Privacy Policy — How 777za Handles Your Personal Data

This Privacy Policy ("Policy") is published by 777za ("777za," "we," "us," or "our") and applies to all personal data collected, processed, and stored in connection with your use of the 777za online gaming platform accessible at 777za.bio and any associated subdomains, mobile-optimised interfaces, and communications channels operated by 777za.

777za is committed to protecting the personal information of its players — including Pakistani users across Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and all other cities and regions of Pakistan. This Policy is designed to give you a clear and honest understanding of exactly what personal data we collect, why we collect it, how long we keep it, who may access it, and what choices and rights you have regarding your own information.

This Policy should be read alongside the 777za Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall 777za player agreement. By creating and using a 777za account, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

If you have any questions about this Policy that are not addressed in the sections below, you can contact 777za's data team at any time via the contact details provided in Section 16.

777za collects personal data from you in the following categories. We collect only what is reasonably necessary for the purposes identified in Section 3.

777za uses the personal data described in Section 2 for the following specific purposes:

• Account Management: Creating, maintaining, and administering your 777za account; verifying your identity and age (21+); processing your 777za login and account security settings including two-factor authentication.
• Platform Operation: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT; settling bets and game outcomes; crediting bonus balances; maintaining accurate account transaction histories.
• Legal and Regulatory Compliance: Conducting Know Your Customer (KYC) identity verification; fulfilling Anti-Money Laundering (AML) obligations; complying with reporting requirements under 777za's gaming licence; responding to lawful requests from regulatory authorities and law enforcement agencies.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, cheating, bonus abuse, money laundering, and other prohibited conduct; protecting the platform and its players from security threats; enforcing the one-account-per-player policy.
• Responsible Gaming: Monitoring player activity to identify potential signs of problem gambling; administering self-exclusion requests, deposit limits, session timers, and loss limits; communicating responsible gaming messages and resources where indicated.
• Customer Support: Responding to queries, complaints, and account-related requests submitted via live chat and email; maintaining communication records for quality assurance and dispute resolution.
• Platform Improvement: Analysing aggregated, anonymised gameplay and usage data to improve the 777za platform, optimise game selection, and improve the overall player experience. This analysis uses data that cannot identify individual players.
• Marketing (Where Consented): Sending promotional communications about 777za bonuses, new games, cricket betting offers, and PSL promotions to players who have opted in to marketing communications. See Section 12 for full details and opt-out options.

777za processes your personal data on the following legal bases, each applicable to the corresponding processing activities described in Section 3:

• Contractual Necessity: Processing that is required to fulfil the 777za Terms & Conditions agreement with you — including account management, payment processing, game operation, and customer support — is conducted on the basis of contractual necessity. Without this processing, 777za cannot provide the platform services to you.
• Legal Obligation: Processing conducted for the purposes of KYC verification, AML compliance, age verification (21+), regulatory reporting, and responding to lawful law enforcement requests is conducted on the basis of legal obligation. 777za is required to perform this processing as a condition of holding its gaming license.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is conducted on the basis of 777za's legitimate interests in operating a secure and compliant gaming platform, provided those interests are not overridden by your individual rights.
• Consent: Marketing communications are sent only on the basis of your explicit consent provided at registration or subsequently via your account communications settings. You may withdraw this consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

777za does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or any third party for commercial marketing purposes without your explicit consent. Your information is shared only in the following defined circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT transaction processors receive the financial data necessary to process your PKR deposits and withdrawals. These providers operate their own privacy policies and are bound by applicable payment industry data security standards.
• KYC Verification Providers: Third-party identity verification service providers receive CNIC data and photographic identity documents for the purpose of conducting automated and manual identity and age verification checks. These providers operate under strict data processing agreements with 777za.
• Platform Technology Providers: Game software providers and platform infrastructure vendors may have access to aggregated gaming data and technical data necessary for operating and maintaining the games and platform services. These relationships are governed by contractual data processing obligations.
• Regulatory Authorities: 777za may be required to disclose player data to the relevant gaming regulatory authority under its licensing jurisdiction, to financial intelligence units, or to law enforcement agencies where required by a lawful order, warrant, or regulatory directive.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by 777za may access player data on a confidential basis where necessary for the provision of professional services to 777za.
• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring involving 777za, player data may be transferred to the acquirer as part of the transaction, provided the acquirer commits to the same privacy standards described in this Policy.

