Privacy Policy — 777ta Online Casino

777ta (referred to in this Policy as "we", "us", "our", or the "Operator") operates the online casino and sports betting platform accessible at 777ta.app (the "Platform"). 777ta is the data controller in respect of all personal data collected through the Platform, meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all visitors, registered players, and former players of the 777ta Platform, wherever they are located. It governs the collection, use, storage, disclosure, and deletion of personal data obtained through your use of the Platform, including through account registration, deposits, withdrawals, gameplay, customer support interactions, and marketing communications.

By registering an account on 777ta or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the Platform and should contact our support team to close your account.

777ta collects personal data in several ways: directly from you when you register, deposit, or contact support; automatically when you use the Platform; and, in limited circumstances, from third parties such as identity verification providers and payment processors. The categories of personal data we collect are described below.

We do not intentionally collect any special categories of sensitive personal data (such as health information, biometric data beyond liveness checks for KYC, or political opinions) except where strictly required by applicable law or regulatory obligation.

777ta uses your personal data exclusively for the following documented purposes. We do not use your data for any purpose that is incompatible with those listed below:

• Account Registration & Management: To create and maintain your 777ta player account, verify your identity, manage your profile settings, and ensure only one account exists per player across Karachi, Lahore, Islamabad, Faisalabad, and all other locations in Pakistan.
• Transaction Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; to maintain accurate financial records; and to detect and prevent fraudulent transactions.
• Regulatory Compliance: To meet our obligations under the terms of the 777ta international gaming licence, including know-your-customer (KYC) checks, anti-money laundering (AML) monitoring, and the reporting of suspicious activity where required by law.
• Platform Operation & Security: To deliver game content, process bets, settle sports betting markets (including PSL and international cricket fixtures), prevent cheating and bot activity, and maintain the technical integrity of the Platform.
• Customer Support: To respond to your queries, complaints, and dispute submissions; to provide responsible gaming assistance including self-exclusion processing; and to train our support team using anonymised interaction records.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour; to enforce deposit limits, cooling-off periods, and self-exclusion instructions; and to contact you proactively where our monitoring systems flag a concern.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent or where a legitimate interest applies and you have not opted out. See Section 12 for full details.
• Analytics & Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving game selection, platform performance, and the overall player experience.

For each category of processing activity described in Section 3, 777ta relies on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our contract with you (the Terms and Conditions) — including account management, transaction processing, and platform delivery.
• Legal Obligation: Processing required to comply with applicable laws and our licensing authority's requirements — including KYC, AML monitoring, and mandatory reporting obligations.
• Legitimate Interests: Processing carried out for our legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, and aggregated analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

777ta does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service provider involved in processing your deposits or withdrawals. These providers receive only the financial data necessary to execute your transaction.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and screen your CNIC details against sanctions and politically-exposed-persons (PEP) databases.
• Game Content Suppliers: Where game providers require player session data to deliver live dealer tables, slot content, or sports betting markets, anonymised session tokens are shared. Game providers do not receive your full identity data.
• IT Infrastructure & Cloud Providers: Hosting, database, and security service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
• Regulatory & Law Enforcement Authorities: Where required by our licensing authority, a court order, or applicable law, 777ta will disclose personal data to relevant authorities. Where legally permitted, we will notify you of such disclosure.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by 777ta, subject to professional confidentiality obligations.

All third parties with whom 777ta shares personal data are contractually required to implement appropriate technical and organisational security measures and to process your data solely for the purposes specified by 777ta.

The 777ta Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, detect fraudulent access attempts, and analyse how players navigate the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies manage your login session, maintain your account security token, and ensure the correct game content is delivered to your device. These cookies cannot be disabled.
• Functional Cookies: Store your preferences, such as your preferred language, responsible gaming settings, and last-visited game category, so you do not need to reconfigure these settings on every visit.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players use the Platform — including which games are most popular, average session lengths, and navigation paths. This data is used exclusively for platform improvement.
• Security Cookies: Detect and prevent automated bot access, credential stuffing attacks, and other security threats. These cookies are a component of our fraud prevention infrastructure.

You may control non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the 777ta Platform. For the avoidance of doubt, 777ta does not use third-party advertising cookies or behavioural tracking cookies that profile you for external advertising purposes.

