Privacy Policy — 777cbc Online Gaming Platform

01 Introduction

777cbc ("the Platform", "we", "us", "our") is committed to protecting the privacy of every individual who accesses or uses the services available at 777cbc.cam. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure and protection of personal data relating to registered Players and visitors to the Platform.

This Policy applies to all services operated by 777cbc, including the casino games lobby, sportsbook, live dealer tables, cashier, promotional campaigns and customer support channels. By registering an Account or continuing to use the Platform, you acknowledge that you have read, understood and agreed to this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

02 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, account number, location data, or online identifier.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means 777cbc as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of 777cbc under a contractual data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process through which we verify a Player's identity before enabling withdrawals or as otherwise required.
• "Player" or "User" means any individual who has registered an Account on the Platform or who accesses the Platform as a visitor.
• "Sensitive Data" means a special category of Personal Data that warrants heightened protection, including data revealing racial or ethnic origin, health information, biometric data used for identification, or financial details beyond standard transaction records.

03 Data We Collect

777cbc collects Personal Data through several channels and at different stages of your relationship with the Platform. The categories of data we collect are as follows:

3.1 Registration Data

When you create an Account, we collect your full legal name, date of birth, country and city of residence, email address, username and the password hash associated with your Account. This information is mandatory — without it, an Account cannot be created.

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, we may request copies of government-issued identification documents (such as a CNIC or passport), proof of address documents (such as a utility bill or bank statement issued within the last three months), and evidence of payment method ownership. These documents are processed securely and retained only as long as legally required.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals and bonus transactions associated with your Account, including the payment method type used, transaction amounts in the applicable currency (which may be referenced in PKR for Pakistani users), transaction timestamps and any associated reference numbers. We do not store full card numbers or mobile wallet PINs — such details are handled directly by our payment processor partners.

3.4 Gameplay & Activity Data

We record your gameplay history, including game types played, bet amounts, session durations, win/loss outcomes and any sports betting selections. This data is used to operate the Platform, detect problem gambling patterns and comply with responsible gambling obligations.

3.5 Technical & Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, referring URLs and session duration data. This information helps us maintain Platform security and improve the user experience.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of messages and any attachments shared, for quality assurance, dispute resolution and regulatory purposes.

04 Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing Personal Data, 777cbc relies on the following grounds:

05 How We Use Your Data

777cbc uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain and administer your Account, including processing login sessions, Account preferences and security settings.
• Transaction Processing: To facilitate deposits and withdrawals via the payment methods available in our cashier. Payment references familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as context only and do not imply those providers endorse or are affiliated with gambling activities.
• Identity Verification: To verify your age and identity in accordance with applicable KYC obligations, ensuring that only eligible players aged 18 or above (or the higher minimum required by the operator's license jurisdiction) access the Platform.
• Fraud & Security: To detect, investigate and prevent fraudulent activity, money laundering, multi-accounting and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: To monitor gameplay patterns that may indicate problem gambling behaviour and to enforce any deposit limits, loss limits, time restrictions or self-exclusion requests applied to your Account.
• Customer Support: To respond to your enquiries, resolve disputes and provide assistance through our live chat and email support channels in English and, where requested, Urdu.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues and improve the features, performance and content of the Platform.
• Marketing Communications: Where you have opted in to receive promotional messages, to send you relevant bonus offers, tournament announcements and platform news. You may withdraw this consent at any time via your Account settings or by contacting support.

06 Data Sharing & Disclosure

777cbc may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual safeguards:

• KYC & Identity Verification Providers: Third-party services that assist in verifying the authenticity of identity documents and screening against sanctions or PEP (politically exposed persons) databases.
• Payment Processors: Entities that facilitate the processing of your financial transactions. These processors receive only the minimum data required to execute and verify transactions and are prohibited from using your data for any other purpose.
• Fraud Prevention & Security Services: Specialist providers that analyse transaction and behavioural data to identify patterns consistent with fraud, money laundering or bonus abuse.
• Game Content Providers: Software studios whose games are hosted on the Platform may receive anonymised gameplay data for regulatory auditing purposes. They do not receive personally identifiable information beyond what is strictly required.
• Regulatory & Law Enforcement Authorities: Where required by a valid legal order, court order or applicable law, we may be obligated to disclose your Personal Data to relevant authorities. We will notify you of such disclosure where legally permitted to do so.
• Group Companies: Where 777cbc operates within a corporate group structure, certain data may be shared with affiliated entities for internal compliance, risk management and operational purposes, subject to equivalent data protection standards.

All third-party Data Processors are subject to written data processing agreements that impose obligations consistent with applicable data protection law and restrict processing to the agreed purpose only.

