Privacy Policy – 777cx Platform

Section 01

Introduction

777cx ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses its website, mobile interface and associated services (collectively, the "Services"). This Privacy Policy describes how we collect, use, store, disclose and protect personal data in the course of providing those Services.

This policy applies to all users of 777cx, including players accessing the platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations. By registering an account or continuing to use the Services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein, to the extent that consent is the applicable legal basis for any specific processing activity.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and 777cx. In the event of any conflict between the two documents in relation to data handling, this Privacy Policy shall prevail.

Section 02

Definitions

The following terms carry the meanings set out below throughout this Privacy Policy:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, email address, date of birth, IP address and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. In relation to the Services, 777cx acts as the Data Controller for player data.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a contractual arrangement. Examples include KYC verification providers and payment processing partners.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose. Consent may be withdrawn at any time.
• "KYC Data" — identity and age verification documentation submitted by a player, including government-issued identification, proof of address and related supporting materials.
• "Cookies" — small text files placed on your device by the platform to store session information, preferences and analytics data as further described in Section 7.

Section 03

Data We Collect

777cx collects personal data through several distinct channels. The categories below describe the types of data collected and the circumstances in which collection occurs.

Data provided directly by you:

• Registration data: full legal name, date of birth, residential address, email address, phone number and chosen username.
• KYC documentation: copies of government-issued photo identification (such as a CNIC or passport), proof of address, and payment method verification materials.
• Financial data: deposit amounts, withdrawal requests, transaction history and payment method details necessary to process cashier transactions. Full payment card numbers are handled exclusively by our payment processing partners and are not stored on 777cx servers.
• Communications data: the content of messages sent to our support team via live chat or email, including any attachments you choose to share.
• Responsible gambling data: information you provide when setting account limits, requesting cooling-off periods or initiating self-exclusion.

Data collected automatically:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution and time zone.
• Usage data: pages visited, features accessed, bet and game history, session duration, click-stream data and platform navigation patterns.
• Cookie and tracking data: session identifiers, preference cookies and analytics data as described in Section 7.
• Fraud prevention data: behavioural signals, login attempt patterns and device fingerprinting data used to detect and prevent unauthorised access and fraudulent activity.

Section 04

Legal Basis for Processing

777cx processes personal data only where a valid legal basis exists for doing so. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to create and maintain your Account, process deposits and withdrawals, settle bets, and deliver the Services you have signed up for. Without this processing, we cannot provide the Services.
• Legal obligation: Processing required to comply with our licensing conditions, anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any mandatory reporting obligations imposed by our licensing authority or applicable law.
• Legitimate interests: Processing carried out to detect, prevent and investigate fraud, abuse and prohibited conduct; to ensure platform security; and to improve the quality of the Services, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, non-essential cookies and any other purpose where we have obtained your specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where we rely on legitimate interests as the legal basis for processing, we carry out a balancing assessment to confirm that our interests do not outweigh your rights. Summaries of those assessments are available upon written request to our support team.

Section 05

How We Use Your Data

Personal data collected by 777cx is used for the following specific purposes:

• Account creation and management: Setting up your Account, verifying your identity and age, maintaining Account records and enabling login.
• Service delivery: Processing bets, settling markets, crediting winnings, managing bonus allocations and providing access to all platform features.
• Payment processing: Facilitating deposits and withdrawals through payment methods available in the cashier, conducting fraud checks on financial transactions and meeting AML screening requirements.
• KYC and compliance: Verifying identity documents, conducting politically exposed person (PEP) and sanctions screening, and meeting all obligations imposed by our operating licence.
• Customer support: Responding to queries submitted via live chat or email, resolving disputes and maintaining a record of support interactions for quality assurance purposes.
• Responsible gambling: Operating player-protection tools such as deposit limits, self-exclusion and cooling-off periods; monitoring account activity for signs of problem gambling behaviour in accordance with our licensing obligations.
• Security and fraud prevention: Detecting unusual login activity, identifying and investigating suspected fraud or collusion, and protecting the integrity of the platform.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues and improve product features.
• Marketing communications (consent-based): Sending promotional offers, bonus notifications and platform news by email or in-platform messaging where you have opted in to receive such communications.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

Section 06

Data Sharing & International Transfers

777cx does not sell, rent or trade your personal data. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Categories of third-party recipients:

• Payment processors: Financial data is shared with payment processing partners to facilitate deposits and withdrawals. These partners operate under binding contractual terms and applicable financial regulation.
• KYC and identity verification providers: Identity documents and related data are shared with accredited KYC service providers to fulfil our age and identity verification obligations.
• Fraud detection and AML screening services: Transaction data and account identifiers may be shared with specialist fraud prevention and anti-money laundering screening systems.
• Technology and infrastructure providers: Cloud hosting, data storage and platform infrastructure providers who process data on our behalf under data processing agreements with appropriate security obligations.
• Licensing and regulatory authorities: We may be required to disclose personal data to our licensing authority or to law enforcement agencies where legally compelled to do so.
• Professional advisers: Legal counsel, auditors and compliance consultants may access data where necessary to provide professional services, under strict confidentiality obligations.