777ta retains personal data for the periods set out in the table below. At the end of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Where a legal dispute or regulatory investigation is ongoing, 777ta may retain relevant data beyond the standard periods set out above until the matter is fully resolved.

777ta implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Transport Security: All data in transit between your device and the 777ta platform is encrypted using TLS 1.3. Connections using older, less secure protocol versions are rejected at the server level.
• Data Encryption at Rest: Sensitive personal data — including CNIC copies, financial records, and account credentials — is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access Controls: Access to personal data is restricted to authorised 777ta personnel and contractors on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Two-Factor Authentication: All internal systems containing player personal data require multi-factor authentication for staff access. Players are strongly encouraged to activate 2FA on their own accounts via the account security settings.
• Penetration Testing: The 777ta platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 777ta will notify affected players and, where required, the relevant regulatory authority within 72 hours of becoming aware of the breach.

While 777ta implements industry-leading security practices, no transmission over the internet or electronic storage system is completely immune to risk. You are responsible for maintaining the security of your own device and account credentials.

As a 777ta player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the details in Section 14. All valid requests will be acknowledged within 5 business days and resolved within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data 777ta holds about you, together with information about how it is being used. We will provide this in a structured, commonly used, machine-readable format upon request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. Some data — such as your registered name and CNIC number — can only be corrected upon submission of supporting documentary evidence.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Note that this right does not apply where retention is required by our licensing obligations (see Section 7).
• Right to Restriction: You have the right to request that we restrict processing of your data — for example, while we investigate the accuracy of data you have contested.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we transfer your personal data to you or to another service provider in a structured electronic format.
• Right to Object: You have the right to object to processing based on legitimate interests at any time, giving reasons specific to your situation. You also have an absolute right to object to processing for direct marketing purposes, which will be actioned immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for marketing can be effected via the unsubscribe link in any marketing email or via your account settings.

The 777ta Platform is strictly intended for adults aged 21 years or older. 777ta does not knowingly collect or process personal data from individuals below this age threshold. The 21+ age requirement is enforced through mandatory age verification during account registration and at the KYC stage.

If 777ta becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be securely deleted, and any funds deposited will be refunded to the originating payment method. Parents and guardians who believe that a minor in their care may have registered an account on 777ta are urged to contact our support team immediately via [email protected].

As an internationally licensed gaming operator, 777ta may transfer your personal data to countries outside Pakistan for processing by our technology infrastructure providers, game content suppliers, and compliance service providers. Such transfers occur only where adequate safeguards are in place, including:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into our agreements with all data processors located outside Pakistan.
• Binding corporate rules where data is transferred within the 777ta group of companies.
• Adequacy decisions where the destination country is deemed to provide an equivalent level of data protection.

You may request further information about the specific safeguards applicable to international transfers of your personal data by contacting our support team as described in Section 14.

777ta may send you promotional communications — including bonus offers, free spin alerts, PSL betting promotions, and platform updates — by email or SMS, subject to the following conditions:

• Where you have provided explicit opt-in consent during registration or subsequently via your account settings, we will send you personalised promotional offers tailored to your game preferences and betting history.
• Where you have not opted in, 777ta will only send you transactional communications directly related to your account — such as deposit confirmations, withdrawal notifications, and security alerts.
• You may update your marketing preferences at any time via the Communications section of your account settings, or by clicking the unsubscribe link in any promotional email. Opt-out requests are processed within 5 business days.

777ta does not share your contact details with third-party marketers. All promotional communications you receive from 777ta are sent directly by the Operator or its authorised messaging service providers acting on our instructions.

777ta reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. When material changes are made, we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending an email to your registered address at least 7 days before the changes take effect.

The "Effective Date" at the top of this Policy reflects the date on which the current version came into force. We encourage you to review this Policy periodically to remain informed about how 777ta protects your personal data. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated version.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 777ta processes your personal data, please contact us using the details below. We take all privacy-related enquiries seriously and will respond within the timeframes specified in Section 9.

• Support Email: [email protected] — for general privacy enquiries and data rights requests.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 777ta Platform.
• Support Hours: Monday to Sunday, 24 hours (Pakistan Standard Time — PST).

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the data protection supervisory authority associated with 777ta's international gaming licence jurisdiction. Details of the relevant supervisory authority are available upon request from our support team.