777y Privacy Policy

1.1 This Privacy Policy applies to all personal data collected and processed by 777y in connection with the operation of the 777y online casino and sports betting platform, including casino games, live dealer tables, cricket and sports betting, slot games, fishing games, payment processing services, customer support interactions, and all related marketing and communications activities.

1.2 This Policy applies to all registered 777y players regardless of geographic location, and to all visitors to the 777y website whether or not they have created a registered account.

1.3 This Policy should be read alongside the 777y Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with 777y. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data matters, this Privacy Policy prevails.

1.4 The 777y Platform is intended exclusively for users aged 21 years and above. We do not knowingly collect personal data from individuals under this age. See Section 12 for our Children and Minors policy.

2.1 For the purposes of this Privacy Policy, 777y acts as the data controller in respect of all personal data collected and processed through the 777y platform. As data controller, 777y determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

2.2 Where 777y engages third-party service providers to process personal data on its behalf — for example, payment gateway operators, KYC verification service providers, or cloud infrastructure providers — those parties act as data processors and are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to 777y.

2.3 If you have any questions about how 777y handles your personal data, or if you wish to exercise any of your data rights, please contact us through the Support page or by email at the address provided in Section 16 of this Policy.

3.1 777y collects the following categories of personal data in connection with the operation of the Platform:

Full legal name; date of birth; Pakistani CNIC number (collected during KYC verification); and any other government-issued identity document details provided during account verification procedures.

Pakistani mobile phone number (used as primary account identifier and for OTP authentication); email address (where provided); and preferred language of communication.

JazzCash account number; EasyPaisa registered mobile number; HBL, UBL, or Meezan Bank account details (for bank transfer transactions); SadaPay and Raast account identifiers; USDT TRC20 wallet address (where applicable); deposit and withdrawal history; transaction amounts in PKR; and source of funds information collected pursuant to anti-money laundering obligations.

Records of all games played including casino, live dealer, slot, and fishing game sessions; sports and cricket bets placed including PSL betting activity; bet amounts, outcomes, and win/loss history; bonus claims and wagering requirement progress; and gaming session duration data used for responsible gaming monitoring.

IP address; device type and model; operating system and version; browser type and version; mobile network operator; session timestamps; and platform access logs.

Navigation patterns within the 777y platform; feature usage frequency; page views; search queries within the platform; and interaction with promotional content.

Content and metadata of customer support interactions via live chat, email, and any other communication channel; complaint records; and feedback submissions.

4.1 Directly from you — when you register a 777y account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or submit any other form of communication to 777y.

4.2 Automatically through Platform use — through server logs, cookies, and similar tracking technologies that record your interactions with the 777y Platform as described in Section 8.

4.3 From third-party service providers — including payment gateway operators who provide transaction confirmation data; KYC verification services that validate identity document authenticity; and fraud prevention services that may flag account activity patterns.

4.4 777y does not purchase personal data lists from third-party data brokers or marketing databases for the purpose of acquiring new players.

5.1 777y uses personal data collected from players for the following purposes:

• To create, maintain, and administer your 777y player account;
• To process deposits and withdrawals through your chosen payment method in PKR;
• To verify your identity and age in compliance with KYC and anti-money laundering obligations;
• To deliver casino, live dealer, sports betting, slot, and fishing gaming services to you;
• To monitor your gaming activity for responsible gaming purposes and to apply player protection measures where indicated;
• To detect, investigate, and prevent fraud, bonus abuse, money laundering, and other prohibited conduct as defined in the Terms & Conditions;
• To handle your customer support enquiries, complaints, and dispute resolution requests;
• To send you transactional communications relating to your account (deposit confirmations, withdrawal updates, security alerts) — these communications are not optional as they are necessary for account operation;
• To send marketing communications about 777y promotions, bonuses, and new features where you have given consent to receive such communications;
• To improve the 777y Platform through analysis of aggregated, anonymised usage data;
• To comply with applicable legal and regulatory obligations including anti-money laundering laws and gaming license conditions.

6.1 777y processes personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our obligations to you under the 777y Terms & Conditions — including account management, payment processing, game delivery, and customer support;
• Legal Obligation: Processing necessary to comply with applicable laws and gaming license conditions — including KYC identity verification, anti-money laundering transaction monitoring, age verification, and statutory record-keeping;
• Legitimate Interests: Processing necessary for 777y's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics for service improvement;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7.1 777y does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast receive the minimum data necessary to process your deposit or withdrawal transaction. These providers have their own privacy policies governing their handling of transaction data;
• KYC Verification Providers: Identity verification service providers receive document data submitted during KYC for the sole purpose of validating authenticity. They are contractually prohibited from using this data for any other purpose;
• Game Content Providers: The third-party casino and slot game software providers whose titles are available on 777y may receive session-level data necessary to operate the game — such as bet amount, game ID, and session token. No direct identity data is shared with game providers;
• Cloud Infrastructure Providers: 777y's platform is hosted on cloud infrastructure. Our infrastructure provider processes data as a data processor under contract and has no independent right to access or use player data;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, gaming license conditions, or pursuant to a valid legal order, 777y may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies;
• Anti-Fraud Networks: 777y may share data with industry fraud prevention services where we have a legitimate interest in protecting the platform and other players from fraudulent activity.

8.1 777y uses cookies and similar technologies — including session tokens, local storage, and device fingerprinting — to operate the Platform, maintain authentication sessions, prevent fraud, and improve user experience.

