1Introduction
This Privacy Policy ("Policy") describes how cx777k ("cx777k", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to users ("you", "your", "User") of the cx777k website located at https://cx777k.cam and all associated services, mobile interfaces and products (collectively, the "Platform").
cx777k is an online betting and casino platform providing services to users in Pakistan and other permitted jurisdictions. Given the nature of our services, we are required to collect and process certain categories of personal data to operate legally, to verify user identities, to process financial transactions and to maintain a safe, compliant platform for all users — whether they access cx777k from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or elsewhere.
We are committed to handling all personal data with integrity, transparency and in accordance with applicable data protection standards, including the principles set out in international best-practice frameworks. We do not sell your personal data to third parties.
Important: By registering an Account with cx777k or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
2Definitions
The following terms carry the meanings set out below throughout this Policy:
"Personal Data"
Any information relating to an identified or identifiable natural person, including name, email address, date of birth, CNIC number, IP address, device identifiers, financial information and any other data that can directly or indirectly identify you.
"Processing"
Any operation performed on Personal Data, whether or not by automated means, including collection, recording, storage, alteration, retrieval, use, disclosure by transmission, dissemination, restriction or erasure.
"Data Controller"
The entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, cx777k acts as the Data Controller in respect of User personal data.
"Data Processor"
A natural or legal person, public authority, agency or other body that processes Personal Data on behalf of the Data Controller, such as third-party payment processors, KYC verification providers or cloud infrastructure providers.
"KYC Data"
Identity verification documents and information submitted by Users during the Know Your Customer process, including copies of government-issued identification such as Pakistani National Identity Cards (CNIC), passports, and proof of address documents.
"Cookie"
A small text file placed on your device by the Platform when you visit, used to retain session information, user preferences and analytical data as further described in Section 8.
"Sensitive Data"
A subset of Personal Data requiring heightened protection, including financial account details, government identification numbers, and data relating to health or problem gambling indicators collected in the context of responsible gambling tools.
"Applicable Law"
All laws, regulations, regulatory guidance and binding codes of practice applicable to the processing of Personal Data in the jurisdiction in which cx777k holds its primary gaming licence, together with any mandatory consumer protection obligations applicable to Users in their jurisdiction of residence.
3Data Controller
cx777k operates as the Data Controller in respect of all Personal Data collected from Users through the Platform. The Platform is operated under a licence issued by the relevant gaming regulatory authority in the licensing jurisdiction. For the purposes of data processing accountability, all enquiries, subject access requests and data rights exercises should be directed to cx777k's support team as described in Section 15 of this Policy.
Where cx777k engages third-party Data Processors — such as payment verification providers, identity verification services, cloud hosting infrastructure providers or fraud prevention partners — those processors act strictly on cx777k's documented instructions and are bound by data processing agreements that require equivalent standards of data protection to those set out in this Policy.
Regulatory Note: cx777k does not claim to be regulated by, or affiliated with, any Pakistani government authority, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial regulatory body. Data protection practices are governed by the applicable law of the licensing jurisdiction. Pakistani users access the Platform at their own legal risk in accordance with applicable local law.
4Data We Collect
cx777k collects Personal Data through several channels depending on how you interact with the Platform. The categories of data we collect are described below:
4.1 Registration Data
When you create an Account with cx777k, we collect the following information:
- Full legal name as it appears on your government-issued identification;
- Date of birth (for age verification and 18+ compliance purposes);
- Residential address, including city and country (e.g., Karachi, Lahore, Islamabad);
- Email address;
- Mobile phone number;
- Username and encrypted password (passwords are never stored in plain text);
- Currency preference (PKR / Rs for Pakistani users).
4.2 KYC Verification Data
To meet our regulatory obligations, we collect the following identity and verification documents:
- Copy of Pakistani National Identity Card (CNIC), valid passport or other government-issued photographic identification;
- Proof of address documents (utility bills, bank statements, official correspondence dated within three months);
- Proof of payment method ownership;
- Source of funds documentation where required by our compliance procedures.
