At 77xp, protecting the personal data of our Pakistani players is a core operational responsibility — not an afterthought. This Privacy Policy explains exactly what personal data 77xp collects from you, how we use it, who we share it with, how long we keep it, and what rights you have over your own information. Please read this Policy carefully before using the 77xp Platform.
These six principles govern how 77xp handles the personal data of every player registered on the Platform. The full legal text follows in the sections below — these highlights provide a plain-language overview.
77xp collects only the personal data genuinely necessary to operate a licensed gaming platform — account registration details, payment information, identity verification documents, and usage data. We do not collect data out of convenience or for resale.
All personal data transmitted to and stored by 77xp is protected with 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to player personal data within 77xp's systems is restricted on a strict need-to-know basis with access logging.
77xp does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data sharing with third parties is limited to regulated service providers strictly required to operate the Platform, and all such parties are bound by data processing agreements.
Promotional communications from 77xp are opt-in. You can update your marketing preferences at any time from within your account settings. Opting out of marketing does not affect your ability to use any 77xp Gaming Services or receive service-related communications.
Under applicable data protection law, you have rights to access, correct, restrict, and in certain circumstances delete the personal data 77xp holds about you. You also have the right to data portability and to object to certain processing activities. These rights are exercisable by contacting 77xp support.
Personal data is retained only for as long as required to fulfill the purpose it was collected for, or as required by applicable regulatory and legal obligations — including anti-money laundering record-keeping requirements. When retention periods expire, data is securely deleted or anonymized.
1.1 This Privacy Policy ("Policy") is issued by 77xp ("77xp", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with the 77xp online gaming platform accessible at 77xp.bid, including all associated services, features, and communications (collectively the "Platform").
1.2 This Policy applies to all individuals who register for, access, or use the Platform ("Players", "you", "your"), including visitors who browse the Platform without registering. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.
1.3 This Policy forms part of 77xp's broader legal framework, which also includes the Terms & Conditions and Responsible Gaming Policy. Where this Policy conflicts with any other document, this Policy shall take precedence with respect to matters of personal data.
1.4 77xp is committed to complying with applicable data protection and privacy legislation in the jurisdictions in which it operates, including the requirements imposed by our international gaming licence authority.
2.1 For the purposes of data protection law, 77xp is the data controller in respect of personal data collected through the Platform. As data controller, 77xp determines the purposes and means of processing your personal data.
2.2 77xp operates under an international gaming licence and is subject to the data protection obligations imposed by that licensing authority, in addition to any applicable national data protection legislation.
2.3 Where 77xp engages third-party service providers to process personal data on its behalf, those providers act as data processors and are subject to written data processing agreements that impose data protection obligations no less stringent than those described in this Policy.
3.1 77xp collects the following categories of personal data, depending on how you interact with the Platform:
3.1.1 Registration & Identity Data
3.1.2 Identity Verification (KYC) Data
3.1.3 Financial & Transaction Data
3.1.4 Gaming Activity Data
3.1.5 Technical & Device Data
4.1 Directly from You. The majority of personal data 77xp holds is provided directly by you during account registration, KYC verification, payment transactions, responsible gaming tool setup, and communications with our support team.
4.2 Automatically via Platform Use. Technical and device data is collected automatically when you access the 77xp Platform — through server logs, session tracking, and browser-based technologies including cookies and similar tracking technologies (see Section 10 for full cookie details).
4.3 From Payment Processors. When you make deposits or request withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer, limited transaction confirmation data is received from the relevant payment processor solely for the purpose of reconciling your account balance.
4.4 From KYC Verification Partners. Where 77xp uses third-party KYC verification services to confirm your identity and age, those providers may return verification outcome data to 77xp. We do not receive raw identity document data directly from these providers — only verification status and any flagged risk indicators.
4.5 From Fraud Prevention Systems. Technical data may be cross-referenced with fraud prevention databases to detect suspicious registration patterns, duplicate accounts, or payment fraud indicators. This processing is conducted in pursuit of our legitimate interests in maintaining Platform security.
