777co Privacy Policy —
Your Data, Your Rights, Our Commitment

This Privacy Policy applies to all personal data processed by 777co in connection with the operation of the 777co gaming platform at 777co.biz ("Platform"). References to "777co", "we", "us", or "our" mean the operator of the 777co Platform and all affiliated entities involved in its operation. References to "you", "Member", or "User" mean any individual who registers an account with 777co, accesses the Platform, or otherwise interacts with 777co's services.

777co is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection standards under its internationally recognised online gaming compliance framework. We collect only the data we need, use it only for the purposes described in this Policy, and apply rigorous technical and organisational safeguards to protect it throughout its lifecycle.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If there is any inconsistency between this Privacy Policy and any other document, this Policy shall prevail in matters specifically relating to personal data.

777co collects the following categories of personal data, depending on your level of interaction with the Platform:

777co does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) and requests Members not to submit such data through the Platform unless it is specifically required for a regulatory compliance process.

777co collects personal data through the following methods:

• Direct submission: Information you actively provide when creating an account, completing KYC verification, making deposits or withdrawals, setting responsible gaming preferences, or contacting our support team;
• Automated technical collection: Data collected automatically when you access and use the Platform, including IP address, device identifiers, browser type, session duration, and navigation behaviour via cookies and similar technologies (see Section 9);
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you conduct financial transactions on the Platform;
• Identity verification services: Data returned from third-party KYC providers used to verify documents submitted by Members during the verification process;
• Fraud prevention services: Signals and indicators from fraud detection partners that help 777co assess and manage risk associated with Account activity.

777co uses the personal data it collects for the following specific purposes:

• Account creation and management: Creating your 777co account, authenticating your identity on login, maintaining account records, and communicating with you about your account;
• Payment processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks; processing withdrawal requests; reconciling transaction records;
• Identity verification and KYC compliance: Verifying your age (21+) and identity in compliance with applicable anti-money laundering and responsible gaming obligations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and match-fixing;
• Platform operation and improvement: Monitoring platform performance, diagnosing technical issues, and improving game offerings, payment flows, and user experience;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour; processing requests to activate deposit limits, cooling-off periods, and self-exclusion; complying with responsible gaming obligations;
• Legal and regulatory compliance: Meeting obligations under applicable online gaming compliance frameworks, responding to lawful authority requests, and maintaining records as required by law;
• Member communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about 777co offers and products.

777co processes your personal data on one or more of the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and 777co (i.e., the Terms & Conditions), including account management, payment processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering requirements, age verification, and responsible gaming mandates under 777co's compliance framework;
• Legitimate interests: Processing for purposes that are in the legitimate interests of 777co and do not override your rights, including fraud prevention, platform security, and service improvement — where such interests are proportionate and balanced against Member rights;
• Consent: Processing for purposes where you have given clear, informed, and freely given consent, most notably the sending of optional marketing communications. Where consent is the basis, you may withdraw it at any time by contacting support or updating your Account preferences.

777co may share your personal data with the following categories of third parties:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks — to process your financial transactions. These providers act as independent data controllers for their portion of the transaction and are bound by their own privacy policies;
• Identity verification and KYC providers: Regulated third-party verification services used to validate government-issued identity documents submitted during the KYC process;
• Fraud prevention and security services: Specialist partners who provide fraud detection, risk scoring, and security monitoring services in support of 777co's compliance obligations;
• Game technology providers: Certified gaming software providers whose platforms power 777co's slot, casino, and gaming products — limited to data required for game session management and RTP auditing;
• IT and infrastructure providers: Cloud hosting, database, and security infrastructure providers who process data on behalf of 777co as data processors under contractual data processing agreements;
• Legal and regulatory authorities: Law enforcement agencies, regulatory bodies, and courts where disclosure is required by applicable law, court order, or regulatory demand.

Where 777co engages third parties as data processors, we require them to process data only on 777co's documented instructions, to implement appropriate security measures, and not to use the data for any purpose beyond the scope of their engagement with 777co.

The operation of an international online gaming platform means that personal data may be processed in jurisdictions outside Pakistan. Where 777co transfers personal data internationally — for example, to cloud infrastructure providers or game technology partners — we ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy.

