777xxx Privacy Policy – How We Handle Your Personal Data in Pakistan

This Privacy Policy is published by 777xxx, which operates the online gaming platform at 777xxx.online and any associated mobile applications or services (collectively, "the Platform"). In this policy, "777xxx", "we", "us", and "our" all refer to the 777xxx platform operator.

This policy applies to all personal data collected from individuals who access, register with, or interact with the 777xxx Platform in any capacity. It covers data collected via the website, any mobile application, customer support channels, and any 777xxx marketing communications you receive.

777xxx is designed and marketed primarily for players based in Pakistan. If you access the Platform from a location outside Pakistan, this policy continues to apply but you may also have rights under the data protection laws of your own jurisdiction.

By using 777xxx you confirm that you have read and understood this Privacy Policy. This policy is incorporated into the 777xxx Terms and Conditions and should be read alongside them.

777xxx collects personal data from you in three main ways: data you provide directly, data generated automatically by your use of the Platform, and data we receive from third-party service providers as part of verification and payment processes.

Data you provide directly to 777xxx:

• Registration information: full legal name, date of birth, gender, email address, and mobile number.
• Address information collected during KYC verification.
• Identity documents: CNIC or passport number, and images of the relevant documents uploaded during KYC.
• Selfie photographs submitted as part of the identity verification process.
• Payment method details including mobile wallet numbers (Easypaisa/JazzCash/NayaPay/SadaPay account numbers) and bank account details for IBFT withdrawals.
• Communications you send to 777xxx support via live chat, email, or WhatsApp, including any attachments.
• Survey responses, feedback submissions, and promotion entries if you choose to participate.

Data generated automatically by Platform use:

• Login timestamps, session duration, and session frequency.
• Device information including operating system, browser type and version, device model, and screen resolution.
• IP address and approximate geographic location derived from IP.
• Betting and gaming activity: games played, stakes placed, bets settled, and account balance changes.
• Navigation behaviour within the Platform: pages visited, buttons clicked, and time spent on each section.
• Cookie and tracking data as described in Section 6.

Data received from third parties:

• Identity verification results from KYC service providers confirming whether your documents are genuine and whether you appear on any sanctions or watchlists.
• Payment processing confirmations from Easypaisa, JazzCash, NayaPay, SadaPay, banking networks, and card processors confirming transaction status.
• Fraud risk scores from risk management tools used to protect all Platform users.

Every piece of data that 777xxx collects is used for a defined purpose. We don't collect data speculatively or hold information we have no use for. The following describes how your data is used across the different functions of the 777xxx Platform.

Account management and service delivery: Your name, contact details, and login credentials are used to create and maintain your account, authenticate you when you log in, and communicate account-related information such as deposit confirmations, withdrawal notifications, and security alerts.

Payment processing: Your payment method details and transaction history are used to process deposits from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments, and to return withdrawal funds to the correct destination. Payment records are retained for financial reconciliation and compliance purposes.

Identity verification (KYC): Your CNIC or passport details and selfie are used to verify that you are who you say you are, that you are at least 18 years old, and that you are not subject to any sanctions or restrictions that would prevent you from using the Platform.

Fraud prevention and security: Behavioural data, device data, IP address, and transaction patterns are analysed by automated risk management systems to detect and prevent fraudulent activity, multi-accounting, money laundering attempts, and prohibited use of automated tools.

Platform improvement: Anonymised and aggregated behavioural data helps the 777xxx product team understand how members are using the Platform, which features are most popular, and where the experience can be improved. Individual player data is not profiled for product decisions.

Marketing communications: If you have opted in, your email address and mobile number are used to send you information about 777xxx promotions, bonuses, PSL betting offers, and new game launches. You can opt out of these communications at any time without any effect on your account.

Customer support: Communications you send to 777xxx support are used to resolve your query and are retained as a record of the interaction. If a complaint is escalated, the support history may be reviewed by senior staff.

Legal and regulatory compliance: Financial transaction records, KYC documents, and account activity logs are retained to comply with anti-money-laundering obligations, to respond to lawful requests from regulatory or law enforcement authorities, and to defend 777xxx in any legal proceedings.

777xxx processes your personal data under the following legal bases:

• Contractual necessity: Processing required to operate your account, verify your identity, process payments, and deliver the services you have signed up for. Without this processing, 777xxx cannot provide the Platform.
• Legal obligation: Processing required to comply with anti-money-laundering laws, tax record-keeping requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing for fraud prevention, Platform security, and internal analytics where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications. You can withdraw this consent at any time.

777xxx does not sell, rent, exchange, or give away your personal data to any third party for their own commercial use. Full stop. Data is shared only in the following limited circumstances, all of which are necessary for the Platform to function:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank networks for IBFT, and Visa/Mastercard processing partners receive the minimum payment data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Your CNIC or passport details and selfie are transmitted to a third-party KYC verification service to confirm your identity. These providers process data only as directed by 777xxx and are contractually prohibited from using it for any other purpose.
• Technical infrastructure providers: Cloud hosting, content delivery, and data storage providers who host 777xxx servers and infrastructure. All such providers are bound by data processing agreements that prohibit independent use of data.
• Fraud and risk management tools: Automated systems that analyse transaction patterns, device fingerprints, and IP data to detect fraudulent activity. These systems process data in real time and do not retain it for independent purposes.
• Regulatory and law enforcement authorities: Where 777xxx is required by law to disclose data in response to a court order, regulatory demand, or formal law enforcement request. 777xxx will notify affected members of such requests where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by 777xxx under obligations of professional confidentiality, where access to specific data is required for the relevant engagement.

