At xe77, protecting the personal data of our Pakistani players is treated with the same seriousness as protecting their financial security. This Privacy Policy explains exactly what data xe77 collects, why we collect it, how it is stored and used, who it may be shared with, and what rights you have over your own information. We have written this policy to be clear and honest — not to obscure what we do with your data.
Before reading the full policy detail, here are the six foundational principles that guide how xe77 handles your personal data as a Pakistani player.
xe77 only collects personal data that is necessary for a specific, legitimate purpose — account registration, identity verification, payment processing, customer support, or regulatory compliance. We do not collect data speculatively or for undefined future use. Every data point xe77 holds about you has a documented reason for being collected.
Pakistani players provide CNIC data as part of the KYC identity verification process required by xe77's international gaming license. This data is encrypted at rest and in transit, accessed only by authorised compliance personnel, and never shared with any third party except where required by our licensing obligations or applicable law.
xe77 does not sell, rent, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or marketing organisations. Your personal information exists within the xe77 ecosystem for operational and regulatory purposes only. This commitment is absolute and not subject to exception.
This policy clearly identifies every category of third party that may receive or process your data — payment processors, game software providers, fraud prevention services, and regulatory authorities. There are no undisclosed data sharing arrangements at xe77. If it isn't in this policy, it doesn't happen.
xe77 players have the right to request access to the personal data xe77 holds about them, to request corrections to inaccurate data, and to request deletion of data that is no longer required for its original purpose. Requests are handled by our compliance team and responded to within 30 days.
All personal data held by xe77 is encrypted using industry-standard protocols. Access to player data systems is restricted to authorised personnel on a need-to-know basis. xe77 conducts regular security audits of its data infrastructure and maintains incident response procedures for any potential data security event.
1.1 This Privacy Policy applies to all personal data collected, processed, stored, or used by xe77 in connection with the operation of its online casino, sportsbook, and related services accessible at xe77.lat (the "Platform").
1.2 This policy applies to all individuals who interact with the xe77 Platform, including registered Players, prospective Players who browse without registering, and individuals who contact xe77 via live chat or any other communication channel.
1.3 xe77 is committed to handling personal data responsibly, transparently, and in compliance with the data protection obligations imposed by our international gaming license. This policy sets out in clear terms how we meet those obligations specifically in the context of serving Pakistani users.
1.4 This Privacy Policy should be read in conjunction with xe77's Terms & Conditions. Defined terms used in this policy have the same meaning as in the xe77 Terms & Conditions unless stated otherwise.
2.1 For the purposes of this Privacy Policy, the data controller responsible for your personal data is the licensed entity operating the xe77 platform at xe77.lat. xe77 operates under a valid international gaming authority license that includes specific data protection obligations.
2.2 All data protection enquiries, requests to exercise data rights, and complaints regarding xe77's data handling practices should be directed to xe77's compliance team via in-platform live chat support, available 24 hours a day, 7 days a week.
2.3 xe77 has appointed a designated data protection point of contact within its compliance function who is responsible for overseeing adherence to this Privacy Policy and responding to player data requests.
3.1 xe77 collects personal data in the following categories. The table below summarises the data collected and the primary context in which it is obtained:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC copy (front and back), facial photograph | Account registration & KYC verification |
| Contact Data | Pakistani mobile number, email address | Account registration |
| Financial Data | JazzCash account number, EasyPaisa number, bank account details (HBL/UBL/Meezan), USDT wallet address, deposit and withdrawal transaction records | Payment processing & KYC |
| Gaming Activity Data | Game session records, bet history, win/loss records, bonus activity, login timestamps, session durations | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, device fingerprint, mobile network operator | Platform access (automatic collection) |
| Support Data | Live chat transcripts, support ticket content, communication records | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion records, cool-off period activations, responsible gaming flags | Responsible gaming tool usage |
3.2 xe77 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond the CNIC facial photograph required for age and identity verification purposes.
3.3 Where xe77 requests personal data that is optional rather than mandatory, this will be indicated at the point of collection. Failure to provide mandatory data (such as CNIC for KYC) will result in the relevant account function being unavailable, such as withdrawal processing.
