Privacy Policy — 777xp6

§01 Introduction

This Privacy Policy (hereinafter "Policy") is issued by 777xp6 (hereinafter "the Platform", "we", "us" or "our") and applies to all personal data collected from individuals (hereinafter "User", "you" or "Data Subject") who access, browse or register an account on the 777xp6 website at https://777xp6.cam and any associated services, applications or communications.

777xp6 is an English-language online gaming information and entertainment platform serving Pakistani users and other eligible audiences. We take data privacy seriously. This Policy sets out the categories of personal data we collect, the purposes for which it is processed, the legal grounds on which processing is based, and the rights available to Data Subjects in relation to their personal information.

By accessing the Platform, completing the registration process or otherwise providing personal data to us, you acknowledge that you have read this Policy in full and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

§02 Definitions

The following terms carry the meanings defined below throughout this Policy:

§03 Data We Collect

777xp6 collects personal data across the following categories:

3.1 Registration Data

• Full legal name as it appears on government-issued identification.
• Date of birth (for age verification purposes).
• Email address and/or mobile phone number.
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and postcode where applicable.
• Username and encrypted password credential.
• Country of residence and nationality.

3.2 KYC & Verification Data

• Pakistani CNIC (Computerised National Identity Card) — front and back.
• Passport or alternative government-issued identity document (where CNIC is unavailable).
• Proof of residential address: utility bill, bank statement or equivalent document dated within three (3) months.
• Selfie photograph and/or liveness check video for facial verification.
• Payment method documentation: bank statement, digital wallet screenshot or card image to confirm account ownership.

3.3 Financial Transaction Data

• Deposit amounts, dates, payment method identifiers and transaction reference numbers.
• Withdrawal requests, amounts, destination account details and processing status.
• Betting history including stake amounts, game selections, odds and outcomes.
• Balance history and bonus redemption records.

3.4 Technical & Usage Data

• IP address and geolocation data derived therefrom.
• Device type, operating system, browser type and version.
• Session timestamps, pages visited, features accessed and in-platform navigation patterns.
• Referral source (where applicable) and marketing campaign interaction data.

3.5 Communications Data

• Support ticket content, live chat transcripts and email correspondence with the Platform's support team.
• Survey responses and voluntary feedback submitted through the Platform.

§04 How We Collect Data

Personal data is collected through the following means:

• Directly from you: During account registration, KYC submission, payment processing, support communications and any voluntary information you provide while using the Platform.
• Automatically: Through cookies, pixel tags, server logs and similar technologies that record technical and usage data as you interact with the Platform.
• From third parties: Identity verification service providers, fraud prevention databases, payment processors and analytics partners may share data with us where required to fulfil our legal and compliance obligations.
• From publicly available sources: Where relevant to AML/KYC obligations, we may cross-reference data against publicly available sanction lists, politically exposed persons (PEP) databases or adverse media sources.

§05 Data Processing & Purpose

We process personal data only for legitimate, specified purposes. The table below summarises the primary processing activities and their corresponding purposes:

§06 Legal Basis for Processing

We rely on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to perform the agreement between 777xp6 and the User (e.g., account management, payment processing, bet settlement).
• Legal Obligation: Processing necessary to comply with applicable AML, KYC, fraud prevention and licensing requirements imposed on the Platform operator.
• Legitimate Interests: Processing necessary for the Platform's legitimate interests in security, fraud prevention, platform improvement and responsible gambling monitoring, where such interests are not overridden by the User's fundamental rights.
• Consent: Processing based on the User's specific, freely given and revocable consent — most commonly applicable to direct marketing communications. Consent may be withdrawn at any time by contacting support, without affecting the lawfulness of prior processing.

§07 Data Sharing & Disclosure

777xp6 does not sell, rent or otherwise commercially transfer personal data to third-party marketers. We may share personal data with selected third parties only in the following circumstances:

• Identity Verification Providers: Third-party KYC service providers who process CNIC/passport data and liveness checks on our behalf under strict data processing agreements.
• Payment Processors: Financial intermediaries required to execute deposit and withdrawal transactions. Note: payment brand names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as familiar Pakistani payment methods only — 777xp6 makes no claim of formal partnership with any of these providers.
• Fraud Prevention Services: Third-party databases and screening services used to detect and prevent financial crime, account fraud and bonus abuse.
• Analytics Providers: Service providers who process anonymised or aggregated usage data to support Platform performance analysis and improvement. Such data does not identify individual Users.
• Legal & Regulatory Authorities: Where required by a valid court order, regulatory direction, statutory obligation or law enforcement request, we may disclose personal data to the relevant authority.
• Business Successors: In the event of a merger, acquisition or sale of the Platform's business assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

§08 Data Retention

Personal data is retained for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Retained for the duration of the User's account and for a minimum period following account closure as required by the Platform's licensing obligations and applicable AML legislation.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, or longer where required by regulatory mandate. KYC retention obligations are non-negotiable under AML compliance frameworks.
• Transaction Records: Financial records including deposits, withdrawals and betting history are retained for a minimum of five (5) years to satisfy licensing and AML reporting requirements.
• Marketing Consent Records: Consent records are retained for as long as they are needed to demonstrate compliance, even where underlying marketing communications have ceased.
• Support Communications: Retained for a reasonable period to support ongoing or future account-related queries, typically up to two (2) years from last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with the Platform's data disposal protocols.

