Privacy Policy — How xc77 Protects Your Personal Data

1 About This Policy

This Privacy Policy applies to xc77, operating at xc77.onl. The platform is accessible to players in Pakistan and this policy is written with Pakistani users in mind. When we refer to "xc77", "we", "us", or "the platform", we mean the entity responsible for operating xc77.onl.

This policy covers information collected through the xc77 website and any related platform features — including the sports betting section, slot games, fish games, live casino, account registration, deposit and withdrawal processes, customer support interactions, and promotional participation.

By creating an account or using any feature of xc77, you confirm that you have read and understood this Privacy Policy. If you do not agree to how your data is handled as described here, you should not use the platform.

2 Data We Collect

xc77 collects personal data when you register, use platform features, deposit or withdraw, contact support, or participate in promotions. The categories of information we collect include:

Information You Provide Directly:

• Full name as it appears on your CNIC or other identity document
• Pakistani mobile number used to register
• Date of birth (used for age verification)
• Password (stored as a hashed value — xc77 staff cannot see your password)
• Identity verification documents when requested (e.g. CNIC image)
• Correspondence with customer support, including chat messages and emails

Information Collected Automatically:

• IP address and approximate location at time of login and registration
• Device type, browser version, and operating system
• Session data including duration, pages visited, and features used
• Bet history, game activity, deposit and withdrawal records
• Cookie and tracking data as described in Section 6

Information from Payment Providers:

• Transaction reference numbers and confirmation status from JazzCash, Easypaisa, Raast, and other payment processors
• Account holder name associated with the payment method (for verification)
• Transaction amounts and timestamps

3 How We Use Your Data

The data xc77 holds about you is used for the following purposes:

xc77 does not use automated decision-making processes that have legal or similarly significant effects on players without human review. Where automated systems flag unusual activity, a member of the team reviews the case before any account action is taken.

4 Payment Data

All financial transactions on xc77 are processed in PKR through integrated payment gateways. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or card, the actual processing of the transaction is handled by the relevant payment provider — not directly by xc77's servers.

What xc77 receives and stores from payment transactions includes:

• Transaction reference number and status (success/fail/pending)
• Amount in PKR and date/time of the transaction
• The payment method type (e.g. JazzCash, Easypaisa) and the account holder name where provided by the gateway for verification

xc77 does not store full JazzCash or Easypaisa account numbers, bank account details, card numbers, or any authentication credentials for your payment accounts. These remain entirely within your payment provider's systems.

Payment transaction records are retained for as long as legally required for financial record-keeping purposes, even after an account is closed. This is standard practice for any financial service platform and is not specific to xc77.

5 Sharing Your Data

xc77 does not sell, rent, or share your personal data with third parties for their own commercial use. We do share data with the following categories of service providers where necessary to operate the platform:

• Payment Processors: JazzCash, Easypaisa, Raast-enabled banks, and card payment gateways receive the transaction data needed to process your deposits and withdrawals. Each processor operates under their own privacy terms.
• Identity Verification Providers: Where CNIC verification or age verification is required, documents may be passed to a third-party verification service. These providers are bound by contractual data handling obligations.
• Fraud Prevention Services: Device fingerprinting and IP-based fraud detection tools may receive non-personally identifiable technical data to help identify suspicious activity patterns.
• Analytics Providers: Anonymised, aggregated usage data may be shared with analytics services to help us understand platform performance. This data cannot identify individual users.
• Legal and Regulatory Requests: Where xc77 is required by law to disclose account information — for example, in response to a legitimate legal order — we will comply with such requests. Where permitted by law, we will notify affected users.

All third-party service providers used by xc77 are required to handle personal data only for the specific purpose for which it was shared and are not permitted to use it for their own unrelated purposes.

