xk777 Privacy Policy — How We Handle Your Data

This Privacy Policy ("Policy") describes how xk777 ("we", "us", "our") collects, uses, stores, shares and protects personal data obtained from users ("you", "your", "User") of the xk777 platform at https://xk777.cam (the "Platform"). This Policy forms part of the xk777 Terms and Conditions and should be read alongside them.

xk777 is an English-language online gaming information platform built for Pakistani users. We are committed to protecting the privacy and personal data of everyone who accesses the Platform, including users from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other cities and regions across Pakistan.

By accessing or using the Platform, registering an account or submitting any personal data to xk777, you acknowledge that you have read, understood and agree to the terms of this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, CNIC number, date of birth, financial account details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, disclosure, use and deletion.
• "Data Controller" means xk777, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of xk777 under a data processing agreement, such as payment processors or identity verification services.
• "KYC" means Know Your Customer — the identity verification process conducted to confirm a User's identity before withdrawal processing and for anti-money-laundering compliance purposes.
• "Cookies" means small text files placed on a User's device by the Platform to facilitate session management, analytics and personalisation features.
• "Special Category Data" means sensitive personal data warranting enhanced protection, including health or medical information (for example, responsible gambling self-disclosure), financial vulnerability indicators and government identification numbers.

xk777 collects the following categories of personal data, limited to what is reasonably necessary for the purposes described in this Policy:

xk777 does not intentionally collect special category data beyond responsible gambling self-disclosure information, which is necessary to administer the safety tools described in the Platform's Responsible Gambling section.

xk777 collects personal data through the following channels:

• Direct Submission: Data you actively provide during account registration, KYC document upload, support enquiries and responsible gambling tool activation.
• Automated Technical Collection: Technical and behavioural data collected automatically when you access the Platform, including IP addresses, session data and page interaction data via server logs and cookies.
• Third-Party Identity Verification: Where required by KYC compliance obligations, identity data may be verified by an authorised third-party verification service acting as a Data Processor under contract with xk777.
• Payment Processors: Transaction reference data is received from payment processing partners when you make deposits or request withdrawals. Payment-method references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are used for transaction matching only. These providers do not endorse xk777 and are not responsible for how xk777 handles data received from their systems.

xk777 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining and securing your xk777 account, authenticating your identity at login and managing your account settings and preferences.
• KYC & Compliance: Verifying your identity, age and eligibility to use the Platform in accordance with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations.
• Transaction Processing: Processing deposits and withdrawals in PKR, reconciling transaction records and investigating disputed transactions.
• Platform Delivery: Providing access to games, sports betting markets, live dealer content and all other features of the Platform.
• Responsible Gambling: Administering deposit limits, loss limits, session timers, cool-off periods and self-exclusion tools activated by you or applied by xk777 in accordance with its responsible gambling obligations.
• Customer Support: Responding to your queries, resolving complaints and maintaining records of support interactions for quality and compliance purposes.
• Platform Security & Fraud Prevention: Detecting, investigating and preventing fraudulent activity, collusion, account compromise and other prohibited conduct as defined in the Terms and Conditions.
• Analytics & Improvement: Analysing aggregated, anonymised behavioural data to improve Platform features, user experience and content relevance for Pakistani users.
• Legal Obligations: Complying with applicable legal obligations, responding to lawful requests from competent authorities and enforcing our Terms and Conditions.

xk777 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and xk777 — including account management, transaction processing and Platform delivery — is based on the contractual relationship established when you register an account and agree to the Terms and Conditions.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML compliance and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for the legitimate interests of xk777, including fraud prevention, Platform security, analytics and responsible gambling programme administration, where such interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — for example, optional analytics cookies or marketing communications — you may withdraw that consent at any time by contacting the support team or adjusting your browser cookie settings. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.

xk777 shares personal data with third parties only to the extent strictly necessary for the purposes described in this Policy. The categories of third parties with whom data may be shared are as follows:

• Payment Processors: Transaction data is shared with payment processing partners to facilitate PKR deposits and withdrawals. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah as familiar Pakistani payment channels are context only and do not imply data-sharing relationships with all named providers.
• Identity Verification Providers: KYC document data is shared with authorised third-party identity verification services acting under data processing agreements with xk777.
• Technology & Infrastructure Providers: Cloud hosting, database management and cybersecurity providers who access data only as necessary to deliver contracted services and under binding confidentiality obligations.
• Game Content & Sports Data Providers: Aggregate, anonymised session and game usage data may be shared with content providers for licensing compliance purposes. Individual user identity data is not shared with game studios or sports data providers.
• Legal & Regulatory Bodies: Where required by law, court order or lawful request from a competent authority, xk777 may disclose personal data. Such disclosures will be limited to what is required by the applicable legal obligation.

xk777 does not share personal data with third parties for those parties' own marketing purposes and does not engage in the sale of personal data in any form.

xk777 operates internationally and may process or store personal data in jurisdictions outside Pakistan. Where personal data is transferred to a country that does not provide a level of data protection equivalent to the applicable standards, xk777 implements appropriate safeguards, which may include:

• Standard contractual data protection clauses incorporated into agreements with Data Processors;
• Binding corporate rules where applicable to affiliated entities;
• Compliance with any adequacy decisions or equivalent legal mechanisms applicable to the transfer.

