Data Protection
At xc77, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains in plain, honest language exactly what personal data we collect from Pakistani players, why we collect it, how we use and protect it, and what rights you hold over your own information. Please read this document carefully before registering your account.
Our Commitment
These cards capture the spirit of how xc77 approaches data. They complement — but do not replace — the full legal text that follows.
xc77 operates on a strict data-minimisation principle. We collect only the personal information that is genuinely necessary to deliver our services, comply with legal obligations, and keep your account secure. We do not harvest data for its own sake.
xc77 does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. Your information is shared only with trusted service partners who help us run the platform, and always under binding data protection agreements.
All data transmitted between your device and xc77 servers is protected by TLS encryption. Sensitive data at rest — including financial information and identity documents — is stored using AES-256 encryption. Access to personal data is restricted to authorised xc77 staff on a need-to-know basis.
xc77 recognises your right to access, correct, port, and in certain circumstances delete your personal data. These are not just words on a page — our support team is trained to action data rights requests promptly and without making the process unnecessarily difficult for you.
If we ever make a material change to this Privacy Policy — meaning a change that affects how we use your data in a way that may concern you — we will notify you by email before the change takes effect. We will not quietly update policies and hope you do not notice.
xc77 understands the specific context of Pakistani players. Payment data relating to JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions is handled with heightened care. We do not share payment method data with any party other than the relevant payment processor for the purpose of completing your transaction.
xc77 is a premium online gaming and sports betting platform accessible at xc77.ws, serving players across Pakistan with a comprehensive suite of casino games, live dealer tables, slot games, and sports betting markets — including PSL cricket, international T20, and other sporting events popular with Pakistani audiences.
For the purposes of this Privacy Policy, "xc77", "we", "us", and "our" refer to the operator of the xc77 platform and its associated services. "You" and "your" refer to any individual who visits, registers on, or interacts with the xc77 platform in any capacity.
This Privacy Policy governs the collection, processing, storage, and disclosure of personal data in connection with your use of the xc77 platform. By registering an account or continuing to use the platform, you acknowledge that you have read and understood the practices described in this document.
This Privacy Policy should be read alongside our Terms & Conditions, which govern your overall use of the xc77 platform and set out additional rights and obligations applicable to all members.
The categories of personal data that xc77 may collect about you are set out below. Not all categories will apply to every user — for example, KYC document data is only collected from members who proceed to the withdrawal stage.
| Category | Examples | Collected From |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number, nationality | Registration form; KYC submission |
| Contact Data | Email address, mobile number (for JazzCash / EasyPaisa users) | Registration form; payment setup |
| Financial Data | JazzCash wallet number, EasyPaisa wallet number, HBL / UBL / Meezan Bank account details, deposit and withdrawal history | Payment screens; transaction records |
| KYC Documents | Scanned CNIC (front and back), passport bio page, proof of address (utility bill, bank statement), payment method ownership proof | KYC verification portal |
| Transactional Data | Bets placed, games played, wager amounts, win/loss records, session durations, responsible gaming tool usage | Platform activity logs |
| Technical Data | IP address, device type, browser type and version, operating system, device fingerprint identifiers, time zone | Automatic collection on access |
| Usage Data | Pages visited, features used, click patterns, session start and end times, referral source | Analytics tools; server logs |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and in-platform notifications | Account settings; registration choices |
xc77 does not collect any special category data (such as health data, racial or ethnic origin, political opinions, or biometric data) except where expressly required by applicable law or regulation and only with your explicit consent where such consent is necessary.
xc77 collects personal data through the following channels:
xc77 does not purchase personal data lists from data brokers, does not scrape social media profiles, and does not obtain your personal data from any source not listed in this section without first informing you and obtaining any consent required by applicable law.
xc77 processes your personal data for specific, documented purposes only. The table below maps each processing purpose to the category of data involved:
| Purpose | Data Categories Used |
|---|---|
| Account registration and maintenance | Identity Data, Contact Data |
| Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank | Financial Data, Identity Data |
| Identity verification and KYC compliance | Identity Data, KYC Documents, Financial Data |
| Fraud detection, anti-money-laundering screening, and platform security | Technical Data, Financial Data, Transactional Data, Identity Data |
| Delivering platform services, game history, and account statements | Transactional Data, Identity Data |
| Customer support and dispute resolution | Communications Data, Identity Data, Transactional Data |
| Responsible gaming monitoring and intervention | Transactional Data, Contact Data |
| Sending promotional communications (where opted in) | Contact Data, Marketing Preferences, Transactional Data |
| Platform analytics and service improvement | Usage Data, Technical Data |
| Compliance with legal and regulatory obligations | All categories as required by applicable law |
xc77 will not use your personal data for any purpose not listed above without first informing you and, where required by law, obtaining your consent.
Every instance of personal data processing by xc77 rests on one of the following legal bases. Understanding which basis applies helps clarify your rights in relation to that processing activity.
