777ab Privacy Policy – How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected, processed and stored by 777ab in connection with the operation of the gaming and sports betting platform available at https://777ab.im. It covers data collected through the website, any associated mobile interfaces, customer support interactions and any other means by which you provide information to 777ab.

777ab takes the privacy of its players seriously. Pakistani players have the right to know exactly what happens to their personal information — who sees it, how it is stored and for how long. We have written this policy to be clear and honest rather than to hide obligations in complex legal language. If anything in this policy is unclear to you, please get in touch with our support team who will explain it in straightforward terms.

This policy should be read alongside our Terms and Conditions which govern your use of the 777ab platform overall, and our Responsible Gaming policy which includes additional information about how we process data in connection with player protection obligations.

777ab collects personal data in several ways — directly from you when you register or use the platform, automatically when you browse and play, and occasionally from third-party verification partners. Here is a full breakdown of the categories of data we collect and the source of each.

We do not collect sensitive personal data such as health information, biometric data, religious beliefs or political opinions. The one exception is where you voluntarily disclose health information in the context of a responsible gaming interaction — for example, informing support of a gambling problem — in which case the information is used solely to provide appropriate support and is handled with the highest level of confidentiality.

Every piece of data 777ab holds about you serves a specific, documented purpose. We do not collect data speculatively or for undefined future uses. The primary purposes for which your personal data is used at 777ab are as follows:

• Account management: Creating and maintaining your 777ab account, verifying your identity and age, managing your login credentials and keeping your account details current;
• Transaction processing: Processing deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment methods; reconciling your account balance accurately;
• Platform operation: Delivering the games, sports betting markets and live dealer services that make up the 777ab platform; maintaining the technical infrastructure;
• Fraud prevention and security: Monitoring transactions and account activity for signs of fraud, money laundering, identity theft, account compromise or prohibited conduct as defined in our Terms and Conditions;
• Responsible gaming: Monitoring your account for patterns consistent with problem gambling; applying limits, cooling-off periods or exclusions you have set; providing intervention where our monitoring systems identify at-risk behaviour;
• Customer support: Responding to your queries, resolving disputes, processing complaints and providing account assistance;
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money laundering requirements, identity verification standards and other regulatory obligations;
• Platform improvement: Analysing aggregated, anonymised usage data to understand how the platform is used and to identify areas for improvement;
• Marketing communications: Sending you promotional offers, bonus notifications and product updates — only where you have opted in or where we have a legitimate interest basis as described in Section 4.

777ab processes personal data only where a lawful basis exists for doing so. The applicable lawful bases are:

• Contract performance: Most of the data processing 777ab carries out is necessary to perform our contract with you — i.e., to operate your account, process your bets and pay out your winnings. Without this processing, we cannot provide the service.
• Legal obligation: Certain processing is required by law — identity verification for anti-money laundering purposes, record-keeping for financial compliance, cooperation with investigations by competent authorities. We cannot opt out of these obligations.
• Legitimate interests: Some processing is carried out on the basis of 777ab's legitimate interests where those interests are not overridden by your rights — for example, fraud detection, platform security monitoring, and sending you information about relevant promotions where you are an active player.
• Consent: Where we rely on your consent — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting any prior processing.

For responsible gaming monitoring, processing is necessary both for contract performance (it is part of our platform's core obligations) and to comply with our legitimate interest in protecting players from harm. This is not optional processing — it is fundamental to how 777ab operates as a responsible gaming platform.

777ab does not sell, rent or trade your personal data to third parties for their own commercial or marketing purposes. This is an absolute commitment and does not have exceptions. The circumstances in which your data may be shared with third parties are limited to the following:

• Payment processors: Your payment data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing networks and card payment providers solely to process your deposit and withdrawal transactions. These providers are contractually required to handle your data securely and use it only for the purpose of processing 777ab transactions.
• Identity verification providers: To fulfil our age and identity verification obligations, data may be shared with KYC (Know Your Customer) verification service providers. These providers verify identity documents against authoritative sources and confirm results to 777ab. Your documents are handled under strict confidentiality.
• Game providers: Casino game providers receive certain account session data (player ID, session token, bet history for the current session) to deliver their games. They do not receive your name, CNIC or payment details unless specifically required for a licensed game that requires it, in which case this will be disclosed to you at the time.
• Regulatory and law enforcement: Where required by a competent authority — court order, regulatory investigation, anti-money laundering inquiry — 777ab will disclose data as legally required. We will notify you of any such disclosure where we are legally permitted to do so.
• IT and platform infrastructure: Cloud hosting, cybersecurity and platform operations providers who process data on 777ab's behalf under strict data processing agreements that prohibit them from using your data for their own purposes.

All third parties who process data on behalf of 777ab are assessed for data security standards before engagement and are contractually bound to process data only as instructed and to maintain appropriate security measures.

777ab uses cookies and similar tracking technologies to operate the platform correctly, keep your session active and understand how the platform is used in aggregate. The cookies used by 777ab fall into three categories:

777ab does not use third-party advertising cookies or tracking pixels that share your data with external advertising networks. You will not find your browsing on 777ab following you around other websites in the form of targeted ads — we consider that kind of tracking to be intrusive and it has no place on our platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the platform from functioning correctly. Disabling functional and analytics cookies will not prevent you from using 777ab but may affect some personalisation features.

