777y Privacy Policy

This Privacy Policy (the "Policy") is issued by 777y (the "Company", "we", "us", or "our"), the operator of the online gaming platform accessible at 777y.im. This Policy applies to all players, visitors, and account holders who access or use the 777y website, mobile interface, gaming products, customer support services, and any associated promotional communications — regardless of the device or network used to access the platform.

777y is committed to handling all personal data with the highest standards of care, transparency, and security. This Policy explains in plain, straightforward English — with a clear structure that Pakistani players can easily follow — exactly what information 777y collects, why it is collected, how it is stored and protected, with whom it may be shared, and what rights you hold as a data subject.

This Policy must be read in conjunction with the 777y Terms and Conditions and Responsible Gaming Policy, both of which are available on the 777y website. In the event of any conflict between this Policy and the Terms and Conditions with respect to data handling, this Privacy Policy shall take precedence on matters of personal data processing.

777y primarily serves English-speaking Pakistani players across major cities including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Multan. All personal data provided by Pakistani players — including CNIC details and PKR payment information — is processed in accordance with the Company's international licensing obligations and applicable data protection standards.

777y collects personal data from players through several distinct channels — directly when you register and interact with the platform, automatically through technical means as you browse and play, and occasionally from trusted third-party sources such as payment processors and identity verification services. The full categories of data collected are described in the overview table above and in further detail below.

Data you provide directly to 777y includes:

• Registration Information: Your full legal name, date of birth, Pakistani mobile number, email address, and city of residence — provided when creating your 777y account.
• Identity Verification Documents: A copy of your CNIC (Computerised National Identity Card) and, where required for enhanced KYC, a selfie or proof-of-life image, and documentation confirming your source of funds.
• Payment Details: Your JazzCash or EasyPaisa mobile wallet number, HBL, UBL, or Meezan Bank account details submitted through the 777y cashier for the purpose of depositing or withdrawing PKR funds. Full payment credentials are processed through certified third-party payment gateways — 777y retains only tokenised references.
• Support Communications: The content of any messages, complaints, or enquiries you submit to the 777y support team via live chat or email, including details of the issue raised and any account information referenced during the conversation.
• Responsible Gaming Submissions: Any self-exclusion requests, deposit limit adjustments, cooling-off period activations, or problem gambling disclosures submitted through your account dashboard or via the support team.

Data collected automatically when you use the 777y platform includes:

• Technical & Device Data: Your IP address, device type (mobile, desktop, tablet), browser type and version, operating system, and approximate geographic location derived from your IP address.
• Session & Usage Data: Login timestamps, session duration, pages visited, games played, bet amounts, and in-play activity on cricket or PSL betting markets.
• Cookie & Tracking Data: Information collected through cookies, pixel tags, and similar technologies — as detailed in Section 07 of this Policy.

777y uses the personal data it collects for specific, clearly defined purposes. The Company does not use personal data for any purpose incompatible with those listed below, and does not sell personal data to third parties for commercial advertising or data brokering purposes under any circumstances.

• Account Creation & Management: To register your 777y account, verify your identity, maintain accurate account records, process your KYC documentation, and manage your login credentials securely.
• Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method. Financial data is also used to detect and prevent payment fraud.
• Gaming Services: To deliver the core gaming experience — including live casino sessions, PSL and international cricket betting, slot gameplay, and instant-win titles — and to calculate wager outcomes, bonus eligibility, and account balances accurately.
• Responsible Gaming Compliance: To monitor account activity for indicators of problem gambling behaviour, enforce deposit limits, cooling-off periods, and self-exclusion requests, and to fulfil 777y's obligations under its international gaming licence's responsible gaming framework.
• Regulatory & AML Compliance: To meet anti-money laundering (AML) and Know Your Customer (KYC) obligations required under the Company's international gaming licence — including transaction monitoring, suspicious activity reporting, and record-keeping.
• Security & Fraud Prevention: To detect unauthorised account access, identify duplicate accounts, prevent bonus abuse, investigate suspicious betting patterns, and protect the integrity of the 777y platform for all players.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance and regulatory purposes.
• Marketing Communications: To send bonus offer notifications, PSL cricket betting promotions, deposit match alerts, and other promotional communications — only to players who have opted in to receive marketing messages. Consent can be withdrawn at any time.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, optimise the user experience for Pakistani mobile users, and inform decisions about new game additions or product features.

Every instance of personal data processing by 777y is underpinned by a recognised legal basis. The Company relies on one or more of the following legal bases, depending on the nature and purpose of the processing activity in question:

• Contractual Necessity: Processing required to perform the contract between 777y and the Player — i.e., to deliver the gaming services described in the Terms and Conditions, process payments, manage your account, and fulfil withdrawal requests. Without this processing, 777y cannot provide its services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements — including KYC and AML obligations imposed by the Company's international gaming licence, age verification requirements, and tax or financial record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of 777y's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by the Player's fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — most notably in relation to the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

777y does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, in order to deliver its services and meet its legal obligations, 777y shares personal data with a limited number of trusted third-party service providers and regulatory bodies under strictly controlled conditions.

