Privacy Policy —
1x777 Platform

1 Introduction

1x777 ("Platform", "we", "us", "our") operates the online betting and live casino information website at 1x777.cam. We are committed to protecting the privacy and security of the personal data of all individuals who access, register on or use the Platform ("you", "your", "User").

This Privacy Policy ("Policy") explains what personal data we collect, the purposes for which it is collected and processed, with whom it may be shared, how long it is retained, and what rights you have in relation to your personal data. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein to the extent that your consent is required as the legal basis for processing.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, date of birth, device identifiers and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data. For this Platform, the Controller is the 1x777 operator.
• "Processor" — a third party that processes Personal Data on behalf of the Controller under a contractual arrangement.
• "KYC" — Know Your Customer: the identity and age verification process required to access certain platform features.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Data Subject" — the individual to whom Personal Data relates; in this context, the registered User.
• "CNIC" — Computerised National Identity Card, the primary identity document issued to Pakistani nationals.

3 Personal Data We Collect

We collect and process the following categories of Personal Data depending on the nature of your interaction with the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on official identity documents;
• Date of birth (for age verification purposes);
• Residential address;
• Email address;
• Mobile phone number;
• Username and encrypted account password.

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of a valid CNIC (front and back) or passport;
• Proof of address documentation (utility bill, bank statement or equivalent official document);
• Selfie or liveness-check image for facial verification;
• Proof of payment method (such as a screenshot of an Easypaisa or JazzCash account registered in your name) where required.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (bank account details, mobile wallet identifiers such as Easypaisa or JazzCash account references, Raast IDs, bank names such as HBL, UBL, Meezan Bank or Bank Alfalah where relevant);
• Transaction amounts, timestamps and associated currency (PKR or other supported currencies);
• Bonus claim and wagering activity records.

3.4 Technical and Device Data

• IP address and approximate geolocation (country/city level, e.g., Karachi, Lahore, Islamabad);
• Device type, operating system and browser type and version;
• Session identifiers, access timestamps and login history;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.5 Communications Data

• Records of support interactions conducted via live chat or email;
• Content of any feedback, complaint or enquiry submitted to support.

3.6 Behavioural and Usage Data

• Pages visited, features accessed and time spent on the Platform;
• Betting and gaming activity (markets accessed, bets placed, games played);
• Responsible gambling tool usage (limit settings, self-exclusion activity).

4 How We Collect Personal Data

We collect Personal Data through the following means:

• Directly from you — information you provide during account registration, KYC submission, deposit/withdrawal requests or when contacting support;
• Automatically — technical and behavioural data collected via cookies, session tracking and server logs as you use the Platform;
• From third-party processors — identity verification results from KYC processors, fraud-scoring data from fraud-prevention service providers, and transaction confirmation data from payment processors;
• From public sources — where permitted, publicly available records used to verify information provided during KYC or to support AML compliance obligations.

5 Purposes and Legal Basis for Processing

We process Personal Data only where a lawful basis for doing so exists. The following table summarises our primary processing activities:

Purpose	Legal Basis	Data Categories Used
Account registration and management	Contract performance	Identity, contact, login data
Age and identity verification (KYC)	Legal obligation; contract	KYC documents, selfie, address
Processing deposits and withdrawals	Contract performance	Financial and transaction data
Fraud prevention and AML compliance	Legal obligation; legitimate interest	Identity, financial, device data
Responsible gambling monitoring	Legal obligation; legitimate interest	Usage, betting activity, limit data
Customer support and dispute resolution	Contract performance; legitimate interest	Identity, communications data
Platform security and integrity	Legitimate interest	Technical, device and login data
Marketing communications (opted-in only)	Consent	Contact details, usage preferences
Platform analytics and improvement	Legitimate interest	Behavioural and technical data

6 Data Sharing and Disclosure

We do not sell, rent or trade your Personal Data to unaffiliated third parties for their own commercial or marketing purposes. We share Personal Data only in the following circumstances:

6.1 Service Providers (Processors)

We engage third-party service providers who process Personal Data on our behalf under written data-processing agreements. Categories of processors include:

• KYC and identity verification providers;
• Payment processing and fraud-prevention platforms;
• Customer support software providers;
• Cloud hosting and infrastructure providers;
• Email and communication delivery providers.

All processors are contractually required to process data only for the stated purpose, maintain appropriate security standards and not disclose data to further parties without authorisation.

6.2 Legal and Regulatory Disclosure

We may disclose Personal Data to competent authorities, courts or regulators where required to do so by law, court order or in connection with AML/fraud investigations. Where legally permissible, we will notify the affected User of such a disclosure.

6.3 Business Transfers

In the event of a merger, acquisition or sale of assets involving 1x777, Personal Data may be transferred as part of that transaction. Users will be notified via in-Platform notice or email prior to any such transfer, and the transferee will be required to honour the commitments set out in this Policy.

7 International Data Transfers

The Platform may process or store Personal Data on servers located outside Pakistan. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as:

• Transfers to jurisdictions with adequate data protection frameworks recognised by the operator's license authority;
• Contractual clauses binding the recipient to data protection standards equivalent to those in this Policy;
• Use of processors that maintain relevant international security certifications.

Pakistani users should be aware that data protection laws vary between jurisdictions and that protections applicable in Pakistan (including those under the Prevention of Electronic Crimes Act 2016 or the Personal Data Protection Bill, where enacted) may differ from protections in the operator's licensing jurisdiction.

