Privacy Policy – 1x777 Data Protection & User Privacy Guide

1 Who We Are

1x777 operates the online gaming and sports betting platform available at 1x777.onl. The platform provides casino games, slots, live casino, fish games, bingo, and a sportsbook covering cricket, football and esports, primarily for adult players in Pakistan.

For the purposes of this Privacy Policy, 1x777 is the data controller — meaning we decide what personal data is collected, why it is collected and how it is used. If you have questions about how your data is handled, you can reach us through the contact details in Section 13 of this policy.

This policy applies to data collected through all access channels: the 1x777.onl website, the Android APK mobile app and the iOS progressive web app.

2 Data We Collect

We collect personal data in several different ways, depending on how you interact with the platform. Here is a breakdown of the main categories:

Registration Data

When you create an account at 1x777, we collect: your full name, date of birth, email address, phone number, and the login credentials you choose. This information is required to create and manage your account. Without it, registration cannot be completed.

Identity Verification Data

When a KYC (Know Your Customer) verification is requested, we may collect copies of government-issued identification documents such as your CNIC, passport or driving licence, as well as proof of address documentation. This is required to verify your identity before processing larger withdrawals or if unusual activity is detected.

Payment Data

When you make a deposit or withdrawal, we collect payment method details needed to process the transaction. For JazzCash and Easypaisa transactions, this includes the mobile wallet number. For bank transfers, it includes account details. We do not store full card numbers for card-based payments — these are handled by the payment processor.

Usage and Activity Data

We collect records of your activity on the platform, including games played, bets placed, deposit and withdrawal history, login timestamps and session durations. This data is used for account management, security monitoring and, in aggregate form, for improving the platform.

Device and Technical Data

We collect technical information about the device and connection you use to access 1x777, including IP address, browser type and version, operating system, device model and screen resolution. This information is used for security, fraud detection and to optimise the platform's performance across different devices.

Communications Data

If you contact support via chat, email or any other channel, we retain a record of that communication. This is used to handle your query and to improve our support processes.

3 How We Use Your Data

The personal data we collect is used for specific purposes directly related to operating the 1x777 platform. We do not use your data for purposes unrelated to your use of the service.

• Account management: Creating, maintaining and securing your player account, including login authentication and password recovery.
• Payment processing: Processing deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer and other supported channels.
• Identity verification: Verifying that account holders meet the age requirement (18+) and confirming identity for KYC purposes when required.
• Security and fraud detection: Monitoring account activity to detect unauthorised access attempts, fraudulent transactions and any behaviour that may indicate a violation of our Terms and Conditions.
• Customer support: Responding to queries, handling disputes and resolving technical issues reported by account holders.
• Promotions and bonuses: Managing eligibility for welcome bonuses, reload promotions, cashback offers and VIP programme benefits linked to your account.
• Transactional communications: Sending deposit confirmations, withdrawal notifications, security alerts and updates about changes to your account or our terms.
• Platform improvement: Using aggregated, anonymised usage data to understand how players interact with different sections of the platform and to improve performance, navigation and game availability.
• Legal compliance: Retaining records required by applicable law and responding to valid legal requests from authorities.

We do not use your personal data to build advertising profiles or sell your information to third-party marketers. Any communication you receive from 1x777 is directly related to your account or your use of the platform.

4 Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: Most data processing at 1x777 is necessary to fulfil our obligations to you as an account holder — processing your transactions, managing your account and providing access to the platform.
• Legal obligation: Some data processing is required to comply with applicable laws, including identity verification requirements and the retention of financial records.
• Legitimate interests: We process certain data — such as device and session information — based on our legitimate interest in keeping the platform secure and preventing fraud, provided this does not override your privacy rights.
• Consent: Where we rely on consent — for example, for optional marketing communications — we will ask for this separately and you can withdraw consent at any time without affecting your account.

5 Who We Share Data With

We share personal data with third parties only where necessary and only with parties that have appropriate data protection obligations in place.

• Payment processors: JazzCash, Easypaisa, Raast, bank transfer providers and card payment processors receive the payment details necessary to process your transactions. These processors handle your payment data under their own privacy and security frameworks.
• Identity verification providers: When KYC verification is required, identity document data may be shared with a third-party verification service. These providers are contracted to process verification data only for this purpose.
• Platform and technology providers: Technical service providers who help operate the platform — including hosting infrastructure, game software providers and security services — may have access to data as part of delivering their service. They are contractually restricted from using that data for any other purpose.
• Law enforcement and regulatory authorities: We will share account information when required to do so by a valid legal process. We do not proactively disclose data to authorities beyond what is legally required.

We do not sell, rent or trade your personal data to any third party for commercial or marketing purposes.

