XPK77 Privacy Policy —
How Your Personal Data Is Handled

1. Introduction

xpk77 is an online gaming platform operated at xpk77.onl, providing live casino, sports betting, fish games, bingo and related entertainment services to Pakistan players with all transactions in PKR. As part of operating this service, xpk77 collects and processes certain personal information from registered users and site visitors.

This Privacy Policy sets out what information is collected, the purposes it is used for, how long it is retained, who it may be shared with and what choices and rights you have regarding your own data. We have written this in plain language rather than dense legal terms because we believe you should actually be able to understand it without effort.

This policy should be read alongside our Terms and Conditions, which govern your use of the xpk77 platform more broadly. If you have any questions about this policy that are not answered here, contact the xpk77 support team.

2. Personal Data We Collect

xpk77 collects personal data through two main routes: information you provide directly when registering and using the platform, and information collected automatically through your device and browsing activity on the site.

Information you provide directly:

• Registration details — full name, date of birth, mobile number and email address.
• Account credentials — username and password (stored in hashed form; we cannot see your actual password).
• Identity verification documents — government-issued ID such as a CNIC or passport, provided when verification is requested before withdrawal processing.
• Payment method details — the mobile number associated with JazzCash or Easypaisa, bank account or card details used for deposits and withdrawals. Full payment credentials are processed through our payment partners and not stored in full on xpk77 servers.
• Support communications — messages exchanged with the xpk77 support team via live chat or email, including the content of your query and any account information shared during the conversation.

Information collected automatically:

• Device information — device type, operating system, browser type and version.
• Connection data — IP address, approximate location derived from IP, mobile network operator.
• Session data — pages visited on xpk77, time spent on each section, game sessions participated in, bets placed, deposit and withdrawal history.
• Cookie and tracking data — described in detail in the Cookies section below.

3. How We Use Your Data

The personal data collected by xpk77 is used for the following specific purposes:

xpk77 does not use your personal data for automated profiling that produces legally significant decisions about you, nor do we use it to build commercial advertising profiles for third-party use.

4. Payment Data and Financial Information

When you deposit or withdraw funds on xpk77 using JazzCash, Easypaisa, Raast, bank transfer or another approved method, the transaction is processed through our third-party payment partners. These partners handle the actual movement of PKR funds and are responsible for the security of the transaction itself.

xpk77 retains a record of the transaction — amount, method, timestamp, status and your account identifier — for account management, dispute resolution and financial record-keeping purposes. Full card numbers, full bank account numbers and full mobile wallet credentials are not stored on xpk77 servers.

5. Data Sharing and Third Parties

xpk77 does not sell, rent or trade your personal data to third parties for commercial marketing purposes. Data may be shared in the following limited and specific circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the information necessary to process your specific transaction. Each operates under their own privacy and security standards.
• Identity verification services: When we request verification before processing a withdrawal, a third-party identity verification provider may process your submitted documents. These providers are contractually bound to handle your data securely and for verification purposes only.
• Game providers: Certain games in the xpk77 Game Lobby are provided by third-party game studios. Your player session data (stake, result, game ID) may be passed to the relevant game provider to operate the game. Personal identifying information is not shared beyond what is operationally necessary.
• Legal requirements: If xpk77 receives a valid legal demand from a law enforcement or regulatory authority, we may be legally obligated to disclose specific account data. We will not disclose more than what is legally required.
• Fraud prevention: In cases of confirmed or suspected fraudulent activity, account data may be shared with fraud prevention networks or other platforms to prevent further harm.

6. Cookies and Session Tracking

xpk77 uses cookies and similar technologies to make the platform work correctly and to understand how it is being used. Cookies are small text files stored on your device when you visit the site.

The types of cookies used on xpk77 include:

• Essential cookies: Required for the platform to function — these handle your login session, keep you authenticated while you navigate between sections and maintain your game session state. You cannot opt out of these without the platform becoming non-functional.
• Analytics cookies: Used to understand which parts of xpk77 are used most and how players navigate the platform. This data is aggregated and anonymised — it is used to improve the platform, not to identify individual users.
• Preference cookies: Remember your settings such as preferred game filters or display options so you do not have to reset them on each visit.

Most web browsers allow you to manage or block cookies through browser settings. Blocking essential cookies will prevent xpk77 from functioning correctly. Blocking analytics and preference cookies will not affect your ability to play but may mean certain preferences are not retained between sessions.

7. Data Retention

xpk77 retains personal data for as long as it is needed to fulfil the purposes described in this policy, or as required by applicable legal and financial record-keeping obligations.

• Account registration and profile data is retained for the life of your account and for a period after closure as required for fraud prevention and dispute resolution purposes.
• Transaction records are retained for the period required by financial record-keeping standards applicable to the platform's operations.
• Identity verification documents submitted for withdrawal processing are retained only as long as necessary for the verification and for any subsequent compliance or dispute period.
• Support communications are retained to provide context for any future queries and for quality assurance purposes, for a reasonable period after the conversation is closed.
• Anonymised and aggregated analytics data may be retained indefinitely as it contains no personal identifiers.

When data is no longer required and retention obligations have been met, it is securely deleted or anonymised.

8. Security Measures

xpk77 implements technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encrypted data transmission (TLS), hashed password storage, access controls restricting internal data access to relevant personnel, and monitoring for unusual account activity patterns that may indicate compromise or fraud.

No online platform can guarantee absolute security. If you suspect your xpk77 account has been accessed without your authorisation, change your password immediately and contact support. We will investigate promptly and take appropriate protective action on your account.

You play an important role in account security. Using a strong, unique password for your xpk77 account and not sharing it with anyone significantly reduces the risk of unauthorised access.

9. Your Data Rights

As an xpk77 player, you have the following rights in relation to your personal data. To exercise any of these, contact the xpk77 support team with your account details and a clear description of your request.

10. Minors and Age Verification

xpk77 is strictly an 18+ platform. The service is not directed at, and does not knowingly collect personal data from, anyone under the age of 18. Age is verified during the account registration process, and further verification may be requested before processing withdrawals.

If xpk77 discovers or has reason to believe that an account belongs to someone under 18, the account will be suspended immediately, any winnings will be withheld and any deposits will be returned to the original payment method after verification. If you are a parent or guardian and have reason to believe a minor has registered an account on xpk77, please contact support immediately.

11. Changes to This Privacy Policy

xpk77 may update this Privacy Policy from time to time as the platform evolves, new payment methods are added or operational practices change. The "Last Updated" date at the top of this page reflects when the most recent revision was made.

When significant changes are made — particularly changes that affect how your data is used or shared — we will make reasonable efforts to notify active players through the platform interface or via your registered contact details. Your continued use of xpk77 after a policy update constitutes acceptance of the revised terms.

We recommend checking this page periodically if privacy matters are important to you. If you disagree with a material change to the policy, please contact support or consider closing your account.

12. Privacy Queries and Contact

If you have any questions about this Privacy Policy, want to exercise any of your data rights or want to report a concern about how your personal data is being handled, please contact the xpk77 support team. Support is available around the clock through the live chat feature on the platform.

When raising a privacy-related query, please include your registered username and the mobile number associated with your account so we can locate your account record and respond accurately. For data access or deletion requests, we may need to verify your identity before processing the request to ensure we are dealing with the account holder.

The support email address is shown in the footer of this page. Responses to privacy queries are typically provided within a reasonable timeframe, prioritised by the nature and urgency of the request.