777c Privacy Policy

01 Who We Are and How to Contact Us

1.1 Data Controller. 777c is the data controller responsible for the personal information collected through the 777c platform at 777c.lol. As data controller, 777c determines the purposes and means by which personal data is processed, in accordance with its international gaming licence obligations and applicable data protection principles.

1.2 Scope. This Privacy Policy applies to all personal data processed in connection with: the 777c website and any mobile-optimised versions thereof; the account registration and KYC verification process; sports betting, live casino and slot gaming activity; payment processing including JazzCash, EasyPaisa, HBL, UBL and Meezan Bank transactions; customer support interactions; and marketing communications where a Player has provided consent.

1.3 Contact. For all privacy-related queries, requests to exercise data subject rights, or complaints regarding 777c's handling of personal data, Players should contact the 777c support team via Live Chat on the platform or by email at: [email protected]. All privacy-related correspondence will be acknowledged within 5 business days.

02 Personal Data We Collect

2.1 777c collects personal data in the categories described below. We limit data collection to what is necessary for the purposes outlined in this Policy and for compliance with our licensing obligations.

03 How We Collect Your Personal Data

3.1 Directly from You. The majority of personal data 777c holds is provided directly by Players during the following interactions:

• Account registration — name, date of birth, contact details, chosen credentials;
• KYC identity verification — CNIC or passport upload, proof of address submission;
• Deposit and withdrawal requests — payment method details, transaction initiation;
• Customer support contacts — queries, complaints, account assistance requests via Live Chat, email or messaging platforms;
• Responsible gaming tool activation — deposit limit settings, self-exclusion requests;
• Marketing consent — promotional offer opt-in selections during registration or within account settings.

3.2 Automatically. When you access the 777c platform, certain technical data is collected automatically through standard web technologies, including browser cookies, server logs and session tracking tools. This includes IP addresses, device identifiers, access timestamps, pages visited and in-session navigation data. See Section 9 (Cookies & Tracking) for full details.

3.3 From Third Parties. 777c may receive personal data about Players from the following third-party sources where necessary to fulfil its legal obligations or to provide platform services:

• Payment Processors — transaction status confirmations and fraud flags from JazzCash, EasyPaisa and banking partners;
• Identity Verification Providers — KYC and document verification service providers engaged by 777c to validate CNIC and passport information;
• Fraud Prevention Agencies — risk scoring data and sanctions screening results;
• Regulatory Authorities — information requests and compliance directions from the relevant licensing authority under 777c's international gaming licence.

04 Legal Basis for Processing

4.1 777c processes personal data on one or more of the following lawful bases, as indicated in the data table in Section 2:

• Contract Performance: Processing is necessary to perform the contract between 777c and the Player — specifically to provide account services, accept bets, process PKR deposits and withdrawals, and deliver platform features.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) verification mandates, responsible gaming obligations under the international gaming licence, and record-keeping duties imposed by the licensing authority.
• Legitimate Interests: Processing is necessary for 777c's legitimate interests, including fraud prevention, platform security, network integrity monitoring, customer support quality assurance and product improvement — provided those interests are not overridden by the Player's own rights and interests.
• Consent: For marketing communications and non-essential cookies, 777c relies on the Player's freely given, specific and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 How We Use Your Personal Data

