This Privacy Policy explains in full how xz777 collects, uses, stores, shares, and protects the personal data of players and visitors who interact with the xz777 platform at xz777.vu. At xz777, we believe that transparent data practices are fundamental to a trustworthy gaming platform — particularly for Pakistani players who entrust us with sensitive personal and financial information. This document is a binding commitment about how we handle that trust.
These are the core data protection commitments built into how xz777 operates. Full legal detail follows in the policy sections below.
Every data transmission between your device and xz777 is protected by 256-bit SSL/TLS encryption. This covers login sessions, deposit flows, personal data submission, and all account communications — your data in transit is never readable by third parties.
xz777 does not sell, rent, or commercially trade your personal data to third parties for marketing purposes. Data sharing is limited to essential service providers — payment processors, identity verification labs, and regulatory authorities — under strict contractual data protection obligations.
xz777 collects only the personal data genuinely required for platform operation, identity verification, payment processing, legal compliance, and responsible gaming enforcement. We do not collect data speculatively or beyond what each specific function requires.
All xz777 player data is stored on encrypted servers with access restricted to authorised personnel on a need-to-know basis. Database access is logged, monitored, and subject to regular third-party security audits. Payment card data is never stored directly by xz777.
You have the right to access, correct, export, and request deletion of your xz777 personal data. These rights are exercisable by contacting xz777 support directly. Requests are processed within 30 days with a written outcome provided to your registered contact details.
All xz777 marketing communications — SMS, email, and in-platform notifications — include a clear and functional opt-out mechanism. Opt-out requests are processed within 48 hours. Self-excluded users are automatically removed from all marketing lists with immediate effect.
1.1 This Privacy Policy ("Policy") describes how xz777 ("xz777", "we", "us", or "our") collects, processes, stores, uses, shares, and protects personal data in connection with your use of the xz777 online gaming platform accessible at xz777.vu and any related mobile applications, customer support channels, or communications you engage in with xz777.
1.2 This Policy applies to all individuals who interact with xz777, including registered account holders, persons who browse xz777.vu without registering, and individuals who contact xz777 customer support. It applies regardless of the device or method used to access the xz777 platform.
1.3 By registering an account on xz777, by making a deposit, or by continuing to use xz777 after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
1.4 This Policy should be read in conjunction with xz777's Terms and Conditions and any other applicable product-specific terms. In the event of any conflict between this Policy and the Terms and Conditions on matters of data privacy, this Policy shall prevail.
1.5 This Policy does not apply to any third-party websites, services, or applications that may be linked from or integrated into the xz777 platform, including third-party payment processors and game providers. xz777 encourages users to review the privacy policies of those third parties independently.
2.1 For the purposes of applicable data protection law, the data controller in respect of personal data collected through the xz777 platform is the legal entity operating xz777 under its international gaming licence.
2.2 All data protection enquiries, access requests, correction requests, deletion requests, and objections should be directed to xz777 using the contact details set out in Section 17 of this Policy.
2.3 xz777 is committed to ensuring that the personal data it holds is processed lawfully, fairly, and transparently; collected for specified, explicit, and legitimate purposes; limited to what is necessary in relation to those purposes; accurate and kept up to date; retained no longer than necessary; and protected by appropriate technical and organisational security measures.
xz777 collects the following categories of personal data from users of the xz777 platform:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality, CNIC scan or photograph | Registration & KYC verification |
| Contact Data | Registered mobile number, email address (where provided) | Registration |
| Financial Data | JazzCash / EasyPaisa account reference, bank account name (no full card/account numbers stored), transaction history, deposit amounts, withdrawal amounts | Deposits & withdrawals |
| Gaming Activity Data | Bet history, game session logs, win/loss records, bonus usage, stake sizes, game preferences | Ongoing platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, session timestamps, login history | Automatically on platform access |
| Communications Data | Customer support chat transcripts, support email content, complaint records, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion status and duration, session time reminders, loss limit settings, reality check records | When responsible gaming tools are activated or modified |
3.1 Sensitive Data. xz777 collects CNIC information, which constitutes a form of government-issued identity document. This data is treated with enhanced security measures and is accessed only by authorised personnel performing identity and age verification functions. xz777 does not collect health data, biometric data beyond CNIC photograph comparison, or religious/political information.