Where processing is based on legitimate interests, you have the right to object. Where processing is based on consent, you have the right to withdraw that consent. These rights are explained in detail in Section 10.
xc77 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
All third parties with whom xc77 shares personal data are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they are providing to xc77.
xc77 uses cookies and similar technologies — including pixel tags, web beacons, and local storage — on the platform. These technologies serve several functions that are important to the operation and security of the site.
You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your xc77 account. For guidance on managing cookies in popular browsers, visit your browser's official help documentation.
xc77 does not use advertising or retargeting cookies, and does not permit third-party advertisers to place cookies on the xc77 platform.
xc77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and Contact Data | Duration of account + 5 years after closure | Anti-money-laundering legal obligation |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance and dispute resolution |
| Financial and Transaction Data | Duration of account + 5 years after closure | Financial record-keeping and AML obligations |
| Communications Data (support records) | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical and Usage Data | 13 months from collection | Analytics and fraud detection |
| Marketing Preference Records | Until account closure + 1 year | Demonstrating consent compliance |
Once the applicable retention period has expired, xc77 will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Anonymised data — data from which all identifying information has been permanently removed — may be retained indefinitely for statistical and analytical purposes.
xc77 takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it from unauthorised access, loss, disclosure, or destruction.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xc77 will notify affected members without undue delay and, where required, will report the breach to the relevant supervisory authority within the legally required timeframe.
As an xc77 member, you hold the following rights in relation to your personal data. These rights are not absolute — some are subject to exemptions under applicable law — but xc77 is committed to honouring them to the fullest extent possible.
Request a copy of the personal data xc77 holds about you, along with information about how it is being used.
Request correction of any inaccurate or incomplete personal data held in your xc77 account.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that xc77 limits how it uses your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Marketing objections are honoured immediately.
To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and provide a full response within 30 days. In complex cases we may extend this by a further two months, in which case we will inform you of the extension and the reason for it.
xc77 will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, notifying you of the reason.
The xc77 platform is strictly intended for adults aged 21 years or older. xc77 does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you are not permitted to use the xc77 platform and must not provide any personal data to us.
If xc77 discovers that personal data has been collected from an individual under the age of 21, that data will be permanently deleted without delay, the associated account will be immediately and permanently closed, and all balances will be forfeited in accordance with our Terms & Conditions. Parents and guardians who believe a minor has registered on xc77 should contact [email protected] immediately.
xc77 applies age verification checks at the point of first withdrawal as a minimum. We may apply additional age verification measures at any earlier stage at our discretion. All members are required to confirm their age at the point of registration.
The xc77 platform may contain references to third-party game studios or payment service providers. While xc77 takes care to work only with reputable, established partners, we do not control the privacy practices of third-party organisations and are not responsible for their data handling.
This Privacy Policy applies solely to personal data collected and processed by xc77 in connection with your use of the xc77 platform. If you interact with a third-party service — such as your JazzCash or EasyPaisa mobile app, or your HBL, UBL, or Meezan Bank online portal — the privacy policy of that third party will govern how your data is handled within their own systems.
xc77 does not permit third-party advertisers, social media platforms, or tracking networks to collect data about our members through the xc77 platform.
xc77 reserves the right to update or amend this Privacy Policy at any time. The version of this Policy published on the xc77 website at any given time is the version that applies to your use of the platform on that date.
Where we make a material change — meaning a change that meaningfully affects how we collect, use, or share your personal data — we will notify you by email to the address registered on your account at least 14 days before the change takes effect. We will also display a prominent notice on the xc77 platform for at least 30 days following any material update.
Where a change is non-material — such as correcting a typographical error, clarifying existing wording without changing its substance, or updating contact details — we may make the change without prior notice, though the updated Policy will always be dated and accessible on this page.
Continuing to use the xc77 platform after a material change has taken effect constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you should close your account before the change takes effect and cease using the platform. Your statutory rights are unaffected by this provision.
We recommend bookmarking this page and reviewing it periodically. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.
If you have any questions, concerns, or complaints about how xc77 handles your personal data, or if you wish to exercise any of the data rights described in Section 10, please contact our dedicated data protection team using the details below:
Data Protection & Privacy Team — xc77
Email: [email protected]
Live Chat: Available 24/7 via the xc77 platform
Response time: Within 72 hours for data rights requests
Please include "Data Rights Request" or "Privacy Concern" in your subject line so that your message is routed directly to the correct team. To protect your privacy, we may need to verify your identity before processing your request — typically by asking you to confirm details that match your registered account.
If you are not satisfied with xc77's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. xc77 will always co-operate with supervisory authorities in the investigation of complaints and will not penalise members for raising legitimate privacy concerns in good faith.
Quick Reference
A plain-English summary of the most important points every xc77 member should know about their data.
Your personal information is never sold or rented to third parties. Full stop. No exceptions, no fine print.
JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transaction data is shared only with the relevant processor — never with advertisers or analytics firms.
Unsubscribe from promotional emails or SMS in one click via your account settings or by contacting support. We action unsubscribe requests immediately.