Privacy Policy
for 777ct Users

Welcome to the Privacy Policy of 777ct ("we", "our" or "us"), the online gaming information and services platform accessible at 777ct.cam (the "Platform"). This Privacy Policy sets out how we collect, process, store, share and protect personal data about individuals ("Users", "you" or "your") who access or use the Platform.

We take data protection seriously. This Policy has been written in clear, accessible English to help you understand your rights and our obligations. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you must discontinue use of the Platform immediately. Where consent is our legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either directly (e.g., full name, CNIC number) or indirectly (e.g., IP address, device ID combined with other identifiers).
• "Processing" — any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" — 777ct, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of 777ct, strictly in accordance with documented instructions and applicable data-protection obligations.
• "KYC Data" — identity-verification documents and related information submitted by a User during the Know Your Customer process, including government-issued photo ID (e.g., CNIC, passport), proof of address and, where required, source-of-funds documentation.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including financial information, identity documents and data relating to health or gambling behaviour.
• "Cookies" — small text files placed on your device by the Platform to store session-state, preferences or analytical information.

We collect Personal Data through several channels — directly from you when you register or interact with the Platform, automatically through technical systems, and occasionally from trusted third parties. The categories of data we collect are described in the table below:

We process your Personal Data only where we have a valid legal basis to do so. Depending on the specific processing activity, we rely on one or more of the following grounds:

• Contractual Necessity: Processing required to perform our contract with you — that is, to operate your account, process transactions, deliver gaming services and provide customer support.
• Legal Obligation: Processing necessary to comply with applicable law, including anti-money laundering (AML) regulations, KYC requirements under our operating licence, and lawful requests from competent authorities.
• Legitimate Interests: Processing for purposes that reflect our legitimate business interests — including fraud prevention, platform security, responsible gambling enforcement and service improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent (for example, for certain marketing communications or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

777ct uses the Personal Data we collect for the following specific purposes:

1. Account Registration & Management: To create and maintain your user account, verify your eligibility (age and jurisdiction), authenticate your identity, and administer your profile settings.
2. KYC & Compliance: To fulfil our Know Your Customer obligations under the Platform's operating licence and applicable AML regulations. KYC verification may involve checking your identity documents against third-party databases.
3. Transaction Processing: To process deposits, withdrawals and bonus credits accurately and securely. Payment method references familiar to Pakistani users — including Easypaisa, JazzCash, Raast, and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah — may appear in your transaction history as contextual labels only, without implying any partnership or endorsement by those providers.
4. Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance and training purposes.
5. Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, account takeovers and other security threats. This may include automated risk-scoring of transactions and sessions.
6. Responsible Gambling: To enforce self-exclusion requests, deposit/loss limits and other responsible gambling tools you have activated, and to monitor for signs of problematic gambling behaviour where required by our licence obligations.
7. Personalisation: To tailor in-platform recommendations, promotions and content based on your usage history and stated preferences, where you have not opted out of personalised communications.
8. Marketing Communications: To send you promotional offers, bonus alerts and platform updates, but only where you have opted in and subject to your right to opt out at any time.
9. Analytics & Platform Improvement: To analyse aggregated usage patterns, identify technical issues, improve the user experience and develop new features. Where possible, analytics data is anonymised or pseudonymised.
10. Legal & Regulatory Compliance: To meet record-keeping requirements, respond to lawful information requests, and exercise or defend legal claims.

777ct does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share data only in the limited circumstances described below:

• Service Providers & Data Processors: We engage trusted third-party vendors — including payment processors, KYC and identity-verification providers, fraud-detection services, cloud hosting providers, email delivery platforms and customer-support tools — who process data on our behalf under strict contractual data-processing agreements.
• Regulatory & Law-Enforcement Bodies: We may disclose Personal Data to competent authorities, regulators, courts or law-enforcement agencies where required or permitted by applicable law, including in connection with AML investigations or lawful court orders.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets involving 777ct, Personal Data may be transferred to the relevant successor entity. We will notify affected users in advance where legally required.
• Responsible Gambling Partners: Where required by our licence obligations, certain account or self-exclusion data may be shared with recognised responsible gambling schemes or multi-operator exclusion registers.
• With Your Consent: We may share data with other parties where you have given explicit, informed consent for a specific sharing purpose.

777ct operates internationally and may transfer your Personal Data to countries outside your home jurisdiction, including countries where data-protection laws may differ from those in your location. Transfers occur primarily to jurisdictions where our cloud hosting infrastructure, KYC providers and payment processors are based.

Where such transfers take place, we ensure that adequate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant data-protection authorities;
• Transfer to countries recognised as providing an adequate level of data protection; or
• Other lawful transfer mechanisms as permitted under applicable law.

