Privacy Policy – How 777mm Collects, Uses, and Protects Your Personal Data

1 Introduction

This Privacy Policy ("Policy") is published by 777mm ("777mm", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who register an account with, access, or interact with the 777mm online casino and sports betting platform available at 777mm.today and through the 777mm mobile application (collectively, "the Platform").

777mm is committed to processing personal data responsibly, lawfully, and transparently. This Policy explains the categories of personal data we collect, the purposes for which we process that data, how long we retain it, with whom we may share it, and the rights available to you as a data subject. It also describes the technical and organisational measures we use to keep your data secure.

By registering a 777mm account, completing the KYC verification process, making a deposit, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the 777mm Terms & Conditions, which are available at 777mm.today/terms-conditions.

2 Data Controller

For the purposes of applicable data protection legislation, 777mm acts as the data controller in respect of the personal data of its players. As data controller, 777mm determines the purposes for which and the means by which personal data is processed.

All data protection enquiries, subject access requests, and complaints relating to the processing of your personal data by 777mm should be directed to our Data Protection contact via email. Contact details are set out in Section 16 of this Policy. We will acknowledge all formal data subject requests within 5 business days of receipt.

3 Personal Data We Collect

777mm collects and processes the following categories of personal data in connection with the provision of its services to Pakistani players and other users of the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your CNIC;
• Date of birth (used to verify that you meet the 21+ age requirement);
• Gender;
• CNIC number and a copy of your CNIC document (for KYC verification);
• A selfie or live photograph submitted for identity verification purposes;
• Your chosen username and account password (stored in encrypted/hashed format).

3.2 Contact Data

• Pakistani mobile number (Jazz, Telenor, Zong, Ufone, or Warid) used as your primary account identifier;
• Email address, if provided during registration or account updates;
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Multan).

3.3 Financial and Payment Data

• JazzCash or EasyPaisa mobile wallet number associated with your 777mm account;
• Bank account details (HBL, UBL, Meezan Bank, or other) where provided for bank transfer processing;
• Visa or Mastercard partial card details (card type, last four digits, expiry) where card payments are used;
• USDT wallet address where cryptocurrency transactions are made;
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.

3.4 Gaming and Behavioural Data

• Game play history including games played, bet amounts, win/loss outcomes, and session duration;
• Sports betting history including markets selected, odds accepted, and settlement outcomes;
• Bonus redemption history and wagering requirement progress;
• Responsible gaming settings including deposit limits, session reminders, and self-exclusion status.

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system version, and browser type;
• Mobile device identifier (for app users);
• Log data including login timestamps, session durations, and error reports.

4 How We Collect Your Data

777mm collects personal data through the following channels:

• Directly from you — when you complete the 777mm registration form, submit KYC documents, update your account profile, contact support, or submit a withdrawal request;
• Automatically — through cookies, server logs, and analytics tools when you access the Platform via browser or the 777mm mobile application;
• From payment processors — transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency network confirmations;
• From identity verification providers — where a third-party KYC service is used to assist in verifying your identity against CNIC records or facial recognition databases;
• From fraud prevention services — where device fingerprinting or behavioural analytics tools flag potentially suspicious activity for review.

5 Purpose and Legal Basis for Processing

The table below sets out the primary purposes for which 777mm processes your personal data and the legal basis relied upon for each processing activity.

6 Sharing Your Personal Data

777mm does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. However, 777mm may share your personal data with the following categories of recipients in connection with operating the Platform:

• Payment processors and mobile wallet providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard network operators, and USDT network infrastructure) — to process your deposits and withdrawals;
• Identity verification and KYC service providers — to assist with CNIC verification, age checks, and facial recognition matching during the account verification process;
• Game software providers (including Evolution, Pragmatic Play, PG Soft, Jili, and other certified providers) — who receive limited gameplay data necessary to deliver certified game experiences and verify game outcomes;
• Fraud prevention and cybersecurity services — that assist 777mm in identifying suspicious behaviour, unauthorised access attempts, or potential money laundering activity;
• Regulatory and law enforcement authorities — where 777mm is legally required to disclose personal data in response to a valid court order, subpoena, or regulatory instruction from a competent authority;
• Professional advisors — including legal counsel and auditors, subject to binding confidentiality obligations.

All third-party service providers with whom 777mm shares personal data are contractually obligated to process that data only for the specified purpose, to maintain appropriate security standards, and not to disclose it to further parties without 777mm's prior written authorisation.

7 International Data Transfers

Some of 777mm's service providers — particularly game software providers and payment network processors — may operate servers or processing facilities outside Pakistan. Where personal data is transferred internationally, 777mm ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable under 777mm's licensing jurisdiction.

These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on service providers who maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II.

