Privacy Policy — EX777 Online Betting Platform Pakistan

Ex777 collects two categories of data: information you give us directly when you register and use the platform, and information collected automatically as you interact with ex777. We keep collection to what is genuinely necessary — we do not collect data for the sake of it.

Information you provide directly:

• Registration data: Your full name, Pakistani mobile number, date of birth, and chosen account credentials when you sign up for an ex777 account.
• Identity verification documents: A copy of your CNIC (Computerised National Identity Card) or other government-issued identity document, where required during account verification or before processing withdrawals above certain thresholds.
• Payment information: The account numbers, wallet IDs, or card details associated with your chosen deposit and withdrawal methods (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or debit/credit card). Ex777 does not store full card numbers — payment processing is handled by certified payment gateways.
• Communications: Any messages, emails, or support requests you send to ex777, including their content and metadata.
• Responsible gaming information: Any limits, cool-off requests, or self-exclusion instructions you provide through your account settings or by contacting support.

Information collected automatically:

• Device and technical data: Your device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, games played, bets placed, time spent on various sections of the platform, and click patterns.
• Log data: IP address, access timestamps, referring URLs, and session identifiers.
• Location data: Approximate geographic location derived from your IP address. Ex777 does not collect precise GPS location.
• Cookie and tracking data: As described in Section 5 of this policy.

Every piece of data ex777 collects has a specific, legitimate reason behind it. We rely on one or more of the following lawful bases for processing your personal information:

We never process your data for purposes that are incompatible with the original reason for collection. If ex777 ever wishes to use your data for a new purpose, we will notify you and, where required, ask for your consent before proceeding.

The data ex777 collects is used exclusively to run the platform safely and effectively for Pakistani players, and to meet our legal obligations. Here is what that looks like in practice:

• Account management: Creating and maintaining your ex777 account, verifying your identity, authenticating your logins, and managing your account settings including responsible gaming tools.
• Payment processing: Crediting your deposits, processing your withdrawal requests, verifying that payment methods belong to you, and maintaining transaction records.
• Betting and gaming services: Placing and settling your bets, recording your gaming history, calculating and awarding bonuses, and managing your participation in promotions.
• Fraud and AML compliance: Monitoring transactions and account behaviour for signs of money laundering, fraud, underage gambling, or match fixing. This is a legal obligation, not optional.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality and compliance purposes.
• Platform improvement: Analysing usage patterns to identify bugs, improve navigation, and develop new features that Pakistani players will genuinely benefit from.
• Marketing communications: Sending you information about new games, promotions, and bonuses — but only if you have opted in to receive these messages. You can unsubscribe at any time by replying STOP to an SMS or emailing support@ex777.biz.
• Responsible gaming: Using your account activity data to identify patterns that may suggest problem gambling behaviour, so that our safer gambling team can reach out proactively where appropriate.

Ex777 does not sell, rent, or trade your personal data. We share it only in the limited circumstances listed below, and only to the minimum extent necessary for each purpose:

• Payment processors: Certified payment gateways that handle Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions receive the payment details necessary to process your transactions. These partners are contractually required to handle your data securely and may not use it for any other purpose.
• Identity verification providers: Where required, a certified KYC (Know Your Customer) provider receives your identity document details to perform verification checks. They operate under strict confidentiality agreements.
• Fraud prevention services: Anonymised or pseudonymised behavioural data may be shared with specialist fraud detection systems. These systems cannot re-identify you from the data they receive.
• Regulatory and law enforcement authorities: Ex777 will disclose your data to regulators, law enforcement agencies, or courts when legally required to do so — for example, in connection with an anti-money laundering investigation. We will notify you of such disclosures wherever we are legally permitted to do so.
• Business transfers: In the event that ex777's business is sold, merged, or transferred to a new owner, your data may be transferred as part of that transaction. We will notify you in advance and you will have the right to request deletion of your data before any transfer is completed.

Data security is not a box-ticking exercise at ex777 — it is an ongoing operational priority. Pakistani players trust us with sensitive financial and personal information and we take that responsibility seriously. Here are the measures in place:

• Encryption in transit: All data transmitted between your device and ex777's servers is encrypted using TLS 1.3, the current industry standard for secure web connections. You will always see HTTPS in your browser when using ex777.
• Encryption at rest: Personal data and financial records stored on ex777's servers are encrypted using AES-256, the same standard used by major international banks.
• Access controls: Only ex777 staff members with a specific operational need can access user data. Access is role-based, logged, and regularly audited. Support agents, for example, can verify your identity but cannot see your full payment details.
• Two-factor authentication: All ex777 staff accounts that have access to player data are protected by mandatory two-factor authentication.
• Penetration testing: The ex777 platform undergoes regular security assessments by independent security professionals. Vulnerabilities identified are resolved under a defined remediation timeline.
• Incident response: In the event of a data breach that is likely to affect your rights and freedoms, ex777 will notify affected players within 72 hours of becoming aware, and will provide full details of what data was involved and what steps are being taken.

Ex777 keeps your data only for as long as it is needed for the purpose it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

As an ex777 player, you have meaningful rights over your personal data. These are not theoretical — you can exercise them by contacting support@ex777.biz and we will respond within 30 days. Here is what you are entitled to:

To exercise any of the above rights, email support@ex777.biz with the subject line "Data Rights Request" and a description of what you are requesting. We will acknowledge receipt within two business days and fulfil your request within 30 days.

Ex777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps specifically designed to identify and prevent underage users from creating accounts.

If ex777 becomes aware that an account belongs to a person under 18, the account will be immediately suspended, all activity will be voided, and any funds deposited will be returned to the payment method from which they came. All data associated with the account will be deleted after the mandatory minimum retention period for AML compliance has passed.

If you believe a minor in your household has accessed or created an ex777 account, contact support@ex777.biz immediately. We will act within 24 hours and will not share any information about the account activity with anyone other than the parent or guardian who contacts us.

Ex777 will update this Privacy Policy from time to time — when the law changes, when we add new features, or when we change how we process data in any meaningful way. When we make material changes, we will notify registered players via SMS to their registered Pakistani mobile number at least 7 days before the new policy takes effect.

The updated policy will be published on this page with a revised "last updated" date shown at the top. Minor updates — such as corrections to wording that do not change the substance of how we use your data — may be made without advance notice, but will always be reflected in the updated date on this page.

Your continued use of ex777 after the effective date of any revised policy constitutes your acceptance of the changes. If you do not agree with the revised terms, you have the right to close your account before the changes take effect and request that your data be deleted to the extent permitted by our retention obligations.

Ex777 is the data controller for all personal data processed under this Privacy Policy. If you have any questions, concerns, or requests relating to your privacy or this policy, please reach out through the channel below. Our team handles privacy queries in both Urdu and English.

Ex777 aims to resolve all privacy queries directly and promptly. If after contacting us you remain dissatisfied with how your data is being handled, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.