4.1 xe77 uses the personal data it collects for the following purposes:
4.2 xe77 will not use your personal data for any purpose that is incompatible with the purposes listed in section 4.1 without obtaining your prior consent or where otherwise permitted by applicable law.
5.1 xe77 processes personal data on the following legal bases:
5.2 Where xe77 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not outweighed by the rights and interests of Players, taking into account the nature of the data involved and the safeguards applied.
6.1 xe77 places particular importance on the handling of KYC identity verification data due to its sensitive nature. KYC data at xe77 primarily comprises Pakistani CNIC documents and associated facial verification photographs.
6.2 KYC data is collected and processed exclusively for the purpose of verifying a Player's identity, age, and eligibility to hold an xe77 account in accordance with our international gaming license requirements. This is a mandatory regulatory obligation — xe77 cannot process withdrawals for Players who have not completed KYC verification.
6.3 Security of KYC Data:
6.4 KYC data will be retained for the minimum period required by xe77's international gaming license obligations, which typically requires retention of identity verification records for a minimum of five years following account closure.
7.1 xe77 collects financial data — including JazzCash account numbers, EasyPaisa mobile wallet numbers, bank account details, and USDT wallet addresses — for the sole purpose of processing deposits and withdrawals to and from the Player's xe77 account.
7.2 xe77 does not store full payment credentials beyond what is necessary for transaction processing and verification. Payment method details are used to verify that withdrawals are directed to accounts registered in the Player's verified name, which is a condition of xe77's gaming license.
7.3 All financial transaction records — including deposit amounts, withdrawal amounts, payment method used, and transaction timestamps — are retained by xe77 as required by anti-money-laundering compliance obligations under our international gaming license. These records are stored securely and accessed only by authorised financial compliance personnel.
7.4 Payment data may be shared with payment processors (such as JazzCash and EasyPaisa's underlying banking infrastructure) to the extent necessary to process the relevant transaction. Such sharing is governed by appropriate data processing agreements.
7.5 xe77 maintains records of all financial transactions for a minimum period specified by our licensing obligations, typically five years, regardless of whether the Player's account remains active during that period.
8.1 xe77 uses cookies and similar tracking technologies on the xe77 Platform for the purposes described in this section. Cookies are small data files stored on your device when you access the xe77 website.
8.2 xe77 uses the following categories of cookies:
8.3 In addition to cookies, xe77 automatically collects technical data when you access the Platform, including your IP address, device type, mobile network operator (Jazz, Zong, Telenor, Ufone), browser version, and operating system. This data is used for security monitoring, fraud prevention, and platform performance optimisation.
8.4 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the xe77 Platform and may prevent you from logging in or completing transactions.
9.1 xe77 does not sell, rent, or commercially transfer your personal data to any third party. Personal data may be shared with third parties only in the circumstances described in this section.
9.2 Categories of third parties who may receive your data:
9.3 All third parties who process personal data on xe77's behalf are subject to appropriate data processing agreements and are required to implement data security measures consistent with xe77's own standards.
9.4 xe77 will not disclose your personal data to law enforcement authorities except where required by a lawful order, warrant, or applicable legal obligation. xe77 will not voluntarily provide player data to any government authority beyond what is required by our licensing and regulatory obligations.
10.1 xe77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by xe77's international gaming license and applicable regulatory obligations.
10.2 The following retention periods apply to the principal categories of personal data held by xe77:
10.3 Where a Player requests deletion of their personal data, xe77 will action that request to the extent permitted by regulatory obligations. Data that must be retained under gaming license requirements cannot be deleted prior to the expiry of the mandatory retention period, even upon a valid deletion request.
11.1 xe77 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include:
11.2 In the event of a data security incident that is reasonably likely to result in risk to Players, xe77 will notify affected Players as required by our licensing obligations and will take immediate steps to contain and remediate the incident.