8.2 The following categories of cookies are used on the 777y Platform:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled;
• Functional Cookies: Retain your Platform preferences such as language settings, display options, and recently played games to improve your experience on return visits;
• Analytical Cookies: Collect anonymised usage data to help us understand how players interact with the Platform and identify areas for improvement. This data is aggregated and not linked to individual player identities;
• Security & Fraud Prevention: Detect and flag unusual access patterns, VPN usage, and other indicators of potential fraudulent activity or Terms violations.

8.3 777y does not use third-party advertising cookies or permit external advertising networks to place tracking technologies on the Platform.

8.4 You may control non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair or prevent access to the 777y Platform.

9.1 777y retains personal data for as long as necessary to fulfil the purpose for which it was collected, to meet our legal and regulatory obligations, or to resolve disputes. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's existence and for a minimum period of five (5) years following account closure, in compliance with anti-money laundering and gaming license record-keeping requirements;
• Transaction Records: All financial transaction records — deposits, withdrawals, and gaming results — are retained for a minimum of seven (7) years to satisfy statutory financial record-keeping obligations;
• KYC Documents: Identity verification documents are retained for the duration of account activity and for five (5) years post-account-closure;
• Support Correspondence: Customer support interaction logs are retained for two (2) years from the date of the interaction;
• Marketing Consent Records: Records of marketing consent and opt-out are retained for the period necessary to demonstrate compliance with consent obligations;
• Technical & Log Data: Server access logs and session data are retained for twelve (12) months for security and fraud investigation purposes.

10.1 777y implements technical and organisational security measures appropriate to the risk presented by processing player personal data on an online gaming platform. These measures include:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the 777y Platform;
• Encrypted storage of sensitive personal data at rest using industry-standard encryption algorithms;
• Role-based access controls ensuring that 777y staff can only access player data to the extent necessary for their specific operational function;
• Multi-factor authentication for all administrative access to systems holding player data;
• Regular security assessments and penetration testing by independent third parties;
• Formal incident response procedures for managing data security events;
• Staff training on data protection obligations and secure data handling practices.

10.2 Payment credentials — including JazzCash PINs, EasyPaisa passwords, and banking login details — are never transmitted to or stored on 777y servers. All payment authentication occurs directly through the respective payment provider's secure gateway.

10.3 Despite the measures described above, no internet transmission or electronic storage system is entirely secure. In the event of a data security incident that poses a material risk to your rights, 777y will notify affected players without undue delay in accordance with applicable notification obligations.

11.1 As an online platform operating under international gaming license standards, 777y may process and store personal data on servers or through service providers located in jurisdictions outside Pakistan. Where such international transfers occur, 777y ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required within Pakistan.

11.2 Safeguards for international transfers may include: contractual clauses with data processors that impose equivalent data protection obligations; use of service providers whose data centres are certified to recognised international security standards (such as ISO 27001); and restriction of data transfers to jurisdictions with adequate data protection frameworks.

11.3 For further information about the specific safeguards applicable to any particular international transfer of your data, please contact us using the details in Section 16.

12.1 The 777y Platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21.

12.2 If 777y becomes aware that an account has been created by or for an individual under the age of 21, we will immediately suspend the account, delete the associated personal data to the extent not required for regulatory compliance, and return any deposited funds to the originating payment method.

13.1 To exercise any of the rights described in this Privacy Policy — access, rectification, erasure, restriction, portability, objection, or review of automated decisions — please submit a request via the 777y Support page or by email to the address provided in Section 16.

13.2 777y will acknowledge your request within five (5) business days and will respond substantively within thirty (30) days of the request date. For complex or high-volume requests, the response period may be extended by a further thirty (30) days — in which case we will notify you of the extension and the reason for it.

13.3 We will not charge a fee for processing a data rights request unless the request is manifestly unfounded, excessive, or repetitive — in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request, notifying you accordingly.

13.4 We may ask you to verify your identity before fulfilling a data rights request, to ensure that we do not disclose or delete personal data in response to a fraudulent request.

14.1 777y sends promotional communications — including bonus offers, PSL season promotions, new game announcements, and VIP programme updates — only to players who have given explicit consent to receive such communications at the time of account registration or at a subsequent opt-in point.

14.2 You may withdraw your marketing consent and opt out of all promotional communications at any time by updating your communication preferences in account settings or by contacting support. Opt-out requests are processed immediately and will take effect within 48 hours across all communication channels.

14.3 Withdrawing marketing consent does not affect transactional communications — you will continue to receive account-related notifications such as deposit confirmations, withdrawal updates, and security alerts, as these are necessary for account operation and cannot be disabled while your account is active.

15.1 777y may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, legal obligations, or regulatory requirements. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

15.2 For material changes — those that significantly affect your rights or the way we process your personal data — 777y will notify registered players via the mobile number or email address on file, or by a prominent notice on the 777y Platform, prior to the changes taking effect.

15.3 Your continued use of the 777y Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated version. If you do not accept the changes, you should close your account before the revised Policy takes effect.

16.1 For all privacy-related enquiries, data rights requests, concerns about how 777y handles your personal data, or complaints regarding our data processing practices, please contact us through the following channels:

• Support Page: 777y.today/support — available 24/7 including PSL match days and public holidays. Please include "Privacy Request" or "Data Rights" in the subject of your message to ensure it is routed to the appropriate team.
• Email: [email protected] — please mark the email subject as "Privacy Policy Enquiry" for fastest routing.

16.2 777y aims to resolve all privacy-related complaints internally. If you are not satisfied with our response after following the internal complaints process, you may escalate your complaint to the relevant data protection authority in your jurisdiction.