777gx Privacy Policy

777gx ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the 777gx platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This policy covers all 777gx services, including but not limited to the website accessible at 777gx.org, any associated mobile-optimised web experience, customer support communications, and all transactional interactions related to your 777gx membership account.

777gx operates under an internationally recognised gaming licence and is required to comply with applicable data protection obligations under the terms of that licence. This Privacy Policy reflects those obligations as well as our own internal commitment to responsible data stewardship. We encourage all members — particularly those accessing 777gx from Karachi, Lahore, Islamabad, Faisalabad, and other major Pakistani cities — to read this policy carefully before using the platform.

Where this policy refers to "personal data", we mean any information that identifies you or could reasonably be used to identify you, either alone or in combination with other information we hold. This includes your name, contact details, payment information, device identifiers, and records of your activity on the platform.

777gx collects personal data in several ways — directly from you when you register or interact with the platform, automatically through your use of the platform, and occasionally from trusted third-party sources as part of our verification obligations. The specific categories of data we collect are outlined below.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number submitted when you open your 777gx account;
• Identity verification (KYC) documents: Copies of your National Identity Card (CNIC), passport, or driving licence, and proof of address documents submitted to satisfy our Know Your Customer obligations;
• Payment information: Details of your JazzCash account, EasyPaisa wallet, HBL, UBL, or Meezan Bank account used for deposits and withdrawals. Note that 777gx does not store full card numbers; payment processing is handled by PCI-DSS compliant payment processors;
• Communications: Records of your interactions with our customer support team, including live chat transcripts, emails, and any attachments you submit;
• Responsible gaming settings: Deposit limits, loss limits, session reminders, and self-exclusion requests you configure within your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information;
• Usage data: Pages visited on the 777gx platform, games played, bets placed, session duration, click paths, and search queries within the platform;
• Transaction data: Records of all deposits, withdrawals, bonus activations, bets, wagers, and game plays associated with your account;
• Location data: General geographic location inferred from your IP address for compliance and fraud prevention purposes. 777gx does not collect precise GPS location data.

2.3 Data from Third Parties

• Identity verification and age-check results from third-party KYC service providers;
• Fraud risk signals from payment processors and financial intelligence partners;
• Publicly available information used to supplement identity verification records where permitted under applicable law.

777gx uses the personal data we collect for the specific purposes described in this section. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent or identifying a fresh legal basis for the new use.

777gx processes personal data only where a valid legal basis exists for doing so. The primary legal bases we rely on are described below:

• Contract Performance: Much of our data processing is necessary to deliver the 777gx gaming and betting service to you under the terms of the member agreement you enter into when registering an account. Without this processing, we could not provide the service;
• Legal Obligation: As a licensed gaming operator, 777gx is subject to mandatory data processing requirements relating to identity verification, anti-money laundering, responsible gaming, and regulatory reporting. These obligations cannot be waived or opted out of;
• Legitimate Interest: We process certain data — such as usage analytics, fraud signals, and security logs — on the basis that we have a legitimate interest in operating a secure, well-functioning platform. We conduct a balancing test to ensure this processing does not override your privacy rights;
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time with immediate effect.

777gx may share your personal data with the following categories of third parties in the circumstances described:

• KYC and Identity Verification Providers: To fulfil our age verification and anti-money laundering obligations, we share identity documents and registration data with licensed third-party KYC service providers operating under equivalent data protection standards;
• Payment Processors: Transaction data and payment account references are shared with PCI-DSS compliant payment processors — including providers operating JazzCash, EasyPaisa, and banking integrations — solely to facilitate the processing of your deposits and withdrawals;
• Fraud and Risk Management Services: Device data and transaction patterns may be shared with fraud detection partners to identify and prevent financial crime, bonus abuse, and unauthorised account access;
• Regulatory and Law Enforcement Authorities: Where required by our gaming licence conditions or by applicable law, we may disclose member data to regulatory authorities, financial intelligence units, or law enforcement agencies. We will notify you of any such disclosure where legally permitted to do so;
• Technology and Infrastructure Partners: Our platform infrastructure is hosted and maintained by third-party cloud and technology providers. These parties process personal data only as data processors acting under our documented instructions and are contractually bound to maintain appropriate security standards;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 777gx's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance and provided with the opportunity to close your account if you do not wish your data to be transferred.

777gx uses cookies and similar tracking technologies to operate the platform, improve your experience, and fulfil our security and compliance obligations. A cookie is a small text file placed on your device when you access the 777gx platform. Cookies do not contain executable code and cannot access other data on your device.

We use the following categories of cookies on the 777gx platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be switched off. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No consent is required for these cookies as they are operationally essential;
• Functional Cookies: These cookies remember your preferences — such as your language settings, preferred payment method, and responsible gaming configurations — to provide a more personalised experience across sessions;
• Analytics Cookies: With your consent, we use analytics cookies to understand how members navigate the 777gx platform. This data is aggregated and anonymised and is used solely to improve platform design and performance;
• Marketing Cookies: With your explicit consent, we may use marketing cookies to deliver relevant promotional communications on the 777gx platform. These are never used to track you across unaffiliated third-party websites.

You can manage your cookie preferences at any time through the cookie settings panel accessible in the footer of the 777gx platform. You may also control cookies through your browser settings, though disabling strictly necessary cookies will affect the functionality of the platform.

777gx retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence conditions. The retention periods applicable to different categories of data are summarised below:

• Account and identity data: Retained for the duration of your active membership plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: All deposit, withdrawal, and betting records are retained for a minimum of five (5) years following the date of the transaction, as required under our licence conditions;
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the most recent KYC review, whichever is later;
• Customer support communications: Support chat and email records are retained for three (3) years following the date of the last interaction, unless a longer retention period is required in connection with a formal dispute;
• Marketing data: Where you have consented to marketing communications, your contact preferences are retained until you withdraw consent. Following withdrawal of consent, your data is removed from active marketing lists within 30 days;
• Analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymisation is complete.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with our internal data destruction policy.

The technical and organisational security measures we maintain include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and 777gx platform servers;
• AES-256 encryption for sensitive data at rest, including identity documents and payment references stored in our systems;
• Multi-factor authentication requirements for all internal 777gx staff accessing member data systems;
• Role-based access controls ensuring that each team member can access only the data necessary for their specific operational function;
• Continuous security monitoring with automated alerting for anomalous access patterns or data exfiltration attempts;
• Regular independent penetration testing and vulnerability assessments conducted by third-party security specialists;
• A formal incident response plan covering detection, containment, notification, and remediation of any data security incident.

In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, 777gx will notify affected members without undue delay, and in accordance with applicable notification obligations under our licence conditions. The notification will describe the nature of the incident, the data affected, the likely consequences, and the measures we have taken or propose to take in response.

While we maintain robust security measures, no internet-connected platform can guarantee absolute security. You are responsible for maintaining the security of your own 777gx login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As a 777gx member, you have the following rights in respect of your personal data. These rights are available to all members regardless of their location in Pakistan or internationally. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request".