8 Data Retention

777mm retains personal data only for as long as is necessary for the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data — retained for the duration of your active 777mm account relationship;
• Transaction and financial records — retained for a minimum of five (5) years following the relevant transaction date, as required for AML compliance and financial audit purposes;
• KYC and identity verification records — retained for a minimum of five (5) years following account closure, or longer where required by regulatory instruction;
• Gaming history and account activity logs — retained for three (3) years following the date of the relevant activity, subject to ongoing dispute resolution requirements;
• Marketing communication preferences — retained until you withdraw consent or close your account, whichever is earlier.

Upon the expiry of the applicable retention period, personal data will be securely deleted, anonymised, or pseudonymised in accordance with 777mm's internal data lifecycle procedures. Anonymised or aggregated data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical or analytical purposes.

9 Cookies and Tracking Technologies

777mm uses cookies and similar tracking technologies on the Platform website and, where technically applicable, within the 777mm mobile application. Cookies are small text files stored on your device that enable the Platform to recognise your device across sessions and improve your experience.

9.1 Types of Cookies Used

• Strictly necessary cookies — required for the Platform to function, including maintaining your login session, processing deposits, and displaying the correct game lobby. These cannot be disabled without preventing core functionality;
• Analytics cookies — used to understand how players interact with the Platform (pages visited, session duration, game preferences) in aggregated, anonymised form to improve the 777mm user experience;
• Security cookies — used to detect and prevent fraudulent login attempts, session hijacking, and other security threats;
• Preference cookies — used to remember your display preferences, language settings, and responsible gaming configurations between sessions.

You can manage or disable non-essential cookies through your browser settings or the cookie preference controls available on the Platform. Note that disabling strictly necessary cookies will prevent you from logging in or using real-money features of the 777mm Platform.

10 Security Measures

777mm implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 777mm servers;
• AES-256 encryption for sensitive data stored at rest, including financial records and KYC documents;
• Bcrypt password hashing — your 777mm login password is never stored in plain text;
• Two-factor authentication (OTP) for new device logins and withdrawal requests above defined thresholds;
• Role-based access controls ensuring that 777mm internal staff can only access personal data relevant to their specific job function;
• Regular security audits and penetration testing conducted by independent security professionals;
• Intrusion detection systems that monitor for anomalous activity and trigger alerts for review.

While 777mm takes all reasonable precautions to protect your personal data, no system can guarantee absolute security. If you suspect that your 777mm account has been compromised, please contact support immediately via live chat so that access can be secured and an investigation initiated.

11 Your Data Subject Rights

Subject to applicable data protection legislation and regulatory restrictions, you have the following rights in respect of your personal data held by 777mm:

To exercise any of the rights listed above, please contact 777mm's data protection contact by emailing [email protected] with the subject line "Data Subject Request" and a clear description of the right you wish to exercise. We may require identity verification before processing your request. We will respond within 30 calendar days.

12 Children's Privacy – 21+ Only

The 777mm Platform is strictly intended for adults aged 21 years and older. 777mm does not knowingly collect personal data from individuals under the age of 21. If 777mm discovers or is notified that personal data has been collected from a person under 21, that data will be deleted and the associated account closed immediately.

Parents and guardians who believe their minor child may have registered a 777mm account or provided personal data to 777mm should contact support immediately at [email protected]. 777mm will investigate and take all necessary action, including account closure and data deletion, promptly upon receiving a verified report.

13 Marketing Communications

777mm may send you promotional communications — including bonus offers, new game announcements, PSL cricket betting promotions, and platform updates — via SMS to your registered Pakistani mobile number or via the in-app notification system.

Where consent is the legal basis for marketing communications, you may withdraw that consent at any time by updating your notification preferences in your 777mm account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of marketing communications sent prior to that withdrawal.

Withdrawal of marketing consent does not affect 777mm's ability to send you transactional and service communications (such as deposit confirmations, withdrawal notifications, OTP codes, or responsible gaming alerts), which are sent on the basis of contract performance rather than consent.

14 Third-Party Platform Links

The 777mm Platform may contain references to third-party services including game providers' demonstration content and payment processor interfaces. These third-party interfaces are governed by their own privacy policies, which 777mm does not control. 777mm is not responsible for the privacy practices of third-party services accessed through or in connection with the Platform.

Players are advised to review the privacy policies of any third-party services with which they interact in connection with using 777mm, particularly payment providers such as JazzCash and EasyPaisa, whose data practices are governed by their own published policies.

15 Updates to This Privacy Policy

777mm reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data protection law, regulatory requirements, or our data processing practices. Where material changes are made to this Policy, 777mm will notify registered players via SMS to their registered Pakistani mobile number or via in-app notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will reflect the most recent revision. Your continued use of the 777mm Platform following the effective date of any updated Privacy Policy will constitute your acceptance of the changes. If you do not agree to the updated Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

16 Contact Us – Data Protection Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, have a concern about how 777mm processes your personal data, or wish to make a formal data protection complaint, please contact us using the details below.

If you are not satisfied with 777mm's response to a data protection complaint, you may have the right to escalate your complaint to the relevant supervisory authority or regulatory body applicable under 777mm's licensing jurisdiction.