xp777 Privacy Policy — How We Handle Your Data

Introduction — Our Commitment to Your Privacy

This Privacy Policy ("Policy") describes how xp777 ("Platform", "We", "Us", "Our") collects, processes, stores, and protects personal information provided by users ("You", "Player", "User") when you access or use the xp777 website, mobile site, and all associated gaming and sports betting services. By creating an account on xp777 or using any of its services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

xp777 processes personal data only to the extent necessary to provide its services, maintain platform security, meet legal and regulatory obligations, and improve the player experience. We do not sell personal data to third parties, and we do not use personal data for any purpose that is inconsistent with this Policy. This Policy applies to all data collected through the xp777 website, mobile site, customer support channels, and any other xp777 communications.

Section 1

Information We Collect

xp777 collects personal information from you in several ways: directly when you register an account or contact support, automatically through your use of the platform, and from third-party service providers such as payment processors and KYC verification services. The categories of personal data we collect include the following.

• Registration and identity data: your full name, date of birth, email address, username, and account password (stored in encrypted form). This data is collected at the point of account creation and is required to open and maintain an active xp777 account.
• KYC verification documents: government-issued photo identification (such as a National ID card or passport), proof of address, and in some cases proof of the payment method used. These documents are collected when xp777 requests identity verification and are processed by trusted third-party KYC service providers operating under equivalent data protection standards.
• Financial transaction data: deposit amounts, withdrawal amounts, transaction dates, payment method identifiers (such as masked bKash wallet numbers or masked card numbers), and transaction status records. Full payment account numbers are never stored in full by xp777; only masked identifiers necessary for transaction matching are retained.
• Platform usage and technical data: IP address, device type, operating system, browser type, screen resolution, session duration, pages visited, games played, betting history, bonus activity, and login timestamps. This data is collected automatically through cookies, server logs, and standard web analytics methods and is used to maintain platform security and improve the player experience.
• Communications data: the content of messages you send to xp777 via customer support channels, including live chat transcripts, email correspondence, and any supporting documentation you provide in relation to a support request, dispute, or account query. This data is retained for a defined period to maintain a record of support interactions and for quality assurance purposes.

Section 2

How We Use Your Personal Information

xp777 uses personal data only for specific, defined purposes that are necessary to provide its gaming and betting services, comply with applicable legal obligations, and maintain the security and integrity of the platform. The purposes for which we process your personal data are set out below.

• Account creation and management: to register your account, verify your identity, process deposits and withdrawals, maintain your account balance, apply bonuses and promotional credits, and provide access to all gaming and betting services available on the xp777 platform.
• Security and fraud prevention: to monitor platform activity for suspicious behaviour, detect and prevent fraudulent transactions, identify and investigate potential breaches of our Terms and Conditions, and comply with anti-money laundering (AML) obligations. This processing is essential to maintaining a safe environment for all xp777 players.
• Customer support: to respond to your support requests, resolve account disputes, process complaints, and communicate with you in connection with any service query. Support interactions are logged and retained to ensure consistency and quality of service.
• Responsible gaming compliance: to apply deposit limits, session time limits, wagering limits, time-out periods, and self-exclusion restrictions requested by the player; and to identify players who may be showing signs of problematic gambling behaviour based on platform usage patterns, in order to provide appropriate support or intervention.
• Platform improvement and analytics: to analyse aggregated, anonymised usage data to understand how players interact with xp777, identify areas for improvement, and optimise the platform's performance and user experience. Analytics data used for this purpose does not identify individual players and is not used to make decisions that affect individual accounts.

Section 4

Sharing and Disclosure of Personal Data

xp777 does not sell, rent, or trade personal data to any third party. xp777 may share personal data with trusted third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

• Payment processing partners: xp777 shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to process your deposits and withdrawals. These partners are contractually bound to handle your data securely and in accordance with applicable financial data protection standards.
• KYC and identity verification providers: where required to verify a player's identity or age, xp777 shares identity documentation with contracted KYC verification service providers. These providers operate under data processing agreements that require them to handle identity data securely and to use it only for the purpose of verification.
• Game studios and software providers: when a player launches a game on xp777, certain session data (such as a session token, player ID, and BDT stake value) is transmitted to the game studio's server in order to initiate and run the game. Game studios are not provided with your full personal profile and are contractually restricted in their use of session data.
• Law enforcement and regulatory authorities: xp777 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities when required to do so by applicable law, valid legal process, court order, or in response to a verified request from a competent authority. xp777 will disclose only the minimum data required to satisfy the legal obligation.