4.3 Financial Transaction Data
- Deposit and withdrawal amounts, dates and transaction references;
- Payment method identifiers (partial account numbers, wallet IDs) associated with methods used on the Platform — contextual payment references include Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. None of these providers are affiliated with or endorse cx777k;
- Transaction history and account balance records;
- Bonus claims and wagering activity records.
4.4 Technical & Device Data
- IP address and approximate geolocation derived from IP;
- Device type, operating system and browser version;
- Session timestamps and login history;
- Referral source and navigation paths within the Platform.
4.5 Responsible Gambling Data
- Deposit limits, loss limits and session time limits you have set;
- Cooling-off periods and self-exclusion status and dates;
- Responses to responsible gambling self-assessment tools, where used.
4.6 Communications Data
- Content of messages sent to our support team via Live Chat or email;
- Records of support interactions, complaints and resolutions;
- Marketing communication preferences and opt-in or opt-out records.
| Data Category |
Examples |
Collection Method |
| Registration Data |
Name, email, date of birth, address |
Provided by User at sign-up |
| KYC Data |
CNIC, passport, utility bill |
Uploaded by User on request |
| Financial Data |
Deposits, withdrawals, transaction IDs |
Generated during Platform transactions |
| Technical Data |
IP address, browser, device type |
Collected automatically on access |
| RG Data |
Limits, exclusion records |
Set by User or applied by cx777k |
| Communications Data |
Support messages, complaint records |
Provided by User via support channels |
5How We Use Your Data
cx777k processes your Personal Data only for specific, documented purposes. We do not use your data for any purpose incompatible with the reasons for which it was originally collected. The primary purposes for which we process your Personal Data are:
- Account Management: To create, maintain and administer your cx777k Account, including authentication and security management.
- Identity Verification & KYC Compliance: To verify your identity, age and eligibility to use the Platform in accordance with our regulatory obligations and to prevent underage gambling.
- Transaction Processing: To process deposits, withdrawals and internal account transfers accurately and securely.
- Regulatory & Legal Compliance: To meet our anti-money laundering (AML), counter-terrorism financing (CTF) and fraud prevention obligations, and to maintain records as required by our licensing authority.
- Responsible Gambling: To operate and enforce deposit limits, loss limits, cooling-off periods, self-exclusion requests and other player protection tools. This includes monitoring account behaviour to identify potential indicators of problem gambling.
- Customer Support: To respond to your enquiries, resolve complaints and provide assistance via Live Chat and email support.
- Platform Improvement: To analyse usage patterns, identify technical issues and improve the performance, content and user experience of the Platform.
- Marketing Communications: To send you promotional offers, bonuses and personalised content where you have provided your consent, or where we have a legitimate interest in doing so. You may withdraw marketing consent at any time through your Account settings or by contacting support.
- Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, unauthorised access, bonus abuse, collusion and other conduct that breaches our Terms & Conditions.
- Sports & Betting Integrity: To monitor betting patterns for indicators of match-fixing, irregular activity or market manipulation, and to cooperate with relevant sporting integrity bodies where required.
6Legal Basis for Processing
cx777k relies on the following legal bases to process your Personal Data, in accordance with applicable data protection law:
- Contractual Necessity: Processing is necessary to perform our contract with you — namely to operate your Account, process transactions and deliver the Services you have registered to use.
- Legal Obligation: Processing is required to comply with our legal and regulatory obligations, including KYC verification, AML/CTF obligations, and mandatory record-keeping requirements imposed by our licensing authority.
- Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, platform analytics and responsible gambling programme management, provided such interests do not override your fundamental data rights.
- Consent: Where we process data for marketing communications, optional responsible gambling self-assessment tools or other non-essential purposes, we rely on your freely given, specific and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Consent Withdrawal: Withdrawing marketing consent will not affect your ability to use the core Platform. Your Account and transaction processing will continue to operate normally under the contractual and legal obligation bases described above.
