Privacy Policy — How 777xp1 Handles Your Data

This Privacy Policy ("Policy") sets out how 777xp1 ("777xp1", "the Platform", "we", "us", "our") collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who register for and use the 777xp1 online gaming and sports betting platform, including all associated websites, mobile applications and services (collectively, "the Services").

777xp1 is an internationally operated platform. We are committed to handling your personal data with care, transparency and in accordance with the data protection obligations applicable under our operating jurisdiction. This Policy reflects our intent to be fully transparent about our data practices so that you can make informed decisions about your use of our Services.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform. By registering an account or using our Services, you acknowledge that you have read and understood this Privacy Policy in full.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, financial information, device identifiers and behavioural data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller" means 777xp1, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of 777xp1, under our documented instruction.
• "KYC" means Know Your Customer — the identity and age verification process required for regulatory compliance and withdrawal processing.
• "Cookies" means small text files stored on your device by a website to remember preferences, session state and analytical data.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including government-issued identification numbers, financial account details and data relating to health or vulnerability indicators relevant to responsible gambling.
• "Anonymisation" means the irreversible transformation of personal data such that the individual can no longer be identified, directly or indirectly.

777xp1 collects personal data in the following categories, depending on how you interact with our platform:

When you create an account, we collect your full legal name, date of birth, residential address, email address, phone number and chosen username. This information is required to open your account and verify your eligibility to use the Services.

To comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations, we collect copies of government-issued identity documents. For users based in Pakistan, this typically includes your National Identity Card (CNIC), passport or driving licence, along with proof of address documentation such as a recent utility bill or bank statement.

We collect records of all deposits, withdrawals, bets placed, winnings and refunds processed through your account. We also collect information about the payment method(s) you use — such as account reference identifiers associated with payment channels you initiate — sufficient to process and reconcile transactions. We do not store full card numbers or bank account credentials on our servers.

We automatically collect data about how you use our platform, including pages visited, games and markets accessed, session duration, bet history, device type, operating system, browser type, IP address and approximate geographic location (derived from IP). This data helps us improve platform performance, personalise your experience and monitor for unusual activity patterns relevant to responsible gambling and fraud prevention.

When you contact our support team via Live Chat or email, we retain records of those communications, including the content, timestamps and resolution outcomes. This helps us maintain quality standards and resolve any follow-up queries efficiently.

Where you set deposit limits, loss limits, session reminders or request self-exclusion, we record these preferences and the dates on which they were applied or modified. This data is treated with heightened sensitivity and is used exclusively to enforce the responsible gambling measures you have requested.

777xp1 uses your personal data only for the purposes described below. We do not use your data for purposes that are incompatible with those originally stated at the time of collection.

• Account Management: To create, maintain and administer your registered account, including authentication and account recovery.
• Identity Verification: To verify your age and identity as required by KYC obligations before processing withdrawals or where suspicious activity is flagged.
• Payment Processing: To process deposits and withdrawals through the payment channels you initiate, and to reconcile transaction records.
• Service Delivery: To provide access to sports betting markets — including PSL, T20 internationals, ICC cricket events and other sports — live casino, slots and all other platform features.
• Fraud Prevention and AML: To monitor account activity for signs of fraud, money laundering, match-fixing or other prohibited conduct, and to report suspicious activity to relevant authorities where legally required.
• Responsible Gambling Compliance: To enforce the deposit, loss and time limits you set, manage cooling-off periods and self-exclusion requests, and monitor betting patterns for indicators of problem gambling.
• Customer Support: To respond to your queries, complaints and feedback via Live Chat and email.
• Platform Improvement: To analyse aggregate usage trends, fix bugs and optimise the platform experience for mobile and desktop users across Pakistan and other markets.
• Legal and Regulatory Compliance: To fulfil obligations imposed by applicable law, licensing conditions, court orders or requests from competent authorities.
• Marketing Communications: Where you have given explicit consent, to send promotional offers, bonus alerts and platform updates. You may withdraw marketing consent at any time through your account settings or by contacting support.