07 Data Retention

777cbc retains Personal Data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account's active status and for a minimum period of five (5) years following Account closure, to meet anti-money laundering and regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the most recent transaction associated with your Account, consistent with standard AML record-keeping obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Customer support records are retained for three (3) years from the date of the last communication in a support ticket.
• Marketing Data: Where you have opted in to marketing communications, your contact preferences are retained until you withdraw consent. Following withdrawal, only a record of the opt-out is maintained.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and diagnostic purposes.

When Personal Data is no longer required for any retention purpose, it is securely deleted or anonymised in a manner that ensures it cannot be reconstructed.

08 Data Security

777cbc implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration or destruction. These measures include:

• Encryption in Transit: All communications between your browser or device and the Platform are encrypted using Transport Layer Security (TLS) protocols to prevent interception.
• Encryption at Rest: Sensitive data stored on our servers is encrypted using AES-256 encryption standards.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis using role-based access control (RBAC). Access logs are maintained and reviewed regularly.
• Password Security: User passwords are stored as salted cryptographic hashes. Plaintext passwords are never stored or transmitted internally.
• Security Audits: We conduct regular internal and third-party security assessments to identify and remediate vulnerabilities in our systems and processes.
• Incident Response: We maintain a data breach response protocol. In the event of a breach that poses a material risk to your rights, we will notify affected users and relevant authorities in accordance with applicable law.

09 Cookies & Tracking Technologies

777cbc uses cookies and similar tracking technologies to operate the Platform effectively and to understand how it is used. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences and, where applicable, responsible gambling tool configurations you have set.
• Analytical Cookies: Used to collect anonymised or pseudonymised data about how visitors use the Platform — pages visited, session lengths, error rates — to help us improve performance and content.
• Marketing Cookies: Used to identify returning visitors and, where consent has been given, to associate visits with promotional campaigns. These are only activated where you have consented to marketing communications.

You can manage your cookie preferences at any time via the cookie settings panel available on the Platform. Withdrawing consent for non-essential cookies will not affect the core functionality required to operate your Account.

Note that some third-party game content embedded within the Platform may set their own cookies, governed by those providers' individual privacy policies. 777cbc does not control those cookies directly.

10 International Data Transfers

As an online platform serving users across multiple regions, including Pakistani users in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, 777cbc may transfer your Personal Data to servers or third-party processors located in jurisdictions outside your country of residence.

Where such transfers occur, we take reasonable steps to ensure that your data receives a level of protection consistent with applicable data protection standards, including through the use of contractual safeguards such as standard contractual clauses or equivalent transfer mechanisms recognised in the relevant jurisdiction.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries other than Pakistan, which may have data protection laws that differ from those in your home jurisdiction.

11 Your Rights

Subject to applicable law and any overriding legal retention obligations, you have the following rights with respect to your Personal Data held by 777cbc:

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data associated with your Account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (such as AML record-keeping requirements, which may preclude immediate erasure).
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data where that processing is based on legitimate interests, including profiling for direct marketing purposes. Upon receipt of a valid objection, we will cease that processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team using the contact details in Section 15 of this Policy. We will respond to valid requests within thirty (30) days, though complex requests may require an extension of up to a further sixty (60) days, of which we will notify you.

12 Minors

The 777cbc Platform is strictly for adults. We do not knowingly collect or process Personal Data belonging to individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction, whichever is greater.

Age verification is a mandatory step in our KYC process. If we become aware that Personal Data has been submitted by an underage individual, we will immediately suspend the associated Account, delete the data as soon as legally permissible, return any deposited funds and, where required, report the matter to relevant authorities.

If you believe a minor has registered on the Platform or provided us with Personal Data, please contact us immediately at the address in Section 15 so that we can take prompt corrective action.

13 Third-Party Links

The 777cbc Platform does not contain links to external third-party websites as a matter of policy. However, game content embedded from third-party software providers may include in-game references or assets hosted on provider infrastructure. 777cbc is not responsible for the privacy practices of third-party game studios or payment processors once your interaction moves outside the direct control of the Platform.

We recommend reviewing the privacy policies of any third-party service you interact with in connection with your use of the Platform, particularly the payment processors you select in the cashier.

14 Policy Amendments

777cbc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements or applicable law. Where changes are material, we will provide reasonable advance notice via a notification on the Platform or by email to your registered address before the changes take effect.

The "Last Reviewed" date displayed at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed of how we handle your Personal Data. If you do not accept an amended Policy, you must cease using the Platform and request Account closure before the amendment takes effect.

15 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your Personal Data, please contact the 777cbc privacy team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform interface
• Support Languages: English (all times); Urdu available on request

When submitting a data rights request, please include your registered Account username or email address and clearly describe the nature of your request so we can route it to the appropriate team member promptly. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.