8 Data Retention

We retain Personal Data for as long as your Account remains active and for such additional period as is required to comply with legal obligations. Specific retention guidelines are as follows:

• Active account data: Retained for the duration of account registration plus a minimum post-closure period as required under applicable AML and operator licensing obligations (typically five to seven years depending on the licensing jurisdiction).
• KYC documents: Retained for the mandatory period required under AML regulations in the operator's licensing jurisdiction following account closure.
• Transaction records: Retained for the period required by financial and AML record-keeping requirements.
• Support communications: Retained for a minimum of two years to support complaint resolution and audit purposes.
• Voluntarily deleted data: Where you exercise a deletion right, data will be purged or anonymised unless retention is required by law.

Upon expiry of the applicable retention period, data is securely deleted or permanently anonymised so that it can no longer be associated with an identified individual.

9 Cookies and Tracking Technologies

1x777 uses cookies and similar tracking technologies to enable platform functionality, maintain session state and collect analytics data. The following cookie categories are used:

Cookie Type	Purpose	Consent Required?
Essential / Session	Maintain login state, security tokens and session continuity. Required for the Platform to function.	No — technically necessary
Analytics	Understand how users navigate the Platform; identify performance issues; improve user experience.	Yes — opt-in
Preference	Remember language preferences, display settings and responsible gambling tool configurations.	Yes — opt-in

No behavioural advertising cookies or third-party ad-tracking cookies are used on this Platform. You may manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

10 Marketing Communications

With your explicit consent at the time of registration or through subsequent opt-in, we may send you marketing communications regarding promotions, bonus offers, new game releases and platform updates. Marketing communications may be delivered via email or in-Platform notifications.

You may withdraw consent for marketing communications at any time by:

• Updating your communication preferences in your Account settings;
• Clicking the unsubscribe link included in every marketing email;
• Contacting support via live chat or email and requesting removal from marketing lists.

Withdrawing marketing consent does not affect transactional or account security communications (such as withdrawal confirmation emails, password reset notifications and responsible gambling alerts), which are sent on the basis of contract performance or legitimate interest and cannot be opted out of while your Account remains active.

11 Children's Privacy

The Platform is strictly for adults. We do not knowingly collect or process Personal Data from individuals under the age of 18, or the higher minimum age required by the operator's licensing jurisdiction.

During registration, users must confirm their date of birth. KYC verification includes age verification against submitted identity documents. If we discover that a User has registered by providing a false date of birth and is in fact under the applicable minimum age, we will immediately:

• Permanently close the Account;
• Forfeit any winnings held in the Account;
• Return any deposited real-money balance at our discretion, pending investigation;
• Delete all Personal Data associated with the Account as soon as legally permissible.

Parents or guardians who believe a minor has registered on the Platform should contact support immediately via live chat or email so that the Account can be reviewed and closed without delay.

12 Security Measures

We implement a range of technical and organisational measures to protect Personal Data against unauthorised access, loss, alteration or destruction:

• HTTPS/TLS encryption: All data in transit is encrypted using current Transport Layer Security (TLS) protocols. Every page on the Platform is served exclusively over HTTPS.
• Encryption at rest: Sensitive stored data — including KYC documents and financial records — is encrypted at rest on secured servers.
• Access controls: Access to Personal Data by platform staff is granted on a need-to-know basis with role-based access controls and audit logging.
• Two-factor authentication: Two-factor authentication (2FA) is available to all Account Holders and is recommended for all users to protect account access.
• Incident response: We maintain documented incident response procedures. In the event of a data breach that poses a material risk to affected users, we will provide notification in accordance with applicable obligations.

Despite these measures, no internet-based system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their own login credentials and for reporting suspected unauthorised access to support immediately.

13 Your Rights as a Data Subject

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your Personal Data:

To exercise any of the above rights, please contact us via the support channels listed in Section 16. We may require identity verification before processing a data rights request to ensure that we are responding to the legitimate Account Holder.

14 Third-Party Links and Services

The Platform may contain references to third-party services, including payment providers such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, which are mentioned solely as familiar payment references for Pakistani users. These references do not constitute hyperlinks to external sites from within the Platform. 1x777 is not responsible for the privacy practices or data handling of any third-party organisation.

Where you interact with third-party payment processors in connection with your Account (such as when completing a bank transfer or mobile wallet deposit), your data is subject to the privacy policies of those third parties in addition to this Policy. We recommend reviewing the relevant provider's privacy documentation before transacting.

15 Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in applicable law, our data practices or the services we offer. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy;
• Provide notice of significant changes via email or in-Platform notification where operationally practical;
• Where required by applicable law, seek fresh consent before processing data under materially changed terms.

We encourage you to review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the updated terms unless fresh consent is specifically required.

16 Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 within the Platform interface. For data rights requests, clearly state your request type in the opening message.
• Email: [email protected] — displayed as plain text only, not a clickable link.
• Response time: We aim to acknowledge all data rights requests within five business days and to resolve standard requests within 30 days. Complex requests may require additional time, and you will be notified if an extension is necessary.
• Languages: Privacy enquiries are handled in English and Urdu. No telephone or WhatsApp support is available for privacy matters.

For complaints regarding how your Personal Data has been handled, you are also entitled to raise the matter with the data protection authority in the operator's licensing jurisdiction. Details of the relevant supervisory authority are published in the operator's licensing documentation.

For questions related to our Terms & Conditions or Responsible Gambling tools, please refer to the relevant page or contact support.