777f7 Privacy Policy —
Your Data, Your Rights, Our Responsibilities

1. Who We Are

777f7 is an online casino and sports betting platform operating under an internationally recognised gaming licence. The Company is the data controller responsible for the personal information of all registered players and visitors to the 777f7 Platform. 777f7 is specifically designed to serve players in Pakistan, including those based in Karachi, Lahore, Islamabad, Faisalabad, and all other cities and towns across the country.

As data controller, 777f7 determines the purposes and means of processing your personal data in connection with your use of the Platform. For any data-related queries, you may contact the 777f7 Data Protection team through the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

777f7 collects personal data in the following categories, depending on how you use the Platform:

2.1 Registration & Identity Data

When you create a 777f7 account, we collect the following information:

• Full legal name (as it appears on your CNIC or passport)
• Date of birth (for mandatory age verification — 777f7 is strictly 21+)
• Pakistani mobile number
• Email address
• Residential address
• Username and encrypted password
• National Identity Card (CNIC) number and/or passport number (collected during KYC verification)

2.2 Financial Data

To process PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, we collect:

• Mobile wallet identifiers (e.g. JazzCash or EasyPaisa registered mobile number)
• Bank account title and IBAN (for bank transfer withdrawals)
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers

Note: 777f7 does not store full bank account PINs, card numbers, or full payment credentials. Payment data is processed through encrypted third-party payment gateways.

2.3 KYC Verification Documents

To comply with our licensing obligations and anti-money laundering (AML) requirements, we may collect copies of:

• Government-issued photo identification (CNIC front and back, or passport)
• Proof of address (utility bill, bank statement, or other official document dated within the last 90 days)
• Source of funds documentation (for high-value accounts, as required by AML procedures)

2.4 Usage & Technical Data

When you access the 777f7 Platform, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, games played, and bet history
• Login timestamps and session activity logs
• Cookies and similar tracking technologies (see Section 5)

3. How We Use Your Personal Data

777f7 uses the personal data we collect for the following specific purposes:

4. Legal Basis for Data Processing

777f7 processes your personal data on the following legal bases as applicable under data protection law:

• Contract Performance: Processing is necessary to provide the 777f7 gaming services you have contracted for, including account management, payment processing, and game delivery.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, and regulatory reporting — are mandatory requirements under 777f7's gaming licence conditions and applicable law. 777f7 cannot waive these obligations at a player's request.
• Legitimate Interests: 777f7 processes certain data — such as fraud detection, platform security, responsible gaming monitoring, and service improvement — on the basis of legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where 777f7 processes data for marketing communications or optional personalisation features, we do so only on the basis of your freely given, explicit consent. You may withdraw marketing consent at any time by contacting support or updating your account preferences.

5. Cookies & Tracking Technologies

5.1 What Cookies We Use

777f7 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us deliver a functional, secure, and personalised gaming experience. The categories of cookies used on 777f7 are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and last-visited sections of the Platform. These improve usability but are not strictly essential.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where sessions drop off, and how features are used. This data helps 777f7 improve the Platform. Analytics data is aggregated and cannot be used to identify individual players.
• Security & Fraud Prevention Cookies: Used to identify suspicious login patterns, flag unusual geographic access, and detect automated bot behaviour that may threaten the integrity of the Platform.

5.2 Managing Cookies

You may control non-essential cookies through your browser settings or the 777f7 cookie preferences panel. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Continued use of the 777f7 Platform after reviewing this Policy constitutes consent to the use of cookies as described above.

6. Data Sharing & Disclosure

777f7 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. We may share your personal data only with the following categories of recipients and only where necessary:

6.1 Service Providers & Processors

Trusted third-party service providers who process data on 777f7's behalf, subject to strict data processing agreements, including:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank integration partners)
• KYC and identity verification service providers
• Anti-fraud and AML screening platforms
• Customer support software providers
• Cloud hosting and data storage infrastructure providers
• Game content providers (for game delivery purposes only)

6.2 Regulatory & Law Enforcement Authorities

777f7 may disclose personal data to gaming regulatory authorities, financial intelligence units, or law enforcement agencies where we are legally obligated to do so — for example, under AML reporting obligations or in response to lawful court orders or regulatory investigations. 777f7 will not disclose more data than is strictly required by any such obligation.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of 777f7's business, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified by email in advance of any such transfer that materially changes how their data is processed, and will have the opportunity to close their account and withdraw funds before the transfer completes.

