Privacy Policy — 10x777

This Privacy Policy ("Policy") describes how 10x777 ("we", "us", "the Platform", "10x777"), operating the website at https://10x777.cam, collects, uses, stores, shares and protects the personal data of individuals ("you", "User") who access or use the Platform.

10x777 is an online gaming information platform providing guides, reviews and educational content for users interested in online casino games and sports betting. We are not a licensed casino or bookmaker. This Policy applies to all personal data processed in connection with your use of the Platform, regardless of how you access it — through a desktop browser, mobile browser or any other interface.

By registering an account, visiting the Platform or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, device identifiers, IP address, CNIC number and financial data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Platform, 10x777 acts as the Data Controller.
• "Data Processor" — any third party that processes personal data on our behalf under our instructions and a data processing agreement.
• "Cookies" — small data files placed on your device by the Platform that allow the Platform to recognise your browser and remember certain information.
• "KYC" — Know Your Customer; the identity and age verification process.
• "Sensitive Personal Data" — a special category of personal data including biometric data used for identification, health data and data relating to criminal offences, which is subject to heightened protection requirements.

10x777 is the Data Controller for personal data collected and processed through the Platform at https://10x777.cam. Decisions about what data to collect, why it is collected and how it is used are made by 10x777.

For all privacy-related queries, data subject requests and complaints, please contact us through the channel described in Section 16 (Contact Us) of this Policy.

We collect personal data that you provide to us directly when you register an account, contact support, complete KYC verification or otherwise interact with the Platform. This may include:

• Full name as it appears on your official identity document.
• Email address and, where provided, a phone number.
• Date of birth (for age verification purposes).
• Residential address (city, province — for example Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — and country).
• Government-issued identity document details (e.g. CNIC or Pakistani passport number) where KYC is required.
• Payment-related information such as the name on a bank account, wallet identifier or card details processed through the payment provider's secure interface.
• Support communications and any information you voluntarily include in contact messages.

When you use the Platform, certain technical data is collected automatically by our systems and third-party analytics tools:

We may receive personal data about you from third-party KYC and identity verification providers, fraud prevention services, payment processing infrastructure and, where applicable, responsible-gambling self-exclusion registers. Data received from third parties is handled under the same standards as data you provide directly.

We process your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to fulfil the contract formed when you register an account and agree to our Terms & Conditions — including account management, transaction processing and support.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC identity verification and anti-money laundering (AML) obligations.
• Legitimate Interests: Processing for our legitimate business interests where these interests are not overridden by your rights — including fraud prevention, Platform security, aggregate analytics and service improvement.
• Consent: Where we rely on your consent for a specific processing activity (for example, certain marketing communications), we will request that consent separately and you may withdraw it at any time without affecting the lawfulness of prior processing.

Your personal data is used for the following purposes, each of which is supported by a lawful basis as described in Section 05:

• Account Creation & Management: Registering, maintaining and administering your account, including authentication and password recovery.
• Identity & Age Verification (KYC): Verifying that you meet the minimum age requirement (18+, or the higher minimum required by the operator's licence jurisdiction) and confirming your identity for AML compliance.
• Transaction Processing: Facilitating deposits and withdrawals, maintaining transaction records and resolving payment disputes.
• Fraud & Security: Detecting, investigating and preventing fraudulent activity, account takeover, money laundering and other unlawful conduct.
• Responsible Gambling Compliance: Applying self-exclusion requests, enforcing deposit and loss limits, and cross-referencing with exclusion registers where applicable.
• Customer Support: Responding to your queries, resolving account issues and maintaining records of support communications.
• Platform Analytics & Improvement: Understanding how Users interact with the Platform in aggregate to improve content, navigation and performance.
• Legal Compliance & Dispute Resolution: Complying with applicable laws, regulatory requirements and court orders, and establishing, exercising or defending legal claims.
• Marketing Communications (with consent): Sending promotional information about bonuses and Platform features where you have opted in. You may opt out at any time.

