xv777 Privacy Policy
Your Data, Your Rights

This Privacy Policy ("Policy") describes how xv777 ("Platform", "we", "us", "our") — accessible at https://xv777.cam — collects, processes, stores, discloses and protects the personal data of individuals ("Users", "you", "your") who access or use the Platform or any associated services.

xv777 is an English-language online gaming information and services platform. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection laws in the jurisdiction in which we are licensed and operate. This Policy applies to all data collected through the Platform, our communication channels and any services integrated with or accessible through the Platform.

By registering for an Account, accessing the Platform or submitting any personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection, processing and use of your personal data as described herein. If you do not agree with any provision of this Policy, you should not access or use the Platform and should not provide your personal data to us.

The following defined terms apply throughout this Privacy Policy:

For the purposes of applicable data protection law, xv777 is the Data Controller in respect of personal data collected through the Platform located at https://xv777.cam.

xv777 does not hold, claim or imply any licence from the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani provincial authority. The Platform operates under the licensing jurisdiction of the operator as specified in current operator documentation. Data protection obligations are determined by and governed in accordance with the laws of that jurisdiction.

For all data protection enquiries, please contact us using the details set out in Section 17 of this Policy. We aim to acknowledge all data protection correspondence within a reasonable timeframe and to provide a substantive response within 30 days of receipt.

We collect personal data through several channels. The table below summarises the principal categories of data we collect, the source of collection and the primary purpose for which each category is processed:

xv777 processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contractual necessity: Processing that is necessary to perform our contractual obligations to you — including account management, payment processing, withdrawal handling and customer support — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the services you have requested.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML/CFT transaction monitoring and the retention of records as required by applicable licensing and financial regulations — are carried out because we are legally obliged to do so under applicable law.
• Legitimate interests: We process certain technical and usage data on the basis of our legitimate interest in maintaining the security of the Platform, detecting and preventing fraud and abuse, improving Platform functionality and monitoring responsible gambling obligations.
• Consent: Where we send marketing communications or use non-essential cookies, we rely on your freely given, informed and specific consent. You may withdraw consent for marketing communications at any time by updating your Account preferences or contacting support. Withdrawal of consent for non-essential cookies may be managed through your browser settings.

The personal data we collect is used for the following purposes:

Account Management & Service Delivery

• Creating and maintaining your registered Account;
• Processing deposits, withdrawals and related financial transactions;
• Providing customer support and responding to enquiries;
• Administering bonuses, promotions and VIP programme benefits in accordance with published terms.

KYC, Fraud Prevention & Compliance

• Verifying your identity and age in accordance with KYC requirements;
• Monitoring transactions for indicators of money laundering, terrorist financing and fraud in compliance with AML/CFT obligations;
• Maintaining records required by applicable licensing, regulatory and financial laws;
• Reporting to relevant regulatory or law enforcement authorities where legally required.

Responsible Gambling

• Monitoring Account activity for patterns consistent with problem gambling behaviour;
• Applying and enforcing self-exclusion, deposit limit, loss limit and session time controls;
• Communicating with Users showing indicators of gambling-related harm in accordance with responsible gambling obligations.

Platform Security & Integrity

• Detecting, investigating and preventing fraudulent, abusive or prohibited conduct;
• Maintaining the technical security and operational integrity of the Platform;
• Enforcing the Terms and Conditions and other applicable platform policies.

Marketing Communications (Consent-Based Only)

• Sending promotional emails, offers and newsletters — only where you have opted in and only until you withdraw that consent;
• Providing personalised promotional content based on your Platform usage and preferences — subject to your consent and Account settings.

xv777 does not sell your personal data to third parties for advertising, marketing or data brokerage purposes. We may share your personal data with third parties only in the following circumstances, and only to the extent necessary for the described purpose:

• Service providers and Data Processors: We engage third-party service providers — including identity verification providers, payment processors, fraud detection systems and IT infrastructure providers — who process personal data on our behalf and under our instruction, governed by data processing agreements that restrict their use of your data.
• Payment providers: Personal data is shared with payment processors to facilitate deposits and withdrawals. For Pakistani users, this may include data shared with services facilitating bank transfers through institutions such as HBL, UBL, Meezan Bank or Bank Alfalah, or e-wallet providers such as Easypaisa, JazzCash or Raast. These references are contextual — such providers process data in accordance with their own privacy policies and applicable law, not as agents of xv777.
• Regulatory and law enforcement authorities: We are required by law to disclose certain data to regulatory bodies, law enforcement agencies or courts in response to lawful requests, court orders or regulatory investigations. We will disclose the minimum data necessary to comply with any such obligation.
• KYC and identity verification providers: Identity documents and biometric data submitted for KYC verification are processed by specialist third-party identity verification providers engaged by xv777, who operate under strict data processing agreements.
• Responsible gambling organisations: In certain circumstances — for example, where a User has self-excluded — we may be required to share limited data with recognised self-exclusion schemes operated in the operator's licensing jurisdiction.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets involving xv777, personal data held by us may be transferred to the acquiring entity, subject to equivalent data protection obligations.

The nature of a global online platform means that personal data may be transferred to and processed in countries other than the country in which it was collected. This includes countries where xv777's service providers operate data centres or processing facilities.

Where personal data is transferred internationally, xv777 takes steps to ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection requirements. These safeguards may include standard contractual clauses, adequacy decisions or equivalent protective measures as recognised under the laws of the operator's licensing jurisdiction.