11.3 Players are responsible for maintaining the security of their own xe77 account login credentials. xe77 recommends using a strong, unique password for your xe77 account and enabling any available two-factor authentication options. xe77 will never ask you for your password via live chat, email, or any other communication channel.
12.1 As an xe77 Player, you have the following rights in relation to the personal data xe77 holds about you. To exercise any of these rights, contact xe77's compliance team via in-platform live chat. Requests will be acknowledged within 5 business days and responded to substantively within 30 calendar days.
You have the right to request a copy of the personal data xe77 holds about you and to receive information about how that data is used and stored.
You have the right to request correction of any inaccurate or incomplete personal data that xe77 holds about you, subject to verification of the corrected information.
You have the right to request deletion of personal data xe77 holds about you, where it is no longer necessary for its original purpose and where no regulatory retention obligation applies.
You have the right to request that xe77 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a particular use.
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.
You have the right to object to processing of your personal data where xe77 relies on legitimate interests as the legal basis, including objecting to receiving marketing communications at any time.
12.2 Exercising your data rights will not result in any negative impact on your xe77 account status or your ability to use xe77 gaming services, provided that the exercise of those rights does not conflict with xe77's regulatory obligations (for example, a deletion request that cannot be fulfilled due to mandatory KYC record retention).
13.1 xe77 may send promotional communications — including bonus offers, deposit match promotions, free spin awards, VIP notifications, and PSL cricket betting specials — to Players who have opted in to receive such communications at the time of account registration or at any subsequent point via account settings.
13.2 Marketing communications from xe77 will be sent to the mobile number and/or email address registered to your xe77 account. xe77 does not send unsolicited marketing communications to individuals who have not registered an account or who have opted out of marketing.
13.3 You may withdraw your consent to receive marketing communications from xe77 at any time by updating your communication preferences in your xe77 account settings or by contacting the xe77 customer support team via in-platform live chat. Opt-out requests will be processed within 5 business days.
13.4 Opting out of marketing communications will not affect your ability to receive transactional communications from xe77 — including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are not marketing communications and are sent as part of account operation.
14.1 xe77 is strictly prohibited to individuals under the age of 21 years. xe77 does not knowingly collect or process personal data from individuals under the age of 21.
14.2 xe77's CNIC-based KYC verification process is designed to prevent minors from registering accounts. Any account identified as belonging to an individual under 21 years will be closed immediately, all balances forfeited, and the personal data associated with that account handled in accordance with xe77's regulatory obligations under its gaming license.
14.3 If xe77 discovers that it has inadvertently collected personal data from an individual under 21 years, that data will be deleted promptly except to the extent that retention is required by xe77's regulatory obligations regarding underage gambling incidents.
15.1 xe77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory obligations, or operational requirements. The effective date displayed at the top of this policy will be updated each time a change is made.
15.2 Where xe77 makes a material change to this Privacy Policy — one that significantly affects how we collect, use, or share your personal data — we will notify registered Players via in-platform notification or by message to the contact details registered to your xe77 account, with reasonable advance notice before the change takes effect.
15.3 Minor amendments that do not materially alter the rights of Players or the nature of data processing — such as clarifications, formatting corrections, or structural reorganisation — may be made without individual notification. The updated policy will be published on this page with the revised effective date.
15.4 Your continued use of the xe77 Platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with an amendment, you should contact xe77 to close your account prior to the effective date of the change.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or to how xe77 handles your personal data, please contact xe77's compliance team through the following channel:
16.2 xe77 is committed to resolving privacy-related complaints promptly and fairly. Upon receipt of a formal privacy complaint, xe77 will:
16.3 If you are not satisfied with xe77's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under whose jurisdiction xe77's gaming license is issued. Details of the applicable regulatory authority are available from xe77's customer support team upon request.
16.4 xe77 treats all privacy complaints as strictly confidential. The identity of a Player who raises a privacy complaint will not be disclosed to any third party without the Player's consent, except where required by regulatory or legal obligation.
Have questions about your data rights or want to explore xe77's full range of games and responsible gaming tools? Our support team is available 24/7. Players must be 21 or older.
Access Your Account Responsible Gaming