xpk77 Privacy Policy

xpk77 ("xpk77," "we," "us," "our") is an online casino and sports betting platform operating at xpk77.vip. xpk77 holds an internationally recognised gaming licence and is committed to maintaining the highest standards of data protection for all its users, including players based across Pakistan.

For the purposes of this Privacy Policy, xpk77 is the data controller — meaning we are responsible for deciding how and why your personal data is processed. If you have any questions about how xpk77 handles your information, you can reach our Data Privacy team at any time via the contact details in Section 14 of this policy.

This Privacy Policy applies to all personal data collected through the xpk77 website, mobile-optimised platform, customer support communications, and any other digital touchpoints operated by xpk77. It does not apply to third-party websites or services that may be linked from the xpk77 platform.

xpk77 collects personal data in the following categories. We have been deliberate in limiting this list to what is genuinely necessary for platform operation, regulatory compliance, and player safety.

xpk77 uses your personal data for the following specific purposes only:

• Account Creation and Management: To register your xpk77 account, verify your identity, and manage your player profile throughout your relationship with xpk77.
• Payment Processing: To process your deposits and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT. Financial data is shared with payment processors only to the extent required to execute your transactions.
• Regulatory Compliance and KYC: To satisfy our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and the conditions of our international gaming licence. This includes identity verification and transaction monitoring.
• Game and Betting Services: To provide access to xpk77's casino games, sports betting markets, PSL cricket betting, slot games, dice, and fishing games. Transaction data is retained to enable bet settlement, dispute resolution, and game history access.
• Responsible Gaming: To monitor player behaviour for indicators of problem gambling and to administer deposit limits, loss limits, cooling-off periods, and self-exclusion requests. This use of data is in the best interests of player welfare.
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes via live chat and email support.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and other prohibited conduct described in xpk77's Terms & Conditions.
• Platform Improvement: To analyse usage patterns and improve the functionality, speed, and overall experience of the xpk77 platform for all Pakistani players.
• Marketing Communications: To send you promotional emails, bonus offers, and platform news — but only where you have given your explicit consent to receive such communications. See Section 12 for details on managing your marketing preferences.

xpk77 processes your personal data only where a valid legal basis exists. The following legal bases apply to the processing activities described in this policy:

• Contract Performance: Processing your identity, contact, financial, and transaction data is necessary for xpk77 to fulfil its contractual obligations to you as an account holder — specifically, to provide gaming services, process payments, and settle bets.
• Legal Obligation: Processing for KYC verification, AML transaction monitoring, and regulatory reporting is required by the applicable laws and licensing conditions under which xpk77 operates. xpk77 cannot waive these obligations at a player's request.
• Legitimate Interests: Processing for fraud prevention, platform security, and platform improvement is carried out on the basis of xpk77's legitimate interest in maintaining a safe, fair, and functional gaming environment. These legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications is based entirely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 What Are Cookies. Cookies are small text files placed on your device when you visit the xpk77 platform. They allow the platform to remember your session, preferences, and certain aspects of your activity to provide a smoother and more personalised experience.

5.2 Types of Cookies Used by xpk77.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate xpk77. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as preferred language (English or Urdu), display settings, and last-used payment method to streamline your experience.
• Analytics Cookies: Collect anonymised data about how players use the xpk77 platform — which pages are most visited, where users drop off, and how features are interacted with. This data is used solely to improve the platform.
• Marketing Cookies: Used only where you have given consent, to track which promotions you have engaged with and to ensure you are not shown irrelevant offers repeatedly.

5.3 Managing Cookies. You can control non-essential cookies through the cookie preferences panel available on the xpk77 platform. You may also adjust cookie settings in your browser at any time, though disabling strictly necessary cookies will affect your ability to use the platform.

xpk77 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of third parties only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT gateway providers receive only the financial and identity data required to process your specific transaction. These providers are contractually bound to process your data exclusively for payment purposes.
• Identity Verification Providers: Third-party KYC and AML screening services may process your identity documents and CNIC details on xpk77's behalf to fulfil regulatory verification requirements. All such providers operate under binding data processing agreements.
• Game Content Providers: Third-party game studios whose content is hosted on the xpk77 platform may receive anonymised game session data (such as bet amounts and game outcomes) for the purposes of RTP auditing and technical support. No identifiable personal data is shared with game providers beyond what is required for technical troubleshooting.
• Regulatory Authorities: xpk77 may be required by law or by the conditions of its gaming licence to disclose player data to regulatory or law enforcement authorities. xpk77 will always seek legal advice before complying with such requests and will notify affected players where legally permissible to do so.
• Professional Advisers: Legal advisers, auditors, and compliance consultants engaged by xpk77 may access player data on a strictly need-to-know basis for the purposes of legal advice, financial auditing, or compliance review. All such parties are bound by professional confidentiality obligations.