777za treats financial data — including JazzCash account numbers, EasyPaisa wallet details, bank account information, and PKR transaction records — with the highest level of protection applied to any category of data on the platform. The following security measures specifically apply to payment data:

• All payment data transmitted between your device and the 777za platform is encrypted using 256-bit SSL/TLS encryption. Payment credentials are never transmitted in plain text under any circumstances.
• 777za does not store complete JazzCash or EasyPaisa account credentials, bank card numbers, or full banking credentials on its servers. Only tokenised references and transaction identifiers necessary for reconciliation purposes are retained.
• PKR transaction records are retained in encrypted form for the duration required by 777za's gaming license AML obligations. Access to transaction records is restricted to authorised finance and compliance personnel with full audit logging of all access events.
• Third-party payment processors engaged by 777za for PKR transaction processing comply with applicable payment industry security standards. 777za conducts periodic due diligence on payment processor security practices.

777za uses cookies and similar tracking technologies on its platform to enable core functionality, improve user experience, and — where you have consented — deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that maintain your logged-in 777za session, security tokens, and preference settings. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your platform preferences — such as your chosen language, display settings, and game lobby sort preferences — to provide a more personalised experience on return visits to 777za.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the 777za platform. This data helps 777za understand which features are most used, identify technical issues, and make platform improvements. Analytics data does not identify individual players.
• Session Persistence Cookies: The "Keep me signed in" option on the 777za login page uses a persistent cookie to maintain your authenticated session across browser restarts on your personal device. This cookie expires after 30 days of inactivity and is never set on shared devices where you have not enabled this option.

You can manage cookie preferences through your browser settings. Most modern browsers — including Chrome, Safari, and Firefox on both Android and iOS — allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent you from using the 777za platform effectively.

777za retains personal data only for as long as is necessary for the purpose it was collected, or for such longer period as is required by 777za's legal, regulatory, or contractual obligations. The following general retention schedule applies:

• Active Account Data: Retained for the duration of your active 777za account relationship, plus such additional period as required by legal or regulatory obligation following account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required by Anti-Money Laundering regulations applicable to gaming licensees.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with financial record-keeping obligations under 777za's gaming license.
• Gaming Session Data: Active session data is retained for a minimum of two (2) years to support dispute resolution and regulatory audit requirements.
• Communications Data: Live chat transcripts and email correspondence are retained for two (2) years from the date of the communication for quality assurance and dispute resolution purposes.
• Self-Exclusion Data: Records of self-exclusion requests are retained indefinitely to ensure that players who have requested permanent self-exclusion are not inadvertently permitted to re-register.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised such that it can no longer be attributed to any individual player.

777za's platform infrastructure, data storage systems, and certain third-party service providers may be located in jurisdictions outside of Pakistan. As a consequence, your personal data may be transferred to and processed in countries other than your country of residence when you use the 777za platform.

Where personal data is transferred internationally, 777za ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that provided under this Privacy Policy. Safeguards used include contractual data processing agreements with standard data protection clauses, and transfers to jurisdictions that provide adequate data protection standards under applicable law.

By using the 777za platform, you consent to the international transfer of your personal data as described in this section. If you would like further information about the specific safeguards applied to any international data transfer, please contact 777za's privacy team via the details in Section 16.

As a data subject whose personal information is processed by 777za, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting 777za's privacy team via the details in Section 16.

777za operates an absolute minimum age requirement of 21 years for all account holders. The 777za platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. This age restriction is enforced via mandatory CNIC-based identity verification at the point of account registration.

If 777za discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21 — whether as a result of fraudulent registration, misrepresentation of age, or any other circumstance — the following actions will be taken immediately:

• The account will be suspended pending investigation.
• All personal data associated with the underage account will be processed for the purpose of investigation and, once complete, will be deleted in accordance with applicable legal obligations.
• Any funds deposited will be returned to the originating payment method after completing required AML checks. Any winnings generated during the underage period may be forfeited.
• The matter will be reported to relevant authorities where required under applicable law.

