777cr Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, and transmitted by 777cr ("the Company", "we", "us", "our") in connection with the operation of the 777cr online casino and sports betting platform, accessible at 777cr.biz (the "Platform"). It governs data collected from registered users, visitors browsing without an account, and any individual who interacts with 777cr's customer support or promotional communications.

777cr is committed to handling personal data responsibly and in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. This Policy is intended to be transparent about our data practices so that Pakistani players can make fully informed decisions about their personal information before and during their use of the 777cr platform.

By registering an account, accessing the Platform, or by otherwise providing personal data to 777cr, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal data is 777cr, operating under its international gaming licence. As the data controller, 777cr determines the purposes for which and the means by which personal data is processed, and bears primary responsibility for ensuring that such processing complies with applicable data protection requirements imposed under the terms of its gaming licence and applicable international data protection standards.

Questions, requests, or complaints regarding the processing of your personal data by 777cr should be directed to the 777cr Data Protection contact at [email protected], clearly marked "Privacy / Data Request" in the subject line of your communication.

3 Information We Collect

3.1 Information You Provide Directly

When you register an account on the 777cr platform, make a deposit, place a bet, or contact our customer support team, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identity documents such as your Pakistani CNIC or passport submitted for KYC verification.
• Contact Data: Pakistani mobile number, email address, and residential address (including city, such as Karachi, Lahore, Islamabad, or Faisalabad, and postal code).
• Account Credentials: Username and hashed password (777cr never stores passwords in plain text).
• Financial Data: Details of the payment methods you use to deposit and withdraw funds, including JazzCash mobile wallet numbers, EasyPaisa account details, bank account numbers (HBL, UBL, Meezan Bank), cryptocurrency wallet addresses (USDT TRC20), or card details processed by our PCI-DSS compliant payment partners.
• Communications Data: The content of any messages, emails, live chat transcripts, or other communications you send to or receive from 777cr customer support.
• Verification Documents: Photographs, scans, or digital copies of identity documents, proof of address documents (utility bills, bank statements), or other materials submitted as part of the KYC process.

3.2 Information Collected Automatically

When you access and use the 777cr platform, certain technical and behavioural data is collected automatically by our systems, including:

• Technical Data: IP address, device type, device identifier, operating system version, browser type and version, screen resolution, and network connection type (Wi-Fi, 4G, Zong, Jazz, Ufone, etc.).
• Usage Data: Pages visited on the 777cr platform, features accessed, games played, time and duration of sessions, bet amounts, game outcomes, deposit and withdrawal transaction records, and navigation paths through the platform.
• Location Data: General geographic location derived from your IP address (country and approximate city level). 777cr does not collect precise GPS location data.
• Cookie and Tracking Data: Session identifiers and analytics data collected through cookies and similar technologies, as described in Section 8 of this Policy.

4 How We Use Your Data

777cr processes your personal data for the following specific purposes, each supported by a corresponding legal basis as described in Section 5:

777cr will not use your personal data for any purpose incompatible with the purposes listed above without obtaining your prior consent or unless otherwise required by law.

5 Legal Basis for Processing

777cr processes personal data under one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 777cr — for example, processing your deposit, settling your bets, or providing access to your account.
• Legal Obligation: Processing is required for 777cr to comply with applicable legal requirements, including anti-money laundering regulations, KYC obligations imposed by our gaming licence, tax reporting requirements, and regulatory mandates.
• Legitimate Interests: Processing is necessary for the legitimate interests of 777cr, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, responsible gaming oversight, and internal analytics to improve the platform experience for Pakistani users.
• Consent: Where processing is based on your consent — for example, receiving promotional emails or push notifications — you may withdraw that consent at any time by updating your communication preferences in your 777cr account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

6.1 When We Share Your Data

777cr does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data may be shared with third parties only in the following circumstances:

• Payment Processors: Financial data is shared with our payment processing partners (including mobile wallet operators, banks, and card processors) to the extent necessary to process your deposits and withdrawals. All payment partners are contractually bound to process your data securely and only for the purpose of completing your transaction.
• KYC and Fraud Prevention Providers: Identity and verification document data may be shared with licensed identity verification service providers engaged by 777cr to fulfil its KYC obligations under its gaming licence.
• Game Content Providers: Where technically necessary for the delivery of specific casino games, limited usage data (such as session identifiers and game history) may be shared with the third-party game studios and platform providers whose content is available on the 777cr platform.
• Regulatory and Law Enforcement Authorities: 777cr may be required by its licensing authority, relevant governmental bodies, or law enforcement agencies to disclose user data in connection with a regulatory investigation, court order, or statutory obligation. Such disclosures will be made with no advance notice to the user where legally required or where advance notice could prejudice a fraud or AML investigation.
• Professional Advisers: Personal data may be disclosed to legal counsel, auditors, accountants, or other professional advisers engaged by 777cr under conditions of strict professional confidentiality.
• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring involving 777cr, user data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected users will be notified of any such transfer in advance where practically possible.

7 Payment Data and Financial Security

777cr takes the security of financial data submitted by Pakistani players with the utmost seriousness. The following standards and protections apply to all payment-related data processed through the 777cr platform:

• All payment transaction data transmitted between your device and the 777cr platform is protected by 256-bit SSL/TLS encryption.
• Card payment data (Visa/Mastercard) is processed exclusively through PCI-DSS Level 1 certified payment gateways. 777cr does not store full card numbers, CVV codes, or card expiry dates on its own servers.
• JazzCash and EasyPaisa transaction details are processed through APIs maintained by the respective mobile financial service providers, subject to their own applicable security and data protection standards.
• USDT TRC20 cryptocurrency transactions are processed using wallet address data only. 777cr does not retain or transmit private cryptographic keys.
• Bank transfer details (HBL, UBL, Meezan Bank account numbers) are used solely for the purpose of processing the specific transaction for which they are provided and are not retained beyond the period necessary for that purpose, subject to legal record-keeping requirements.