Pakistani users should be aware that data submitted via the Platform may be processed and stored on servers located outside Pakistan. No Pakistani regulatory body has certified or approved these transfers. By using the Platform, you acknowledge and accept this reality.

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. Retention periods vary by data category:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data-destruction procedures. Where data is required in connection with ongoing legal proceedings, it may be retained beyond the standard retention period until resolution.

777ct uses cookies and similar tracking technologies (such as web beacons, pixels and local storage) to enhance your experience on the Platform, maintain session state, remember your preferences and gather analytical insights.

The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential to the basic functioning of the Platform — for example, maintaining your login session, remembering items in your account, and routing traffic securely. These cannot be disabled without impairing core functionality.
• Functional Cookies: Allow the Platform to remember choices you have made (such as language preferences or responsible gambling limit settings) to provide a more personalised experience.
• Analytical Cookies: Help us understand how users navigate the Platform — which pages are most visited, where users exit, and how features are used — so we can improve the overall experience. Data collected is aggregated and does not directly identify you.
• Marketing & Targeting Cookies: Used, with your consent only, to deliver relevant promotional content based on your interests and usage patterns. You may opt out of these cookies at any time.

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies or receive a warning before cookies are stored. Please note that disabling certain cookies may affect your ability to use some features of the Platform.

Subject to the applicable law in the jurisdiction governing this Privacy Policy, and to certain exceptions and limitations, you have the following rights in relation to your Personal Data:

To exercise any of these rights, please contact our support team at [email protected] (plain text — not a link). We will respond within 30 days of receipt of a valid request. We may require proof of identity before processing your request to protect against fraudulent or unauthorised access.

Where we are unable to fulfil your request — for example, because retention is mandated by law — we will explain the reason clearly and advise on any available alternatives.

777ct implements a comprehensive set of technical and organisational measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• AES-256 encryption for Personal Data stored at rest, particularly KYC documents and financial records.
• Role-based access controls limiting internal access to Personal Data to authorised personnel only, on a strict need-to-know basis.
• Regular independent security audits and penetration testing of our infrastructure.
• Intrusion detection systems, real-time security monitoring and automated alerting for anomalous activity.
• Staff training and awareness programmes on data protection and information security best practices.
• Incident response procedures to contain, assess and notify in the event of a data breach, in accordance with applicable notification obligations.

While we take every reasonable precaution, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

The 777ct Platform is intended solely for adults aged 18 years and above — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect, process or retain Personal Data from individuals below the applicable minimum age.

We employ age-verification checks during registration and, where required, through our KYC process. If we discover — through our own checks or via a report from a third party — that a minor has registered an account or provided us with Personal Data, we will:

• Immediately suspend and permanently close the account;
• Void any transactions or balances associated with that account;
• Delete all Personal Data associated with the account as expeditiously as possible, subject to any overriding legal retention requirements; and
• Where applicable, report the incident to relevant authorities in accordance with applicable law.

Parents and guardians who believe that a minor in their care has accessed the Platform should contact us immediately at [email protected] so that we can take prompt action.

777ct is an English-language online gaming information platform designed with Pakistani users in mind. We recognise that users from across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — form a significant part of our audience, and we are committed to handling their Personal Data responsibly.

References to payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, and banking services provided by HBL, UBL, Meezan Bank and Bank Alfalah — appear on the Platform as contextual references only. These institutions have not endorsed, affiliated with, or approved of 777ct's data processing practices, and their names are used solely to assist Pakistani users in identifying familiar payment terminology.

Your Personal Data may be stored and processed on servers located outside Pakistan. Pakistani data-protection law is evolving; we will update our practices as required to remain consistent with applicable obligations as they develop.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or the structure of our business. When we make material changes, we will take reasonable steps to inform you — typically by posting a prominent notice on the Platform or by sending a notification to the email address registered to your account.

The "Last updated" date at the top of this Policy will always reflect the date on which the most recent version came into effect. We encourage you to review this Policy periodically so you remain informed about how we protect your data. Your continued use of the Platform after a revised Policy has been posted constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

If you have any questions, concerns or requests relating to this Privacy Policy or our data-processing activities, please reach out to our support team. We aim to acknowledge all privacy-related enquiries within 5 business days and to provide a substantive response within 30 days.

When contacting us about a data rights request, please include your registered username and a brief description of your request. We may ask you to provide proof of identity before we can action your request, to ensure your data is protected from unauthorised disclosure.

For responsible gambling concerns — including self-exclusion requests, limit adjustments or problem gambling support — please visit our dedicated Responsible Gambling page.