If you believe that a person under 21 years of age has registered for a 777za account, please report this immediately to [email protected] or via live chat.

777za may send promotional communications — including information about new games, PKR bonus offers, cricket betting promotions, PSL-related offers, and platform news — to players who have provided consent to receive such communications at registration or via their account settings.

Marketing communications from 777za may be delivered via email to your registered email address and/or via SMS to your registered Pakistani mobile number, depending on your preferences and consents recorded in your account.

You may withdraw your consent to receive marketing communications at any time via the following channels:

• Updating your communication preferences in your 777za account settings under "Notifications & Marketing."
• Clicking the unsubscribe link included in any 777za marketing email.
• Sending an opt-out request via live chat or email to [email protected].

Withdrawal of marketing consent will be actioned within 5 business days. Please note that withdrawing consent for marketing will not affect your receipt of important service communications — such as account security alerts, KYC verification requests, withdrawal confirmations, or responsible gaming notifications — which are sent on the basis of contractual or legal necessity rather than consent.

Important: 777za will never send marketing communications to players who are registered under a self-exclusion arrangement. Self-excluded players are immediately removed from all marketing lists.

The 777za platform may contain references to, or be accessed in conjunction with, third-party services — including the JazzCash and EasyPaisa payment applications used by Pakistani players for deposits and withdrawals. 777za is not responsible for the privacy practices of any third-party application or service provider.

When you use JazzCash or EasyPaisa to transact with 777za, those transactions are also subject to the respective privacy policies of Jazz Financial Services and Telenor Microfinance Bank (EasyPaisa). 777za recommends that you review the privacy policies of all third-party services you use in connection with your 777za account.

Similarly, if the 777za platform links to any external informational resource, affiliate site, or game provider portal, 777za's Privacy Policy does not apply to those external destinations. Your interactions with those third parties are governed solely by their own privacy policies.

777za implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption in Transit: All data transmitted between your device and 777za servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all platform interactions including the 777za login, cashier operations, and live chat.
• Encryption at Rest: Sensitive personal data including identity documents and payment references is stored using AES-256 encryption on 777za's secure servers.
• Access Controls: Access to personal data is restricted to authorised 777za personnel on a strict need-to-know basis. All data access is logged and subject to audit. Former employees' access is revoked immediately upon departure.
• Penetration Testing: 777za's platform and infrastructure undergoes regular independent security penetration testing conducted by qualified third-party security firms.
• Incident Response: 777za maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay in accordance with applicable data protection law.
• Two-Factor Authentication: 777za strongly recommends that all players enable 2FA on their 777za account to protect against unauthorised account access even in the event of password compromise.

777za reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made — being changes that significantly affect how your personal data is collected, used, or shared — 777za will notify registered players via email to their registered address at least 14 days before the updated Policy takes effect, and will display a prominent notice on the 777za platform.

For minor, non-material amendments — such as clarifications, typographical corrections, or updates reflecting changes in applicable law that do not alter players' substantive rights — the updated Policy may take effect immediately upon publication at 777za.bio/privacy-policy.

The "Last Updated" date shown at the top of this page reflects the date of the most recent revision. 777za recommends that you review this Privacy Policy periodically. Your continued use of the 777za platform following the effective date of an amendment constitutes your acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, have a concern about how 777za has handled your personal data, or wish to make a formal privacy complaint, please contact the 777za privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the 777za platform. The fastest route for urgent privacy concerns.
• Email: [email protected] — mark your email "Privacy Request" or "Privacy Complaint" in the subject line to ensure routing to the appropriate team. Target initial response: within 4 hours.

777za is committed to resolving all privacy complaints promptly and fairly. Upon receipt of a formal privacy complaint, 777za will:

• Acknowledge receipt of the complaint in writing within 48 hours.
• Investigate the matter thoroughly and, where necessary, engage the relevant internal teams.
• Provide a full written response within 30 calendar days of receiving complete complaint information.

If you are not satisfied with 777za's resolution of your privacy complaint after exhausting the internal complaints process, you may have the right to escalate your complaint to the relevant data protection authority or gaming regulatory authority applicable to your jurisdiction. Contact the 777za privacy team for guidance on applicable regulatory escalation routes.