Section 5

Data Retention

xp777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data, financial transaction records, and KYC documentation are retained for a minimum period following account closure as required by anti-money laundering regulations and financial record-keeping obligations. After the required retention period expires, personal data is securely deleted or anonymised.

Platform usage data collected for analytics purposes is retained in aggregated, anonymised form and is not subject to the same retention limits as personal data. Communications data from customer support interactions is retained for a defined period to maintain a complete record of support history. If you request closure of your xp777 account, xp777 will retain the minimum data required by law and delete the remainder within a reasonable timeframe.

Section 7

Data Security Measures

xp777 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include SSL encryption for all data in transit between your device and xp777's servers; encrypted storage of account credentials and sensitive personal data; access controls that restrict internal access to personal data to authorised personnel only; regular security reviews and vulnerability assessments; and secure disposal procedures for data that is no longer required to be retained.

While xp777 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. In the unlikely event of a data security incident that affects your personal data, xp777 will take prompt steps to contain the incident, assess the risk, and notify affected players in accordance with applicable data breach notification requirements. You are also responsible for keeping your account password confidential and for notifying xp777 immediately if you suspect that your account has been compromised.

Section 8

Your Privacy Rights

Subject to applicable law, you have a number of rights in relation to the personal data that xp777 holds about you. To exercise any of the rights listed below, please contact xp777 customer support at [email protected]. xp777 will respond to all verified data rights requests within a reasonable timeframe. Please note that certain rights may be limited where xp777 is required to retain data by law or where exercising a right would conflict with a legal obligation.

• Right of access: you have the right to request a copy of the personal data that xp777 holds about you, along with information about how it is being used. xp777 will provide this in a clear, accessible format within a reasonable timeframe following receipt of a verified request.
• Right to rectification: if you believe that any personal data xp777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information (such as your contact email address) directly from your account settings.
• Right to erasure: in certain circumstances you have the right to request that xp777 delete your personal data. This right is not absolute — xp777 may be required to retain certain data (such as transaction records and KYC documentation) for legally mandated periods even after account closure. Where erasure is possible, xp777 will action it promptly.
• Right to object to marketing: if you have previously consented to receive marketing communications from xp777, you have the right to withdraw that consent and opt out of further marketing at any time. Opting out of marketing does not affect your ability to use the xp777 platform or access its gaming services.
• Right to data portability: where technically feasible and where the processing is based on your consent or on a contract with you, you may request that xp777 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service if you wish.

Section 9

Third-Party Services and External Links

The xp777 platform integrates third-party services including game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming; payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard; and KYC identity verification service providers. When you interact with these third-party services — for example, by launching a game or completing a payment — certain data is transmitted to those third parties as described in Section 4 of this Policy. xp777 is not responsible for the privacy practices of these third-party services. You are encouraged to review the privacy policies of any third-party service you interact with directly.

xp777 does not host any external advertising on its platform and does not integrate third-party advertising networks, social media tracking pixels, or behavioural retargeting tools. All content displayed on the xp777 platform is either created by xp777 or licensed directly from contracted game studios and is not subject to third-party advertising data collection.

Section 10

Changes to This Policy and How to Contact Us

xp777 reserves the right to update or amend this Privacy Policy at any time. Any material changes to this Policy will be communicated to registered players via the email address associated with their account prior to the changes taking effect, or by prominent notice on the xp777 website. The date at the top of this Policy indicates when it was last revised. Continued use of the xp777 platform following the publication of any change to this Policy constitutes your acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how xp777 has handled your personal data, please contact our support team by email at [email protected]. Our team is available 24 hours a day, 7 days a week, and will acknowledge all privacy-related enquiries promptly and respond in full within a reasonable timeframe.