5.1 777c uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining and securing your 777c account; processing 777c login requests; administering account settings and preferences; responding to account queries;
• Identity Verification: Verifying your identity and age (21+ compliance) through CNIC or passport KYC checks before permitting real-money activity on the platform;
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa and banking partners; processing withdrawal requests to your registered payment method; maintaining transaction records for accounting and regulatory purposes;
• Gaming Services: Providing access to cricket betting, live casino tables, slot games and associated platform features; recording and settling bets and game outcomes; managing bonus allocation and wagering requirement tracking;
• Regulatory Compliance: Meeting AML obligations including transaction monitoring and suspicious activity reporting; responding to requests from the licensing authority; maintaining records as required under the Licence;
• Fraud and Security: Detecting and preventing fraudulent account activity, payment fraud, multiple account abuse, and suspicious betting patterns; monitoring for account compromise and unauthorised access;
• Responsible Gaming: Administering self-exclusion requests, deposit limits, session alerts and cooling-off periods; monitoring gaming patterns where necessary to identify players who may require support;
• Customer Support: Responding to Live Chat, email and messaging support requests; maintaining records of support interactions for quality assurance and dispute resolution;
• Marketing (with consent): Sending promotional offers, bonus notifications and platform updates to Players who have opted in to marketing communications. Marketing communications can be opted out of at any time via account settings.

06 Sharing Your Personal Data

6.1 General Principle. 777c does not sell, rent or trade personal data to any third party for their own marketing or commercial purposes. Personal data is shared with third parties only where strictly necessary for the purposes described in this Policy, or where required by law or regulatory obligation.

6.2 Third-Party Service Providers. 777c engages trusted third-party service providers who process personal data on 777c's behalf as data processors. These include:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and card payment gateways — for the purpose of processing PKR deposits and withdrawals;
• KYC Verification Providers: Third-party identity verification services that validate CNIC and passport documents submitted during registration;
• Fraud Prevention Services: Risk analytics and sanctions screening providers used to identify and prevent financial crime on the platform;
• Cloud Infrastructure Providers: Secure hosting and data infrastructure services that store platform data in encrypted environments;
• Game Content Providers: Licensed game suppliers who deliver slot, live casino and virtual table game content — these providers may receive anonymised session data necessary to deliver game functionality.

All third-party processors are contractually bound to process personal data only on 777c's documented instructions and to maintain appropriate security standards.

6.3 Regulatory and Legal Disclosures. 777c may disclose personal data to regulatory authorities, law enforcement agencies, licensing bodies or courts where required to do so by law, court order, regulatory direction or as necessary to protect the legal rights of 777c, its players or third parties. Such disclosures are made only to the extent required and without unnecessary delay in notification where disclosure to the player is legally permissible.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring or sale of all or part of 777c's business, personal data held about Players may be transferred to the acquiring entity as part of that transaction, subject to the same data protection standards described in this Policy. Players will be notified of any such transfer affecting their data where required by applicable law.

07 International Data Transfers

7.1 Given the international nature of online gaming operations, personal data collected by 777c may be stored and processed in countries other than the Player's country of residence, including countries where data protection laws may differ from those applicable in Pakistan. Where such transfers occur, 777c implements appropriate safeguards to ensure that personal data receives a level of protection consistent with the principles of this Policy and its licensing obligations.

7.2 Safeguards applied to international data transfers by 777c include:

• Data processing agreements with third-party processors that include enforceable data protection obligations;
• Technical security measures including encryption of data in transit and at rest;
• Restriction of cross-border data flows to service providers who have demonstrated compliance with applicable data protection standards through certification, contractual commitments or regulatory approval.

7.3 Players who wish to obtain further information about the specific safeguards applicable to their personal data when transferred internationally may contact 777c support via Live Chat.

08 Data Retention

8.1 777c retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by legal or regulatory obligation. The table below sets out the general retention periods 777c applies to the main categories of personal data:

8.2 At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised, the anonymised dataset may be retained for analytical purposes without limitation, as it no longer constitutes personal data.

09 Cookies and Tracking Technologies

9.1 The 777c platform uses cookies and similar tracking technologies to deliver platform functionality, maintain session security, and improve the user experience. The categories of cookies used by 777c are as follows:

9.2 Managing Cookies. You may manage cookie preferences through your browser settings at any time. Disabling essential cookies will impair your ability to log in to 777c and use the platform. Disabling analytics or preference cookies will not prevent access to the platform but may result in a less personalised experience. Browser-level cookie management is separate from the platform-level marketing consent settings in your 777c account.

