xx7 Privacy Policy — How We Protect Your Data

01 Introduction

This Privacy Policy applies to all users of xx7.st — Pakistan's online gaming and sports betting platform. xx7 ("we", "us", "our") is committed to handling your personal data responsibly, transparently and securely.

When you access xx7.st, create a user account, make a deposit in PKR, place a bet on cricket or PSL, play a game in the lobby, or contact our support team, you share certain personal data with us. This policy explains exactly what we collect, why we collect it, how we use it and the choices you have over your own data.

By using the xx7 platform you confirm that you have read this Privacy Policy and agree to the data practices described here. If you do not agree, please do not use the platform. This Privacy Policy should be read alongside our Terms and Conditions.

02 Data We Collect

xx7 collects personal data in the following categories depending on how you interact with the platform:

We do not collect sensitive personal data such as biometric data, health information or financial credit records beyond what is directly relevant to payment verification on xx7.

03 How We Use Your Data

xx7 uses the personal data collected for the following purposes. For each purpose, we have a legitimate basis for processing your data:

• Account Management: To create and maintain your xx7 account, authenticate your login, and keep your account details accurate and up to date.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, and bank transfer. Payment data is used to match transactions to your account and to verify that the payment method belongs to you.
• Identity Verification: To verify your age (18+) and identity before processing withdrawals or where there are grounds to suspect fraudulent activity on an account.
• Fraud Prevention & Security: To detect and prevent fraud, bonus abuse, money laundering, account takeovers and other prohibited activity on the xx7 platform.
• Platform Improvement: To understand how users interact with xx7 — which games, markets and features are most used — so we can improve the product and user experience for Pakistani users.
• Customer Support: To respond to queries, resolve account issues, handle complaints and communicate with you about your account.
• Responsible Gaming: To monitor account activity for signs of problem gaming behaviour and to enforce self-exclusion or deposit limit requests that you have made.
• Marketing Communications: To send you information about xx7 promotions, cricket betting offers, PSL markets and bonuses — only where you have opted in to receive such communications.
• Legal Compliance: To meet any legal obligations that require us to retain or process certain data, including record-keeping obligations.

04 Payments & PKR Transaction Data

xx7 supports PKR deposits and withdrawals via JazzCash, Easypaisa, Raast and bank transfer (IBFT). When you make a transaction, the following data is collected and processed:

• The mobile number or Raast ID or bank account title associated with your payment method.
• The PKR amount of each transaction.
• The date, time and reference number of each transaction.
• The payment method used (e.g. JazzCash, Easypaisa, bank transfer).

xx7 does not store full payment credentials such as mobile wallet PINs or full bank account numbers. Sensitive payment data is handled by our payment processing partners under encrypted, secure protocols. xx7 only retains the transaction references and identifiers needed to match payments to your account and to process withdrawals back to your verified payment method.

Payment data is also used to fulfil our obligation to ensure that all deposits come from a payment account registered in the name matching your xx7 account. This is a requirement under our Terms and Conditions and is a standard fraud-prevention measure.

05 Sharing Your Data

xx7 does not sell your personal data to any third party. We do not share your data with advertisers, data brokers or any commercial partner for marketing purposes without your explicit consent.

Your data may be shared with the following categories of third parties, strictly for the purposes described:

• Payment Processors: JazzCash, Easypaisa, Raast and banking partners receive the transaction data necessary to process your PKR deposits and withdrawals. These partners operate under their own privacy policies and security standards.
• Identity Verification Providers: Where xx7 uses a third-party service to verify user identity documents (such as CNIC verification), the relevant data is shared with that provider solely for verification purposes.
• Fraud Prevention Services: Device and session data may be shared with fraud detection partners to identify suspicious login patterns, bot activity or multi-account abuse.
• Game and Platform Providers: If you play a game on xx7 that is powered by a third-party game studio, your gameplay data (but not your payment or identity data) may be processed by that provider to deliver the game.
• Legal and Regulatory Bodies: xx7 may disclose your data to law enforcement or relevant authorities where required to do so by applicable law, court order or to protect the rights and safety of xx7 users.