International data transfers:

Some of the third-party service providers listed above may be located or operate infrastructure outside the country in which you reside. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable data protection law, to maintain a consistent level of protection for your data regardless of its location.

Section 07

Cookies & Tracking Technologies

777cx uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse how the Services are used. The categories of cookies we use are described below.

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, load balancing identifiers and security cookies. These cannot be disabled without impairing access to the Services.
• Functional cookies: Store your preferences such as language settings, display options and responsible gambling tool configurations so that they persist across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate and use the platform. This data is used to identify technical issues and improve the user experience. These cookies are set only where you have consented.
• Marketing and attribution cookies: Track whether you arrived at the platform via a specific promotional link or campaign. Used for internal performance measurement only. Set only with your consent.

You may manage your cookie preferences at any time through your browser settings or through the cookie preference centre available on the platform. Please note that disabling strictly necessary cookies will prevent you from logging in or using certain platform features.

We do not use third-party advertising networks that place tracking cookies for cross-site behavioural profiling.

Section 08

Your Data Rights

Subject to applicable law and the legal basis on which we process your data, you hold the following rights in relation to your personal data held by 777cx. To exercise any of these rights, contact our support team via live chat or at the email address in Section 13.

We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, with written explanation provided.

Section 09

Data Retention

777cx retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by our licensing obligations, legal requirements or legitimate business needs. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a minimum period after account closure as required by our operating licence and AML obligations. This period is typically five to seven years from the date of account closure, depending on the licensing jurisdiction's requirements.
• KYC documentation: Retained for the period mandated by our licence and applicable AML regulation, calculated from the date of the last transaction or account closure, whichever is later.
• Transaction records: Financial transaction records are retained for the period required by our licensing authority for audit and compliance purposes.
• Support communications: Retained for two years from the date of the last interaction, unless the communication relates to a dispute or compliance matter that requires longer retention.
• Marketing data: Email addresses and communication preferences held solely for marketing purposes are deleted within 30 days of an opt-out request.
• Analytics data: Aggregated and anonymised analytics data, from which no individual can be identified, may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

Section 10

Security Measures

777cx implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include, but are not limited to:

• HTTPS/TLS encryption for all data transmitted between your device and the platform.
• Encryption of sensitive data fields at rest using industry-standard algorithms.
• Password hashing using secure, salted algorithms — plaintext passwords are never stored.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their specific role.
• Regular security assessments and penetration testing of platform infrastructure.
• Intrusion detection systems and real-time monitoring for suspicious access patterns.
• Multi-factor authentication requirements for administrative access to data systems.

While we maintain robust security practices, no system is entirely immune to risk. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

Section 11

Minors & Age Verification

The Services are strictly intended for adults aged 18 or over, or such higher minimum age as required by the operator's licensing jurisdiction or applicable local law. 777cx does not knowingly collect personal data from individuals below the applicable minimum age.

Age verification is conducted as part of the KYC process. Where we have reasonable grounds to suspect that an Account is operated by or on behalf of a minor, the Account will be suspended pending identity verification. If a minor is confirmed to have registered, the Account will be closed, all activity will be voided and any deposited funds will be returned to the verified source of payment, subject to verification of the payment source.

Parents and guardians concerned about a minor accessing gambling services are encouraged to use parental control software and to contact our support team immediately if they believe a minor has accessed or registered on the platform.

Section 12

Amendments to This Privacy Policy

777cx reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform features. Where a change is material — meaning it significantly affects how your data is used or your rights in relation to it — we will notify you in advance by email to your registered address or via a prominent notice upon login.

The date of the most recent review is displayed at the top of this page. We encourage you to review this policy periodically. Your continued use of the Services following the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the amendments, you may request Account closure in accordance with the Terms & Conditions.

Previous versions of this Privacy Policy are available upon written request to our support team at the contact details in Section 13.

Section 13

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how your personal data has been handled, please contact the 777cx support team using the details below. All privacy-related requests will be handled with priority and in accordance with applicable data protection law.

• Live chat: Available directly on the 777cx platform, 24 hours a day, 7 days a week — the fastest channel for urgent privacy concerns.
• Email: [email protected] (plain text — not a clickable link)
• Support languages: English and Urdu
• Response timeframe: We aim to acknowledge all privacy-related requests within 72 hours and provide a substantive response within 30 days of identity verification.

When submitting a data rights request, please include your registered email address and Account username so that we can verify your identity before processing the request. We may ask for additional verification where the nature of the request requires it.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the licensing jurisdiction. Details of the supervisory authority are available in the platform's licensing disclosure section.