This Privacy Policy explains how XC77 collects, processes, stores, shares and protects your personal data when you use our online gaming platform. Your privacy matters to us — and understanding how your information is handled is your right.
These cards summarise our key data practices. They are not a substitute for the full policy below — please read it completely.
Registration details, identity documents, transaction records, device and browser data, and communication history when you contact support. We collect only what is necessary to operate your account and meet compliance obligations.
Your data is used to manage your account, process transactions, complete KYC/AML verification, personalise your experience, send account communications, detect fraud and comply with applicable regulatory obligations.
We do not sell personal data. We share information only with service providers essential to platform operation (payment processors, identity verification providers, fraud detection services) and where legally required.
256-bit TLS encryption in transit, access controls, secure storage and regular security assessments protect your data. Staff access is limited to those who need it for defined operational purposes.
You have rights over your personal data including access, correction, erasure, portability and the right to object to certain processing activities. Contact us to exercise these rights at any time.
We use cookies for essential platform function, session management and analytical purposes. You can manage cookie preferences through your browser settings, subject to certain functional limitations.
This Privacy Policy ("Policy") is issued by XC77 ("Platform", "We", "Us", "Operator") and applies to all personal data collected, processed and stored in connection with your use of the XC77 online gaming platform, accessible at xc77.cam and any associated mobile interfaces, applications or subdomains.
XC77 is an English-language online gaming platform designed for adult users, including players based in Pakistan. This Policy describes how we handle personal data in connection with account registration, gameplay, financial transactions, customer support and platform communications.
This Policy should be read alongside our Terms & Conditions. By using the XC77 platform, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices, you must discontinue use of the platform.
This Policy does not constitute legal advice and does not address the full scope of data protection law in Pakistan or any other jurisdiction. If you have specific concerns about your data rights under applicable law, we recommend seeking independent legal guidance.
Any information relating to an identified or identifiable natural person. This includes your name, email address, date of birth, residential address, financial details, IP address and any other data that can identify you directly or indirectly.
Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure or destruction — whether by automated means or otherwise.
The entity that determines the purposes and means of processing personal data. XC77 is the data controller for personal data collected through the platform.
A third party that processes personal data on behalf of the data controller under a contractual arrangement and subject to data processing obligations.
Small text files placed on your device by a website to store session or preference information, support analytics, and facilitate platform functionality.
Know Your Customer — the identity verification process through which XC77 confirms the identity, age and legitimacy of players in accordance with applicable anti-money laundering and responsible gambling obligations.
XC77 acts as the data controller for all personal data collected through the platform. As data controller, XC77 determines the lawful basis for processing, the categories of data collected, the purposes for which data is used and the retention periods applicable.
For data-related enquiries, including requests to exercise your rights, please contact us at [email protected]. This email address is provided as plain text only and is not a clickable link.
XC77 collects the following categories of personal data, depending on how you interact with the platform:
| Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number | Registration; KYC verification |
| Contact Data | Email address, residential address (including city: e.g. Karachi, Lahore, Islamabad), phone number | Registration; account updates |
| Financial Data | Payment method references (e.g. Easypaisa, JazzCash, Raast, bank account identifiers), deposit and withdrawal history, PKR transaction amounts | Deposits; withdrawals; payment verification |
| Verification Documents | Copies of national ID (CNIC), passport, utility bill, payment method screenshots submitted during KYC | KYC/AML verification |
| Technical Data | IP address, browser type, operating system, device identifiers, time zone, screen resolution | Automated collection on platform access |
| Usage Data | Pages visited, games played, wagers placed, session duration, login history, betting market preferences | Automated collection during platform use |
| Communication Data | Content of support requests, live chat transcripts, email correspondence with XC77 support | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred contact channel | Registration; account settings |
We do not collect sensitive personal data (such as health data, racial or ethnic origin, religious beliefs or biometric data) unless required for specific compliance purposes and with appropriate safeguards in place.
XC77 processes personal data only where a lawful basis exists for doing so. The applicable legal bases are:
XC77 uses the personal data we collect for the following defined purposes:
Creating, maintaining and administering your XC77 account, including processing your registration information, verifying your identity and managing your account settings and preferences.
Facilitating deposits and withdrawals, recording financial transactions and communicating with payment method processors. Financial data associated with Easypaisa, JazzCash, Raast, bank transfer or other available methods is processed to execute your requested transactions and to maintain accurate records.
Verifying your identity, age and payment method ownership in accordance with applicable anti-money laundering, fraud prevention and responsible gambling obligations. Verification documents (e.g. CNIC copies) are processed solely for these purposes.
Tailoring your experience based on your activity, preferences and location — for example, presenting cricket betting markets prominently during PSL or ICC tournament periods, or displaying PKR amounts as your default currency.
Analysing usage data to identify patterns that may indicate problem gambling behaviour, and deploying responsible gambling tools (limit alerts, cooling-off prompts) where appropriate as part of our duty of care to players.
Monitoring access logs, transaction patterns and account activity to detect and prevent fraud, money laundering, collusion, bonus abuse and other prohibited conduct as defined in the Terms & Conditions.
Sending promotional communications, bonus notifications and platform updates to Players who have consented to receive them. You may opt out of marketing communications at any time via your account settings or by contacting support.
Processing your communications when you contact our support team, including maintaining records of support interactions for quality assurance and dispute resolution purposes.
XC77 does not sell, rent or trade personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent necessary:
Payment method references (such as Easypaisa, JazzCash, Raast and Pakistani bank identifiers) are processed as part of transaction records. These details are shared with relevant payment processing providers solely to facilitate your requested transactions. XC77 does not share this data with marketing third parties.
