dx777 Privacy Policy — How We Guard Your Data

dx777 is an online casino and sports betting platform operated at dx777.bio. dx777 is the data controller responsible for the personal data you provide when registering and using the platform. As data controller, dx777 determines the purposes for which your personal data is collected and the means by which it is processed.

dx777 operates under an international gaming licence that imposes specific obligations on us with respect to the collection, verification, and retention of player data. These obligations are not discretionary — they form part of our licence conditions and exist to protect players, prevent financial crime, and ensure fair play across the platform.

If you have any questions about how dx777 handles your personal data, or if you wish to exercise any of your privacy rights described in Section 9, you can reach our Data Protection team through the contact methods listed in Section 14 of this policy. We are committed to handling all data-related queries with the same professionalism and efficiency you expect from every aspect of dx777.

dx777 collects personal data across several categories, depending on how you interact with the platform. Below is a comprehensive breakdown of the data we collect and the circumstances under which each category is gathered.

Registration Data: When you create a dx777 account, we collect your full legal name, date of birth, residential address (including city, province, and postal code), email address, and the username and password you select. This information is mandatory — accounts cannot be created without it. Providing false registration data is a breach of our Terms & Conditions and may result in account closure and forfeiture of funds.

Identity Verification (KYC) Data: As required by our licensing obligations, we collect copies of government-issued identity documents (such as your Pakistani CNIC or passport), proof of address documents (such as a recent utility bill or bank statement), and where required, proof of ownership of the payment method used for deposits (such as a JazzCash or EasyPaisa account registered in your name). KYC documents are collected only when required under our licence conditions — typically before significant withdrawals are processed.

Financial Transaction Data: We collect records of all deposits, withdrawals, bonus claims, wagering activity, and PKR balance movements associated with your account. This includes the payment method used, transaction amounts in PKR, transaction timestamps, and transaction reference numbers. This data is retained for the period required by our licensing and anti-money-laundering obligations.

Device & Technical Data: When you access dx777 from any device, we automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is used for fraud prevention, platform security, responsible gaming monitoring, and service improvement purposes.

Gameplay & Betting Data: We maintain records of all games played, bets placed, sports markets wagered on, game outcomes, bonus usage, and session durations. This data enables us to fulfil our responsible gaming obligations, investigate disputes, and — where you have consented — personalise game and promotion recommendations.

Communications Data: Any communication you initiate with dx777 — whether via live chat, email, or any other support channel — is recorded and retained. This includes the content of support conversations, complaint records, and any attachments you provide. These records help us resolve disputes accurately and improve the quality of our support service.

dx777 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

dx777 does not use automated decision-making processes — including profiling — that produce legal effects or significantly affect you, without providing you with an opportunity to request human review of that decision. Where automated tools are used to flag responsible gaming concerns, a trained member of our team reviews the flag before any action is taken on your account.

dx777 processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely on are as follows:

• Contract Performance: Processing your data is necessary to provide the services you have requested by registering a dx777 account — including account management, deposit processing, game access, and withdrawal handling. Without this processing, we cannot perform our contract with you.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and licence compliance reporting — are required by law or by the conditions of our international gaming licence. We have no discretion to opt out of these obligations.
• Legitimate Interest: We process some data on the basis of our legitimate interests as an online gaming operator — specifically, fraud prevention, platform security, responsible gaming risk monitoring, and improving the quality of our services. In each case, we have assessed that our legitimate interest is not overridden by your fundamental rights and freedoms.
• Consent: For processing activities that are not strictly necessary — such as sending marketing emails about dx777 promotions or providing personalised game recommendations — we rely on your freely given, specific, and informed consent. You can withdraw this consent at any time through your account settings or by contacting support, without any negative effect on your account status.

dx777 uses cookies and similar tracking technologies on the dx777.bio website and platform. Cookies are small text files placed on your device that allow us to recognise returning visitors, maintain your login session, and gather analytics data about how the platform is used.