5.1 77xp processes your personal data for the following purposes:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account Registration & Management | Identity, contact, credential data | Contract performance |
| Age Verification (21+ Enforcement) | Identity, KYC, date of birth | Legal obligation, contract |
| Payment Processing & Financial Records | Financial, transaction data | Contract performance, legal obligation |
| Gaming Service Delivery | Gaming activity, session data | Contract performance |
| KYC & Anti-Money Laundering | KYC, financial, transaction data | Legal obligation, regulatory compliance |
| Responsible Gaming Monitoring | Gaming activity, session, financial data | Legal obligation, legitimate interests |
| Fraud Detection & Platform Security | Technical, device, financial data | Legitimate interests |
| Customer Support & Complaints | Identity, gaming activity, communications | Contract performance, legitimate interests |
| Marketing Communications (opted-in only) | Contact, gaming activity, preferences | Consent |
| Platform Analytics & Improvement | Technical, device, aggregated usage data | Legitimate interests |
| Legal Disputes & Regulatory Reporting | All categories as relevant to the dispute | Legal obligation, legitimate interests |
6.1 Contract Performance. The majority of 77xp's data processing is necessary for the performance of the contract between you and 77xp (i.e., providing you with Gaming Services as set out in our Terms & Conditions). Without processing your personal data for this purpose, we cannot provide you access to the Platform.
6.2 Legal Obligation. As a licensed gaming operator, 77xp is subject to a range of regulatory obligations that require personal data processing — including anti-money laundering (AML) due diligence, know-your-customer (KYC) verification, age verification, and mandatory record-keeping of financial transactions. This processing is non-optional.
6.3 Legitimate Interests. Where processing is not required to perform the contract or fulfill a legal obligation, 77xp may rely on its legitimate business interests — including fraud prevention, Platform security, responsible gaming monitoring, and analytics. Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and interests.
6.4 Consent. Marketing communications are sent only with your prior consent. You can withdraw consent at any time by updating your marketing preferences in your account settings or by contacting 77xp support. Withdrawal of marketing consent does not affect the lawfulness of processing conducted before withdrawal.
7.1 We Do Not Sell Your Data. 77xp does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial use. Full stop.
7.2 Authorised Third-Party Processors. 77xp shares personal data with third-party service providers strictly as necessary to operate the Platform. These providers act as data processors under written agreements and may not use your data for any purpose beyond those specified by 77xp. Categories of processors include:
7.3 Regulatory and Legal Disclosure. 77xp may disclose personal data to government authorities, law enforcement agencies, gaming regulators, or financial intelligence units where required to do so by applicable law, court order, or regulatory direction — including as part of AML reporting obligations.
7.4 Business Transfers. In the event that 77xp undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects the processing of your personal data.
8.1 As an internationally licensed gaming platform, some of 77xp's data processors and infrastructure providers may be located in countries outside Pakistan. Where your personal data is transferred internationally, 77xp takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan.
8.2 Appropriate safeguards for international transfers may include: processing under contractual clauses that impose data protection obligations on the receiving party; transfers to countries that provide an adequate level of data protection as recognised by applicable regulatory frameworks; and transfers to third parties that hold recognised international privacy certifications.
8.3 By using the 77xp Platform, you acknowledge that your personal data may be processed in countries outside Pakistan and consent to such processing where necessary for the provision of Gaming Services.
9.1 77xp retains personal data for no longer than is necessary to fulfill the purpose for which it was collected, subject to any mandatory minimum retention periods required by applicable law or our gaming licence obligations.
9.2 Retention Periods by Data Category:
9.3 At the end of applicable retention periods, personal data is securely deleted using industry-standard deletion processes, or anonymised such that it can no longer be linked to an identifiable individual.
10.1 The 77xp Platform uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, monitor Platform performance, and support analytics. A cookie is a small text file placed on your device when you access the Platform.
10.2 Types of Cookies Used by 77xp:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Maintain login sessions, prevent CSRF attacks, enable core Platform functionality including game loading and payment processing | Yes — cannot be disabled | |
| Remember your preferences (language, game settings, responsible gaming tool configurations), improve load times via caching | Optional — can be disabled | |
| Aggregate usage data to understand how Pakistani players use the Platform, identify performance issues, and prioritize Platform improvements | Optional — can be disabled |
10.3 You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your 77xp account or using Gaming Services. Disabling functional or analytics cookies will not affect your ability to use the Platform but may reduce certain convenience features.
10.4 77xp does not use third-party advertising cookies or tracking pixels for cross-site advertising targeting. Our analytics tools are used solely to improve the 77xp Platform experience.
