At xh777, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal information we collect from players across Pakistan, how we use it, who we share it with, and the rights you hold over your own data. We believe in plain-language transparency, so we have written this policy to be as clear and straightforward as possible.
Six core commitments that define how xh777 handles your personal information every single day.
All data stored and transmitted on xh777 is protected by 256-bit SSL encryption. Our servers are hosted in secure, access-controlled data centres with round-the-clock monitoring and regular independent security audits.
xh777 does not sell, rent, or trade your personal information to third-party marketers or advertisers under any circumstances. Your data exists to improve your gaming experience — full stop.
We tell you clearly what data we collect, why we collect it, and how long we keep it. No hidden clauses, no buried fine print. If our practices change materially, we will notify you directly before those changes take effect.
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to [email protected] and our team will respond within 30 days in line with internationally recognised data protection standards.
xh777 uses only essential cookies required to keep your session active and functional cookies that improve site performance. We do not deploy third-party advertising cookies or behavioural tracking pixels without your explicit consent.
Our data practices are aligned with GDPR principles and international gaming licensing standards. We carry out regular internal reviews to ensure ongoing compliance as regulations evolve, particularly as they apply to our Pakistani player base.
xh777 ("we", "us", "our", "the Company") operates the online gaming platform accessible at xh777.org. xh777 is Pakistan's premier online casino and sports betting destination, serving players across Karachi, Lahore, Faisalabad, Islamabad, and beyond with a full suite of casino games, live dealer tables, and sports betting markets including PSL cricket.
For the purposes of this Privacy Policy, xh777 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. This policy applies to all personal data collected from registered members, website visitors, and prospective players who interact with xh777.org or any associated communication channels including live chat and email.
If you have questions about how we handle your data or wish to exercise any of your data rights, our dedicated privacy contact is reachable at [email protected].
xh777 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. We collect only what we genuinely need — no more. The categories of personal data we may collect include:
We collect personal data through the following channels and interactions:
The majority of your data is provided directly by you when you: register an account on xh777.org; complete the KYC identity verification process; make a deposit or request a withdrawal; contact our support team via live chat or email; respond to a promotion or survey; or update your account settings and preferences.
When you visit and use xh777.org, certain technical data is collected automatically by our servers and analytics tools. This includes your IP address, browser details, device information, and on-site behaviour such as which game categories you browse and how long your sessions last. This data helps us maintain platform security, optimise performance, and detect fraudulent access attempts.
In certain circumstances, we may receive data about you from trusted third parties, including:
xh777 processes your personal data for specific, legitimate purposes. We do not use your data for anything beyond what is described below:
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your xh777 player account, authenticating your identity at login, and managing your account preferences. |
| KYC & Age Verification | Verifying that you are at least 21 years of age and that your identity matches the information on file, as required by our licensing obligations. |
| Payment Processing | Facilitating PKR deposits via JazzCash, EasyPaisa, and bank transfers, and processing your withdrawal requests securely. |
| Platform Security | Detecting and preventing fraud, multi-accounting, bonus abuse, money laundering, and unauthorised access to player accounts. |
| Customer Support | Responding to your queries, complaints, and support requests via live chat and email in a timely and accurate manner. |
| Responsible Gaming | Monitoring gaming patterns to identify at-risk behaviour, honouring self-exclusion requests, and applying deposit or loss limits you have set. |
| Legal Compliance | Meeting our obligations under applicable gaming regulations, anti-money laundering (AML) laws, and responding to lawful requests from regulatory or law enforcement authorities. |
| Service Improvement | Analysing aggregated, anonymised usage data to improve the xh777 platform, optimise game selection, and enhance the overall player experience. |
| Marketing (with consent) | Sending you promotional offers, bonus announcements, and news about xh777 via email or SMS — only where you have opted in and only until you opt out. |
xh777 processes your personal data on the following legal grounds, in line with internationally recognised data protection principles:
xh777 does not sell your personal data. We share data only in the following carefully controlled circumstances:
We engage trusted third-party service providers who process data on our behalf under binding data processing agreements. These include: payment processors (JazzCash, EasyPaisa, and banking partners); identity and age verification services; fraud detection and cybersecurity providers; cloud infrastructure and hosting providers; and customer support software operators. All service providers are contractually required to process data only as instructed by xh777 and to maintain appropriate security standards.
xh777 integrates games from licensed third-party game studios. When you play a third-party game on our platform, the game provider may receive technical session data (such as your anonymised player ID, bet amounts, and game outcomes) necessary to operate the game and verify RTP compliance. These providers do not receive your name, CNIC, or financial details.
xh777 will disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or binding regulatory direction. We will inform you of such disclosure where we are legally permitted to do so.