The categories of cookies dx777 uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the dx777 platform to function. They maintain your login session, remember your account preferences, and support platform security features. You cannot opt out of strictly necessary cookies without losing access to core platform functionality.
• Analytical Cookies: These cookies collect anonymised information about how visitors navigate the dx777 platform — for example, which pages are visited most frequently, where users encounter errors, and how long sessions last. This data helps us improve platform performance and user experience. These cookies are enabled by default but can be disabled through your browser settings.
• Responsible Gaming Cookies: A limited set of session-tracking cookies support our responsible gaming tools — for example, tracking active session duration so that time-reminder alerts function correctly. These cookies are necessary for the responsible gaming features described in our Responsible Gaming page.
• Preference Cookies: These cookies remember your platform settings — such as your preferred language, notification preferences, and display settings — so that you do not need to re-enter them on each visit. They are enabled by default but can be cleared through your browser at any time.

You can manage cookie preferences through your browser's privacy settings. Clearing cookies will log you out of your dx777 session and reset your display preferences, but will not affect your account data held on our servers.

dx777 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. We share your data only in the following defined circumstances, each of which is subject to appropriate data protection safeguards:

• Payment Processors: To process your PKR deposits and withdrawals, we share the minimum necessary transaction and identity data with our payment processing partners — including the operators of JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations. These partners are contractually bound to use your data only for payment processing purposes.
• Identity Verification Providers: Where automated identity verification is used as part of the KYC process, we share document images and personal data with our licensed third-party identity verification provider. This provider operates under contract with dx777 and is prohibited from using your data for any purpose beyond the verification service.
• Game Providers: Our licensed third-party game providers receive limited technical session data (such as a pseudonymous player ID and wagering amounts) necessary for game delivery and RNG certification. They do not receive your name, address, CNIC, or other directly identifying personal data.
• Licensing Authority: Our international gaming licence requires us to submit compliance reports and, in specific circumstances, player data to the relevant licensing authority upon request. This sharing is a legal obligation and cannot be refused.
• Law Enforcement: Where required by a valid legal order, court order, or regulatory demand from a competent authority, dx777 will disclose personal data as legally required. Where permitted by law, we will notify you of such a request before complying.
• Fraud Prevention Networks: To protect the platform and all players from fraud and money laundering, dx777 participates in industry fraud prevention networks. Where an account is flagged for serious fraud or financial crime, a limited data disclosure may be made to other operators within these networks.

In all cases of third-party data sharing, dx777 maintains data processing agreements with the relevant parties, confirming their obligation to process your data lawfully, securely, and only for the specified purpose.

Because dx777 operates under an international gaming licence, some of the personal data we collect may be processed or stored on servers located outside Pakistan. Where such international transfers occur, dx777 takes appropriate steps to ensure that your data receives a level of protection equivalent to that which would be provided under applicable data protection standards.

Safeguards we employ for international data transfers include:

• Contractual clauses in our agreements with data processors that impose data protection obligations consistent with our licensing requirements.
• Transferring data only to third parties that maintain demonstrably adequate technical and organisational security measures.
• Limiting international transfers to data categories that are strictly necessary for the service being provided — for example, a game provider based outside Pakistan receives only pseudonymous session data, not your full KYC records.

If you have questions about the specific countries to which your data may be transferred or the safeguards in place for those transfers, please contact our Data Protection team at the address listed in Section 14.

dx777 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by our licensing and legal obligations. The following retention periods apply:

Where you close your dx777 account voluntarily, your data is not deleted immediately — it is retained for the post-closure periods listed above before being securely deleted or anonymised. This retention is required by our licence, not a discretionary choice by dx777. During the post-closure retention period, your data will not be used for any active service or marketing purpose — it is held solely for compliance and dispute resolution purposes.

As a dx777 player, you hold the following privacy rights in relation to your personal data. These rights are not absolute — some are subject to limitations where they conflict with our legal obligations — but dx777 is committed to honouring them to the fullest extent permitted by applicable law.

dx777 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires all applicants to confirm that they are 21 or older, and our KYC verification process is specifically designed to detect and prevent underage registration.

If dx777 becomes aware — through our age verification process, a third-party report, or any other means — that a person under the age of 21 has registered an account or provided personal data to the platform, we will:

• Immediately suspend the account pending investigation.
• Permanently close the account upon confirmation that the account holder is under 21.
• Delete all personal data associated with the account as expeditiously as our legal obligations permit.
• Return any real money deposits to the original payment method, subject to our anti-money-laundering obligations.