7Data Sharing & Disclosure
cx777k does not sell, rent or trade your Personal Data to any third party for their own commercial purposes. We share Personal Data only in the circumstances described below:
- KYC & Identity Verification Providers: We share identity documents and registration data with authorised third-party identity verification services to perform the KYC checks required under our licensing obligations.
- Payment Processing Partners: Transaction data is shared with payment processors necessary to facilitate deposits and withdrawals. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are mentioned as contextual payment method references only — these providers are not our partners and do not endorse our gambling services.
- Fraud Prevention & AML Services: We share relevant data with specialist fraud detection and AML screening providers to meet our compliance obligations and protect the Platform from financial crime.
- Regulatory & Licensing Authorities: We may be required to disclose Personal Data to our licensing authority, governmental or regulatory bodies, or law enforcement agencies where required by law, court order or regulatory direction. We will notify you of any such disclosure where legally permitted to do so.
- Sports Integrity Organisations: In the event that we identify betting patterns suggestive of match-fixing or sports fraud affecting events such as PSL, ICC tournaments or other competitions, we may share relevant data with the applicable sporting integrity body as required under our licence conditions.
- Cloud Infrastructure & Technology Providers: Our platform is hosted on secure cloud infrastructure provided by third-party technology partners bound by data processing agreements with appropriate safeguards.
- Group Entities: Where cx777k operates as part of a group of companies, Personal Data may be shared within the group for internal administrative, compliance and operational purposes only.
- Business Transfers: In the event of a merger, acquisition, asset sale or restructuring involving cx777k, Personal Data held on our systems may be transferred to the acquiring or successor entity, subject to equivalent privacy protections. Users will be notified of any material change in data controller as a result of such a transaction.
8Cookies & Tracking Technologies
cx777k uses cookies and similar tracking technologies (such as web beacons, local storage and session tokens) to operate the Platform effectively and to enhance your user experience. Cookies do not give us access to your device beyond the data they store.
The cookies we use fall into the following categories:
| Cookie Type |
Purpose |
Retention |
| Strictly Necessary |
Maintain your login session, store security tokens, prevent CSRF attacks |
Session duration |
| Functional |
Remember your language preference, currency setting (PKR) and responsible gambling tool states |
Up to 12 months |
| Analytical |
Measure page visits, navigation patterns and feature usage to improve the Platform |
Up to 24 months |
| Marketing |
Track referral source and promotional campaign performance (only where consent is given) |
Up to 30 days |
Strictly necessary cookies are placed automatically as they are essential to the operation of the Platform. All other cookies require your consent, which you may grant or withdraw through the cookie preference centre accessible on the Platform. Most browsers also allow you to manage and delete cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use certain features of the Platform.
9Data Retention
cx777k retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by our legal, regulatory or licensing obligations. The following indicative retention periods apply:
- Account and Registration Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping requirements applicable under our licensing framework.
- KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction or Account closure, whichever is later, in accordance with applicable regulatory requirements.
- Financial Transaction Records: Retained for a minimum of five (5) years to support audit, dispute resolution and AML/CTF compliance obligations.
- Responsible Gambling Records: Self-exclusion and limit records are retained for the duration of their applicability plus five (5) years to prevent circumvention of exclusion periods and to support regulatory reporting.
- Support Communications: Retained for three (3) years from the date of last contact, unless the matter relates to an ongoing complaint or regulatory enquiry.
- Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter as evidence of the consent decision.
- Technical and Log Data: Typically retained for twelve (12) months for security monitoring and platform diagnostic purposes.
Once the applicable retention period expires, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes as it no longer constitutes Personal Data.
10Data Security
cx777k implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include, but are not limited to:
- Encryption in Transit: All data transmitted between your browser or device and the cx777k Platform is encrypted using TLS (Transport Layer Security) protocols.
