777ft Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 777ft ("the Platform", "we", "us", "our") and applies to all personal data collected, processed, stored, and used in connection with your access to and use of the 777ft website, mobile platform, and all associated services — including cricket betting, live dealer casino games, slot games, the Aviator crash game, snooker betting, promotional offers, customer support interactions, and all financial transactions conducted through the platform.

By registering an account with 777ft, making a deposit, or otherwise using the 777ft platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Policy should be read alongside the 777ft Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

The Effective Date of this Policy is 1 January 2026. This version supersedes all previously published privacy policies issued by 777ft.

2 Who We Are

777ft is an internationally operated online casino and sports betting platform serving English-speaking Pakistani players. The platform offers a comprehensive range of gaming and betting services, including but not limited to cricket betting, PSL match markets, live dealer tables, 500+ slot games, the Aviator crash game, snooker betting, and instant PKR payouts via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.

For the purposes of data protection law, 777ft acts as the data controller in respect of the personal data of registered players and site visitors. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under written agreements that impose data protection obligations consistent with this Policy.

If you have any questions about how 777ft handles your personal data, or if you wish to exercise any of your data rights, please contact our dedicated support team through any of the channels listed in Section 15 of this Policy.

3 Data We Collect

777ft collects personal data through several channels and at different stages of your interaction with the platform. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create a 777ft account, we collect the information you provide in the registration form, which typically includes your full legal name, date of birth, residential address (including city, such as Karachi, Lahore, or Islamabad), email address, phone number, and your chosen username and password (stored in hashed form only — we never store your password in plain text).

3.2 Identity Verification (KYC) Data

As part of our anti-money laundering (AML) compliance and responsible gaming obligations, we may collect copies of identity documents such as your National Identity Card (CNIC), passport, driver's licence, and proof of address. We may also collect selfie images or video footage for biometric verification purposes where required.

3.3 Financial Transaction Data

We collect records of all deposits, withdrawals, and gaming transactions conducted through your 777ft account. This includes payment method details (such as your JazzCash or EasyPaisa mobile number, bank account details for HBL/UBL/Meezan Bank transfers, or your USDT TRC20 wallet address), transaction amounts, timestamps, and transaction reference numbers.

3.4 Gaming and Betting Activity Data

We maintain records of all gaming sessions, bets placed, game outcomes, bonus usage, and wagering activity associated with your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

3.5 Technical and Device Data

When you access the 777ft platform, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. This data helps us maintain platform security, detect fraudulent activity, and improve the user experience.

3.6 Communications Data

We retain records of all communications between you and the 777ft support team, including Live Chat transcripts, email correspondence, and any documents or screenshots you share with us in the course of a support interaction or complaint.

4 How We Use Your Data

777ft uses your personal data for the following specific purposes. Each purpose is matched to a lawful legal basis, which is detailed in Section 5.

We do not use your personal data for any purpose not listed above without first providing you with updated notice and, where required, obtaining your fresh consent.

5 Legal Basis for Processing

777ft processes your personal data on the following legal bases, in accordance with applicable international data protection standards:

• Contract Performance: Processing that is necessary to create and manage your player account, process your financial transactions, deliver the gaming services you have requested, and fulfil 777ft's contractual obligations to you as set out in the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CFT legislation, KYC identity verification requirements, responsible gaming obligations (including age verification and self-exclusion management), and mandatory regulatory reporting obligations.
• Legitimate Interests: Processing carried out for 777ft's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, abuse detection, anonymised analytics to improve platform performance, and internal record-keeping.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications and any optional data collection activities. You may withdraw your consent at any time by contacting our support team or updating your account preferences, without this affecting the lawfulness of any processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

The 777ft platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session state, detect fraudulent activity, and analyse platform usage. Cookies are small data files stored on your device by your web browser when you visit the 777ft website.

777ft uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the 777ft platform to function correctly. They manage your login session, maintain your account authentication state, remember your language and currency preferences, and support platform security features. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the 777ft platform — such as which pages are visited most frequently, how long players spend on each section, and which features generate the most engagement. This data is used solely to improve the platform and does not identify you personally.
• Functional Cookies: These cookies remember your personalisation choices, such as your preferred game categories, display settings, and responsible gaming reminders, so that you do not need to reconfigure these settings every time you log in.
• Security Cookies: These cookies assist in detecting and preventing fraudulent account activity, bot access, and other security threats. They form a core part of 777ft's fraud prevention infrastructure.

You can also manage or delete cookies at any time through your browser settings. Note that deleting all cookies will log you out of your 777ft account and may reset certain preferences.

7 Third-Party Data Sharing

777ft does not sell your personal data to third parties. We share your personal data only in the following specific, controlled circumstances:

• Payment Processors: To process your deposits and withdrawals, we share relevant financial and identity data with payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators. These providers receive only the data necessary to complete the specific transaction and are bound by their own regulatory and data protection obligations.
• Identity Verification Partners: To fulfil our KYC and AML compliance obligations, we may share your identity documents and registration data with accredited third-party identity verification service providers. These providers are contractually restricted to using your data solely for verification purposes.
• Game Software Providers: To deliver casino games, live dealer tables, and sports betting markets, 777ft integrates with licensed third-party game software providers. These providers may receive anonymised session data to support game delivery and dispute resolution, but do not receive your personal identification information.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory authority, 777ft will disclose personal data to the relevant governmental or law enforcement body. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of 777ft's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and your data rights will be preserved throughout.