9.3 No Cross-Site Tracking. 777c does not use third-party advertising networks or cross-site tracking technologies to follow Players across the internet. Tracking technologies on the 777c platform are used solely in connection with your use of 777c.lol.

10 Your Data Subject Rights

10.1 Subject to applicable data protection law and the limitations imposed by 777c's regulatory obligations (particularly AML and licence-mandated record-keeping), Players have the following rights in relation to their personal data held by 777c:

11 Security Measures

11.1 777c implements technical and organisational security measures appropriate to the nature of the personal data held and the risks associated with its processing. These measures include:

• Encryption: All data transmitted between Players and the 777c platform is protected by TLS/HTTPS encryption. Sensitive data stored in 777c's systems — including identity documents and financial information — is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Personal data is accessible only to 777c staff and authorised third-party processors who require access for specific, documented purposes. Role-based access controls limit the scope of each individual's access to the minimum necessary for their function;
• Two-Factor Authentication: The 777c login process supports OTP-based two-step verification, which Players are encouraged to enable. Internal 777c systems that access player data require multi-factor authentication for all staff accounts;
• Regular Audits: 777c's security posture is subject to regular internal review and, under the terms of its international gaming licence, periodic independent audit;
• Incident Response: 777c maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights and interests, 777c will notify the relevant supervisory authority within the timeframe required by applicable law and will inform affected Players without undue delay where the breach is likely to result in a high risk to their rights.

11.2 Player Responsibility. While 777c implements robust security measures at the platform level, Players are responsible for maintaining the security of their own devices, login credentials and mobile numbers used for OTP verification. 777c staff will never request a Player's password through any channel. Suspected credential compromise should be reported to 777c support immediately.

12 Minors and Age Restriction

12.1 The 777c platform is strictly restricted to individuals who are at least 21 years of age. 777c does not knowingly collect personal data from individuals under the age of 21. The mandatory KYC identity verification process — which requires submission of a CNIC or passport — is the primary mechanism by which 777c enforces this restriction.

12.2 If 777c becomes aware that personal data has been submitted by a person under the age of 21, the associated account will be immediately suspended, all personal data related to that account will be securely deleted or flagged for deletion to the extent not required to be retained under regulatory obligation, and the matter will be escalated in accordance with 777c's licensing requirements.

12.3 If a parent or guardian believes that a minor has submitted personal data to 777c, they should contact 777c support immediately via Live Chat so that the matter can be investigated and addressed without delay.

13 Changes to This Privacy Policy

13.1 777c reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, data processing practices, legal obligations under the gaming licence, or applicable data protection law. The effective date at the top of this Policy will be updated whenever a revised version is published.

13.2 For material changes to this Policy — those that significantly affect the nature of data processing or Players' rights — 777c will notify registered Players by email or SMS to their registered contact details at least 14 days prior to the change taking effect, where operationally practicable.

13.3 Continued use of the 777c platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept any revised Policy should cease using the platform and contact support to request account closure in accordance with the Terms & Conditions.

13.4 The current version of this Privacy Policy is always available at 777c.lol/privacy-policy and should be consulted before submitting any personal data to the platform. For the full framework of rules governing 777c, this Policy should be read alongside the Terms & Conditions.

14 Contact and Data Subject Requests

14.1 All privacy-related queries, data subject access requests, rectification requests, erasure requests, objections to processing and complaints regarding 777c's handling of personal data should be directed to the 777c data protection contact via the following channels:

14.2 When submitting a data subject rights request, please provide sufficient information to enable 777c to verify your identity and locate the relevant personal data. This may include your registered mobile number, email address, and 777c account reference. 777c will not process a data subject request until identity has been verified to prevent unauthorised disclosure of personal data.

14.3 There is no charge for submitting a data subject rights request. However, 777c reserves the right to charge a reasonable administrative fee, or to decline to act on a request, where requests are manifestly unfounded or excessive, in particular where they are repetitive in nature.