777zh Privacy Policy — How We Handle Your Personal Data

777zh is the operator of the online gaming and sports betting platform available at 777zh.net ("the Platform"). For the purposes of this Privacy Policy, 777zh acts as the data controller in respect of all personal data collected from users of the Platform.

777zh is a Pakistan-focused online gaming platform serving registered adult users (aged 21 and above) across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other major cities in Pakistan. The 777zh platform offers cricket betting, live dealer casino games, slots, crash games, fish shooting games, and associated payment and account services — all conducted in Pakistani Rupees (PKR).

All data protection queries, access requests, and complaints should be directed to the 777zh data protection contact via the support channels listed in Section 14 of this Policy.

777zh collects the following categories of personal data from users of the Platform:

777zh collects personal data through the following channels:

• Direct Registration: When you create a 777zh account, you provide identity and contact data directly through the registration form. This data is transmitted to 777zh's servers over SSL-encrypted connections.
• KYC Document Submission: When you complete KYC verification, you upload CNIC images and a selfie directly through the 777zh secure upload portal. This data is processed by 777zh's identity verification systems.
• Payment Transactions: When you make deposits or withdraw funds via JazzCash, EasyPaisa, or bank transfer, relevant transaction data is captured by 777zh's payment processing systems for settlement, fraud prevention, and regulatory compliance purposes.
• Platform Usage: Technical and gameplay data is collected automatically as you navigate the 777zh platform — including pages visited, games played, bets placed, and session durations. This data is collected through server logs and first-party analytics systems.
• Cookies and Similar Technologies: 777zh uses cookies and browser-based tracking technologies to maintain session state, remember login status (where "Remember Me" is selected), and gather first-party usage analytics. See Section 7 for full cookie details.
• Customer Support: When you contact 777zh's support team via live chat or email, the content of those communications is recorded and stored for quality assurance, dispute resolution, and training purposes.

777zh uses the personal data it collects for the following specific purposes:

• Account Creation and Management: Processing your 777zh registration, maintaining your account, managing your PKR wallet, and providing access to the Platform's full game and betting catalogue;
• Identity Verification (KYC): Verifying that you are who you claim to be, that you are aged 21 or above, and that your payment accounts are registered in your own name — as required under applicable anti-money laundering and responsible gaming obligations;
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and Cash OTC — including communicating with payment providers and banks as necessary to complete transactions;
• Fraud Detection and Prevention: Monitoring account activity, transaction patterns, and gameplay data for indicators of fraudulent conduct, bonus abuse, multi-accounting, money laundering, or other prohibited activities;
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify signs of problem gambling behaviour and, where appropriate, making proactive contact with users whose patterns suggest they may benefit from responsible gaming support tools;
• Customer Support: Responding to your queries, resolving complaints, processing account-related requests, and maintaining records of interactions for quality assurance;
• Platform Improvement: Using aggregated and anonymised usage data to improve 777zh's platform design, game selection, payment options, and user experience;
• Legal and Regulatory Compliance: Fulfilling obligations under applicable anti-money laundering, counter-terrorism financing, data protection, and gaming regulations — including providing data to regulatory or law enforcement authorities where legally required.

777zh processes your personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your 777zh account, process your transactions, and provide access to the Platform's games and services;
• Legal Obligation: Processing required to comply with applicable anti-money laundering, counter-terrorism financing, gaming regulation, and tax reporting obligations — including KYC verification and transaction monitoring;
• Legitimate Interest: Processing carried out in 777zh's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided such interests are not outweighed by your privacy rights;
• Consent: Processing carried out on the basis of your explicit consent — including sending promotional and marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

777zh does not sell personal data. Data is shared with third parties only in the following specific and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable Pakistani financial regulation;
• Identity Verification Providers: 777zh's KYC process may involve third-party identity verification services. Any such provider is contractually bound to use your data solely for the purpose of identity verification and to apply data security standards consistent with those of 777zh;
• Game Software Providers: Game providers whose software is integrated into the 777zh platform (including Pragmatic Play, PG Soft, and others) receive anonymised game session data for game performance, fairness auditing, and RNG certification purposes. No personally identifiable information is shared with game providers;
• Fraud Prevention Services: 777zh may share risk signals — including IP addresses, device fingerprints, and transaction metadata — with third-party fraud detection services for the purpose of identifying and preventing fraudulent activity on the Platform;
• Regulatory and Law Enforcement Authorities: 777zh will share personal data with competent authorities where required to do so by law — including anti-money laundering reporting obligations, court orders, or lawful regulatory requests;
• Business Transfers: In the event of a merger, acquisition, or sale of 777zh's business or assets, personal data held by 777zh may be transferred to the acquiring entity as part of that transaction, subject to the same Privacy Policy obligations.

The 777zh platform uses the following categories of cookies and similar tracking technologies:

777zh does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the 777zh Platform.

777zh retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active Account Data: Retained for the full duration of your 777zh account relationship and for a period of 5 years following account closure — in line with standard anti-money laundering and gaming regulatory retention obligations;
• KYC Documents (CNIC, selfie): Retained for the duration of the account plus 5 years post-closure. Enhanced due diligence documents retained for 7 years where applicable;
• Financial Transaction Records: Retained for 7 years from the date of each transaction, consistent with accounting and regulatory requirements;
• Customer Support Records: Retained for 3 years from the date of the interaction, or longer if the interaction relates to an active dispute or regulatory matter;
• Technical and Session Logs: Retained for 90 days under standard security retention policies, extended where logs are relevant to an active fraud or security investigation;
• Marketing Consent Records: Retained for the duration of the marketing relationship plus 2 years post-withdrawal of consent.