8 Data Retention

777ft retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your active account relationship with 777ft, plus a minimum of 5 years following account closure, as required by AML and financial record-keeping regulations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, or longer where required by specific regulatory obligations applicable to 777ft's operating jurisdiction.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial services record-keeping requirements.
• Gaming and betting activity logs: Retained for a minimum of 3 years to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Customer support communications: Retained for a minimum of 2 years from the date of the last interaction, or longer where the communication forms part of an ongoing dispute or regulatory matter.
• Technical and device data: Retained in anonymised or aggregated form for analytical purposes; personally identifiable technical data is retained for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 777ft's internal data destruction procedures. If you request account closure before the expiry of a mandatory retention period, we will restrict active processing of your data and retain only the minimum required for compliance purposes.

9 Your Data Rights

As a 777ft player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team as described in Section 15:

• Right of Access: You have the right to request a copy of all personal data that 777ft holds about you. We will provide this in a structured, commonly used, and machine-readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update basic account information directly within your 777ft account settings; for KYC-related corrections, please contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis for processing exists, or where the data has been unlawfully processed. Note that this right is subject to overriding legal obligations — we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a portable format and to have it transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. 777ft will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10 Data Security

777ft implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 777ft's servers
• AES-256 encryption at rest for all sensitive personal and financial data stored in our databases
• Multi-factor authentication (MFA) options available to all registered players and mandatory for all 777ft staff with access to player data
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access specific categories of player data
• Regular penetration testing and security audits conducted by independent third-party security specialists
• Intrusion detection systems monitoring for anomalous access patterns and potential data breaches in real time
• Secure password hashing using industry-standard algorithms — your password is never stored in plain text

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 777ft will notify you without undue delay and will take all necessary steps to contain and remediate the breach. We maintain a documented incident response procedure for this purpose.

11 Children's Privacy

The 777ft platform is strictly intended for adults aged 21 years and above. 777ft does not knowingly collect, process, or store personal data from individuals under the age of 21 under any circumstances.

We implement age verification measures at the point of registration and during the KYC process to prevent underage individuals from accessing the platform. These measures include date of birth verification at registration and identity document checks that confirm the player's age as part of our standard KYC process.

If we become aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to permanently close the relevant account, delete all associated personal data, and refund any deposits made (net of any bonuses applied) to the original payment method. No winnings generated by an underage account will be paid out.

If you are a parent or guardian and have reason to believe that your child has registered an account with 777ft, please contact our support team immediately via Live Chat or email. We will investigate and act on all such reports promptly.

12 Marketing Communications

777ft may send you marketing communications about platform promotions, new game releases, special bonuses, PSL cricket betting offers, and other relevant updates — but only where you have given your explicit consent to receive such communications during the registration process or subsequently through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any 777ft marketing email
• Updating your communication preferences in your 777ft account settings panel
• Contacting our support team via Live Chat or email and requesting to be removed from all marketing communications

Please note that opting out of marketing communications does not affect transactional communications — we will continue to send you account-related notifications such as deposit confirmations, withdrawal processing updates, KYC verification requests, and security alerts, as these are necessary for the operation of your account.

Players who have exercised self-exclusion under the 777ft Responsible Gaming programme are automatically removed from all marketing communications immediately upon the self-exclusion taking effect and will not receive any promotional material for the duration of the exclusion period.

13 International Data Transfers

As an internationally operated platform, 777ft may transfer your personal data to and process it in countries outside of Pakistan, including countries where 777ft's servers are hosted, where our third-party service providers are located, or where our operational teams are based.

Where personal data is transferred internationally, 777ft ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection laws. These safeguards may include:

• Contractual data protection clauses incorporated into agreements with all international third-party processors
• Transfers to countries that have been recognised as providing an adequate level of data protection by relevant regulatory authorities
• Binding Corporate Rules or equivalent mechanisms where applicable

By using the 777ft platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the protections detailed above.

14 Changes to This Privacy Policy

777ft reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, changes in applicable laws and regulations, or changes to the services we offer on the 777ft platform.

Where a proposed change is material — meaning it significantly affects your rights regarding your personal data or how we use it — 777ft will provide you with reasonable advance notice of the change by sending an email to your registered address and/or displaying a prominent notification on the 777ft platform. We will clearly indicate the nature of the change and what it means for you in plain English.

Non-material amendments, such as corrections of typographical errors, clarifications of existing language, or administrative updates, may be made without advance notice and will take effect immediately upon publication. The "Effective Date" at the top of this Policy reflects when the current version entered into force.

We encourage you to review this Privacy Policy periodically to stay informed about how 777ft protects your data. Your continued use of the 777ft platform after any published amendment constitutes your acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 777ft handles your personal data — including requests to exercise any of your data rights as described in Section 9 — please contact us through the following channels:

• Live Chat: Available on every page of the 777ft platform, 24 hours a day, 7 days a week. This is the fastest way to reach our support team for urgent privacy queries.
• Email: [email protected] — please include your registered username, a clear description of your query or request, and (for data rights requests) a copy of a valid identity document so we can verify your identity before processing the request.

When submitting a data rights request by email, please specify clearly which right you wish to exercise (e.g., right of access, right to erasure) and provide sufficient information for our team to locate your account and the relevant data. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.