777f Privacy Policy — How We Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is published by 777f ("we," "us," "our"), the operator of the online gaming and sports betting platform accessible at 777f.lol ("Platform"). This Policy applies to all personal data we process in connection with your registration, account use, betting and gaming activity, payment transactions, and any other interaction with the 777f Platform.

We take privacy seriously. For Pakistani players who have entrusted us with sensitive personal and financial information — including payment method details for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions — we recognise that how we handle that information is a direct reflection of the trust you have placed in 777f. This Policy tells you exactly what we do with your data, why, for how long, and what rights you have in relation to it.

By registering a 777f Account, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein. If you do not agree with this Policy, please do not register an account or use the 777f Platform.

2 Personal Data We Collect

777f collects the categories of personal data described in the table below. We collect only what is necessary and relevant to the purposes described in Section 4 of this Policy.

3 How We Collect Your Data

777f collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering your 777f Account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account settings.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser type, and session timestamps. This data is collected through server logs and standard web technologies.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and similar tracking technologies collect data about how you interact with the 777f Platform. See Section 8 for full cookie disclosure.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, transaction confirmation data is shared with 777f by the payment processor to reconcile your account balance.
• Identity Verification Partners: Where 777f uses third-party identity verification services to assist with KYC processing, those partners may provide 777f with the results of their identity checks.
• Third-Party Game Providers: Game providers whose titles are available on the 777f Platform may share session-level gaming data with 777f for reconciliation, fraud detection, and responsible gaming monitoring purposes.

4 Purposes of Data Processing

777f processes your personal data for the following specific, clearly defined purposes:

• Account Management: To create, maintain, and administer your 777f Account, including processing login authentication, two-factor verification, and account security monitoring.
• Identity and Age Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any self-exclusion or regulatory restriction on participation. KYC compliance is a mandatory requirement under 777f's operating license.
• Payment Processing: To process deposits from and withdrawals to your JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank accounts, to reconcile transaction records, and to investigate and resolve payment disputes.
• Gaming and Betting Services: To deliver the core platform services — casino games, live dealer tables, slot games, cricket betting, and sports betting — and to record, display, and report your gaming history accurately.
• Fraud and Money Laundering Prevention: To monitor account activity for signs of fraud, bonus abuse, collusion, money laundering, and other prohibited activities as defined in our Terms & Conditions and required by our licensing authority.
• Responsible Gaming: To monitor gaming behaviour for indicators of problematic gambling, to administer deposit limits and self-exclusion requests, and to provide player welfare interventions where appropriate.
• Customer Support: To respond to your queries, investigate complaints, and provide technical assistance through live chat and other support channels.
• Legal and Regulatory Compliance: To comply with our obligations under our international gaming license, including record-keeping, reporting to regulatory authorities, and responding to lawful information requests from law enforcement agencies.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Pakistani players use the 777f Platform and to improve game selection, interface design, and service quality.
• Marketing Communications: To send you promotional information about 777f offers, bonuses, and new features — subject to your marketing preferences and opt-out rights described in Section 13.

5 Legal Basis for Processing

777f processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the 777f Terms & Conditions — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with 777f's obligations under our international gaming license, including KYC verification, responsible gaming monitoring, anti-money-laundering controls, and record retention.
• Legitimate Interests: Processing carried out in pursuit of 777f's legitimate business interests — including fraud prevention, platform security, business analytics, and service improvement — provided these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes — specifically marketing communications — where we have obtained your explicit consent at registration or subsequently. You may withdraw this consent at any time.

6 Data Sharing with Third Parties

777f does not sell, rent, or commercially exploit your personal data. We share your data with third parties only where strictly necessary and under appropriate data protection safeguards. The categories of third-party recipients are as follows:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies and are subject to Pakistani financial regulations.
• Identity Verification Partners: Where 777f uses third-party KYC services, your identity documents and personal details are shared with those providers solely for the purpose of completing identity verification. These partners are contractually bound to process your data only for this purpose.
• Game Software Providers: Third-party game providers whose titles are available on 777f may receive session-level data necessary to deliver and reconcile game outcomes. These providers do not receive your financial or identity data except where explicitly required for licensing purposes.
• Fraud Prevention and Security Services: 777f may share account and technical data with specialist fraud detection services to identify and prevent fraudulent activity, account takeover attempts, and prohibited conduct as defined in our Terms.
• Regulatory and Law Enforcement Authorities: 777f will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent or detect serious crime.
• Professional Advisers: 777f may share personal data with legal counsel, auditors, and accountants where necessary in connection with professional advice, legal proceedings, or regulatory inquiries.

7 International Data Transfers

777f's platform infrastructure is hosted on servers maintained in accordance with the requirements of our international gaming license. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such international transfers occur:

• 777f ensures that transfers are made only to jurisdictions that provide an adequate level of data protection, or under appropriate contractual safeguards such as standard contractual clauses or equivalent mechanisms.
• Transfers to payment processors and their banking networks follow applicable financial services data protection standards in both the sending and receiving jurisdictions.
• 777f does not transfer your personal data internationally for purposes beyond those described in this Policy.

8 Cookies & Tracking Technologies

The 777f Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state during an active 777f session. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, game lobby sorting preferences, and responsible gaming limit display preferences — so you do not need to re-enter them on each visit.
• Analytical Cookies: Collect anonymised, aggregated data about how visitors use the 777f Platform — which pages are most visited, where users encounter errors, and how long sessions last. This data is used solely to improve the Platform experience for Pakistani players.
• Security Cookies: Used to detect and prevent fraudulent login attempts, unusual session behaviour, and other security threats. These cookies are essential to 777f's account security framework and cannot be disabled.