777ab retains personal data only for as long as necessary for the purposes described in this policy and to meet our legal and regulatory obligations. The retention periods that apply to different categories of data are as follows:

• Active account data: Retained for the duration of your account's active status and for a period after account closure to comply with anti-money laundering record-keeping requirements and to resolve any outstanding disputes;
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction to meet financial compliance and anti-money laundering record-keeping obligations;
• Identity verification documents: Retained for the period required by applicable KYC and anti-money laundering regulations, which is typically five years from the end of the customer relationship;
• Responsible gaming records: Self-exclusion records and responsible gaming intervention records are retained for the duration of the exclusion plus a period thereafter, to ensure exclusions are respected if a player attempts to re-register;
• Support communications: Retained for three years from the date of the interaction to allow reference in case of future disputes;
• Analytics data: Anonymised and aggregated analytics data does not contain personal identifiers and may be retained indefinitely for platform improvement purposes.

When data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised. 777ab conducts regular data retention reviews to ensure we are not holding data beyond its necessary retention period.

Protecting your personal data is a core operational priority at 777ab — not an afterthought. We implement layered technical and organisational security measures appropriate to the sensitivity of the data we hold and the risks present in operating an online financial platform.

• Encryption: All data transmitted between your device and the 777ab platform is encrypted using TLS (Transport Layer Security). All sensitive data stored on our systems — including identity documents, financial data and authentication credentials — is encrypted at rest.
• Access control: Access to personal data is restricted on a strict need-to-know basis. Staff who do not require access to your personal data as part of their role do not have it. Access controls are reviewed regularly and revoked immediately when a staff member's role changes or they leave the organisation.
• Account security: Player accounts are protected by password authentication. We strongly recommend using a unique, complex password for your 777ab account that you do not use on any other platform. Two-factor authentication options are available in your account settings.
• Fraud monitoring: Automated systems monitor transactions and account activity continuously for patterns consistent with account compromise, fraudulent activity or identity theft. Suspicious activity triggers immediate review by the security team.
• Data breach response: In the event of a data breach that poses a risk to your rights and interests, 777ab will notify affected players promptly with information about what happened, what data was affected and what steps are being taken to mitigate harm.

No online platform can guarantee absolute security. If you become aware of any suspicious activity on your 777ab account, contact support immediately at support@777ab.im.

You have a set of rights with respect to your personal data held by 777ab. These rights apply subject to certain limitations — for example, we cannot delete data that we are legally required to retain. To exercise any of these rights, contact us at support@777ab.im with your full name and the account email address.

777ab may send you marketing communications — promotional offers, bonus notifications, new game announcements — by email and SMS. We will only contact you for marketing purposes where one of the following applies:

• You have actively opted in to receive marketing communications during registration or through your account settings;
• You are an active 777ab player and the communication relates to products or promotions similar to those you already use on the platform — in which case we may contact you under legitimate interests, provided you retain the right to opt out at any time.

Opting out: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email from 777ab. For SMS marketing, reply STOP to any marketing SMS. Opting out of marketing does not affect transactional communications such as account notifications, withdrawal confirmations and security alerts, which are sent regardless of marketing preferences as they relate to your account operation.

777ab will not pass your contact details to third parties for their own marketing purposes. The emails and SMS messages you receive that relate to 777ab come from 777ab — not from third-party data buyers who purchased your number from us.

777ab is strictly an adult platform. No person under the age of 18 is permitted to register or use the platform. We collect date of birth during registration and may require documentary age verification at any point.

If 777ab discovers that personal data has been collected from a person under the age of 18, the following steps will be taken:

• The account will be immediately suspended and then permanently closed;
• Any winnings will be forfeited in accordance with our Terms and Conditions;
• All personal data relating to the underage account will be reviewed to determine what deletion is appropriate consistent with our legal obligations;
• If there is evidence of deliberate misrepresentation of age, the matter may be referred to relevant authorities.

If you are a parent or guardian and believe a minor may have registered on 777ab, please contact us immediately at support@777ab.im with details. We will investigate and close the account promptly.

777ab may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements or platform features. When material changes are made to this policy — changes that affect how your data is used in a meaningful way — we will notify you by email to the address associated with your account at least 7 days before the changes take effect.

Minor clarifications, formatting corrections and updates that do not materially affect how your data is processed may be made without advance notice. The "Last updated" date at the top of this policy will always reflect the most recent version.

We encourage you to review this policy periodically. Continued use of the 777ab platform after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree with any change, you may close your account before the effective date.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact the 777ab team through the following channels:

• Email: support@777ab.im — mark your subject line "Privacy" to ensure prompt routing to the right team member;
• Live chat: Available 24/7 directly on the 777ab platform once you are logged in;
• Account settings: Many data preferences — marketing opt-outs, responsible gaming limits, account closure requests — can be managed directly in your account settings without needing to contact support.

We aim to respond to all privacy queries within 48 hours and to fulfil all data subject access requests within 30 days of identity verification. If you are not satisfied with our response to a privacy concern, you have the right to raise the matter as a formal complaint through our complaints process as described in the Terms and Conditions.