• Payment Processors: Your payment details and transaction data are shared with certified Pakistani payment processors — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely for the purpose of processing deposits and withdrawals. These processors operate under their own data protection frameworks and are contractually prohibited from using your data for any other purpose.
• Identity Verification Providers: KYC documentation — including your CNIC copy — may be shared with licensed identity verification service providers engaged by 777y to verify player identity and age. These providers are bound by strict confidentiality and data security obligations.
• Gaming Software Providers: Technical session data may be shared with 777y's certified game content partners — including live casino studio operators and RNG slot providers — for the purpose of delivering game outcomes and resolving technical disputes. Game providers do not receive financial data beyond what is operationally necessary.
• Regulatory & Law Enforcement Authorities: 777y is required by its international gaming licence and applicable law to cooperate with regulatory investigations, disclose transaction records to anti-money laundering authorities, and respond to valid legal orders from competent authorities. Such disclosures are made only to the extent required by law.
• Fraud & Security Services: Aggregated or pseudonymised technical data may be shared with fraud detection and cybersecurity service providers to protect the 777y platform and its players from unauthorised access, account takeover, and financial crime.
• Professional Advisors: In certain circumstances, personal data may be shared with 777y's legal counsel, auditors, or compliance advisors on a strictly need-to-know basis and subject to professional confidentiality obligations.

All third parties with whom 777y shares personal data are required to process that data only for the specified purpose, under 777y's instructions, and in accordance with equivalent data protection standards. 777y does not permit third-party processors to use player data for their own independent purposes.

777y retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active 777y account — including identity information, contact details, gaming history, and payment records — is retained for the full duration that the account remains open.
• Post-Closure Retention: Following account closure, 777y retains identity, financial, and gaming activity records for a minimum period of five (5) years in order to fulfil AML reporting obligations, respond to regulatory audits, and resolve any post-closure disputes.
• KYC Documents: CNIC copies and associated verification documents are retained for the period required by the Company's international gaming licence — typically a minimum of five years following the end of the customer relationship.
• Support Communications: Live chat transcripts and support email records are retained for a period of three (3) years from the date of the interaction.
• Marketing Data: Records of marketing consent and communication preferences are retained for the duration of the player's account and for one (1) year following account closure, to demonstrate compliance with opt-in obligations.
• Technical Logs: Server access logs and IP address records are retained for a period of twelve (12) months, after which they are securely deleted unless retention is required for an ongoing investigation.

Once the applicable retention period has expired and no legal basis for continued retention exists, personal data is securely deleted or irreversibly anonymised in accordance with 777y's internal data lifecycle management procedures.

777y uses cookies and similar tracking technologies — including pixel tags, local storage objects, and session identifiers — to operate the platform securely, maintain your login session, remember your preferences, and gather anonymised analytical data about how the platform is used. This section explains the types of cookies deployed and how you can manage your preferences.

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your authenticated login session, store your account language preference, and enable core security features such as CSRF protection. Essential cookies cannot be disabled without impairing core platform functionality.
• Analytical Cookies: These cookies collect anonymised data about how players navigate the 777y platform — including which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data is used exclusively to improve the platform experience for Pakistani users. Analytical cookies are only placed with your consent.
• Functional Cookies: These cookies remember your platform preferences — such as your preferred currency display (PKR), notification settings, and responsible gaming tool configurations — so you do not need to reset them on each visit.
• Marketing Cookies: Where you have opted in to marketing communications, cookies may be used to attribute promotional campaign effectiveness and avoid sending duplicate bonus offers. Marketing cookies are never used to build profiles for third-party advertising networks.

As a player on the 777y platform, you hold a number of rights with respect to your personal data. 777y is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To submit a data rights request, please contact the support team via live chat or the support email address, providing sufficient information to verify your identity before the request is processed.

• Right of Access: You have the right to request a copy of all personal data that 777y holds about you — including your account information, gaming history, KYC documentation, and communication records. Subject Access Requests will be responded to within 28 days of identity verification.
• Right to Rectification: If any personal data held by 777y is inaccurate or incomplete — for example, a misspelling of your name or an outdated contact number — you have the right to request that it be corrected. 777y will update inaccurate data promptly upon receipt of a verified rectification request.
• Right to Erasure: You may request that 777y delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Please note that this right is subject to overriding legal obligations — 777y cannot delete data that is required to be retained under AML, KYC, or gaming licence regulations.
• Right to Restriction: You have the right to request that 777y temporarily restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while a complaint about the lawfulness of processing is under investigation.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that 777y provide your personal data in a structured, commonly used, machine-readable format — enabling you to transfer your data to another service provider where technically feasible.
• Right to Object: You have the right to object to personal data processing carried out on the basis of legitimate interests — including profiling for responsible gaming monitoring purposes. 777y will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where any processing activity is based solely on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

777y will respond to all verified data rights requests within 28 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further two months, in which case 777y will notify you within the initial 28-day period and provide a clear explanation for the extension.