In the event of a merger, acquisition, or sale of substantially all of xh777's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to the way your data is handled as a result.
xh777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | 5 years after account closure | AML and gaming regulatory requirements |
| Transaction records | 5 years after transaction date | Financial audit and AML compliance |
| KYC documents | 5 years after account closure | Regulatory identity record-keeping |
| Betting & gaming logs | 3 years after activity date | Dispute resolution and RTP auditing |
| Support communications | 2 years after resolution | Quality assurance and dispute records |
| Marketing preferences | Until opt-out + 1 year | Consent record compliance |
| Self-exclusion records | Permanently | Responsible gaming obligations |
After the applicable retention period expires, your personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.
Cookies are small text files placed on your device when you visit a website. They serve a variety of functions — from keeping you logged in between page visits to helping us understand how players use the platform so we can improve it.
You can control cookie settings through your browser preferences at any time. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will impair your ability to use xh777.org. For guidance on managing cookies in your specific browser, refer to your browser's built-in help documentation.
xh777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:
Despite these measures, no online system is completely immune to security risks. In the unlikely event of a data breach that poses a significant risk to your rights and freedoms, xh777 will notify affected members and relevant authorities within 72 hours of becoming aware of the breach, in line with applicable notification requirements.
xh777 respects your data rights and makes it straightforward to exercise them. Depending on applicable law and the circumstances of your request, you may hold the following rights in relation to your personal data:
To exercise any of these rights, submit your request to [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing sensitive requests. We will respond within 30 days; complex requests may require an extension of up to a further 60 days, and we will notify you if this is the case.
xh777 operates a strict 21+ age policy. Our services are not directed at, and are not intended for use by, individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age.
During the registration and KYC process, we take active steps to verify the age of every new member. Where we have reason to believe that a registered account belongs to a person under 21, we will immediately suspend the account, void all gameplay, and return any real-money deposits to the originating payment source. Any bonus funds associated with the account will be forfeited.
If you are a parent or guardian and believe that a minor in your care has registered an account or accessed xh777, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.
xh777 is operated under international gaming licensing standards. As a result, your personal data may be transferred to, stored, or processed in countries outside Pakistan where our servers, service providers, or game software partners are located.
Where such transfers occur, xh777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include: contractual clauses requiring the recipient to apply equivalent data protection standards; the use of service providers based in jurisdictions recognised as providing adequate data protection; or binding corporate rules in the case of intra-group transfers.
If you wish to obtain further information about the specific safeguards in place for any particular international data transfer, please contact us at [email protected] .
xh777.org may contain links to third-party websites or services — for example, links to game providers' information pages or payment platform help centres. This Privacy Policy applies solely to data collected and processed by xh777. We are not responsible for the privacy practices, content, or security of any third-party websites.
We strongly recommend that you review the privacy policy of any third-party site you visit before providing any personal information. xh777 has no control over and accepts no liability for the data handling practices of external sites, even where those sites are linked from within xh777.org.
xh777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will:
Your continued use of xh777 after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.
We encourage you to review this page periodically to stay informed about how xh777 protects your personal information. The version published on this page is always the current and binding version.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way xh777 handles your personal data, please reach out to our privacy team through any of the following channels:
We are committed to resolving all privacy-related concerns fairly and promptly. If you submit a formal data rights request, you will receive an acknowledgement within 2 business days and a full response within 30 days.
Join thousands of Pakistani players who trust xh777 for safe, fair, and exciting online gaming. Your data is protected, your payments are secure, and your experience is our priority — in Karachi, Lahore, Islamabad, and everywhere in between.