Where data protection law requires us to identify a legal basis for processing your personal data, we rely on the following grounds:

• Contractual Necessity: Processing required to perform our contract with you, including account management, payment processing and service delivery.
• Legal Obligation: Processing necessary to comply with applicable law, including KYC/AML obligations, regulatory reporting and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of 777xp1's legitimate interests — such as fraud prevention, platform security and service improvement — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific and informed consent — primarily for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

777xp1 does not sell, rent or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary and under appropriate data protection safeguards:

We engage third-party service providers to assist with platform operations, including payment processing technology providers, identity verification and KYC services, cloud hosting infrastructure, customer support tooling and analytics platforms. All such providers are bound by data processing agreements that restrict their use of your data to the specific service they provide on our behalf.

We may disclose personal data to competent regulatory bodies, law enforcement agencies or courts where we are legally required to do so, or where disclosure is necessary to prevent or report suspected fraud, money laundering, terrorist financing or other serious criminal activity.

In the event of a merger, acquisition, restructuring or sale of all or part of 777xp1's business, personal data held by us may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is processed as a result.

We may share your data with additional third parties where you have provided explicit prior consent to a specific sharing arrangement. You may withdraw such consent at any time by contacting our support team.

777xp1 is an internationally operated platform. As a result, your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not have the same level of data protection legislation as Pakistan or the operator's primary licensing jurisdiction.

Where international transfers of personal data occur, we implement appropriate safeguards to ensure that your data continues to receive a level of protection consistent with applicable data protection standards. These safeguards may include standard contractual clauses, binding corporate rules or other approved transfer mechanisms.

By using the Services, you acknowledge that your personal data may be transferred, stored and processed internationally as described in this section.

777xp1 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account's active status and for a defined period following account closure, as required by AML and licensing obligations — typically a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• KYC Documentation: Identity verification documents are retained for the period required by applicable AML regulations, generally a minimum of five (5) years following the end of the customer relationship.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years for regulatory audit purposes.
• Communications Data: Support communications are retained for up to two (2) years following resolution, unless required for longer in connection with an open complaint or legal proceeding.
• Marketing Data: Where consent to marketing has been withdrawn, your data will be removed from active marketing lists within a reasonable timeframe, typically within thirty (30) days of the withdrawal request.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your preferences, maintain your session and collect analytical data about how the site is used. Similar technologies include pixel tags, web beacons and local storage objects.

777xp1 uses the following categories of cookies on the platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, odds format and display options. Disabling these will not prevent access but may reduce your platform experience.
• Analytical Cookies: Collect anonymised or aggregated data about how users navigate the platform — page views, session duration, most-visited sections — to help us improve performance and content relevance.
• Marketing Cookies: Used, where consent has been given, to deliver promotional content relevant to your interests and to measure the effectiveness of our marketing campaigns.

You can manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Please be aware that blocking strictly necessary cookies may impair your ability to log in or use core platform features. Refer to your specific browser's help documentation for guidance on cookie management.

Subject to applicable law and any overriding legal obligations on our part (such as AML retention requirements), you have the following rights in respect of your personal data held by 777xp1:

To exercise any of the above rights, please contact our support team via Live Chat or email at [email protected]. We may require you to verify your identity before we can act on your request. We will respond within thirty (30) days and will notify you if an extension is required.

The 777xp1 platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect personal data from individuals below the applicable minimum age. Age verification checks are conducted as part of the registration and KYC process to enforce this requirement.

If we become aware that personal data has been collected from a minor without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

777xp1 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls that restrict internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures to detect, contain and notify affected users of any data breach in a timely manner, in accordance with applicable legal obligations.
• Two-factor authentication (2FA) availability for registered user accounts to reduce the risk of unauthorised access.

Despite these measures, no system is entirely immune to security risks. We encourage you to use a strong, unique password for your 777xp1 account and to enable 2FA where available. If you suspect unauthorised access to your account, contact our support team immediately.

777xp1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform features. When material changes are made, we will notify registered users via email or through a prominent notice on the platform prior to the changes taking effect.

The "Last Reviewed" date at the top of this page will be updated with each revision. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Services following any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns or requests relating to this Privacy Policy or the way 777xp1 handles your personal data, please get in touch with our support team through the following channels:

• Live Chat: Available 24/7 directly through the platform. English support is available at all times; Urdu assistance is available on request.
• Email: [email protected] — please allow 24–48 hours for a response. When raising a data rights request by email, please include your registered account username and a description of your request to help us process it efficiently.