777y implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. The Company reviews and updates its security practices on a regular basis to keep pace with evolving threats and industry best practice.

• Encryption in Transit: All data transmitted between your device and the 777y platform is encrypted using TLS 1.2 or higher. This ensures that sensitive information — including login credentials, CNIC details, and PKR payment data — cannot be intercepted by third parties during transmission.
• Encryption at Rest: Sensitive personal data stored on 777y servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of a physical or logical breach of server infrastructure.
• Access Controls: Access to systems holding personal data is restricted to authorised 777y personnel on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular access review audits. Multi-factor authentication is required for administrative access to production systems.
• Fraud & Intrusion Monitoring: 777y operates continuous automated monitoring for suspicious login attempts, unusual transaction patterns, and indicators of account compromise. Players are encouraged to enable two-factor authentication on their accounts for an additional layer of personal security.
• Payment Security: PKR deposit and withdrawal processing is handled through PCI-DSS compliant third-party payment gateways. 777y does not store raw payment credentials — only tokenised references that are meaningless outside of the original payment processor's system.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected players, 777y will notify affected individuals without undue delay and will fulfil all breach notification obligations required under the Company's international licensing conditions.

While 777y takes all reasonable technical and organisational measures to protect your personal data, no security system is entirely impenetrable. Players are strongly advised to use a unique, strong password for their 777y account, to never share login credentials with anyone, and to report any suspected unauthorised account access to the support team immediately via live chat.

The 777y platform is strictly intended for adults aged 21 years and above. 777y does not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. Age verification — using CNIC documentation — is a mandatory step in the 777y account registration process, and no account will be approved until the player's age has been confirmed.

If a parent or guardian believes that their child has registered on the 777y platform and submitted personal data without their knowledge or consent, they should contact the 777y support team immediately via live chat or the support email address. 777y will investigate the matter promptly and delete any personal data confirmed to belong to a minor.

777y also encourages parents and guardians to make use of third-party parental control software to restrict access to gambling websites on shared or family devices. Responsible Gaming tools available within every 777y account — including self-exclusion and deposit limits — can be activated immediately by contacting the support team.

The 777y platform may contain functional integrations with third-party services — such as certified game content providers, live studio streaming partners, and payment gateway interfaces. While 777y carefully selects and contractually controls its third-party partners, the Company is not responsible for the independent privacy practices of third-party organisations operating outside the direct control of 777y's data processing environment.

• Game Content Providers: Live casino studios and slot game developers may operate their own software environments within the 777y platform. These providers receive only the minimum data necessary to deliver game outcomes — typically a pseudonymous player session token and bet amount. 777y requires all game providers to operate under certified RNG and data security standards.
• Payment Gateway Providers: JazzCash, EasyPaisa, and banking partners process your payment data under their own terms of service and data protection policies. 777y recommends reviewing the privacy policy of your chosen payment method before submitting financial details.
• Analytics Service Providers: Where analytical cookies are enabled, anonymised usage data may be processed by 777y's analytics service partners. No personally identifiable information is shared with analytics providers — only aggregated behavioural patterns.

777y is not responsible for the content, privacy practices, or data security of any third-party organisation. Players should review the privacy policies of relevant third-party service providers independently. If you have concerns about data shared with a specific third-party integration, please contact the 777y support team for clarification.

777y reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the introduction of new platform features that affect the processing of personal data. The date of the most recent revision is displayed at the top of this page and within the Table of Contents sidebar.

Where a proposed change to this Policy is material — for example, a change to the categories of data collected, the introduction of a new third-party processor, or a change to the data retention period for KYC documents — 777y will provide at least seven (7) days' advance notice to registered players via the email address on file and/or a prominent notice on the platform homepage.

Minor amendments — such as typographical corrections, formatting improvements, or clarifications of existing provisions that do not alter the substance of the Policy — may be made without advance notice, with the updated Policy taking effect from the date of publication. It is the responsibility of each player to review this Policy periodically and to familiarise themselves with any changes. Continued use of the 777y platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 777y has handled your personal data, please contact the 777y data support team through any of the following channels:

• Live Chat: The fastest way to raise a privacy query is via the Live Chat feature available 24/7 directly from your 777y account dashboard. Live Chat agents are fluent in both English and Urdu and can escalate data rights requests to the appropriate internal team.
• Email: For formal written data rights requests or privacy complaints, please write to [email protected] with the subject line "Privacy Request" or "Privacy Complaint". The team aims to acknowledge all privacy correspondence within 48 hours and to provide a substantive response within 28 calendar days.
• Formal Complaint Process: If you are not satisfied with 777y's response to a privacy complaint, you may escalate the matter through the dispute resolution mechanism available under the Company's international gaming licence. Details of the applicable escalation process will be provided in 777y's response to your formal complaint.