777cy Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy applies to all personal data collected by 777cy through the website at 777cy.net, associated subdomains, mobile browser interfaces, and all services, features, and content offered by 777cy to registered and visiting users. By using the 777cy Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the collection and use of your data as described herein, you should discontinue use of the Platform immediately.

1.1 Data Provided by You Directly

When you register an account with 777cy, you provide us with personal data that is necessary to create and manage your account. This includes:

• Identity Data: Your full legal name, date of birth, and gender;
• Contact Data: Your Pakistani mobile phone number and email address;
• Address Data: Your residential address in Pakistan (city, province, postal code);
• Identity Verification Data: A copy of your CNIC (Computerised National Identity Card) or other government-issued photo identification, as required during the KYC (Know Your Customer) verification process;
• Financial Data: Payment method details necessary to process deposits and withdrawals, including JazzCash account identifiers, EasyPaisa mobile wallet numbers, and bank account details where applicable. Full payment card numbers are not stored by 777cy;
• Account Credentials: Your chosen username and a cryptographically hashed (not plaintext) version of your password.

1.2 Data Collected Automatically

When you access and use the 777cy Platform, certain data is collected automatically through technical systems:

• Usage Data: Pages visited, games played, bets placed, time spent on each section, clicks, search queries, and navigation pathways through the Platform;
• Device Data: Device type, operating system version, browser type and version, screen resolution, and device identifiers;
• Network Data: IP address, approximate geographic location derived from IP address, internet service provider, and connection type;
• Session Data: Login timestamps, session duration, and logout events;
• Transaction Data: Complete records of all deposits, withdrawals, bets, winnings, bonus credits, and account balance changes.

1.3 Data from Third Parties

777cy may receive personal data about you from third-party sources in the following circumstances:

• Identity verification service providers who confirm the validity of documents submitted during the KYC process;
• Payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, who provide transaction confirmation data;
• Fraud detection and anti-money-laundering (AML) screening services that may flag accounts associated with suspicious activity;
• Responsible gaming registries, where applicable, that indicate whether a user has registered for self-exclusion on other platforms.

777cy uses the personal data it collects for the following specific purposes:

777cy does not use personal data for automated profiling that produces legal or similarly significant effects without human review, except where required by legal obligation (such as AML screening).

777cy processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a Contract: Processing that is necessary to provide the services you have requested through your 777cy account — including account management, game access, payment processing, and customer support;
• Compliance with a Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, financial record-keeping obligations, and responses to lawful orders from regulatory authorities;
• Legitimate Interests: Processing that serves 777cy's legitimate operational interests — such as fraud prevention, platform security, responsible gaming monitoring, and general service improvement — where those interests are not overridden by your rights and interests;
• Consent: Processing carried out on the basis of your explicit, freely given, informed, and specific consent — primarily relating to the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.1 Categories of Recipients

777cy does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances and only to the extent necessary:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing services receive transaction-level data necessary to process your deposits and withdrawals. These providers are contractually required to protect your data and use it only for payment processing purposes;
• Identity Verification Providers: Third-party KYC and identity verification services that assist in confirming the validity of documents you submit during account registration or subsequent verification requests;
• Game Content Providers: Technology providers such as Ezugi and other game studios may receive a pseudonymous player identifier and session data necessary to deliver game content and ensure game integrity. These providers do not receive your full personal identity;
• Fraud and AML Screening Services: Specialist providers that assist in detecting and preventing financial crime, fraud, and money laundering;
• Regulatory and Law Enforcement Authorities: 777cy will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by a lawful order or legal obligation;
• Professional Advisors: Lawyers, auditors, and accountants engaged to provide professional services to 777cy, subject to confidentiality obligations.

4.2 International Data Transfers

Some of the third parties with whom 777cy shares data may be located outside Pakistan. Where personal data is transferred internationally, 777cy ensures that appropriate safeguards are in place — such as contractual data protection clauses — to maintain the same standard of protection that applies within Pakistan and as described in this Privacy Policy.

777cy retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your 777cy account and for a period of five (5) years following permanent account closure, to satisfy legal record-keeping obligations and to respond to post-closure disputes or regulatory inquiries;
• Transaction Data: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping requirements;
• KYC and Identity Verification Data: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process, whichever is later;
• Usage and Session Data: Retained for a period of thirteen (13) months from collection, after which it is either deleted or anonymised for aggregate analytical purposes;
• Support Communications: Records of customer support interactions are retained for three (3) years from the date of the interaction;
• Marketing Consent Records: Records of consent to receive marketing communications are retained for the duration of that consent and for one (1) year following its withdrawal.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Where deletion is technically impractical in the short term (for example, data held in encrypted backup systems), 777cy will isolate the data from active use and delete it at the earliest practicable opportunity.

