x7778 Privacy Policy — How We Collect, Use, and Protect Your Data

1 Introduction and Scope

This Privacy Policy ("Policy") is published by x7778 (hereinafter "x7778," "we," "us," or "the Platform") and applies to all users who access or use the x7778 website at x7778.net and all related services, features, and products offered therein ("Services").

This Policy describes how x7778 collects, uses, discloses, and safeguards the personal information of players who register and interact with the x7778 platform, with particular reference to Pakistani players using the Services from within Pakistan or through internationally routed connections.

By creating an account on x7778 or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

2 Data Controller Identity

x7778 acts as the data controller in respect of personal data collected through the x7778 platform. As data controller, x7778 determines the purposes and means by which personal data is processed.

For all data protection related queries, requests, or complaints, players may contact x7778's designated data protection point of contact using the details provided in Section 15 of this Policy.

3 Personal Data We Collect

x7778 collects the following categories of personal data from players:

x7778 does not collect special category data (such as health information, religious beliefs, or political opinions) unless it is directly relevant to a responsible gaming assessment and you have provided it voluntarily.

4 How We Collect Your Data

x7778 collects personal data through the following channels:

• Direct interaction: Data you provide when registering an x7778 account, completing KYC, making a deposit, requesting a withdrawal, or contacting support;
• Automated technologies: Data collected automatically when you access x7778, including IP address, device identifiers, and session activity recorded via cookies and server logs;
• Third-party providers: Data received from payment processors (such as JazzCash and EasyPaisa) in connection with financial transactions, and from identity verification partners in connection with KYC processes;
• Publicly available sources: Data obtained from official registries or databases where necessary for fraud prevention or regulatory compliance purposes.

5 Legal Basis for Processing

x7778 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases x7778 relies upon are:

• Performance of a contract: Processing necessary to fulfil the account registration, gaming services, and payment obligations described in the x7778 Terms and Conditions;
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements imposed by our licensing authority, and applicable financial reporting obligations;
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing of your data for marketing communications where you have explicitly opted in to receive such communications from x7778.

6 How We Use Your Data

x7778 uses personal data collected from Pakistani players for the following purposes:

• Creating and managing your x7778 account and verifying your identity;
• Processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment channels;
• Conducting Know Your Customer (KYC) checks and complying with anti-money laundering obligations;
• Providing customer support via live chat and email;
• Monitoring account activity for fraud, collusion, and unusual betting patterns;
• Enforcing x7778's responsible gaming obligations, including age verification and the administration of self-exclusion and deposit limit requests;
• Sending service-related communications such as deposit confirmations, withdrawal notifications, and security alerts;
• Sending promotional communications where you have consented to receive them;
• Improving the x7778 platform through analysis of aggregated, anonymised usage data;
• Fulfilling regulatory reporting obligations to x7778's licensing authority.

7 Data Sharing and Disclosure

x7778 does not sell your personal data. x7778 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processors, to facilitate deposits and withdrawals;
• Identity verification providers: KYC and AML compliance partners engaged to verify player identity documents;
• Game providers: Licensed game developers whose titles are hosted on x7778, to the extent necessary to facilitate gameplay and resolve disputes;
• Regulatory and law enforcement authorities: Where x7778 is required to disclose data by law, court order, or pursuant to a formal request from a competent gaming regulatory authority;
• Fraud prevention and security services: Third-party providers engaged to detect, investigate, and prevent fraudulent activity on the x7778 platform.

All third parties with whom x7778 shares personal data are required to process that data in accordance with applicable data protection law and are contractually prohibited from using x7778 player data for any purpose other than those specified in the relevant data processing agreement.

8 Cookies and Tracking Technologies

x7778 uses cookies and similar tracking technologies to provide and improve the platform experience. The categories of cookies used on x7778 are as follows:

• Strictly necessary cookies: Essential for the operation of the x7778 platform, including session management, authentication, and security. These cannot be disabled without significantly impairing the platform's functionality;
• Analytical cookies: Used to collect aggregated, anonymised information about how players use x7778, including page visit frequency and navigation patterns, to help x7778 improve the platform;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, so that the platform behaves consistently across sessions;
• Marketing cookies: Used where you have consented to receive personalised promotional content based on your activity on x7778.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the x7778 platform. Further information about cookies used on x7778 is available on request from our support team.

9 Data Retention

x7778 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention obligations:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to x7778's licensing jurisdiction;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial regulatory and audit requirements;
• Responsible gaming records: Retained for a minimum of five (5) years following closure of a self-exclusion or problem gambling case;
• Support correspondence: Retained for three (3) years from the date of last contact, or longer where the correspondence relates to an ongoing dispute or investigation;
• Marketing preferences: Retained until you withdraw consent or close your account, after which they are deleted within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual player.

10 Data Security

x7778 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and x7778 servers;
• Encryption of sensitive data fields at rest in x7778 databases;
• Role-based access controls that restrict access to personal data to only those x7778 employees and contractors with a documented business need;
• Regular penetration testing and vulnerability assessments of the x7778 platform and infrastructure;
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised access;
• A documented incident response plan with defined escalation procedures and regulatory notification timelines.

11 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by x7778:

To exercise any of the above rights, please contact x7778 support using the details in Section 15. x7778 will respond to all valid requests within thirty (30) days. x7778 may ask you to verify your identity before fulfilling a data rights request to ensure that personal data is not disclosed to an unauthorised party.

12 Third-Party Links

The x7778 platform may, from time to time, contain references to third-party services or game providers. x7778 does not control the privacy practices of third-party websites or platforms and is not responsible for their content or data handling practices. This Privacy Policy applies solely to data collected by x7778 through the x7778.net platform and its associated services.

13 Children and Minors

x7778 is strictly an adult platform and does not knowingly collect or process personal data from any person under the age of 21. x7778 enforces mandatory identity verification to confirm player age at registration and prior to the first withdrawal. Any account found to have been registered by a person under 21 years of age will be immediately closed, all deposits will be refunded where possible, and all associated winnings will be forfeited.

If you believe that x7778 has inadvertently collected data from a person under 21, please contact us immediately using the details in Section 15 so that the relevant data can be identified and securely deleted.

14 Policy Changes

x7778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes will be communicated to registered players via the mobile number or email address associated with their account, and a prominent notice will be displayed on x7778.net, no less than seven (7) days before the revised Policy takes effect.

The "Last Updated" date at the top of this page will be revised whenever this Policy is amended. Continued use of x7778 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way x7778 handles your personal data, please contact x7778's data protection team using the following details:

x7778 takes all privacy-related enquiries seriously. If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in accordance with the laws of x7778's licensing jurisdiction.