Privacy Policy — cx777 Online Casino

1 Data Controller

cx777 is the data controller for all personal data collected through the cx777 platform. As data controller, cx777 is responsible for determining the purposes and means by which your personal data is processed. cx777 operates under an international gaming licence and is subject to the data protection requirements embedded in that licensing framework.

All data protection queries, subject access requests and complaints should be directed to the cx777 data protection contact at [email protected] with the subject line "Data Protection Request — [your registered email address]".

2 Personal Data We Collect

cx777 collects the following categories of personal data from registered users and platform visitors:

cx777 does not collect sensitive personal data (such as ethnicity, political opinions, religious beliefs, biometric data or health information) unless specifically required by our licensing authority's KYC or AML procedures, in which case such collection will be notified to you at the time.

3 How We Collect Your Data

cx777 collects personal data through the following mechanisms:

• Direct provision by you: When you complete the cx777 registration form, submit KYC documents, make a deposit or withdrawal, use live chat, send an email to support, or update your account profile, you are directly providing personal data to cx777.
• Automated technical collection: When you visit cx777.im, our servers automatically collect technical data including your IP address, browser type, operating system, referring URL and session duration. This data is collected via server logs and first-party cookies.
• Gaming activity: cx777's platform automatically records all game sessions, bet placements, results, and cashier transactions associated with your account in order to maintain accurate account records and comply with our licensing audit requirements.
• Third-party identity verification: During KYC, cx777 may use a third-party identity verification provider to validate the authenticity of the documents you submit. That provider may return a verification result to cx777 that includes data points derived from your submitted documents.
• Payment processors: When you use JazzCash, EasyPaisa, HBL, UBL or Meezan Bank to deposit or withdraw, the relevant payment processor confirms transaction completion to cx777. cx777 receives transaction reference numbers and account identifiers but does not store your full banking credentials.

4 How cx777 Uses Your Personal Data

cx777 uses your personal data strictly for the following purposes:

• To create and manage your cx777 account, including verifying your identity at registration and during ongoing KYC reviews.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL and Meezan Bank in Pakistani Rupees (PKR).
• To provide access to cx777 casino games, the sportsbook (including PSL and international cricket markets), fishing games, slot games and all other platform features.
• To detect and prevent fraud, money laundering, multi-accounting, bot usage and other prohibited activities as defined in the cx777 Terms and Conditions.
• To comply with our obligations under our international gaming licence, including record-keeping, AML/KYC reporting and responsible gaming monitoring.
• To send you transactional communications — account notifications, deposit confirmations, withdrawal updates, security alerts and KYC status updates. These communications cannot be opted out of as they are necessary for account operation.
• To send you promotional communications — bonus offers, new game announcements, seasonal promotions — where you have consented to receive marketing from cx777.
• To monitor and enforce our Responsible Gaming obligations, including identifying players who may be exhibiting signs of problem gambling and triggering appropriate interventions.
• To improve the cx777 platform through analysis of aggregated, anonymised usage data including game popularity, session length patterns and feature engagement rates.
• To respond to customer support queries submitted via live chat or email.

5 Legal Basis for Processing

cx777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the cx777 service as described in the Terms and Conditions — including account management, game access, cashier operations and customer support.
• Legal obligation: Processing required to comply with cx777's licensing obligations — including KYC verification, AML record-keeping and responsible gaming monitoring requirements mandated by our licensing authority.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where such interests are not overridden by your privacy rights. cx777 has conducted legitimate interests assessments for each such use case.
• Consent: Processing for marketing communications, where you have explicitly opted in at registration or subsequently through your account settings. You may withdraw consent at any time.

6 Data Sharing & Third Parties

cx777 does not sell, rent or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Each processor handles data under their own privacy policy and applicable Pakistani financial regulations.
• Identity verification providers: A third-party KYC provider processes your submitted identity documents to verify authenticity. This provider is bound by contractual data protection obligations with cx777 and may not use your data for any purpose outside the cx777 verification scope.
• Game software providers: Some cx777 casino game titles are operated by third-party game studios (particularly live dealer games). These providers receive only the minimum game session data required to operate the game — typically a session token and bet value — and do not receive your full account profile.
• Regulatory and licensing authorities: cx777 is obligated to share account and transaction data with its licensing authority and, where legally required, with law enforcement agencies, financial intelligence units or courts upon receipt of a valid legal request. cx777 will not notify you of such disclosures where prohibited from doing so by law.
• Fraud prevention services: cx777 may share limited technical data (such as device fingerprints and IP addresses) with fraud prevention network providers to detect and block fraudulent account registrations and payment fraud.

All third-party service providers that handle cx777 user data are required to enter into data processing agreements with cx777. These agreements impose binding obligations on the processor to protect your data, use it only for the specified purpose, and delete it when the service relationship ends.