777zh recognises and will honour the following data rights for all users of the Platform:

• Right of Access: You may request a copy of all personal data held by 777zh about you. Requests are fulfilled within 30 days. A summary of your data can be accessed directly from your account settings panel;
• Right to Rectification: If personal data held by 777zh is inaccurate or incomplete, you have the right to request correction. Contact support with the corrected information and supporting documentation;
• Right to Erasure: In certain circumstances — where data is no longer necessary for its original purpose, where consent has been withdrawn, or where data has been unlawfully processed — you may request deletion of your personal data. This right is subject to 777zh's legal retention obligations, which may require certain data to be kept for a minimum period regardless of your request;
• Right to Restrict Processing: You may request that 777zh restrict certain processing activities in relation to your data — for example, while a data accuracy dispute is being resolved;
• Right to Data Portability: You may request a machine-readable copy of the personal data you have directly provided to 777zh, for the purpose of transferring it to another service provider;
• Right to Object: You may object to processing based on legitimate interest — including direct marketing, profiling, or certain analytics activities. Objections to marketing will be honoured immediately;
• Right to Withdraw Consent: Where processing is based on your consent (including marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the 777zh data protection team via live chat or email as described in Section 14. Please provide sufficient information to verify your identity before your request can be processed.

777zh applies the following technical and organisational security measures to protect your personal data:

• Encryption in Transit: All data transmitted between your browser or device and the 777zh platform is protected using 256-bit SSL/TLS encryption. 777zh.net enforces HTTPS on all pages;
• Encryption at Rest: Sensitive personal data — including CNIC numbers, payment account references, and KYC documents — is encrypted at rest using AES-256 or equivalent encryption;
• Access Controls: Access to personal data within 777zh's systems is strictly role-based and limited to personnel with a documented, operational need. All internal access is logged and audited;
• Two-Factor Authentication: Internal 777zh systems handling personal data require two-factor authentication for all staff access. Users are also strongly encouraged to enable 2FA on their own 777zh accounts;
• Security Testing: 777zh conducts regular penetration testing, vulnerability scanning, and security audits of its data processing infrastructure. Critical vulnerabilities are remediated on an expedited timeline;
• Incident Response: In the event of a data security incident affecting your personal data, 777zh will notify affected users and relevant authorities within the timeframes required by applicable law — and in all cases within 72 hours of becoming aware of the incident.

777zh is legally and operationally required to verify the identity of all users prior to allowing withdrawals and on a risk-adjusted basis for other account activities. This process — Know Your Customer (KYC) — involves the collection and processing of sensitive personal data, including CNIC documents and biometric selfies.

The legal bases for KYC data processing are legal obligation (anti-money laundering and gaming regulatory requirements) and contractual necessity (as a condition of the 777zh account agreement). KYC data is processed by 777zh's internal verification team and, where applicable, by contracted identity verification technology providers bound by strict data processing agreements.

777zh also applies transaction monitoring systems to detect patterns consistent with money laundering, terrorist financing, or other financial crime. Where suspicious activity is identified, 777zh is required by law to report this to relevant authorities — and in such circumstances is legally prohibited from informing the subject of the account that a report has been made.

All KYC and AML-related data processing is conducted in good faith and in compliance with 777zh's legal obligations. It is not used for commercial profiling or marketing purposes.

The 777zh platform is strictly for adults aged 21 years and above. 777zh does not knowingly collect personal data from individuals under the age of 21. The KYC verification process — which requires a valid CNIC and cross-checks the date of birth — is specifically designed to prevent underage access to the Platform.

If 777zh discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any deposits made by an underage user will be returned and any winnings forfeited, in accordance with 777zh's Terms and Conditions.

If you believe a person under 21 has registered a 777zh account using false identity documents, please contact 777zh's support team immediately. 777zh treats all reports of underage access with the highest priority.

777zh may update this Privacy Policy from time to time to reflect changes in applicable law, platform functionality, data processing practices, or industry standards. Where material changes are made — particularly changes that affect your data rights or introduce new categories of data collection — 777zh will notify registered users by SMS to their registered Pakistani mobile number and/or by in-platform notification upon next login.

Minor updates — such as corrections to wording, reorganisation of sections, or clarifications that do not alter the substance of our data practices — may be made without individual notification. The effective date shown at the top of this document will always reflect the most recent version.

The current version of this Privacy Policy supersedes all prior versions. Previous versions are retained by 777zh and can be provided on request.

For all privacy-related queries, data access requests, objections, and complaints, please contact the 777zh data protection team through the following channels:

• Live Chat: Available 24/7 on the 777zh platform. Urdu and English supported. For data rights requests, please state clearly that you are making a "data protection request" — this ensures the query is routed directly to the appropriate team rather than standard gameplay support;
• Email: [email protected] — use the subject line "Privacy / Data Protection Request" for formal data rights requests. Responses are provided in English within 5 business days for standard enquiries and within 30 days for formal data subject access requests.

When submitting a data rights request, please include your registered 777zh username and the mobile number associated with your account so that we can verify your identity and locate your records efficiently. 777zh will not process a data access or deletion request without first completing a reasonable identity verification step.