Privacy Policy — xl777 Platform

Introduction

This Privacy Policy ("Policy") is issued by xl777 ("we", "us", "our") and applies to all personal data collected through the xl777 platform, accessible at https://xl777.cam (the "Platform"), and through any related services, features or communications.

We are committed to processing your personal data responsibly, transparently and in accordance with applicable data protection legislation. This Policy explains what data we collect about you, the legal basis on which we rely when processing it, how we use and protect it, how long we retain it, and the rights available to you as a data subject.

By registering an account, accessing the Platform or submitting any personal information to xl777, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Platform and contact us to arrange account closure.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

xl777 collects personal data in three primary ways: data you actively provide to us, data generated automatically by your use of the Platform, and data obtained from authorised third parties for verification and fraud-prevention purposes.

Data You Provide Directly:

• Registration information: full legal name, date of birth, email address, residential address, username and password.
• KYC documentation: government-issued photo ID (such as a Pakistani CNIC or passport), proof of address, payment method verification and liveness/selfie data.
• Payment information: deposit and withdrawal account details, transaction amounts. Note — xl777 does not store full card numbers or sensitive payment credentials; these are processed by authorised payment gateways.
• Communications: messages sent to our support team, feedback submitted through the Platform, and records of correspondence.
• Responsible-gambling preferences: self-exclusion requests, deposit limits, session limits and loss limits you set through account tools.

Data Collected Automatically:

• Technical data: IP address, browser type and version, operating system, device type and screen resolution.
• Usage data: pages visited, features accessed, time and duration of sessions, game history, betting patterns and clickstream data.
• Location data: approximate geographic location inferred from IP address for fraud prevention and jurisdictional compliance purposes.
• Cookie and tracking data: session identifiers, preference cookies and analytics data as described in Section 10.

Data from Third Parties:

• Identity verification providers who confirm the authenticity of documents and identity checks submitted during KYC.
• Fraud and AML screening services that cross-reference user details against industry risk databases.
• Payment processing partners who confirm transaction status and payment account ownership.

Data Processing & Legal Basis

xl777 processes personal data only where a valid legal basis exists. The principal legal bases we rely upon are as follows:

How We Use Your Data

xl777 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining and administering your registered account, including authentication and account security.
• Identity and Age Verification: Confirming that you meet the minimum age requirement (18+ or higher as applicable) and that your identity details are genuine, as required for regulatory compliance.
• Transaction Processing: Facilitating deposits and withdrawals, confirming payment method ownership and communicating transaction status.
• Customer Support: Responding to your enquiries, resolving disputes and providing account assistance.
• Fraud and AML Compliance: Detecting and preventing fraudulent activity, money laundering, collusion and other prohibited conduct through automated and manual monitoring.
• Responsible Gambling: Administering deposit limits, session controls, loss limits, self-exclusion requests and other player-protection tools you activate.
• Platform Improvement: Analysing usage patterns, performance metrics and user behaviour to enhance the design, functionality and content of the Platform.
• Marketing Communications (with consent): Sending you promotional offers, bonus notifications and product updates relevant to your interests, where you have opted in to receive such communications.
• Legal and Regulatory Compliance: Meeting our obligations under applicable law, responding to lawful requests from authorities and maintaining records as required.

Data Sharing & Disclosure

xl777 does not sell, rent or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances:

• Authorised Service Providers: Third-party vendors engaged to provide services on our behalf — including KYC verification providers, payment processors, fraud-screening services, cloud infrastructure providers and customer support platforms. These parties process data under contractual obligations and are prohibited from using it for any purpose other than the service they provide.
• Payment Partners: When you make a deposit or withdrawal, relevant transaction details are shared with the applicable payment service provider to complete the transfer. Payment providers familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced for context only. Actual availability of payment methods depends on the current operator configuration.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory direction, xl777 may disclose personal data to competent authorities. This includes disclosures required under AML regulations.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets involving xl777, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
• With Your Explicit Consent: Any sharing of your personal data beyond the purposes described above will only occur with your explicit prior consent.

Data Retention

xl777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual.

Data Security

xl777 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• TLS Encryption: All data transmitted between your device and the Platform is encrypted in transit using Transport Layer Security (TLS) protocol. Always verify that you are accessing the Platform over a connection beginning with "https://".
• Access Controls: Personal data is accessible only to authorised xl777 personnel and service providers on a need-to-know basis. Access is governed by role-based permissions and logged for audit purposes.
• Secure Data Storage: Data is stored on secure servers with physical and logical access controls, regular security patching and monitoring for intrusion attempts.
• Password Security: Passwords are stored in hashed form using industry-standard cryptographic algorithms. xl777 does not have access to your plaintext password.
• Security Reviews: We conduct periodic security assessments and respond promptly to identified vulnerabilities.

Your Rights

Subject to applicable law and the specifics of the processing basis, you have the following rights in relation to your personal data held by xl777:

To exercise any of these rights, please contact us using the details in Section 15. We will respond to verifiable requests within the timeframe required by applicable law, generally within 30 days. We may need to verify your identity before processing your request.

Cookies & Tracking Technologies

The xl777 Platform uses cookies and similar tracking technologies to provide essential functionality, analyse performance and — where consent is given — personalise your experience. A cookie is a small text file stored on your device when you visit the Platform.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect Platform functionality. For detailed browser-level cookie management instructions, refer to your browser's help documentation.

Minors & Age Restriction

The xl777 Platform is strictly intended for adults aged 18 years and over — or the higher minimum age required by the operator or applicable licence jurisdiction. We do not knowingly collect personal data from any person under the minimum eligible age.

Age verification is conducted as part of the KYC process. If we discover or are notified that personal data has been collected from a user who does not meet the minimum age requirement, we will take immediate steps to close the account, void all associated transactions and securely delete the minor's personal data.

Third-Party Links & Services

The Platform may reference third-party services, payment providers or external resources in an informational context. xl777 does not control the privacy practices of third-party websites or services and is not responsible for the content, privacy policies or data-processing activities of any external party.

References to payment services familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as contextual information only. These references do not constitute endorsements of gambling by those providers, and each provider operates under its own privacy policy and data processing framework.

We recommend that you review the privacy policies of any third-party service you interact with independently of the xl777 Platform.

International Data Transfers

xl777 may transfer personal data to service providers and infrastructure partners located in countries outside the jurisdiction in which you reside. Where such transfers occur, we take steps to ensure that your personal data is afforded an equivalent level of protection to that in your home jurisdiction, through appropriate contractual safeguards, standard data protection clauses or other lawful transfer mechanisms.

If you are accessing the Platform from Pakistan, please be aware that your personal data may be transferred to and processed in jurisdictions with different data protection standards. By using the Platform, you acknowledge this possibility. If you have concerns about the international transfer of your data, please contact us using the details in Section 15.

Changes to This Privacy Policy

xl777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, Platform functionality or our data-processing practices. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify registered users via email or an in-Platform notification.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform after any amendments take effect constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and request account closure.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the xl777 Privacy and Data team. We are committed to addressing all privacy-related enquiries in a timely and transparent manner.