- Encryption at Rest: Sensitive data held in our databases, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
- Password Protection: User passwords are never stored in plain text. All passwords are hashed using robust one-way hashing algorithms with salting before storage.
- Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. All staff with access to Personal Data are subject to confidentiality obligations and data protection training.
- Fraud Monitoring: Automated and manual systems continuously monitor login activity, transaction patterns and access behaviour for signs of compromise or fraud.
- Third-Party Security Audits: cx777k's security infrastructure is subject to periodic review and penetration testing by independent security specialists.
Your Responsibility: While cx777k takes all reasonable steps to protect your data, the security of your Account also depends on you. You must keep your login credentials confidential, use a strong and unique password, and notify cx777k support immediately if you suspect any unauthorised access to your Account. cx777k will never ask for your password via email, Live Chat or any other channel.
11Your Rights
Subject to applicable law and our legal and regulatory obligations, you hold the following rights in relation to your Personal Data held by cx777k:
-
Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed. We will respond to verified subject access requests within a reasonable timeframe as required by applicable law.
-
Right to Rectification: If you believe that any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain registration details directly within your Account settings.
-
Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Please note that this right is subject to override by our regulatory retention obligations — data we are legally required to retain cannot be deleted on request.
-
Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data or object to processing based on legitimate interests, pending resolution.
-
Right to Data Portability: Where processing is based on your consent or on contract, and processing is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
-
Right to Object: You have the right to object to processing based on legitimate interests, including profiling, where you have grounds relating to your particular situation. You may also object to direct marketing at any time without providing grounds.
-
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of the above rights, please contact our support team using the details provided in Section 15. We may need to verify your identity before processing any rights request. We will acknowledge your request promptly and respond fully within the timeframe required by applicable law.
Limitations: Certain rights may be limited or overridden by mandatory legal and regulatory requirements — in particular our AML, KYC and regulatory record-keeping obligations. Where we are unable to fully comply with a rights request due to such obligations, we will inform you of the reason.
12International Data Transfers
cx777k operates internationally, and your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence, including the jurisdiction in which cx777k holds its gaming licence. Some of these countries may not have data protection laws equivalent to those in your home jurisdiction.
Where we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data, including:
- Standard contractual clauses or equivalent data transfer mechanisms approved under applicable law;
- Binding data processing agreements with all third-party recipients;
- Technical safeguards including encryption in transit and at rest.
By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Pakistan as described above. If you have concerns about international data transfers, please contact our support team.
13Minors & Age Policy
The cx777k Platform is strictly for adults aged 18 years and over, or the higher minimum age required under the applicable laws of the User's jurisdiction or the operator's licensing conditions. cx777k does not knowingly collect, store or process Personal Data from individuals under the minimum eligible age.
All registration applications are subject to age verification as part of the KYC process. Where cx777k becomes aware or has reason to suspect that a User is below the minimum eligible age, the Account will be immediately suspended, access will be blocked, and any Personal Data collected will be handled in accordance with applicable law, including secure deletion where no regulatory retention obligation applies.
Underage Access: If you are a parent or guardian and believe that a person under 18 has registered with cx777k, please contact our support team immediately at
[email protected] (plain text — not a clickable link). We will investigate and take appropriate action promptly.
14Policy Amendments
cx777k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, licensing conditions or operational procedures. We will notify you of material changes to this Policy by one or more of the following methods:
- A prominent notice displayed on the Platform homepage or at login;
- An email notification sent to your registered email address;
- An in-Account notification displayed on your next login session.
The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Where material changes are made, we will provide a minimum of seven (7) days' advance notice before the revised Policy takes effect, except where a shorter period is required by law or regulatory direction.
Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you disagree with any changes to this Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.
We recommend reviewing this Privacy Policy periodically to stay informed about how cx777k collects, uses and protects your Personal Data.