7 Cookies & Tracking Technologies

cx777 uses first-party cookies and similar technologies on the cx777.im website. cx777 does not use third-party advertising cookies or cross-site tracking technologies. The cookies cx777 uses fall into the following categories:

• Strictly necessary cookies: Required for the cx777 platform to function. These include session cookies that maintain your login state while you are using the platform and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences and previously entered (non-sensitive) form field values. These improve your cx777 experience and persist between sessions. You may disable these in your browser settings, though some preference features will stop working.
• Analytics cookies: First-party analytics cookies help cx777 understand how users navigate the platform — which pages are visited most frequently, where users exit, and which game categories are most popular. This data is aggregated and anonymised. You may opt out of analytics cookies without affecting core platform functionality.

cx777 does not use cookies for retargeting you on third-party websites, and does not share cookie data with advertising networks. To manage your cookie preferences or to clear existing cx777 cookies from your device, please use your browser's cookie management tools.

8 Data Retention

cx777 retains your personal data for the periods set out below. These periods are determined by legal and licensing obligations, particularly anti-money laundering (AML) record-keeping requirements:

• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure, in line with AML regulations applicable to licensed gaming operators.
• Transaction records (deposits and withdrawals): Retained for a minimum of 5 years from the date of each transaction.
• Game history and betting records: Retained for a minimum of 3 years from the date of each game session or bet.
• Customer support records (live chat and email): Retained for 2 years from the date of the support interaction.
• Technical / access logs: Retained for 12 months from the date of generation.
• Marketing consent records: Retained for the duration of your account plus 1 year after closure, to evidence consent or withdrawal of consent.

Upon expiry of the applicable retention period, cx777 will securely delete or irreversibly anonymise the relevant personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for aggregated analytics and platform improvement purposes.

9 Data Security

cx777 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and the cx777 platform.
• AES-256 encryption for sensitive data stored in cx777's databases, including identity document data and payment method identifiers.
• Bcrypt hashing with salt for all stored user passwords. cx777 staff cannot retrieve your password in plain text — only you know your password.
• Role-based access controls ensuring that cx777 staff can only access the personal data necessary for their specific role. A customer support agent, for example, cannot access KYC document images unless they are handling a related verification query.
• Regular third-party penetration testing and vulnerability scanning of the cx777 platform infrastructure.
• Logging and monitoring of all administrative access to systems holding personal data, with automated alerts for anomalous access patterns.

Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any security vulnerability or suspicious activity on your cx777 account, please report it immediately to [email protected].

10 Your Data Subject Rights

As a cx777 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact cx777 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data cx777 holds about you. cx777 will provide this within 30 days. The first copy is provided free of charge; subsequent copies within a 12-month period may be subject to a reasonable administrative fee.
• Right to Rectification: If any personal data cx777 holds about you is inaccurate or incomplete, you may request that it be corrected. Simple corrections (such as a misspelled city name) can also be made directly from your account profile settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. Erasure requests are subject to mandatory retention obligations as described in Section 8.
• Right to Restrict Processing: You may request that cx777 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request that cx777 provide your personal data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. cx777 will honour marketing opt-outs immediately. Objections to legitimate-interest processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on consent (primarily marketing), you may withdraw that consent at any time with no adverse effect on your cx777 account or service access.

cx777 will acknowledge all data rights requests within 48 hours and will provide a substantive response within 30 days. If a request is complex or involves a large volume of data, cx777 may extend this period by a further 30 days with notice to you.

11 Marketing Communications

cx777 sends promotional communications — including bonus offers, reload promotions, new game announcements, PSL betting specials and loyalty rewards — only to users who have explicitly opted in to receive such communications.

You can manage your marketing preferences at any time from your cx777 account settings. You may also opt out by emailing [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within 24 hours. You may continue to receive transactional and account-related communications after opting out of marketing, as these are necessary for account operation.

12 Minors & Age Verification

cx777 operates a strict minimum age policy of 21 years. cx777 does not knowingly collect personal data from or provide services to individuals under 21 years of age. Age is verified as part of the KYC process using CNIC or passport documentation.

If cx777 becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended, all balances will be held pending investigation, and the personal data will be securely deleted as soon as the investigation is complete and no legal retention obligation applies.

If you are a parent or guardian and believe that a minor under your care has registered a cx777 account, please contact cx777 immediately at [email protected] so that the account can be closed and the data handled appropriately. cx777 recommends the use of parental control software to restrict access to online gambling platforms on shared devices used by minors.

13 Changes to This Privacy Policy

cx777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When changes are made, the "Last Updated" date at the top of this document will be revised accordingly.

Where a change is material — meaning it significantly affects how your personal data is used or your rights in relation to it — cx777 will notify registered users by email to the address associated with their cx777 account at least 14 days before the change takes effect. For non-material updates (such as clarifications of existing practices or corrections of typographical errors), the updated policy will be posted on this page without advance individual notification.

Your continued use of the cx777 platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the updated policy, you must stop using cx777 and contact support to close your account.

14 Contact & Complaints

For any privacy-related queries, data rights requests, or complaints about how cx777 handles your personal data, please contact us using the following channels:

• Email: [email protected] — use the subject line "Data Protection" to ensure your query is routed to the correct team. Responses are provided between 9:00 AM and 1:00 AM PKT daily, within 4 hours during operating hours for standard queries.
• Live Chat: Available 24/7 through the cx777 platform for urgent privacy concerns, including suspected unauthorised access to your account or requests for immediate data suppression.

If you are not satisfied with cx777's response to your privacy complaint, you may escalate the matter to the independent dispute resolution body designated by cx777's licensing authority. Details of the escalation process will be included in cx777's response to your formal complaint.