xx7 Privacy Policy — How We Protect Your Data

1 Who We Are

xx7 is an online gaming and sports betting platform operating at xx7.bz, designed specifically for Pakistani players. The platform provides access to casino slots, fish shooting games, live casino tables with real dealers, and a sports betting section covering cricket — including PSL matches and T20 internationals — as well as football and esports.

For the purposes of this Privacy Policy, "xx7", "we", "us" and "our" refer to the platform and its operating team. "You" and "your" refer to any individual who visits the xx7 website, creates an account, or uses any service available on the platform.

This Privacy Policy applies to all personal data collected through the xx7 website, mobile platform and Android app. It covers how that data is gathered, stored, processed and — where applicable — shared with trusted third parties necessary for the operation of the platform.

2 Data We Collect

xx7 collects personal data in two ways: information you provide directly, and information collected automatically through your use of the platform. Here is a clear breakdown of both categories:

Information you provide directly:

• Registration data: Your Pakistani mobile number and account password when you sign up.
• Identity verification data: If requested for account verification, this may include your full name, date of birth and a copy of a valid identity document.
• Payment information: Details associated with your PKR transactions — including your JazzCash number, Easypaisa account, Raast ID or bank account details — as required to process deposits and withdrawals.
• Support communications: Any messages, queries or complaints you submit to the xx7 support team.

Information collected automatically:

• Device and browser data: Your device type, operating system, browser version and screen resolution, used to optimise the platform experience for your device.
• IP address and approximate location: Used for security purposes, fraud prevention and ensuring the platform is accessed in accordance with applicable policies.
• Session and activity data: Pages visited, games played, bets placed, session duration and interaction patterns. This data is used to improve platform performance and personalise your experience.
• Cookie data: See Section 5 for full details on how cookies are used on xx7.

3 How We Use Your Data

The data we collect is used for specific, legitimate purposes directly related to the operation of the xx7 platform. The table below summarises the main uses and the justification for each:

We do not use your data for automated decision-making that produces significant legal or similarly significant effects on you without human review. If you have questions about any specific use case, contact xx7 support.

4 Payment Data and PKR Transactions

All financial transactions on xx7 are processed in PKR. The platform supports JazzCash, Easypaisa, Raast, bank transfers and other mobile wallets. The handling of payment data is treated with particular care given its sensitivity.

• Payment account details you provide — such as your JazzCash or Easypaisa mobile number, Raast ID or bank account number — are used solely for the purpose of processing the specific transaction requested.
• Full payment credentials are not stored on the xx7 platform beyond what is strictly required for transaction verification, dispute resolution and compliance with financial record-keeping obligations.
• Payment processing is handled through secure, encrypted channels. xx7 does not store complete card numbers or full banking credentials in plain text under any circumstances.
• Transaction records — including deposit amounts, withdrawal requests and payment method references — are retained for a period consistent with legal and financial compliance requirements.

5 Cookies and Tracking Technologies

xx7 uses cookies and similar tracking technologies to make the platform work properly, to remember your preferences and to understand how players use the site so we can continue improving it. Here is what you need to know:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that help prevent fraudulent activity. You cannot opt out of essential cookies and continue using the platform.
• Functional cookies: Remember your preferences such as language settings and previously selected game categories, so you do not have to reset these every time you visit.
• Analytics cookies: Help us understand which pages and game categories are most popular, how long sessions typically last and where players encounter difficulties. This data is used in aggregate form to improve the platform experience.
• Performance cookies: Monitor platform load times and technical performance to identify and resolve issues quickly, particularly important for Pakistani players on mobile 4G connections.

You can manage cookie preferences through your browser settings. Note that disabling certain cookie categories may affect platform functionality. Cookies do not give xx7 access to your device beyond the data explicitly described above.

6 Data Sharing with Third Parties

xx7 does not sell your personal data to third parties. However, to operate the platform effectively, we work with a small number of trusted service partners who may process certain data on our behalf. Data is shared only where necessary and under strict confidentiality agreements.

Categories of third parties we work with:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners process PKR transaction data as required to complete deposits and withdrawals. These providers have their own privacy policies governing how they handle your financial data.
• Game providers: Providers such as Pragmatic Play, PG Soft, Jili Games, Evolution and Spadegaming operate the game engines. These providers may receive session identifiers and game activity data necessary to deliver game functionality and verify results. They do not receive your full personal profile or PKR payment details.
• Security and fraud prevention partners: Tools used to detect unusual login activity, identify duplicate accounts or flag potentially fraudulent transactions may process IP addresses and device fingerprint data.
• Analytics providers: Aggregated, anonymised platform usage data may be processed by analytics tools to help us understand overall player behaviour and platform performance. This data does not identify you personally.