3.2 Data Minimisation. xz777 applies a data minimisation principle to all collection activities. Only data genuinely necessary for the stated purpose is requested. Optional data fields that do not affect platform access or service quality are clearly marked as optional at the point of collection.
xz777 collects personal data through the following channels and mechanisms:
5.1 xz777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:
5.2 Where xz777 relies on legitimate interests as a processing basis, xz777 has conducted a balancing assessment to confirm that the legitimate interest is genuine, that the processing is necessary to achieve it, and that the impact on User privacy rights is proportionate and does not override those rights.
xz777 uses the personal data it collects for the following purposes:
7.1 Payment Processors. xz777 shares necessary transaction data with its approved payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers — for the purpose of executing deposits and withdrawals. These processors receive only the data required to complete the specific transaction and are contractually prohibited from using that data for any other purpose.
7.2 Identity Verification Providers. xz777 uses third-party KYC and identity verification service providers to confirm CNIC authenticity and age eligibility. These providers receive identity document data under strict confidentiality agreements and are authorised only to perform the verification function and return the outcome to xz777.
7.3 Technology Infrastructure Providers. xz777's platform is built on cloud infrastructure and technology service providers whose systems process personal data as a function of providing the underlying hosting and infrastructure services. These providers are bound by data processing agreements that restrict their use of personal data to infrastructure service provision only.
7.4 Game Content Providers. Third-party game providers whose games are available on the xz777 platform — such as Evolution, Pragmatic Play, and Spribe — may receive limited session and stake data required for their game engines to function. This data does not include CNIC information, full financial data, or detailed personal profile data.
7.5 Regulatory and Law Enforcement Authorities. xz777 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by a lawful regulatory order, or where xz777 is legally obligated to report under its gaming licence conditions (e.g., AML reporting obligations).
7.6 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of the xz777 business or its assets, personal data held by xz777 may be transferred to the acquirer as part of that transaction. Users will be notified of any such transfer and any consequent change to data controller identity.
7.7 No Further Sharing. Beyond the categories described above, xz777 does not share, disclose, or transfer personal data to any third party without your prior explicit consent.
8.1 What are cookies? Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, to remember your preferences, and to provide website operators with information about how the site is being used.
8.2 Cookies xz777 uses: The xz777 platform uses the following categories of cookies:
8.3 Managing cookies. You can control and delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the xz777 platform from functioning correctly — in particular, you will not be able to maintain a logged-in session. Disabling analytics or preference cookies will not affect platform access but may reduce the quality of your user experience.
8.4 xz777 does not use third-party advertising cookies or cross-site tracking cookies that follow your activity across websites outside of xz777.vu.
9.1 xz777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:
9.2 Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual.
10.1 xz777 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
10.2 User Responsibility. The security of your xz777 account also depends on your own actions. You are responsible for keeping your login credentials confidential, using a strong and unique password for your xz777 account, logging out of xz777 on shared devices, and reporting any suspected unauthorised access to xz777 support immediately.
10.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xz777 will notify you without undue delay via your registered mobile number or email address, and will notify the relevant regulatory authority where required by law.
As a User of the xz777 platform, you have the following rights in respect of your personal data:
You have the right to request a copy of the personal data xz777 holds about you, together with information about how it is being used. xz777 will provide this within 30 days of a verified request.
You have the right to request correction of any inaccurate or incomplete personal data xz777 holds about you. Minor corrections (such as name spelling) can be processed via customer support. CNIC-related corrections may require document re-submission.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that data subject to legal retention obligations (AML records, regulatory records) cannot be deleted before the applicable retention period has elapsed.
You may request that xz777 restrict processing of your personal data in specific circumstances — for example, while accuracy of data is disputed, or where you have objected to processing pending determination of that objection.
Where processing is based on consent or contractual necessity, you may request a structured, machine-readable export of the personal data you have provided to xz777. This export will be provided in a common format within 30 days.
You have the right to object to xz777 processing your personal data on the basis of legitimate interests — including profiling — at any time. xz777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, contact xz777 at [email protected] with the subject line "Data Rights Request". Identity verification will be required before processing rights requests to prevent unauthorised access to account data.
12.1 xz777 may send you promotional communications — including bonus offers, special promotions, platform updates, and event announcements — via SMS to your registered mobile number and via email where provided, subject to your consent.