10x777 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below:

We engage third-party service providers who process data on our behalf under written data processing agreements. Categories of service providers include: KYC and identity verification providers; payment infrastructure and fraud screening services; cloud hosting and infrastructure providers; analytics platforms (using anonymised or pseudonymised data where possible); and customer support tooling.

We may disclose personal data to competent regulatory authorities, law enforcement agencies, courts or other government bodies where required by applicable law, court order, or where we are legally obliged to do so under AML or other regulatory frameworks.

In the event of a merger, acquisition, restructuring or sale of all or part of our business, personal data may be transferred to the relevant acquiring entity. We will provide notice where required by applicable law, and the receiving entity will be bound by privacy obligations at least as protective as this Policy.

As an online platform serving users globally, including users in Pakistan, your personal data may be transferred to and stored in countries outside Pakistan. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your data, which may include:

• Contractual clauses that impose data protection obligations on recipients.
• Transfers to jurisdictions with data protection frameworks recognised as providing an adequate level of protection.
• Technical and organisational security measures appropriate to the data transferred.

By using the Platform, you acknowledge that your personal data may be processed outside Pakistan. If you have concerns about international transfers, please contact us using the details in Section 16.

We retain personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. Key retention periods are as follows:

Where data is no longer required for any lawful purpose, it is securely deleted or anonymised. Anonymised data that can no longer be linked to an individual is not subject to this Policy.

10x777 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration. Our security controls include:

• HTTPS/SSL encryption for all data transmitted between your device and the Platform.
• Encryption of stored personal data and credentials (passwords are never stored in plain text).
• Access controls limiting staff access to personal data on a need-to-know basis.
• Regular security reviews and vulnerability assessments.
• Incident response procedures for data breaches, including notification obligations where applicable.

Cookies are small text files stored on your device when you visit a website. They allow the Platform to recognise your browser across page loads, maintain your session and remember certain preferences.

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies or be notified when a cookie is set. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. For detailed cookie management instructions, consult your browser's help documentation.

The Platform is strictly intended for use by adults aged 18 or over, or such higher minimum age as is required by the operator's licence jurisdiction. 10x777 does not knowingly collect or process personal data from individuals below the applicable minimum age.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account or provided personal data to us, please notify us immediately through the contact details in Section 16.

Depending on the jurisdiction from which you access the Platform and applicable data protection law, you may have the following rights in relation to your personal data:

10x777 serves a significant number of users from Pakistan — including cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. The following context is relevant to Pakistani users specifically:

Pakistan's Personal Data Protection Bill and applicable data governance frameworks are evolving. While 10x777 aligns its practices with internationally recognised data protection principles, Pakistani users are encouraged to review their rights under applicable local law. This Policy does not constitute legal advice.

Where Pakistani users make use of domestic payment methods — such as Easypaisa, JazzCash, or bank transfers through HBL, UBL, Meezan Bank or Bank Alfalah — transaction data flows through those providers' systems and is subject to their respective privacy policies and terms of service. Those providers are independent Data Controllers for data they collect directly. 10x777 does not receive full payment account credentials from Pakistani payment providers through our interface.

10x777 reserves the right to update or modify this Privacy Policy at any time. Where material changes are made — for example, changes to the categories of data collected, how data is shared, or your rights — we will provide reasonable advance notice through a prominent notice on the Platform, an in-account notification or an email to your registered address.

The updated Policy will be published on this page with a revised "Last Reviewed" date. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure. We recommend reviewing this page periodically.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or need to report a data protection concern, please contact the 10x777 Data Protection team:

Please include your registered email address and a description of your request or concern. We may ask you to verify your identity before processing a data subject request. We aim to respond to all privacy-related requests within 30 calendar days.

Support is available in English. Urdu-language assistance is also available for Pakistani users — please indicate your language preference when you contact us.