All third-party partners with whom xx7 shares data are required to handle it securely and to use it only for the specific purpose for which it was shared. xx7 does not permit partners to use your data for their own marketing or commercial purposes.

06 Cookies & Tracking Technologies

xx7.st uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences and analyse how users interact with the site. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. Without these, basic platform features will not work. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display preferences and responsible gaming settings you have configured.
• Analytics Cookies: Help us understand how users navigate the platform — which games are most visited, how long sessions last, and where users encounter difficulties. This data is used in aggregate and anonymised form to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic and account takeover attempts. These cookies help protect your account and the integrity of the platform.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to use core platform features including login and deposits.

07 Data Security

xx7 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include:

• Encryption of data in transit using HTTPS/TLS across all xx7.st pages and API connections.
• Passwords are stored as hashed values — xx7 staff cannot read your password.
• Access to personal data within xx7 is restricted to staff who need it to perform their roles. Access is logged and reviewed.
• Payment credentials and sensitive financial data are processed within encrypted, PCI-compliant or equivalent secure environments managed by our payment partners.
• Regular security reviews and fraud monitoring to detect and respond to potential data security incidents.

While xx7 takes these steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account safe — use a strong, unique password for xx7, never share your login credentials, and contact support immediately if you believe your account has been compromised.

08 How Long We Keep Your Data

xx7 retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as required to meet legal obligations. The following general retention principles apply:

• Active Account Data: Retained for the lifetime of your xx7 account and for a period after closure to handle any outstanding disputes, chargebacks or legal claims.
• Transaction Records: PKR transaction history is retained for a minimum period in line with standard financial record-keeping obligations.
• Identity Verification Documents: Retained for the period required to fulfil verification obligations and for a reasonable period thereafter in case of dispute. Documents are deleted once the retention period expires.
• Support Communications: Chat and email records are retained for a period sufficient to resolve complaints and for quality review, after which they are deleted.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.

When data is no longer needed and there is no legal basis for retention, xx7 deletes it securely or anonymises it so that it can no longer be linked to you as an individual.

09 Your Rights Over Your Data

As an xx7 user, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact xx7 support with your request:

• Right of Access: You can request a copy of the personal data xx7 holds on your account. We will respond to access requests within a reasonable timeframe.
• Right to Correction: If any personal data held on your account is inaccurate or out of date, you can ask us to correct it. For example, if your registered mobile number has changed.
• Right to Deletion: You can request deletion of your personal data. Note that some data must be retained for legal or contractual reasons (such as transaction records) and cannot be immediately deleted even on request.
• Right to Restrict Processing: In certain circumstances you can ask us to limit how we use your data while a concern is being resolved.
• Right to Opt Out of Marketing: You can withdraw consent to receive promotional communications from xx7 at any time via account settings or by contacting support.

10 Minors & Age Policy

xx7 is strictly an adult platform for users aged 18 and above. xx7 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use xx7 or submit any personal data to the platform.

If xx7 becomes aware that personal data has been collected from a user under 18, the account will be closed immediately and all associated data will be deleted. Age verification may be requested at any point during account use.

If you are a parent or guardian and believe that a minor has registered on xx7, please contact support immediately so the account can be reviewed and closed.

11 Updates to This Privacy Policy

xx7 reserves the right to update this Privacy Policy at any time. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date. For significant changes that materially affect how your data is used, xx7 will make reasonable efforts to notify registered users via their registered contact details or through an in-platform notification.

Your continued use of xx7 following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. We recommend checking this page periodically to stay informed about how xx7 handles your personal data.

12 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data xx7 holds about you, please get in touch with the xx7 support team. We are committed to addressing privacy concerns promptly and transparently.

This Privacy Policy was last reviewed and updated in June 2026. xx7 is an online entertainment platform for adults aged 18 and above in Pakistan.