6 Payment Data and PKR Transactions

All financial transactions at 1x777 are in Pakistani Rupees (PKR). Payment data is handled with particular care given its sensitive nature.

When you make a deposit via JazzCash or Easypaisa, the mobile wallet number and transaction reference are recorded in your account history. This is used to confirm the deposit, match it to your account balance and, if needed, investigate any discrepancy.

For bank transfers, we record the account name, account number and IBAN of the originating account to verify that the payment came from an account held in your name.

Full card numbers are never stored on 1x777 servers. Card-based payments are processed through a PCI-compliant payment gateway that tokenises card data. 1x777 only receives a transaction reference and masked card details (last four digits and expiry) for record-keeping purposes.

Payment records are retained for as long as is required to meet financial record-keeping obligations. See Section 8 for retention periods.

7 Cookies and Tracking

The 1x777 platform uses cookies — small data files stored on your device — to support essential platform functions and to understand how visitors use the site.

Essential cookies are required for the platform to function. They maintain your login session, remember language and display preferences, and enable secure payment processes. These cannot be disabled without preventing the platform from working correctly.

Analytics cookies help us understand which sections of the platform are most used, how players navigate between game categories, and where performance issues may be occurring. This data is collected in aggregate and does not identify individual users. These cookies can be disabled through your browser settings without affecting your ability to use the platform.

We do not use cookies to serve targeted advertising or to track your activity across other websites.

Most browsers allow you to view, manage and delete cookies through the browser's settings menu. Clearing cookies will log you out of your current session and remove any locally stored preferences.

8 Data Retention

We retain personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law.

• Account data: Retained for the lifetime of your account and for a period of up to five years after account closure. This retention period supports our obligations to investigate disputes, respond to regulatory requests and maintain audit records.
• Payment and transaction records: Retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of the account and for up to five years after closure, or longer if required by law.
• Support communications: Retained for up to three years to support quality assurance and dispute resolution.
• Device and session data: Retained for up to 12 months for security and fraud detection purposes, after which it is deleted or anonymised.

When the retention period expires, data is securely deleted or irreversibly anonymised so it can no longer be linked to an individual.

9 Data Security

The security of your personal data is a practical priority, not just a policy statement. The following measures are in place to protect your information:

• Encryption in transit: All data transmitted between your device and 1x777 servers is encrypted using TLS (Transport Layer Security). The HTTPS padlock in your browser confirms this encryption is active.
• Password security: Account passwords are hashed using a strong one-way hashing algorithm. They are never stored in plain text and cannot be read by 1x777 staff.
• Access controls: Access to personal data within 1x777 is restricted to staff who need it to perform specific operational tasks. Access is logged and reviewed.
• Two-factor authentication: Account holders can enable two-factor authentication for an additional layer of login security. This is available in account settings and is recommended for all users.
• Fraud monitoring: Automated systems monitor account activity for patterns that may indicate fraudulent use, identity theft or unauthorised access. Suspicious activity triggers account review and, where appropriate, temporary suspension pending verification.

No security system is completely infallible. In the event of a data breach that is likely to result in a risk to your rights, 1x777 will notify affected users within a reasonable timeframe and provide guidance on steps to take to protect your account.

10 Your Rights

As a 1x777 account holder, you have the following rights regarding your personal data. To exercise any of these rights, contact support as described in Section 13.

We will acknowledge data rights requests within 5 business days and aim to fulfil them within 30 days. For complex requests, we may extend this by a further 30 days with notice to you.

11 Children's Privacy

The 1x777 platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

All registration applications go through an age verification step. Where an account is found or suspected to belong to a minor, the account is closed immediately, all deposits are returned to the originating payment method, and all data associated with the account is deleted.

If you believe an underage person has registered an account at 1x777, please contact support immediately with the relevant details so we can investigate and take action.

12 Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in how the platform operates, changes in the services we use or changes in applicable law. When material changes are made, the updated policy is published on this page with a revised "Last Updated" date.

For significant changes that affect how we use your personal data in a way you would not reasonably expect, we will notify registered account holders by email or through an in-platform message before the changes take effect.

Your continued use of the platform following the publication of an updated policy constitutes your acceptance of the revised terms. If you do not accept the changes, you may request account closure in accordance with the Terms and Conditions.

13 Contact Us

For any question related to this Privacy Policy, to exercise a data right, or to report a privacy concern, contact 1x777 support through one of the following channels:

• In-platform live chat: Available 24/7 through your account. This is the fastest way to reach the support team.
• Email: [email protected] — for data rights requests, please include your account username and a description of the request. We will ask for identity verification before processing data access or deletion requests.

When emailing about a data rights request, please write "Privacy Request" in the subject line. This ensures it reaches the right team and is prioritised correctly. Do not include your password or full payment details in any email to support.