6.1 Technical Security Measures

777cy implements a multi-layered technical security infrastructure to protect the personal data of Pakistani players. This includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 777cy servers;
• AES-256 encryption for all personal and financial data stored at rest in 777cy databases;
• Two-factor authentication (2FA) available for all account holders, providing an additional layer of identity verification on each login from an unrecognised device;
• Automated intrusion detection and real-time alerting systems monitoring the 777cy network perimeter continuously;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Firewall systems and IP-based rate limiting to mitigate automated attack attempts;
• Cryptographic hashing of all stored passwords — 777cy does not store plaintext passwords and cannot retrieve your password if lost.

6.2 Organisational Security Measures

Beyond technical controls, 777cy enforces strict organisational policies with respect to data security:

• Access to personal data is restricted to authorised employees and contractors who have a documented operational need;
• All personnel with access to personal data receive mandatory data protection training;
• Data access is logged and audited, and anomalous access patterns trigger immediate investigation;
• Third-party service providers with access to personal data are required to execute data processing agreements that obligate them to maintain equivalent security standards.

7.1 What Are Cookies

Cookies are small text files placed on your device by the 777cy Platform when you visit. They allow the Platform to recognise your device across sessions, remember your preferences, maintain your login state, and gather usage analytics. 777cy uses both first-party cookies (set by 777cy directly) and third-party cookies (set by service providers operating on behalf of 777cy).

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cannot be disabled without rendering the Platform inoperable;
• Functional Cookies: Store your preferences such as language settings and display options. Disabling these does not prevent you from using the Platform but may reduce the convenience of your experience;
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform — which pages are visited, how long users spend in each section, and what features are most used. This data helps 777cy improve the Platform experience;
• Security and Fraud Prevention Cookies: Used to identify and flag suspicious login patterns, unusual transaction activity, and potential account compromise attempts.

7.3 Managing Cookies

You can manage cookies through your browser's settings. Most modern browsers allow you to block, delete, or receive alerts before cookies are set. Please be aware that disabling non-essential cookies will not prevent your access to the 777cy Platform, but disabling strictly necessary cookies will impair core Platform functionality including login persistence and account security features.

Subject to applicable law and certain limited exceptions, you have the following rights with respect to your personal data held by 777cy:

• Right of Access: You have the right to request confirmation of whether 777cy holds personal data about you and, if so, to receive a copy of that data along with information about how it is being used;
• Right to Rectification: You have the right to request correction of any inaccurate personal data that 777cy holds about you, and to have any incomplete data completed where this is relevant to the processing purposes;
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to exceptions including legal record-keeping obligations that require retention of certain data;
• Right to Restrict Processing: You have the right to request that 777cy limits the processing of your personal data in certain circumstances, such as while the accuracy of data is contested;
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 777cy in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another data controller where technically feasible;
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes, where you have grounds relating to your particular situation;
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

The 777cy Platform and all associated services are strictly intended for adults aged twenty-one (21) and above. 777cy does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform's registration process includes mandatory age confirmation and identity verification measures designed to prevent underage access.

If 777cy becomes aware that personal data has been collected from an individual under the age of 21 — whether through a registration error, fraudulent misrepresentation of age, or any other means — that data will be deleted immediately, the associated account will be permanently closed, and any funds in the account will be handled in accordance with 777cy's Terms & Conditions and applicable legal requirements.

If you are the parent or guardian of an individual under 21 who you believe has registered an account on the 777cy Platform, please contact [email protected] immediately. 777cy will investigate and take appropriate action without delay.

777cy reserves the right to update or amend this Privacy Policy at any time to reflect changes in the Platform's data processing activities, legal requirements, or operational practices. When material changes are made to this policy, 777cy will provide notice to registered users via the email address on file or through a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this policy will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how 777cy is protecting your personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

If any amendment materially affects the manner in which we process data that was collected prior to the amendment date, and the amendment is to your disadvantage, we will seek fresh consent from you where required by law before applying the amended terms to your existing data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 777cy processes your personal data, please contact our data privacy support team using the details below.

All privacy-related communications should clearly identify your 777cy account (where applicable) and the specific nature of your query or request to ensure prompt and accurate handling.

777cy is committed to resolving all privacy-related queries promptly and transparently. If, after contacting 777cy, you remain dissatisfied with how your privacy concern has been handled, you have the right to escalate your complaint through formal dispute resolution processes as described in the 777cy Terms & Conditions.