Withdrawal requests are only processed to payment methods previously verified as belonging to the registered 777cr account holder. Third-party withdrawals are expressly prohibited as a financial security and AML compliance measure.

8 Cookies and Tracking Technologies

8.1 What Cookies 777cr Uses

The 777cr platform uses cookies and similar browser-based tracking technologies to provide a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a website. 777cr uses the following categories of cookies:

8.2 Managing Cookies

You may control cookie settings through your browser preferences. Most modern browsers allow you to refuse some or all cookies, delete existing cookies, or receive a warning before a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the 777cr platform, including your ability to log in and access your account. Analytics and marketing cookies can be disabled without affecting core platform functionality.

9 Data Retention

777cr retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations imposed under our international gaming licence. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered account's existence on the 777cr platform, plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of the last transaction on the account, or from the date of account closure, whichever is later.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable AML regulations and financial record-keeping obligations.
• Customer Support Communications: Retained for a period of three (3) years from the date of the communication, to support dispute resolution and service quality review purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, at which point your data will be removed from active marketing lists within 30 days.
• Cookie and Analytics Data: Aggregated anonymised analytics data may be retained indefinitely. Individual session-level data is retained for no longer than 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard methods such that it can no longer be attributed to you as an identifiable individual.

10 International Data Transfers

777cr's platform and data infrastructure involves the use of servers and service providers located in various jurisdictions. Accordingly, your personal data may be transferred to and processed in countries other than Pakistan. 777cr takes steps to ensure that such international transfers are carried out in a manner consistent with applicable data protection requirements, including:

• Ensuring that recipient service providers are contractually bound by data processing agreements that impose data protection obligations equivalent to those described in this Policy.
• Selecting service providers in jurisdictions that have been assessed as providing an adequate level of data protection, or implementing appropriate contractual safeguards where such adequacy has not been formally recognised.
• Limiting the categories of data transferred internationally to the minimum necessary for the specific processing purpose.

11 Your Rights Regarding Your Personal Data

As a registered user of the 777cr platform, you hold the following rights with respect to the personal data that 777cr holds about you. To exercise any of these rights, please contact 777cr at [email protected] with "Privacy Request" in the subject line. 777cr will respond to all verified requests within 30 calendar days.

12 Children and Minors

The 777cr platform is strictly intended for use by individuals who are 21 years of age or older. 777cr does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not access the 777cr platform, register an account, or provide any personal data to 777cr.

If you are a parent or guardian and believe that your child has registered or attempted to register on the 777cr platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 Security Measures

777cr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the 777cr platform is encrypted using 256-bit SSL/TLS, the same standard employed by Pakistan's major banking institutions.
• Password Hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms. 777cr staff cannot access your password in plain text — not even the technical team.
• Access Controls: Access to personal data within 777cr's internal systems is restricted to personnel who have a demonstrated need to access that data for the purpose of performing their job functions, on a principle of minimum necessary access.
• Two-Factor Authentication: SMS-based 2FA is available to all registered 777cr users and is strongly recommended to protect your account against unauthorised login attempts.
• Penetration Testing and Security Audits: The 777cr platform undergoes periodic security testing by independent third-party security specialists to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident affecting your personal data, 777cr will notify affected users and, where applicable, the relevant regulatory authority, in accordance with applicable data breach notification obligations.

While 777cr employs robust security measures, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own 777cr account credentials, as described in the Terms & Conditions.

14 Third-Party Links and Services

The 777cr platform may contain links or references to third-party websites, services, or resources — for example, links to game studio websites, payment provider portals, or responsible gaming assistance organisations. 777cr has no control over the privacy practices or content of such third-party sites and is not responsible for how they collect or use your personal data.

This Privacy Policy applies solely to the 777cr platform and the personal data collected and processed by 777cr. If you click on a link to a third-party site, we encourage you to review the privacy policy of that site before submitting any personal information. 777cr cannot be held responsible for the privacy practices of any third party whose site you access via a link on the 777cr platform.

15 Changes to This Privacy Policy

777cr reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on this page at 777cr.biz/privacy-policy, with the "Last Updated" date clearly displayed at the top of the page.

Where changes to this Policy are material — meaning they affect your rights or significantly change how your data is processed — 777cr will provide advance notice via the email address registered to your account before the changes take effect. Your continued use of the 777cr platform following notification of changes constitutes your acceptance of the revised Policy.

16 Contact and Complaints

16.1 Contacting 777cr About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 777cr processes your personal data, please contact the 777cr privacy team using the following details:

• Email: [email protected] — please include "Privacy Request" or "Data Protection Query" in the subject line to ensure your message is routed to the correct team.
• Live Chat: Available within the 777cr platform 24 hours a day, 7 days a week. Live chat agents can assist with general privacy queries and escalate formal data subject requests to the appropriate team.

777cr aims to acknowledge all privacy-related correspondence within 72 hours and to provide a substantive response or fulfil data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days with prior notification to you.

16.2 Complaints

If you are dissatisfied with how 777cr has handled your personal data or responded to a data subject request, you have the right to escalate your complaint to the independent data protection supervisory authority designated under the terms of 777cr's international gaming licence. Details of the relevant supervisory authority are available upon request from the 777cr support team.