XC77 is an internationally operated platform. Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction.
Where personal data is transferred internationally, XC77 takes appropriate measures to ensure that such transfers are conducted with adequate safeguards, including contractual arrangements with receiving entities that impose data protection obligations consistent with applicable standards.
By using the XC77 platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. If you have questions about specific international transfer arrangements, please contact us at [email protected].
XC77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligations that require longer retention periods.
| Data Category | Retention Basis |
|---|---|
| Account & Identity Data | Retained for the duration of the account and for a period following closure as required by applicable anti-money laundering and regulatory record-keeping obligations. |
| Financial Transaction Records | Retained for a minimum period as required under applicable financial compliance and AML obligations, typically five to seven years depending on the applicable regulatory framework. |
| KYC Verification Documents | Retained for the period required under the Operator's applicable licensing jurisdiction and AML obligations, and securely destroyed thereafter. |
| Communication Records | Support communications are retained for a reasonable period to support dispute resolution, quality assurance and regulatory compliance purposes. |
| Technical & Usage Data | Retained in aggregate or pseudonymised form for analytical and security purposes. Session logs are retained for a shorter period consistent with their operational purpose. |
Upon account closure, XC77 will delete or anonymise personal data that is no longer required for the above purposes, subject to legal retention obligations.
XC77 uses cookies and similar tracking technologies to support the operation and improvement of the platform. The categories of cookies we use are:
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, but may affect some personalisation features.
XC77 does not use cookies to serve targeted advertising for third-party products or to track your activity across websites outside of xc77.cam.
Subject to applicable law, you have the following rights in relation to your personal data held by XC77. To exercise any of these rights, contact us at [email protected].
Request a copy of the personal data XC77 holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that processing of your data be restricted in certain circumstances, such as while a rectification request is being assessed.
Receive your personal data in a structured, commonly used machine-readable format where technically feasible, where processing is based on consent or contract.
Object to processing based on legitimate interests. XC77 will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.
Response Timeframe: XC77 will respond to data rights requests within a reasonable period, typically within 30 days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeline.
XC77 employs technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration or destruction. Key measures include:
No security system is impenetrable. While XC77 takes reasonable precautions, we cannot guarantee absolute security of data transmitted over the internet. Players are encouraged to maintain strong passwords, enable two-factor authentication and contact us promptly if they suspect unauthorised account access.
XC77 is strictly for adults aged 18 years or older — or the higher minimum required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.
Where XC77 identifies or has reasonable grounds to believe that a registered user is under the minimum eligible age, the Account will be suspended immediately. Any deposits made by or on behalf of a minor will be returned and any winnings accrued will be forfeited.
If you become aware that a minor has registered an Account on XC77, please notify us immediately at [email protected].
The XC77 platform may reference or operate in conjunction with third-party services, including payment processing infrastructure associated with familiar Pakistani payment methods such as Easypaisa, JazzCash and Raast. These references are operational and do not constitute endorsement of those providers, nor do those providers endorse or support XC77.
Third-party service providers engaged by XC77 operate under their own privacy policies in relation to data they independently control. XC77 is not responsible for the privacy practices of third-party providers beyond the data processing obligations imposed on them by contract.
The XC77 platform does not contain hyperlinks to external websites. If you navigate independently to any third-party website, its privacy practices are governed by that site's own policy, not by this document.
XC77 is an English-language platform serving users including those based in Pakistani cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Pakistan does not currently have a comprehensive standalone data protection legislation equivalent to the GDPR; however, provisions relating to privacy and data protection exist across various legislative instruments.
XC77 does not claim to operate under a Pakistani regulatory framework. Our data processing practices are governed by the legal and regulatory requirements of the jurisdiction in which the Operator is incorporated and licensed. This Policy reflects those requirements.
Players based in Pakistan are encouraged to understand their rights and obligations under applicable Pakistani law, including in relation to the use of financial data, payment accounts and any applicable telecommunications regulations. This Policy does not constitute legal advice applicable to your personal situation in Pakistan.
XC77 does not share personal data with any Pakistani government authority, financial regulator (including the State Bank of Pakistan), the Pakistan Telecommunication Authority (PTA), or any provincial authority unless legally compelled to do so by a binding legal instrument.
XC77 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or how your data is processed — will be communicated to registered players via the email address on file or via a prominent notice on the platform, prior to the effective date of the change.
Minor amendments, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without specific notification. The "Last Updated" date at the top of this page reflects the most recent revision.
Your continued use of the XC77 platform following the publication of an updated Policy constitutes your acceptance of the revised version. If you do not agree with any changes, you should discontinue use of the platform and may request account closure.
For all privacy-related enquiries, data rights requests, concerns about how your personal data is handled, or to report a suspected data protection issue, please contact XC77 using the details below:
Email (plain text — not a clickable link):
[email protected]
Please include "Privacy Request" or "Data Rights Request" in the subject line of your communication to ensure your query is directed to the appropriate team. We aim to acknowledge privacy requests within five business days and to respond in full within 30 days.
Support is available in English and Urdu. Response times may vary during peak periods.
You now understand how XC77 handles your personal data. Explore the platform, review our Terms, or learn about our Responsible Gambling tools — all built with your interests in mind.
Adults 18+ only, or the higher minimum required by the operator/license jurisdiction. Local laws, including the Prevention of Gambling Act, 1977, may restrict gambling in Pakistan. Play responsibly.