BX777 Privacy Policy – How We Protect Your Personal Data

BX777 ("we", "us", "the Platform") is the data controller responsible for the personal data of players who register and use the BX777 platform at bx777.im. BX777 is a licensed online betting and casino operator providing services to eligible players, with particular focus on the Pakistani market.

As data controller, BX777 determines the purposes and means of processing your personal data. This Privacy Policy explains how BX777 fulfils that responsibility — what data is collected, why, how it is protected, and what choices you have. If you have any questions about how BX777 handles your personal information, the support team is available 24/7 via live chat and can be reached at support@bx777.im.

BX777 collects personal data in several ways: directly from you during registration and use of the platform, automatically through your device and browser, and in some cases from third-party verification partners as part of KYC processes.

BX777 does not collect: precise GPS location data, biometric data beyond the selfie used for CNIC matching, or sensitive personal data categories such as health, religion or political views. Card payment details (full card number, CVV) are handled entirely by certified payment gateway partners and are never transmitted to or stored on BX777 servers.

BX777 uses your personal data only for defined, specific purposes. The main uses are:

• Account creation and management — registering your BX777 account, verifying your identity, maintaining your account settings and preferences;
• Payment processing — processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay and bank IBFT; processing withdrawal requests to verified payment methods;
• KYC and AML compliance — verifying your identity and age as required under applicable regulations; monitoring transactions for anti-money laundering compliance;
• Platform operation — delivering cricket betting markets, casino games, Aviator, live cricket scores and all other BX777 services you use;
• Responsible gaming — monitoring for signs of problem gambling behaviour, applying player-set limits and self-exclusion, making responsible gaming tools available;
• Customer support — responding to queries, resolving disputes and processing complaints;
• Security and fraud prevention — detecting and preventing multi-accounting, fraud, collusion, unauthorised access and other prohibited conduct;
• Platform improvement — analysing usage patterns to improve BX777's product, fix technical issues and prioritise new features;
• Marketing communications — sending promotional emails and notifications about BX777 offers, subject to your communication preferences. You can opt out of marketing at any time through your account settings.

BX777 processes your personal data on the following legal bases depending on the purpose:

• Contractual necessity — processing required to perform the contract between you and BX777. This covers account creation, payment processing, game delivery and customer support. Without this processing, BX777 cannot provide its services to you.
• Legal obligation — processing required to comply with applicable law, including KYC, AML and responsible gaming regulations. BX777 has no discretion in this processing — it is legally mandated.
• Legitimate interests — processing for BX777's legitimate business interests where those interests are not overridden by your rights. This includes fraud prevention, platform security, usage analytics and product improvement.
• Consent — processing based on your explicit agreement, primarily for marketing communications. You can withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.

BX777 does not sell your personal data to any third party. BX777 shares data only in the following limited circumstances:

• Payment providers — Easypaisa, JazzCash, NayaPay, SadaPay and certified card gateway partners receive the transaction data necessary to process your deposits and withdrawals. These providers are themselves regulated and bound by their own privacy obligations.
• KYC and identity verification partners — BX777 uses certified third-party services to verify CNIC authenticity and match selfies to identity documents. These partners process the minimum data necessary for verification and are contractually prohibited from using it for any other purpose.
• Regulatory and law enforcement authorities — BX777 discloses data to regulators, law enforcement agencies or courts where required by applicable law, court order or regulatory instruction. BX777 reviews all such requests for validity before complying and discloses only the minimum data required.
• Technology and infrastructure providers — BX777 uses third-party cloud infrastructure, analytics and security providers who process data on BX777's behalf under strict data processing agreements. These providers act only on BX777's documented instructions.
• Business transfers — in the event of a merger, acquisition or sale of BX777's business, your personal data may be transferred as part of that transaction. If this occurs, BX777 will notify affected players before their data becomes subject to a different privacy policy.

BX777 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable regulation. The following retention periods apply:

• Account and identity data — retained for the duration of your active BX777 account and for five years after account closure, to satisfy KYC and AML regulatory requirements.
• Transaction records — PKR transaction histories, deposit records and withdrawal records are retained for seven years from the date of each transaction in line with standard financial record-keeping requirements.
• Support communications — chat transcripts and email correspondence are retained for three years from the date of the interaction, unless the subject of the communication relates to an ongoing dispute in which case retention is extended until resolution.
• Technical and usage logs — system logs, IP records and session data are retained for a maximum of 12 months unless required for a specific security investigation.
• Marketing preferences — your opt-in or opt-out status for BX777 marketing is retained for the duration of your account. If you delete your account, marketing preference records are retained for three years as evidence of consent status.

When data reaches the end of its retention period, BX777 deletes it securely or anonymises it so that it can no longer be associated with you individually.

BX777 uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that help BX777 remember your preferences, keep you logged in securely, understand how the platform is used and detect fraudulent activity.

You can manage non-essential cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to use BX777. Disabling essential and security cookies will prevent the platform from functioning correctly. BX777 does not use advertising cookies or cross-site tracking cookies that follow you across other websites.

As a BX777 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the BX777 support team via live chat or at support@bx777.im. BX777 will respond within 30 days of receiving a valid request. There is no fee for exercising these rights in ordinary circumstances.

BX777 implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. Key measures include:

• 256-bit SSL/TLS encryption on all web pages and API endpoints that handle personal or financial data;
• Tokenisation of payment card data — card details are replaced by secure tokens immediately upon entry and are never stored on BX777 infrastructure;
• Access controls — BX777 staff can only access player data on a need-to-know basis relevant to their specific role. Access is logged and reviewed;
• Two-factor authentication available on all BX777 player accounts and mandatory for all internal staff accounts with data access;
• Regular security testing including penetration testing and vulnerability assessments conducted by independent security specialists;
• Incident response plan — BX777 maintains a documented response procedure for security incidents, including notification timelines for affected players.

Despite these measures, no internet-based platform can guarantee absolute security. BX777 recommends that players use a strong, unique password for their account, enable two-factor authentication and never share login credentials with anyone.

BX777's services are strictly for adults aged 18 and over. BX777 does not knowingly collect personal data from anyone under 18. Age verification is a mandatory part of the BX777 registration and KYC process. If BX777 discovers that a minor has registered an account — whether through age misrepresentation or any other means — the account will be immediately closed, all transactions voided and any funds returned to the verified payment source, with the matter reported to the appropriate authorities where required.

If you are a parent or guardian and believe a minor in your household has accessed BX777, please contact the support team immediately at support@bx777.im. BX777 will investigate and act promptly.

BX777 may update this Privacy Policy from time to time to reflect changes in its data practices, new service features or evolving regulatory requirements. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For material changes — those that significantly affect how BX777 uses your personal data or what rights you have — BX777 will notify registered players via email or in-platform notification at least 7 days before the changes take effect. For minor administrative updates that do not change the substance of the policy, the revision date update alone constitutes notice.

Continued use of BX777 after the effective date of any Privacy Policy change constitutes your acknowledgement of the updated policy. If you do not accept a change, you should close your BX777 account before the change takes effect and submit a data deletion request.

If you have questions, concerns or requests relating to this Privacy Policy or how BX777 handles your personal data, the following options are available:

• Live chat — available 24/7 directly on the BX777 platform. For privacy-related queries, ask the agent to connect you with the data compliance team.
• Email — support@bx777.im. For subject access requests or deletion requests, include "Data Request" in the subject line to ensure it is routed correctly.

BX777 aims to respond to all privacy-related requests within 30 calendar days. For complex requests, BX777 may extend this period by a further 30 days where necessary — if this happens, you will be notified of the extension and the reason within the original 30-day window.