12.2 Opt-In. Marketing communications are only sent to Users who have opted in to receive them, either during account registration or through subsequent account settings. xz777 does not send unsolicited marketing messages.
12.3 Opt-Out. You may opt out of marketing communications from xz777 at any time by: replying STOP to any marketing SMS received from xz777; using the unsubscribe link in any marketing email; or updating your communication preferences in your xz777 account settings. Opt-out requests are processed within 48 hours.
12.4 Self-Exclusion and Marketing. Users who activate self-exclusion on xz777 are automatically and immediately removed from all marketing communication lists. xz777 will not send any promotional communications to a self-excluded user for the duration of their self-exclusion period.
12.5 Transactional communications — including deposit confirmations, withdrawal notifications, identity verification requests, and account security alerts — are not marketing communications and will continue to be sent regardless of marketing opt-out status, as they are necessary for the operation of your xz777 account.
13.1 The xz777 platform implements mandatory CNIC-based age verification at the point of account registration to prevent underage access. xz777 may conduct additional age verification checks at any point during the account lifetime without prior notice.
13.2 If you are a parent or guardian and believe your child has created an account on xz777, please contact xz777 customer support immediately at [email protected]. xz777 will investigate the report within 48 hours, close the account if confirmed, delete all associated personal data, and report the incident to the relevant regulatory authority where required.
13.3 xz777 does not direct any marketing communications, platform features, or promotional content towards persons under the age of 21. All xz777 advertising and promotional material carries clear 21+ age restriction labelling.
14.1 As an internationally licensed gaming platform, xz777 operates infrastructure and engages service providers across multiple jurisdictions. Personal data collected from Pakistani users may therefore be transferred to and processed in countries outside Pakistan, including the country in which xz777's gaming licence is held and countries in which xz777's technology infrastructure providers operate.
14.2 Where personal data is transferred internationally, xz777 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. These safeguards include contractual data protection clauses binding the recipient to use the data only for the purpose for which it was transferred and to apply equivalent security measures.
14.3 By using the xz777 platform, you consent to the international transfer of your personal data as described in this section, subject to the safeguards described herein.
15.1 The xz777 platform integrates third-party services including game content providers, payment processors, and identity verification providers. These third parties operate under their own privacy policies and data practices. xz777 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed on them by xz777.
15.2 The xz777 platform does not contain links to external third-party websites beyond those necessary for payment processing and game content delivery. xz777 does not control and is not responsible for the content or privacy practices of any external website that a user may independently navigate to after leaving xz777.vu.
15.3 xz777 conducts due diligence on all third-party service providers before engagement to confirm that they maintain data protection standards consistent with xz777's obligations under this Policy and applicable law.
16.1 xz777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, xz777's data processing practices, or other operational changes. The effective date at the top of this Policy indicates when the current version came into force.
16.2 Where changes to this Policy are material — meaning they significantly affect how xz777 processes your personal data or the rights available to you — xz777 will notify registered Users via SMS to their registered mobile number at least 7 days before the changes take effect, where reasonably practicable.
16.3 The most current version of this Privacy Policy is always available at xz777.vu/privacy-policy. We encourage you to review this Policy periodically to stay informed about how xz777 protects your data. Continued use of the xz777 platform following notification of material changes constitutes acceptance of the revised Policy.
16.4 Where any update to this Policy requires your fresh consent for a processing activity previously based on consent, xz777 will seek that consent through an appropriate in-platform prompt before commencing the updated processing activity.
17.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data xz777 holds about you, please contact xz777 using the details below. xz777 will acknowledge all data-related enquiries within 48 hours and provide a substantive response within 30 days.
Email: [email protected]
Live Chat: Available 24/7 via xz777.vu
Support Hours: 24 hours / 7 days a week, Pakistani-English speaking team
17.2 When submitting a data rights request, please include your registered mobile number and a clear description of your request in the subject line. xz777 will require identity verification before processing any request to access, correct, or delete personal data, to prevent unauthorised third-party access to your account information.
17.3 If you are not satisfied with xz777's response to your data protection concern, you have the right to escalate the matter to the relevant data protection supervisory authority or to the regulatory authority under whose jurisdiction xz777's gaming licence is held.
If you have questions about how xz777 handles your personal data, our 24/7 Pakistani-English support team is ready to assist. You can also explore our full Terms & Conditions or learn about responsible gaming tools available on the xz777 platform.