You may manage cookie preferences through your browser settings. Note that disabling cookies beyond the strictly necessary category may impair Platform functionality. 777f does not use third-party advertising cookies or place tracking cookies on behalf of advertisers.

9 Data Security

777f implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the 777f Platform is encrypted using TLS 1.3 with 256-bit encryption. This applies to every page of the Platform, including the login screen, account settings, and payment pages.
• Encryption at Rest: Personally identifiable information and financial data stored on 777f's servers is encrypted using AES-256 at rest. Database access is protected by multi-factor authentication and role-based access controls.
• Access Controls: Access to systems containing personal data is granted on a strict need-to-know basis. All access events are logged and audited. Staff with access to personal data receive mandatory data protection training.
• Intrusion Detection: 777f operates continuous intrusion detection and prevention systems. Anomalous access patterns trigger automated alerts and investigation procedures.
• Penetration Testing: The Platform undergoes regular third-party security testing, including penetration testing, to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data security incident affecting your personal data, 777f will notify affected players without undue delay in accordance with our obligations under our operating license.

10 Data Retention

777f retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Active Accounts: Personal data associated with an active 777f Account is retained for the duration of the account's active status and for a minimum period of five (5) years following account closure. This retention period is required by our operating license for regulatory audit purposes.
• Transaction Records: Financial transaction records — including deposit and withdrawal history — are retained for a minimum of seven (7) years from the date of the transaction in accordance with anti-money-laundering record-keeping obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, as required under applicable AML regulations.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, or longer if the communication is relevant to an ongoing dispute or regulatory matter.
• Technical Logs: Server access logs and security event logs are retained for ninety (90) days for routine security monitoring purposes, and for up to three (3) years where a security incident has been recorded.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement.

11 Your Data Rights

As a 777f player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact 777f through the channels described in Section 15:

• Right of Access: You may request a copy of all personal data that 777f holds about you. 777f will provide this within 30 days of a valid access request, in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You can update basic account information directly through your account settings. For KYC-related corrections, contact support.
• Right to Erasure: You may request that 777f delete your personal data where it is no longer necessary for the purposes for which it was collected. Note that this right is subject to overriding retention obligations — we cannot delete data that we are legally required to retain under our gaming license or AML obligations.
• Right to Restrict Processing: You may request that 777f restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a portable format and to have it transmitted to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests at any time. You have an absolute right to object to processing for direct marketing purposes, which will be honoured immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent — including consent to receive marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

12 Children's Privacy

The 777f Platform is strictly for adults aged 21 and above. 777f does not knowingly collect personal data from individuals under the age of 21. The mandatory age verification process conducted during KYC is designed to prevent underage registration.

If 777f discovers or has reasonable cause to suspect that an account has been registered by or on behalf of an individual under 21 years of age, it will immediately suspend the account, initiate a full investigation, return any deposited funds to the originating payment method, void all associated gameplay, and permanently ban the device and payment methods from the Platform.

13 Marketing Communications

777f may send you promotional communications about platform offers, bonus promotions, new game launches, PSL season betting promotions, and other 777f-related news — subject to your consent and ongoing marketing preferences.

• Consent: At registration, you are given the option to consent to receive marketing communications from 777f via SMS to your Pakistani mobile number and/or via email. This consent is entirely optional and does not affect your ability to use the Platform.
• Opt-Out: You may opt out of marketing communications at any time by updating your communication preferences in your 777f Account Settings, or by replying STOP to any SMS communication. Opt-out requests are processed within five business days.
• Platform Notifications: Certain platform notifications — including responsible gaming alerts, deposit confirmations, withdrawal confirmations, and account security alerts — are operational communications that cannot be disabled, as they are essential to the safe and effective management of your account.
• No Third-Party Marketing: 777f does not share your contact details with third-party marketing organisations. All promotional communications you receive are sent directly by or on behalf of 777f exclusively.

14 Changes to This Privacy Policy

777f reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational context. The following process governs any updates:

• Material changes to this Policy — changes that affect your rights or introduce new categories of data processing — will be notified to registered players via email and/or a prominent notice on the Platform at least seven (7) days before the change takes effect.
• The "Effective Date" displayed at the top of this Policy reflects the date on which the current version came into force.
• Your continued use of the 777f Platform following the effective date of any Policy update constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you must close your account before the effective date of the change.
• Minor updates — such as typographical corrections, formatting improvements, or clarifications that do not alter the substance of the Policy — may be made without advance notice.

15 How to Contact Us About Privacy

For all privacy-related inquiries, data rights requests, concerns about how 777f has handled your personal information, or reports of suspected data security incidents, please contact us through the following channels:

• Live Chat: Available 24/7 inside the 777f Platform following login. This is the fastest channel for privacy queries — average response time under two minutes.
• Email (plain text — not clickable): [email protected]

When submitting a data rights request, please include your registered account username and a clear description of your request. For access requests, please include your date of birth and registered mobile number so we can verify your identity before releasing data.

777f aims to respond to all privacy inquiries within five (5) business days. Complex data access or erasure requests may take up to 30 days, during which time we will provide a status update to keep you informed of progress.