6.4 Professional Advisors

Legal counsel, auditors, and other professional advisors engaged by 777f7 may receive limited access to player data on a strictly need-to-know, confidential basis for the purpose of obtaining professional advice in connection with 777f7's operations.

7. International Data Transfers

777f7 operates infrastructure and engages service providers across multiple jurisdictions. This means your personal data may be transferred to and stored in countries outside of Pakistan. Where such transfers occur, 777f7 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy, including:

• Contractual data processing agreements with standard data protection clauses
• Transfers only to service providers operating in jurisdictions recognised as having adequate data protection frameworks
• Technical and organisational security measures applied uniformly regardless of data location

By using the 777f7 Platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

8. Data Retention

777f7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing conditions. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with 777f7 plus five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by anti-money laundering regulations.
• Transaction & Financial Records: Retained for five (5) years from the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the communication, unless the communication relates to an ongoing dispute or legal matter.
• Marketing Preferences & Consent Records: Retained until you withdraw consent, plus three (3) years to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: May be retained indefinitely as it cannot be linked back to individual players.

Upon expiry of applicable retention periods, personal data is securely deleted or permanently anonymised in accordance with 777f7's data disposal procedures.

9. Your Privacy Rights

As a 777f7 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 777f7 support team via live chat or email (see Section 14):

10. Security Measures

777f7 implements a layered security framework to protect player personal data against unauthorised access, loss, destruction, alteration, and disclosure. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and 777f7 servers is encrypted using TLS 1.2 or higher. The Platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data stored on 777f7 servers — including identity documents and financial records — is encrypted using AES-256 encryption.
• Password Security: Player passwords are hashed using industry-standard cryptographic algorithms and are never stored in readable form. 777f7 staff cannot view your password.
• Two-Factor Authentication (2FA): SMS-based two-factor authentication is available to all players and strongly recommended for account security.
• Access Controls: Access to player data within 777f7's internal systems is restricted on a strict need-to-know basis, with role-based access controls and comprehensive access audit logs.
• Intrusion Detection: 777f7's infrastructure is monitored 24/7 for anomalous activity, attempted breaches, and suspicious access patterns using automated detection systems.
• Security Audits: 777f7 conducts regular security assessments and penetration testing of its Platform and data systems.

While 777f7 takes all reasonable and appropriate measures to protect your personal data, no internet-based system can be guaranteed to be completely secure. Players are advised to use strong, unique passwords for their 777f7 account and to enable two-factor authentication.

11. Children's Privacy & Age Restriction

The 777f7 Platform is strictly intended for adults aged 21 years and above. 777f7 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as a mandatory step during the registration and KYC process.

If 777f7 becomes aware that an account belongs to an individual under the age of 21, the account will be immediately closed, all Bonus Funds forfeited, and any deposited Player Funds returned to the payment method used at registration. If you believe that a person under the age of 21 has created a 777f7 account, please notify us immediately via live chat or email so that we can take prompt action.

12. Third-Party Services

The 777f7 Platform integrates third-party services — including game content providers, payment gateways, and customer support platforms — that may process your data under their own separate privacy policies. While 777f7 selects its service providers carefully and requires them to maintain appropriate data protection standards through contractual obligations, 777f7 is not responsible for the privacy practices of these third-party providers in their own right.

The 777f7 Platform does not contain links to external third-party websites for advertising or general browsing purposes. Any third-party integrations on the Platform are operational service integrations only and are governed by data processing agreements with 777f7.

13. Changes to This Privacy Policy

777f7 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational circumstances. When material changes are made to this Policy, 777f7 will notify registered players by email and/or by a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

The "Last Reviewed" date at the top of this document indicates when the Policy was most recently updated. Players are encouraged to review this Policy periodically to stay informed of how 777f7 handles their personal data. Continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should stop using the 777f7 Platform and may request withdrawal of your Player Funds before the revised Policy takes effect.

14. Contact & Data Rights Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 777f7 holds about you, please contact the 777f7 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the 777f7 Platform. Average response time under 15 minutes. Select "Privacy / Data Request" as your query category.
• Email: [email protected] — Please include "Privacy Policy Request" in the subject line. We respond to email queries within 2 business hours during standard hours.
• FAQ: Visit our FAQ page for answers to common questions about your account, data, and privacy settings.

When submitting a data rights request, please provide sufficient information to allow us to verify your identity (such as your registered email address, mobile number, and account username) so that we can process your request securely and accurately. This verification step is necessary to protect your privacy and ensure that data is not disclosed to unauthorised individuals.

This Privacy Policy was last reviewed and updated in January 2026 and is effective from 1 January 2026.