As an internationally licensed gaming platform, xpk77 may process and store personal data on servers located outside of Pakistan. Where your data is transferred internationally, xpk77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within Pakistan.

These safeguards include, but are not limited to: contractual clauses in agreements with all data processors that require them to maintain equivalent data protection standards; technical security measures including end-to-end encryption of data in transit and at rest; and regular auditing of third-party data processors to verify compliance with agreed data protection obligations.

xpk77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

Once the applicable retention period has expired, xpk77 will securely delete or irreversibly anonymise your personal data. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

As an xpk77 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Privacy team using the contact details in Section 14. We will respond to all valid requests within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data xpk77 holds about you, including a summary of how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data xpk77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly in your xpk77 account settings.
• Right to Erasure: You may request that xpk77 delete your personal data. This right is not absolute — it does not apply where we are required to retain your data to comply with a legal obligation (such as AML record-keeping requirements) or to defend against a legal claim.
• Right to Restrict Processing: In certain circumstances, you may request that xpk77 suspend processing of your data — for example, while the accuracy of your data is being contested.
• Right to Data Portability: You may request that xpk77 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your data carried out on the basis of legitimate interests. You also have an unconditional right to object to direct marketing processing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

xpk77 takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Technical Measures include:

• TLS 1.3 encryption for all data in transit between your device and xpk77 servers.
• AES-256 encryption for sensitive data stored at rest, including payment account details and identity documents.
• Multi-factor authentication options available on all xpk77 player accounts.
• Automated intrusion detection and real-time security monitoring of all platform systems.
• Regular third-party penetration testing and security audits of the xpk77 infrastructure.

Organisational Measures include:

• Strict access controls ensuring that only authorised xpk77 personnel with a legitimate need can access player personal data.
• Data protection training for all xpk77 staff who handle personal data as part of their role.
• A formal data breach response procedure with notification obligations to affected players and relevant authorities where required.

In the event of a data breach that poses a risk to your rights and freedoms, xpk77 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

xpk77 operates a strict 21+ age policy. The xpk77 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory step during the registration and KYC process, and xpk77 employs automated and manual checks to detect underage registration attempts.

If xpk77 becomes aware that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately:

• The account will be suspended and access to the platform revoked.
• All personal data associated with the account will be securely deleted as soon as possible, subject to any minimum retention obligations under applicable law.
• Any deposits made will be returned to the payment method used, following appropriate verification.
• All winnings associated with the account will be forfeited.

We strongly encourage parents and guardians in Pakistan to make use of internet filtering and parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has registered on xpk77, please contact our support team immediately.

12.1 Consent-Based Marketing. xpk77 will only send you promotional emails, bonus notifications, and platform news where you have given your explicit consent to receive such communications during the registration process or through your account settings. We do not send unsolicited marketing communications.

12.2 What We May Send. Where you have consented, xpk77 marketing communications may include: welcome bonus offers, deposit match promotions, free spins on new slot releases, PSL cricket betting promotions, cashback offers, seasonal campaigns, and platform feature updates relevant to your interests.

12.3 Opting Out. You can withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email you receive from xpk77.
• Updating your communication preferences in the xpk77 account settings panel.
• Contacting xpk77 customer support via live chat and requesting that your marketing preferences be updated.

Opting out of marketing communications will not affect your ability to receive essential transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts — these are necessary for the operation of your account and cannot be disabled.

xpk77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the conditions of our gaming licence. When material changes are made to this policy, xpk77 will:

• Update the "Effective Date" at the top of this policy.
• Send a notification to your registered email address summarising the key changes at least 14 days before the updated policy takes effect.
• Display a prominent notice on the xpk77 platform highlighting that the Privacy Policy has been updated.

Your continued use of the xpk77 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this policy, you should stop using the platform and contact our support team to close your account and arrange return of any eligible balance.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xpk77 has handled your personal data, please contact our Data Privacy team using the details below:

• Email: support@xpk77.vip
• Support Channel: 24/7 Live Chat on xpk77.vip
• Response Time: Data rights requests handled within 30 days of receipt
• Languages: English & Urdu

If you are not satisfied with how xpk77 has handled your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or to the regulatory body that oversees xpk77's gaming licence. xpk77 will cooperate fully with any such regulatory or supervisory investigation.