XPK77 Privacy Policy – How We Protect Your Data

Last Updated: June 2026  |  Applies To: All users of xpk77.win

1. Overview

At XPK77, we take your privacy seriously. This Privacy Policy explains how we handle the personal information you share with us when you register an account, place bets, make deposits, or simply browse our platform at xpk77.win.

We have written this policy in plain English so it is easy to follow for all our users across Pakistan. Whether you are betting on a PSL match, playing Fish Games, or checking your VIP rewards — you deserve to know exactly what happens with your data. If you have any concerns, please read this document fully before you start using XPK77.

By using the XPK77 platform — including our website and app — you agree to the practices described in this Privacy Policy. This policy works hand in hand with our Terms and Conditions, which also form part of your agreement with us.

2. What We Collect

We collect two broad categories of data: information you give us directly, and information collected automatically when you use the platform.

2.1 Information You Provide

• Registration details: Full name, date of birth, email address, phone number, and chosen username.
• Identity verification (KYC): Government-issued ID, proof of address, and any documents needed to confirm your identity before withdrawals are processed.
• Payment information: Payment account details for JazzCash, Easypaisa, Raast, Bank Transfer, or other supported mobile wallets — used solely for processing deposits and withdrawals in PKR.
• Communications: Messages you send to our support team via chat, email, or any other channel.
• Preferences: Language settings, notification choices, and any personalisation options you configure in your account.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
• Usage data: Pages visited, features used, bets placed, time spent on different sections, and navigation patterns.
• Session data: Login timestamps, session duration, and logout events.
• Cookies and tracking technologies: As described in Section 5 below.

Data Type	Source	Purpose
Name & Contact Details	You (registration)	Account creation, communication
Date of Birth	You (registration)	Age verification (18+ requirement)
KYC Documents	You (verification)	Identity verification, fraud prevention
Payment Account Details	You (deposit/withdrawal)	Transaction processing in PKR
IP Address & Device Info	Automatic	Security, fraud detection
Betting & Usage History	Automatic	Account management, responsible gaming

3. How We Use Your Data

We only use your data for purposes that are reasonable and directly related to running the XPK77 platform. Specifically, we use it to:

• Create and manage your XPK77 account and keep it secure.
• Process your deposits and withdrawals in PKR through supported payment channels.
• Verify your age and identity in line with our responsible gaming commitments.
• Detect and prevent fraud, money laundering, and other forms of abuse.
• Provide customer support when you raise a query or complaint.
• Send you important account-related notifications — such as withdrawal confirmations, security alerts, and policy updates.
• Improve our platform, fix bugs, and develop new features based on how users interact with XPK77.
• Send you promotional communications about bonuses, new features, or upcoming events like PSL betting markets — only where you have opted in to receive these.
• Meet any legal obligations we may have.

We do not use your data to make any fully automated decisions that would significantly affect you without human oversight.

4. Sharing Your Data

XPK77 does not sell, rent, or trade your personal data to third parties. Full stop. However, we do share specific data with carefully selected partners in limited circumstances:

4.1 Payment Processors

When you make a deposit or request a withdrawal, we share the minimum necessary payment information with the relevant provider — JazzCash, Easypaisa, Raast, or your bank. These providers have their own privacy policies and security standards.

4.2 Identity Verification Providers

To complete KYC checks, we may share your submitted documents with a trusted third-party verification service. These partners are contractually bound to use your data solely for identity verification and to keep it confidential.

4.3 Technology and Infrastructure Partners

We use reputable third-party providers for hosting, analytics, and security monitoring. These partners process data on our behalf under strict data processing agreements and cannot use your data for their own purposes.

4.4 Legal Obligations

We may disclose your data if required to do so by a valid legal process, court order, or to protect the safety and rights of XPK77, our users, or the public.

5. Cookies & Tracking

Like most websites, XPK77 uses cookies and similar technologies to make the platform work properly and to understand how users engage with it.

5.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function — keeping you logged in, remembering your session, and securing your account.
• Analytics cookies: Help us understand which pages are visited most, where users spend time, and where they encounter issues. This data is aggregated and anonymous.
• Preference cookies: Remember your settings, such as language or notification preferences.
• Security cookies: Used to detect unusual activity and protect against fraud and bot traffic.

5.2 Managing Cookies

You can control non-essential cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of the platform, including logging in. Most modern browsers allow you to view, block, or delete cookies through their settings menu.

6. Data Security

We apply industry-standard technical and organisational measures to keep your data safe. These include:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted in transit.
• Encrypted storage: Sensitive data such as passwords and payment details is stored using strong encryption at rest.
• Access controls: Only authorised XPK77 staff — on a need-to-know basis — can access personal data, and all access is logged.
• Regular security audits: Our systems are regularly reviewed and tested for vulnerabilities.
• Two-factor authentication: Available for your account to add an extra layer of protection beyond your password.

While we do everything reasonably possible to protect your data, no system is completely immune to risk. If you suspect unauthorised access to your account, please contact our support team immediately and change your password without delay.

7. Data Retention

We keep your personal data only for as long as it is genuinely needed. In practice, this means:

• Active accounts: Data is retained for the full duration your account remains open with us.
• Closed accounts: We retain certain records — such as transaction history and KYC documents — for a defined period after account closure to meet our legal, fraud-prevention, and dispute-resolution obligations.
• Marketing data: If you have opted in to receive promotional messages, we retain your contact details for this purpose until you opt out.
• Support communications: Chat logs and support tickets may be kept for up to two years to help resolve any future disputes or follow-up queries.

When data is no longer required, it is securely deleted or anonymised so it can no longer be linked back to you.

8. Your Rights

As an XPK77 user, you have meaningful control over your personal data. You can exercise the following rights by contacting our support team:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Ask us to correct any inaccurate or outdated information in your account.
• Right to deletion: Request that we delete your personal data, subject to any legal obligations we must fulfil before doing so.
• Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
• Right to object: Object to us using your data for direct marketing at any time. We will stop sending promotional messages as soon as we receive your request.
• Right to data portability: Request a copy of certain data in a structured, machine-readable format.

We aim to respond to all data-related requests within 30 days. In complex cases we may need a little longer, but we will always keep you informed of our progress.

9. Minors

XPK77 is strictly for adults aged 18 and above. We do not knowingly collect any personal data from anyone under the age of 18. If we discover that a minor has registered an account, that account will be closed immediately and any associated data deleted.

If you are a parent or guardian and believe your child may have created an account on XPK77, please contact our support team right away so we can take the necessary action.

10. Payment Data

All deposits and withdrawals on XPK77 are processed in PKR through trusted payment partners including JazzCash, Easypaisa, Raast, Bank Transfer, and other supported mobile wallets. We do not store your full payment credentials on our own servers. Payment data is passed directly to your chosen payment provider using secure, encrypted channels.

Transaction records — amounts, dates, and payment methods used — are retained as part of your account history. This information may be reviewed during a withdrawal verification or in the event of a dispute, but it is never shared with third parties for commercial purposes.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes that affect your rights, we may also notify you directly via email or an in-platform message.

We encourage you to check back on this page periodically — especially before major events like the start of a new PSL season or a T20 international series when platform activity typically increases. Continued use of XPK77 after a policy update constitutes your acceptance of the revised terms.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your information is being handled, please get in touch with our support team. We are available around the clock and aim to respond to all privacy-related queries as quickly as possible.

You can also read our Responsible Gaming page for information on how to manage your gaming activity, or visit our FAQ page for answers to common account and platform questions.