Such safeguards may include: contractual data processing agreements incorporating recognised standard contractual clauses; transfers to jurisdictions that maintain data protection standards recognised under 777co's compliance framework; and technical security measures applied irrespective of where data is processed.

777co retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your membership with 777co, plus a minimum post-closure retention period required under applicable AML and compliance frameworks (typically five years following account closure);
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in compliance with financial record-keeping requirements;
• KYC and identity verification records: Retained for a minimum period of five years following account closure or the last KYC review, whichever is later;
• Gaming session and betting history: Retained for the duration of the active account relationship and the post-closure compliance retention period;
• Support communications: Retained for a minimum of two years from the date of the last communication, or longer where the communication relates to a dispute or legal matter;
• Responsible gaming records: Self-exclusion records and associated gaming activity data are retained for the full duration of any exclusion period plus the applicable post-exclusion compliance period.

Following the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

777co uses cookies and similar technologies to operate the Platform, remember your preferences, understand how Members use the Platform, and support security functions. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the Platform to function — these include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without materially impairing your ability to use 777co;
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and login persistence ("remember me") where you have selected this option;
• Analytics cookies: Collect anonymised data about how visitors navigate the Platform, which sections are most visited, and where technical errors occur. This data helps 777co improve the platform experience;
• Security and fraud prevention cookies: Assist in identifying suspicious access patterns, bot activity, and potential account fraud.

777co does not use third-party advertising or behavioural tracking cookies that share your data with unaffiliated advertisers or ad networks.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including the 777co Login session management. Instructions for managing cookies are available in the help section of most major browsers.

As a 777co member, you have the following rights with respect to your personal data. To exercise any of these rights, contact 777co at [email protected] with your account details and a description of your request.

If you have reason to believe that a person under 21 has registered an account on 777co, please contact us immediately at [email protected]. Parents and guardians concerned about under-age access to gaming platforms are encouraged to use parental controls available on all major devices and internet service providers in Pakistan.

777co implements a multi-layered approach to data security designed to protect personal and financial data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• Encryption in transit: All data transmitted between your browser or device and 777co's servers is protected by 256-bit TLS (SSL) encryption — the same standard used by major international banks;
• Encryption at rest: Sensitive data fields including financial identifiers and identity document data are encrypted at rest in 777co's databases;
• Access controls: Strict role-based access controls ensure that 777co staff can only access personal data where it is necessary for their specific function. No staff member has unrestricted access to the full member database;
• Account security features: Two-factor authentication, login activity monitoring, automated lockout after failed attempts, and session timeout controls are available to all Members from within Account Settings;
• Third-party security audits: 777co's platform security and data handling practices are subject to periodic review by qualified third-party assessors under our compliance framework;
• Incident response: 777co maintains a documented data breach response procedure. In the event of a breach affecting Member personal data, 777co will take prompt remedial action and notify affected Members where required by applicable obligations.

While 777co takes every reasonable measure to protect your data, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords for their 777co account and to enable two-factor authentication.

The 777co Platform may contain integrations with or references to third-party services — most notably payment providers such as JazzCash and EasyPaisa — whose own privacy practices are governed by their respective privacy policies. 777co is not responsible for the data handling practices of third-party service providers operating outside of 777co's direct control, and encourages Members to review the privacy policies of any payment provider or third-party service they interact with.

Game content on the 777co Platform is provided by licensed third-party game developers. These providers may process limited session data (e.g., game round identifiers, bet amounts, RNG seeds) in order to operate and audit their games. This processing is governed by contractual data processing agreements requiring the same security standards applied by 777co.

777co reserves the right to update or revise this Privacy Policy at any time. The current version, marked with its effective date and version number, is always available at 777co.biz/privacy-policy. Where changes are material — for example, where a new category of data is collected or a new purpose for processing is introduced — 777co will make reasonable efforts to notify active Members via their registered email address in advance of the changes taking effect.

Continued use of the 777co Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should cease using the Platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 777co has handled your personal data, please contact our team:

Where you are not satisfied with 777co's response to a privacy complaint, you may escalate the matter through the dispute resolution channel specified under 777co's compliance framework. 777co takes all privacy complaints seriously and commits to a genuine, good-faith resolution process.