Parents and guardians who believe a minor may have registered a dx777 account are urged to contact our support team immediately via live chat. We treat such reports with the highest priority and will take immediate action. dx777 also supports the use of parental control software to prevent minors from accessing online gaming platforms. Tools such as Net Nanny, Qustodio, and similar applications are available to Pakistani families who wish to restrict access to adult content and gambling sites on shared devices.

dx777 sends marketing communications — including promotional emails, bonus announcements, and platform news — only to players who have explicitly opted in to receive them. We do not send unsolicited marketing messages to any player who has not actively consented to receive them during registration or via their account settings.

Our marketing communications may include information about:

• New game releases and platform features on dx777
• Seasonal promotions, reload bonuses, and special offers for Pakistan-based players
• PSL cricket betting markets and other sports events relevant to Pakistani players
• dx777 VIP programme updates and loyalty reward announcements
• Responsible gaming reminders and account management tools

You may withdraw your marketing consent at any time by clicking the unsubscribe link in any marketing email, by updating your communication preferences in your dx777 account settings, or by contacting our support team directly. Withdrawal of marketing consent will not affect the lawfulness of marketing communications sent prior to withdrawal, and will have no negative impact on your account standing, game access, or ability to claim non-promotional bonuses.

dx777 does not share your contact details with third-party marketing agencies or affiliate partners for the purpose of sending you independent marketing communications. Any dx777-branded promotional content you receive will originate from dx777 directly.

dx777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• TLS Encryption in Transit: All data transmitted between your device and the dx777 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can confirm this by checking for the padlock icon in your browser's address bar when accessing dx777.bio.
• Encrypted Storage: Sensitive personal data — including KYC documents, financial records, and account credentials — is stored in encrypted form on secured servers. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within dx777 is restricted on a role-based, need-to-know basis. All internal access to personal data is logged and subject to periodic audit. Former employees have access revoked immediately upon termination.
• Two-Factor Authentication: dx777 offers optional two-factor authentication (2FA) for player accounts. We strongly encourage all players — particularly those in Karachi, Lahore, and other major urban centres with higher rates of online account fraud — to enable 2FA through their account security settings.
• Penetration Testing: dx777's platform undergoes regular independent security testing, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: dx777 maintains a documented incident response plan that is reviewed and updated at least annually. In the event of a security incident affecting personal data, the plan ensures rapid containment, assessment, and — where required — notification to affected players and regulatory authorities.

While dx777 takes all reasonable steps to secure your data, no online platform can guarantee absolute security. You also play an important role in protecting your data — please use a strong, unique password for your dx777 account, enable 2FA, and never share your login credentials with anyone. If you suspect unauthorised access to your account, contact our support team immediately via live chat.

dx777 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, updates to our licensing obligations, changes in applicable law, and improvements to the platform. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

Where changes to this policy are material — meaning they meaningfully affect your rights or how we use your personal data — dx777 will notify you by email (to the address registered on your account) at least 14 days before the changes take effect. Continued use of the dx777 platform after the effective date of a revised policy constitutes acceptance of the updated terms.

For non-material changes — such as corrections of typographical errors, clarifications of existing practices, or minor structural reorganisation that does not affect the substance of the policy — dx777 may update the policy without advance notice, beyond updating the "Last updated" date. We encourage you to review this policy periodically to stay informed of how dx777 protects your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way dx777 handles your personal data, please contact our Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, 365 days a year via the chat widget on the dx777 platform. Live chat is the fastest route to a response for data protection queries.
• Email: [email protected] — please use the subject line "Privacy Policy Query" or "Privacy Rights Request" and include your registered account username. We aim to acknowledge all privacy-related emails within 72 hours and provide a substantive response within 14 working days.

If you are not satisfied with dx777's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the licensing authority under whose jurisdiction dx777 operates. Details of the applicable authority are available from our support team upon request.

dx777 is committed to resolving all privacy complaints fairly, transparently, and in a timely manner. We do not penalise players for raising legitimate data protection concerns, and we treat all such communications with strict confidentiality.