§09 Cookies & Tracking Technologies

The 777xp6 Platform uses cookies and similar tracking technologies to support core Platform functionality and analytics. The following cookie categories may be in use:

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, authentication and basic security features. They cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Users interact with the Platform — pages visited, session durations and error occurrences — to support Platform improvement initiatives.
• Functional Cookies: Remember User preferences such as language settings, display preferences and previously entered data to improve the continuity of the user experience.
• Targeting & Marketing Cookies: Used, where consent is provided, to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These may be placed by third-party analytics tools.

Users may manage cookie preferences through their browser settings. Please note that disabling certain cookie categories may affect the functionality of some Platform features. Strictly necessary cookies cannot be opted out of without affecting core Platform operation.

§10 Data Security

777xp6 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Security measures include:

• End-to-end HTTPS encryption for all data transmitted between Users' devices and the Platform's servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. Passwords are never stored in plain text.
• Access controls restricting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and monitoring for unauthorised access attempts or anomalous activity.
• Secure document handling protocols for KYC materials, with submission only through the operator's official verified HTTPS portal.

Whilst we employ robust security measures, no data transmission over the internet or storage system can be guaranteed as completely secure. Users are responsible for maintaining the confidentiality of their own login credentials and for notifying us immediately of any suspected unauthorised account access.

§11 Your Rights

As a Data Subject, you hold the following rights in relation to your personal data processed by 777xp6. These rights are subject to applicable legal limitations and the Platform's legitimate processing requirements:

To exercise any of the above rights, please contact the 777xp6 data team using the contact details in Section 16 of this Policy. We will respond to all valid requests within a reasonable timeframe, and in any event within the statutory period applicable under the governing data protection framework.

§12 Minors & Age Protection

The 777xp6 Platform is strictly intended for adults aged 18 years or older, or such higher minimum age as required by the operator's licensing jurisdiction. The Platform does not knowingly collect personal data from individuals below the minimum age threshold.

Where we discover or have reasonable grounds to suspect that an Account has been registered by a minor, we will immediately suspend the Account, initiate verification procedures and, if the suspicion is confirmed, close the Account and delete any associated personal data, save where retention is required by law.

Parents and guardians are encouraged to implement parental controls and monitoring tools on devices accessible to minors. The Platform cannot be responsible for minors who access the Platform using a parent's or guardian's account credentials. Account holders are responsible for maintaining the security and confidentiality of their login details.

§13 Pakistan-Specific Privacy Context

Pakistani users should be aware of the following context relevant to the collection and processing of their personal data:

• CNIC Data: Where a Pakistani CNIC is submitted for KYC verification, it is processed exclusively for identity and age verification purposes, using secure third-party verification services operating under strict data processing agreements. CNIC data is not used for any other purpose without your specific consent.
• Payment Method References: Pakistani payment method names — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear in transaction records where relevant to your deposit or withdrawal activity. These references reflect transaction history only. 777xp6 is not affiliated with, endorsed by or partnered with any of these providers, and their inclusion in records does not imply any relationship beyond the User's own transaction activity.
• Data Transfers: Personal data may be transferred to and processed in jurisdictions outside Pakistan where the Platform operator and its service providers are based. Such transfers occur under appropriate safeguards to ensure equivalent protection to that required by the governing data protection framework.
• No Government Affiliation: 777xp6 is not affiliated with the Government of Pakistan, PTA, State Bank of Pakistan, any provincial authority or any Pakistani financial institution. Data collected by the Platform is not shared with Pakistani government bodies except where required by a valid legal obligation or court order.

§14 Third-Party Links

The 777xp6 Platform is designed as a closed information environment. Where links to other websites or services appear, they are limited to the Platform's own internal pages and menu structure. However, third-party service integrations — such as payment processors, verification providers and analytics tools — may operate under their own privacy policies.

777xp6 accepts no responsibility for the privacy practices of third-party providers accessed in connection with the Platform. Users should review the privacy policies of any third-party service they interact with directly.

§15 Policy Amendments

777xp6 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality or data processing practices. Where material changes are made, we will provide advance notice through an on-site notification and/or an email to the address registered on the User's account.

The effective date at the top of this Policy will be updated upon each revision. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised terms, you must cease using the Platform and may request account closure.

§16 Contact Us

For any questions, requests or concerns relating to this Privacy Policy, data access requests, correction requests, objections to processing or consent withdrawals, please contact the 777xp6 support team using the details below.

Data enquiries email (plain text — not a link):
[email protected]

Support is available in English. Urdu-language assistance may be offered on request. Data-related requests will be acknowledged promptly and handled within the applicable statutory response window. Please include your registered account email and a clear description of your request when contacting us.