Specifically for users in Pakistan: data protection law in Pakistan is evolving. Users should be aware that data transferred internationally may be subject to the laws of the destination country, which may differ from Pakistani law. By using the Platform, you acknowledge this potential transfer and consent to it for the purposes described in this Policy.

xv777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. Our general retention approach is as follows:

• Account data: Retained for the duration of your active Account relationship with xv777, plus a defined period after Account closure as required by applicable regulatory and legal obligations (typically five to seven years post-closure, subject to the operator's licensing jurisdiction requirements).
• KYC and identity documents: Retained for a minimum period defined by applicable AML/CFT regulations following Account closure, typically five years. These records may be required in the context of regulatory investigations or proceedings.
• Transaction records: Financial transaction records are retained in accordance with applicable financial record-keeping obligations, typically for a minimum of five years following the date of transaction.
• Support communications: Records of customer support interactions are retained for a defined period for quality assurance and dispute resolution purposes, typically two to three years.
• Marketing consent records: Records of marketing opt-in consent are retained for the duration of the marketing relationship and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with an identified individual. We do not retain personal data for longer than is necessary.

xv777 uses cookies and similar tracking technologies — including local storage objects and pixel tags — to operate and improve the Platform and to personalise your experience. The types of cookies we use are described below:

You can manage or disable non-essential cookies through your browser's privacy settings. Note that disabling certain cookies may affect Platform functionality. As xv777 does not use third-party advertising networks, we do not deploy advertising or tracking cookies for cross-site behavioural targeting.

xv777 applies a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the Platform is encrypted using industry-standard SSL/TLS protocols. The Platform operates exclusively over HTTPS.
• Access controls: Access to personal data is restricted to authorised personnel who require it for the performance of their legitimate professional duties, on a strict need-to-know basis.
• Password security: User passwords are stored using secure hashing algorithms. We do not store passwords in plaintext and our staff cannot retrieve your password in plain form under any circumstances.
• Two-factor authentication: 2FA is available for all user Accounts and is strongly recommended. Account access from unrecognised devices may trigger additional verification steps.
• Infrastructure security: Platform infrastructure is hosted in environments that apply physical, network and logical security controls aligned with recognised industry standards.
• Data breach response: We maintain an incident response procedure for data security incidents. In the event of a breach that is likely to result in risk to Users, we will notify affected Users and relevant regulatory authorities as required by applicable law.

Subject to applicable data protection law and certain legal exceptions, you have the following rights in respect of your personal data held by xv777. To exercise any of these rights, please contact us using the details in Section 17.

We will respond to all rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days and will notify you accordingly. We do not charge a fee for exercising your rights unless requests are manifestly unfounded, excessive or repetitive.

The Platform is strictly restricted to adults aged 18 years or older — or the higher minimum age required by the operator's licensing jurisdiction, whichever is greater. xv777 does not knowingly collect, process or retain personal data from individuals below the minimum eligible age.

If we become aware — through our KYC processes, responsible gambling monitoring systems or any other means — that personal data has been collected from a User who is below the minimum eligible age, we will immediately suspend the Account, delete the personal data concerned and, where applicable, report the matter to the relevant authority.

If you are a parent or guardian and have reason to believe that a minor for whom you are responsible has accessed the Platform or submitted personal data, please contact us immediately at the contact details provided in Section 17. We will investigate promptly and take all appropriate action.

This section provides contextual information specifically for users in Pakistan. It does not constitute legal advice and users should seek independent legal counsel as appropriate.

Pakistan's data protection legal framework is developing. The Personal Data Protection Bill has been under legislative consideration. Until a comprehensive national data protection law is enacted and in force, data protection in Pakistan is governed by a patchwork of sector-specific regulations, constitutional privacy rights and applicable contract law.

As xv777 is not incorporated in Pakistan and is not subject to direct regulation by Pakistani authorities, the primary data protection obligations applicable to the Platform are determined by the laws of the operator's licensing jurisdiction. We nonetheless apply our data protection standards consistently to all users regardless of their location.

For users in Pakistan who provide financial data — including information related to payment methods such as Easypaisa, JazzCash, Raast, or bank accounts with HBL, UBL, Meezan Bank or Bank Alfalah — please note that such information is collected only as necessary for transaction processing and verification. These payment provider names are included only as contextual references. xv777 does not share financial data with these providers beyond what is strictly necessary to process transactions, and does not claim that these providers endorse or support gambling.

The Platform may contain references to or integrations with third-party services, such as identity verification providers, payment processors or responsible gambling support organisations. Where the Platform integrates with third-party services, those services operate under their own privacy policies, which are independent of this Policy.

xv777 is not responsible for the privacy practices or data handling of third-party services. We encourage Users to review the privacy policies of any third-party service they interact with in connection with their use of the Platform, including payment providers and KYC verification services.

We do not embed third-party advertising networks or social media tracking pixels into the Platform. External links, where they appear, are governed by the privacy policies of the destination website.

xv777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we provide. When material changes are made, we will notify registered Users by email to their registered Account address and/or by displaying a prominent notice on the Platform.

All amendments become effective from the date specified in the notification or, where no date is stated, from the date the revised Policy is published. The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage Users to review this Policy periodically to remain informed of how we protect their personal data.

Where an amendment to this Policy requires fresh consent from Users — for example, where we propose to use personal data for a materially new purpose that was not disclosed at the time of collection — we will seek that consent separately and in advance of the new processing commencing.

If you have any questions, concerns or complaints about this Privacy Policy, our data processing practices, or the exercise of your data protection rights, please contact the xv777 data protection team using the details below.

Complaints

If you are dissatisfied with our response to a data protection enquiry or rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. For users in Pakistan, data protection oversight is currently developing — you may wish to seek independent legal advice regarding available recourse mechanisms.

We take all privacy complaints seriously and will endeavour to resolve any concerns to your satisfaction. We recommend contacting us directly in the first instance, as we are often able to resolve concerns more quickly through direct engagement than through formal regulatory processes.