notice on the Platform prior to the changes taking effect.
The effective date at the top of this Policy will be updated each time a new version is published. We encourage you to review this Policy periodically to stay informed about how xy777 is protecting your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.
Version History: Previous versions of this Privacy Policy are available on request by contacting
[email protected]. The current version supersedes all prior versions.
If you have any questions, concerns, or complaints about this Privacy Policy or about the way xy777 handles your personal data, please contact us using the details below. We are committed to resolving privacy concerns fairly and promptly.
- Privacy Enquiries Email: [email protected] (subject line: "Privacy Enquiry")
- Data Rights Requests: [email protected] (subject line: "Privacy Rights Request")
- Response Time: We aim to acknowledge all privacy-related communications within 5 business days and to provide a substantive response within 30 days.
- Support Hours: 24 hours a day, 7 days a week
If you are not satisfied with our response to your privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the dispute resolution mechanism provided under xy777's international gaming licence. Details of the applicable licensing authority's complaint process are available on request.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all previously published versions.