In all cases, third-party partners are contractually required to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards. xx7 does not authorise partners to use your data for their own marketing or to share it further with unrelated parties.

7 Data Retention

xx7 retains personal data only for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and financial obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active player account is retained for as long as the account remains open and active on the platform.
• Closed accounts: Following voluntary account closure or account suspension, basic account records and transaction history are retained for a period necessary to meet financial record-keeping requirements and to handle any outstanding disputes or legal claims.
• Identity verification documents: Copies of identity documents submitted for verification purposes are retained for the minimum period required and then securely deleted.
• Support communications: Records of support interactions are retained for a reasonable period to allow for follow-up and quality assurance, after which they are deleted.
• Cookie and analytics data: Anonymised analytics data may be retained in aggregate form indefinitely as it does not identify individual players.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

8 Security Measures

Protecting the personal data and financial information of Pakistani players is a top priority for xx7. The following technical and organisational security measures are in place:

• TLS encryption: All data in transit between your browser or app and the xx7 servers is encrypted using Transport Layer Security (TLS). This applies to login, registration, deposits and withdrawals.
• Secure password storage: Account passwords are hashed using a one-way cryptographic function. xx7 staff cannot view your password in plain text — if you forget it, you must reset it rather than have it retrieved.
• Access controls: Access to player data within xx7's systems is restricted on a need-to-know basis. Only staff members whose roles require access to specific categories of data are authorised to view it.
• Fraud detection systems: Automated systems monitor account activity for signs of unauthorised access, unusual login patterns and suspicious transaction behaviour. Alerts are reviewed by the security team.
• Regular security reviews: The platform undergoes periodic security assessments to identify and address potential vulnerabilities before they can be exploited.

While xx7 implements robust security measures, no internet-based platform can guarantee absolute security. Players also play an important role in keeping their accounts safe — use a strong, unique password for your xx7 account and never share it with anyone. If you suspect your account has been accessed without your permission, contact xx7 support immediately.

9 Your Data Rights

As a player on xx7, you have specific rights over the personal data we hold about you. These rights are straightforward to exercise — simply contact the xx7 support team with your request and your registered Pakistani mobile number.

• Right to access: You can request a copy of the personal data xx7 holds about you. We will provide this within a reasonable timeframe.
• Right to correction: If any personal data we hold about you is inaccurate or out of date, you have the right to ask us to correct it.
• Right to deletion: You can ask us to delete your personal data. Note that some data may be retained where we have a legal obligation to do so — for example, financial transaction records. We will explain clearly what can and cannot be deleted and why.
• Right to restrict processing: In certain circumstances, you can ask us to pause the processing of your personal data — for example, while a dispute is being resolved.
• Right to withdraw consent: Where we process data based on your consent — such as for promotional communications — you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You have the right to object to processing based on legitimate interests where you feel it impacts your rights. We will review your objection and respond accordingly.

10 Children's Privacy

xx7 is strictly an adult platform. The platform, its games, sports betting features and all associated services are intended solely for players who are 18 years of age or older. xx7 does not knowingly collect personal data from anyone under the age of 18.

If we become aware that an account has been registered by or is being used by a person under 18, that account will be immediately closed, any associated balance will be reviewed in line with our Terms and Conditions, and all personal data associated with the account will be deleted as promptly as possible.

Parents and guardians are encouraged to use available parental control tools on shared devices to prevent underage individuals from accessing online gaming platforms. If you believe a person under 18 has registered an account on xx7, please contact our support team immediately so we can take action.

11 Updates to This Privacy Policy

xx7 reviews and updates this Privacy Policy periodically to reflect changes in platform services, data handling practices or applicable requirements. When changes are made, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent update.

For material changes — those that significantly affect how your data is collected or used — we will make the updated policy clearly accessible on this page. Continued use of your xx7 account after a policy update has been published constitutes your acceptance of the revised Privacy Policy.

We recommend bookmarking this page and checking it periodically, particularly if you are an active player making regular PKR deposits and withdrawals on the platform.

12 Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or how xx7 handles your personal data, please reach out to the support team directly. We take privacy queries seriously and aim to respond to all requests within a reasonable timeframe.

When contacting us about a privacy matter, please include your registered Pakistani mobile number and a clear description of your query or request. For data deletion or data access requests, specifying "Data Rights Request" in your message will help us prioritise and process your query more efficiently.

You can also find answers to common questions on our FAQ page, or review the full platform rules on our Terms and Conditions page.