Cookies are small text files stored on your device when you visit a website. 777xxx uses cookies and similar tracking technologies to make the Platform function correctly and to improve your experience.

Types of cookies used by 777xxx:

• Essential cookies: Required for core Platform functionality including keeping you logged in during your session, maintaining your game state, and securing your account. These cookies cannot be disabled without breaking Platform functionality.
• Preference cookies: Remember your language settings, notification preferences, and interface layout choices so you don't have to reconfigure them on every visit.
• Analytics cookies: Collect anonymised data about how members navigate the Platform – which pages are most visited, where sessions end, and how features are used. This data informs product improvements. No personally identifiable information is transmitted via analytics cookies.
• Security cookies: Detect and prevent fraudulent sessions, credential stuffing attacks, and suspicious login behaviour.

777xxx does not use third-party advertising cookies, social media tracking pixels, or any tracking mechanism that shares your Platform behaviour with external advertising networks.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to 777xxx. Disabling preference and analytics cookies will not prevent you from using the Platform but may result in a reduced experience.

Protecting your personal data is a core operational responsibility at 777xxx, not an afterthought. The following technical and organisational measures are in place to protect data from unauthorised access, loss, alteration, and disclosure:

• All data transmitted between your device and 777xxx servers is encrypted using 256-bit SSL/TLS.
• Sensitive data including KYC documents and payment details is stored in encrypted form at rest on secured infrastructure with restricted access controls.
• Access to member data within 777xxx is restricted on a need-to-know basis. Support staff can access account information sufficient to help you; they cannot view your full payment card number or CNIC document images without an elevated access request being logged.
• All staff with access to personal data are trained in data protection obligations and are subject to confidentiality agreements.
• 777xxx maintains an incident response plan. In the event of a data security incident that affects your personal data, you will be notified as quickly as practicable and no later than required by applicable law.
• Regular penetration testing and security audits are conducted on the Platform infrastructure.

777xxx retains personal data for as long as is necessary for the purposes described in this policy, and in compliance with applicable legal and regulatory obligations.

• Active account data: Retained for the full duration of your membership plus a post-closure period.
• Financial transaction records and KYC documents: Retained for a minimum of five years after account closure in compliance with anti-money-laundering record-keeping requirements.
• Support communications: Retained for three years after the last interaction or account closure, whichever is later, to allow any disputes to be investigated.
• Session and behavioural logs: Retained for up to two years for fraud prevention and Platform analytics purposes, then deleted or anonymised.
• Marketing consent records: Retained as long as your account is active or until you withdraw consent, to document the lawful basis for sending communications.

If you request account deletion, 777xxx will delete or anonymise all non-mandatory personal data promptly. Data that must be retained under AML obligations will be held for the required period in a restricted-access archive and then securely deleted.

As a 777xxx member you have the following rights in relation to your personal data. You can exercise any of these rights by contacting 777xxx at support@777xxx.online. Requests will be acknowledged within 5 business days and completed within 30 days.

777xxx is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18 you must not attempt to register or use the Platform in any way.

Age verification is conducted as part of the KYC process. If 777xxx discovers that an account has been registered by a person under 18 years of age, the account will be immediately and permanently closed, all balances will be frozen pending investigation, and no withdrawals will be processed. Any funds deposited by a minor will be handled in accordance with applicable legal requirements.

If a parent or guardian believes that a minor has registered a 777xxx account, they should contact support@777xxx.online immediately with the registered email address or mobile number. 777xxx will investigate and act on confirmed reports within 48 hours.

The majority of 777xxx's data infrastructure is hosted in facilities that serve the South Asian region. In some cases, service providers engaged by 777xxx – including KYC verification providers and cloud infrastructure partners – may process data in data centres located in other countries.

Where such transfers occur, 777xxx ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protection described in this policy. These safeguards include contractual data processing agreements with standard security and confidentiality obligations.

777xxx does not transfer personal data to countries or entities that are subject to international sanctions or that have been determined to provide inadequate data protection standards without additional contractual safeguards.

777xxx may update this Privacy Policy from time to time to reflect changes in how we operate the Platform, changes in applicable law, or improvements in our data protection practices.

When material changes are made to this policy – changes that meaningfully affect how your data is used or the rights available to you – 777xxx will notify you by email to your registered address and via an in-platform notification at least 7 days before the changes take effect.

Minor changes such as formatting corrections, clarifications, or updates to contact details may be made without prior notice. The "Last updated" date at the top of this document is always current and reflects the date of the most recent revision.

Continued use of 777xxx after the effective date of any revision to this policy constitutes acceptance of the revised terms. If you do not agree with the changes, you should contact support to discuss your options before the new policy takes effect.