For further information about the specific safeguards applied to international data transfers involving your personal data, please contact the xk777 support team via the details provided in the Contact Us section of this Policy.

xk777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, dispute resolution and enforcement obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status plus any applicable post-closure retention period required by law or regulation.
• KYC & Identity Documents: Retained for a minimum period as required by applicable AML regulations following account closure. Specific retention periods depend on the operator's license jurisdiction requirements.
• Transaction Records: Financial transaction records including PKR deposit and withdrawal data are retained for the period required by applicable financial record-keeping obligations.
• Support Communications: Customer support interaction records are typically retained for up to 5 years following the interaction for quality assurance and dispute resolution purposes.
• Technical & Log Data: Server log and session data is typically retained for up to 12 months unless required for longer periods for fraud investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised or pseudonymised in accordance with xk777's data deletion procedures.

xk777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session. These cookies cannot be disabled without impacting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how Users interact with the Platform — including pages visited, session duration and error events — to help us improve the user experience. These cookies may be disabled through your browser settings.
• Functional Cookies: Used to remember your preferences such as language settings, last-visited game category and account display options, so the Platform delivers a more personalised experience for Pakistani users.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic and suspicious session patterns. These are essential for Platform security and cannot be disabled.

You may manage cookie preferences for non-essential categories through your web browser settings. Most browsers allow you to refuse, delete or be notified before cookies are placed. Note that disabling certain cookies may affect Platform functionality. xk777 does not use third-party advertising cookies or cross-site tracking networks.

Subject to applicable law and any legal obligations that may require xk777 to retain certain data, you have the following rights with respect to your personal data:

To exercise any of these rights, contact the xk777 support team via Live Chat or the Help Center. We aim to respond to all data rights requests within 30 calendar days. In complex cases this period may be extended by a further 60 days, in which case we will notify you. Note that some rights may be limited where xk777 has overriding legal obligations to retain data.

The xk777 Platform is strictly for adults aged 18 or older — or the higher minimum age required by the operator's license jurisdiction. xk777 does not knowingly collect personal data from any person under the applicable minimum age.

If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to xk777 without your knowledge, please contact our support team immediately via Live Chat or the Help Center email address. Upon verification, xk777 will promptly close the account, delete associated personal data and return any real-money deposits to the source where technically possible.

xk777 implements industry-standard technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the xk777 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on xk777 servers is encrypted using appropriate encryption standards.
• Access Controls: Access to personal data within xk777's internal systems is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication for system administrators.
• Intrusion Detection: Automated intrusion detection and prevention systems monitor the Platform infrastructure for anomalous activity and potential security threats.
• Incident Response: xk777 maintains a data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and relevant authorities as required by applicable law.

While xk777 takes reasonable precautions to protect your personal data, no security system is impenetrable. You are responsible for maintaining the security of your own account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

xk777 reserves the right to amend, update or replace this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. Where amendments are material, we will endeavour to provide reasonable notice to registered users via the email address associated with their account or through a prominent notice on the Platform.

The "Last Updated" date at the top of this page reflects the most recent revision. We recommend reviewing this Privacy Policy periodically to stay informed of how xk777 handles your personal data. Continued use of the Platform following notification of any amendments constitutes your acceptance of the revised Policy.

If you have concerns about any amendment to this Policy, please contact the support team before continuing to use the Platform.

For any queries, concerns, complaints or data rights requests relating to this Privacy Policy or how xk777 processes your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through your account dashboard. This is the fastest route to reach our support team for urgent data privacy concerns.
• Help Center: Accessible from the Platform's main navigation. Contains articles and guided workflows for submitting data rights requests.
• Email (plain text — not a clickable link): [email protected]

When submitting a data rights request, please provide your full registered name, account email address and a clear description of your request so that we can verify your identity and respond efficiently. xk777 will not process data rights requests submitted by unverified third parties on behalf of a registered user without appropriate authorisation documentation.

xk777 supports users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All privacy support communications are handled in English, with Urdu assistance available for users who prefer it.