Privacy Policy — online777 Pakistan

online777 operates as an online casino, card games and sports betting platform serving players in Pakistan. As a platform that handles real PKR transactions and personal account information, we take data protection seriously — not because we have to, but because our players deserve to know exactly how their information is handled.

This Privacy Policy applies to all data collected through the online777 website, mobile browser platform and any communications between you and our support team. It covers every registered player account as well as visitors who browse the platform without registering.

The terms "we", "us" and "online777" throughout this document refer to the online777 platform and its operating team. "You" and "player" refer to any individual who accesses or uses online777 in any capacity.

If you have questions about anything in this Privacy Policy, contact us at support@online777.ws before registering. Our support team is available 24/7 in both English and Urdu.

online777 collects only the data that is genuinely necessary to operate your account, process your transactions and comply with legal obligations. We do not collect data speculatively or for vague future purposes. Below is a clear breakdown of what we collect and why.

online777 does not collect your Easypaisa PIN, JazzCash password, bank account password or any other authentication credential for external services. We collect only the reference information necessary to confirm a transaction was completed.

online777 uses the data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account operation: Your name, mobile number and CNIC are used to create and maintain your online777 account, verify your identity and ensure one account per person.
• Transaction processing: Your financial data is used to process PKR deposits and withdrawals through your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard.
• Security and fraud prevention: IP addresses, device data and behavioural patterns are analysed to detect suspicious activity, prevent account takeovers and identify fraudulent transactions before they affect your balance.
• Responsible gaming: Your game history, session data and deposit patterns are monitored to identify signs of problem gambling behaviour. We use this to trigger responsible gaming interventions and populate the tools on your account settings page.
• Customer support: When you contact online777 support, we use your account history and communication records to resolve your query accurately and efficiently.
• Legal and regulatory compliance: Online777 retains certain transaction and identity records as required under applicable anti-money laundering obligations.
• Platform improvement: Aggregated, anonymised usage data helps our team understand which features work well and which need improvement — informing product decisions that benefit all Pakistani players.
• Marketing communications (opt-in only): If you have opted in, online777 may send you promotional offers, new game announcements and bonus notifications by SMS or email. You can opt out at any time from your account settings.

online777 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your name, contact details, financial data and account activity is necessary to fulfil our contractual obligations to you as a registered player — without this data, we cannot operate your account or process your PKR transactions.
• Legal obligation: Retaining identity records, transaction histories and AML-related documentation is required by applicable financial regulations. This processing is non-optional.
• Legitimate interest: Security monitoring, fraud detection and platform analytics are conducted under our legitimate interest in protecting the platform and its players from harm. We balance this interest against your privacy rights and do not conduct surveillance beyond what is genuinely necessary.
• Consent: Marketing communications and non-essential personalisation features are processed only where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting your ability to use online777.

online777 does not sell your personal data to third parties. We do not share it with advertisers or data brokers. The only circumstances in which your data is disclosed to external parties are the following:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and bank partners receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data security standards.
• Identity verification services: When a high-value withdrawal triggers a verification requirement, a certified KYC (Know Your Customer) provider may process your CNIC data on our behalf. This provider operates under strict data processing agreements with online777.
• Game software providers: Live casino and RNG game providers receive anonymised session identifiers to facilitate gameplay. They do not receive your name, CNIC or contact details.
• Legal authorities: online777 will disclose data to Pakistani law enforcement or regulatory authorities where required by a valid legal order or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering or harm to another person.
• Business transfer: In the event that online777's platform is acquired or merged with another entity, player data may be transferred as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

online777 uses cookies and similar browser-based storage technologies to keep your session active, remember your preferences and analyse how players use the platform. Here is a breakdown of the cookie categories we use:

• Essential cookies: These are required for the platform to function. They keep you logged in during a session, maintain your balance display and ensure game sessions run correctly. You cannot opt out of essential cookies while using online777.
• Preference cookies: These remember your chosen language, display settings and game lobby filter preferences between sessions. They are helpful but not required — you can clear them from your browser at any time.
• Analytics cookies: Aggregated, anonymised data about which pages are visited most and how players navigate the lobby helps us prioritise improvements. We do not use third-party analytics services that build individual advertising profiles from this data.
• Security cookies: Short-lived tokens that help online777 detect unusual login behaviour, such as access from an unfamiliar device or geographic location, and trigger additional verification steps to protect your account.