6 Cookies and Tracking

xc77 uses cookies — small text files stored on your device — to make the platform work properly, keep you logged in, and understand how players use the site. Here is what each category of cookie does:

• Essential Cookies: Required for the platform to function. These include session tokens that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your account preferences. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings and previously used deposit methods to make your experience smoother on repeat visits.
• Analytics Cookies: Collect anonymised data about which pages are visited, how long players spend on different sections, and what devices are used. This helps us identify which parts of xc77 work well and which need improvement. No personally identifiable information is included in analytics data.
• Marketing Cookies: Used to understand whether players who clicked on promotional content went on to register or engage with specific features. These are optional and can be declined.

You can manage cookie preferences through your browser settings. Blocking all cookies will affect platform functionality — in particular, the login session cannot be maintained without session cookies. For the best experience on xc77, we recommend allowing essential and functional cookies at minimum.

7 Data Retention

xc77 retains your personal data for as long as your account is active and for a period after closure as required by operational and legal needs. Specifically:

• Active accounts: Data is retained for the full duration of your account's existence on the platform.
• Closed accounts: Core account information and transaction records are retained for a minimum of five years after account closure. This is standard for financial service platforms and ensures we can respond to any legitimate disputes or legal enquiries about past transactions.
• Support correspondence: Chat and email records with the support team are retained for up to three years.
• Identity documents: CNIC and other verification documents are retained for the period required by our verification provider's policies and deleted when no longer needed.
• Analytics data: Anonymised usage data used for platform improvement is retained indefinitely as it cannot identify individuals.

When data is no longer required under the above retention schedule, it is securely deleted or anonymised.

8 Data Security

xc77 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption for all data transmitted between your browser and xc77.onl
• Passwords stored as salted hashes — xc77 staff cannot read your password in plain text
• Access controls ensuring only authorised staff can access account data, and only to the extent required by their role
• Regular security reviews of platform infrastructure and third-party integrations
• Two-factor authentication available for account login to add an additional layer of protection

No system is completely impenetrable, and xc77 cannot guarantee absolute security. However, we take all reasonable and practical steps to protect your data and will notify affected users of any data breach that poses a material risk, in accordance with applicable requirements.

9 Your Rights Over Your Data

As a registered player on xc77, you have the following rights over your personal data. To exercise any of these rights, contact the xc77 support team via the in-platform chat or at [email protected]:

xc77 will acknowledge data rights requests within a reasonable timeframe and complete them within 30 days where operationally possible. Complex requests or those requiring legal review may take longer. We will keep you informed of progress.

10 Children's Privacy

xc77 is strictly an adult platform for users aged 18 years and above. We do not knowingly collect personal data from anyone under 18 years old. If a minor has registered on the platform using false age information, the account will be closed immediately upon discovery and any collected data will be deleted except where legally required to be retained for fraud prevention purposes.

Parents and guardians who believe their child may have registered an account on xc77 should contact support immediately at [email protected] so that the account can be closed and investigated without delay.

11 Changes to This Privacy Policy

xc77 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, improvements to our data handling practices, or changes in applicable requirements. When updates are made, the "Last Updated" date at the top of this page will be revised.

For material changes that significantly affect how your data is used, xc77 will provide notice via the platform or to your registered contact details before the change takes effect. For minor updates or clarifications, the revised policy will be posted on this page without individual notification.

Continued use of xc77 after a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with changes to the policy, you should stop using the platform and request account closure.

12 Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or how xc77 handles your personal data, please get in touch using the following:

• Support Chat: The fastest method — available directly in the xc77 platform after you log in. Typically responds within a few hours.
• Email: [email protected] — for privacy-specific requests, include "Privacy Request" in the subject line so it reaches the right team member promptly.
• Response Time: We aim to acknowledge privacy-related requests within 48 hours and resolve them within 30 days. Complex cases may require additional time.

We take privacy concerns seriously and will make every reasonable effort to address your query clearly and completely. If after contacting us you feel your concern has not been adequately addressed, you are entitled to raise the matter through any applicable dispute resolution mechanism available to you.