11.1 Subject to applicable law and certain limitations, you have the following rights in relation to the personal data 77xp holds about you:
You have the right to request a copy of the personal data 77xp holds about you. We will provide this information within 30 days of a verified request. The first copy is provided free of charge; subsequent copies within a 12-month period may attract an administrative fee.
If personal data 77xp holds about you is inaccurate or incomplete, you have the right to request correction. You can update certain account data directly via your account settings; for changes to KYC or identity data, please contact support.
You may request deletion of personal data 77xp holds about you. This right is subject to legal limitations — 77xp cannot delete data that it is legally required to retain (e.g., AML records, financial transaction data). Where deletion is not possible, 77xp will restrict processing to minimum required purposes.
In certain circumstances (e.g., where you contest the accuracy of data or have objected to processing), you may request that 77xp restricts its processing of your personal data to storage only, pending resolution of your request.
Where processing is based on contract performance or your consent, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format (e.g., CSV or JSON) for transfer to another service provider.
You have the right to object to 77xp processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to marketing, processing for that purpose will cease immediately. Other objections will be assessed individually.
12.1 77xp implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:
12.2 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, 77xp will notify affected players and relevant regulatory authorities within the timeframes required by applicable law. Notification will include the nature of the breach, data categories affected, steps taken to contain the breach, and recommended actions for affected players.
12.3 Your Role in Security. While 77xp takes comprehensive steps to protect your data, you are also responsible for maintaining the security of your account. Use a strong, unique password, enable 2FA, and never share your credentials or OTP codes with any third party — including individuals claiming to be 77xp support (we will never ask for your password).
13.1 The 77xp Platform is strictly for adults aged 21 years and above. 77xp does not knowingly collect personal data from individuals under the age of 21.
13.2 Where 77xp discovers or has reason to believe that personal data belonging to a person under 21 years of age has been collected — whether through fraudulent registration or any other means — that data will be immediately deleted, the associated account will be closed, and any deposits will be returned to the payment source where technically feasible.
13.3 Parents or guardians who believe their minor child has registered on the 77xp Platform should contact 77xp support immediately via live chat. 77xp takes underage access extremely seriously and will act on all credible reports with urgency.
14.1 77xp sends marketing communications — including promotional offers, bonus notifications, PSL betting alerts, and platform updates — only to players who have explicitly opted in to receive such communications during account registration or via their account settings.
14.2 You may withdraw your marketing consent and opt out of all marketing communications at any time by:
14.3 Opting out of marketing communications does not affect your receipt of service communications, which are non-optional and include: account confirmation emails, deposit and withdrawal notifications, KYC verification requests, responsible gaming alerts, and security notifications (e.g., login from new device alerts).
14.4 Players who have self-excluded via 77xp's Responsible Gaming tools are automatically removed from all marketing communications immediately upon self-exclusion. 77xp will not send any marketing to a self-excluded player during the exclusion period.
15.1 77xp reserves the right to amend this Privacy Policy at any time. Changes will be reflected on this page with an updated effective date. Where amendments are material — affecting player rights or how personal data is processed — 77xp will notify registered players via in-platform notification or email at least 14 days before the changes take effect.
15.2 Minor updates — including clarifications, corrections, or administrative changes that do not affect the substance of data processing — may be made at any time without prior notice. The most current version of this Policy is always available at 77xp.bid/privacy-policy.
15.3 Your continued use of the 77xp Platform following the effective date of any amended Policy constitutes your acceptance of the updated Policy. If you do not accept any amendment, you should cease using the Platform and request account closure.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or 77xp's processing of your personal data, please contact our Data Protection team through the following channels:
16.2 Formal Privacy Complaints. If you believe that 77xp has processed your personal data in breach of this Policy or applicable data protection law, you have the right to lodge a formal complaint. Formal complaints should be submitted in writing with full details of the alleged breach. 77xp will acknowledge all formal privacy complaints within 5 business days and provide a substantive response within 30 days.
16.3 Regulatory Complaints. If you are not satisfied with 77xp's response to a formal privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to 77xp's gaming licence regulatory authority.
16.4 All privacy-related communications from 77xp are conducted in English. Formal privacy complaints must be submitted in English to be processed by our Data Protection team.
You've read how 77xp protects your personal data. Review our full policy suite, then log in to explore cricket betting, live casino, slots and more — all in PKR.
Terms & Conditions Responsible Gaming Login to 77xp