You can manage cookies through your browser settings. Disabling essential cookies will prevent online777 from functioning correctly. Disabling other categories may reduce personalisation but will not prevent you from accessing the core platform.

online777 retains your personal data for as long as is necessary for the purposes described in this policy, and no longer. The specific retention periods we apply are:

• Active account data: Retained for the full duration of your online777 account plus a period of 5 years after account closure, as required for financial recordkeeping and AML compliance.
• Transaction records: Retained for 7 years from the date of each transaction, in line with standard financial recordkeeping practice.
• Identity verification documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the interaction, to facilitate follow-up and dispute resolution.
• Marketing opt-in data: Retained until you withdraw your consent. Following opt-out, your marketing preference is recorded (as evidence of the opt-out) but no further marketing communications are sent.
• Anonymised analytics data: Retained indefinitely in aggregate form. No individual player can be identified from this data after anonymisation.

When retention periods expire, data is securely deleted or irreversibly anonymised. We do not archive data speculatively beyond these defined periods.

Protecting your personal data and PKR account balance is something online777 invests in continuously. The following technical and operational measures are in place across the platform:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers. The padlock icon in your browser confirms this is active on every online777 page.
• Encrypted data storage: Sensitive fields including CNIC references and payment identifiers are encrypted at rest in our database using AES-256 encryption. Even in the event of a database breach, these fields are unreadable without the encryption key.
• Access controls: Only a small number of specifically authorised online777 staff can access player personal data, and only for defined operational purposes. All internal data access is logged and audited.
• Two-factor authentication: Players are encouraged to enable 2FA on their online777 account for an additional layer of login security. Login anomaly detection runs automatically for all accounts.
• 24/7 security monitoring: Automated systems monitor the online777 platform around the clock for unusual patterns that might indicate a security threat. Detected anomalies trigger immediate investigation.
• Regular security reviews: The platform's security posture is reviewed on a scheduled basis, and vulnerabilities identified through these reviews are remediated promptly.

Despite these measures, no internet-connected platform can guarantee absolute security. In the event of a data breach that affects player personal data, online777 will notify affected players promptly and describe the nature of the breach and the steps taken to contain it.

As a player at online777, you have the following rights in relation to your personal data. All requests should be submitted to support@online777.ws with "Data Rights Request" in the subject line.

online777 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and we apply age verification controls to enforce this.

If we discover that an account has been registered by a minor, we will immediately close the account, delete the associated personal data to the extent permitted by legal retention obligations, and — where required — report the matter to the appropriate authorities.

If you believe a minor has registered on online777, please contact us at support@online777.ws immediately. We take this extremely seriously and will investigate all such reports without delay.

online777 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or the services we offer. When we make material changes, we will notify registered players via the mobile number or email address associated with their account.

The "Last Updated" date at the top of this page will be revised whenever any change — material or minor — is made. We encourage you to review this page periodically.

Your continued use of online777 after a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with a change, you have the right to request account closure and deletion of your data subject to our legal retention obligations.

If you have a question about this Privacy Policy or about how online777 handles your personal data, please contact us using the details below. We will respond to all privacy enquiries within 2 business days.

• Email: support@online777.ws
• Subject line for data requests: "Privacy Request – [your registered mobile number]"
• Live Chat: Available 24/7 from within your online777 account dashboard
• Languages: English and Urdu both supported

If you believe online777 has not handled your personal data in accordance with this Privacy Policy and we have failed to resolve your concern through our standard support process, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.