777sf Privacy Policy

The 777sf platform, accessible at 777sf.app, is operated by 777sf (hereinafter referred to as "777sf," "we," "us," or "our"). 777sf is the data controller responsible for the personal information collected and processed in connection with your use of the platform, including account registration, deposits, withdrawals, gameplay, and customer support interactions.

777sf operates under international gaming license oversight and is committed to handling all personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

This Privacy Policy applies to all personal data collected through the 777sf website, mobile web experience, and any related communications channels including email and live chat support. It does not apply to third-party websites or services that may be linked from our platform — you should review the privacy policies of those third parties separately.

777sf collects personal data through several distinct channels during the course of providing its services. The categories of personal data we collect, and the specific data points within each category, are set out below.

2.1 Registration and Identity Data. When you open a 777sf account, we collect your full legal name as it appears on your CNIC or passport, your date of birth, your Pakistani mobile number, your email address, your city of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad), and your preferred username and password. This data is necessary to create and maintain your account and to verify your identity in accordance with our KYC obligations.

2.2 Financial and Payment Data. To facilitate deposits and withdrawals in Pakistani Rupees, we collect payment method details including your JazzCash or EasyPaisa mobile number, bank account details where bank transfer methods (HBL, UBL, Meezan Bank, Raast, 1LINK) are used, and cryptocurrency wallet addresses where applicable. We do not store full card numbers or payment credentials on our own servers — payment processing is handled by regulated third-party payment processors who operate under their own data security obligations.

2.3 Identity Verification (KYC) Data. As part of our Know Your Customer obligations under our international gaming license, we may collect copies of government-issued identity documents such as your CNIC, passport, or driving licence; proof of address documentation; and, where required, source-of-funds documentation. All KYC documents are transmitted and stored using encrypted channels and are retained only for as long as required by applicable regulatory obligations.

2.4 Transaction and Gaming Data. We automatically record all financial transactions conducted through your 777sf account, including deposits, withdrawals, bonus credits, and wagering activity. We also record gameplay data including game sessions, bet amounts, win/loss outcomes, and session durations. This data is used for account management, fraud prevention, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data. When you access the 777sf platform, we automatically collect certain technical data including your IP address, device type and model, operating system and version, browser type and version, time zone and language settings, and access timestamps. This data is used for platform security, fraud detection, and to improve platform performance for Pakistani users on local mobile networks.

2.6 Communications Data. We retain records of all communications between you and the 777sf support team, including live chat transcripts, email correspondence, and any complaint or feedback submissions. This data is used to resolve disputes, monitor service quality, and comply with regulatory record-keeping requirements.

2.7 Marketing Preference Data. Where you have opted in to receive marketing communications from 777sf, we retain a record of your marketing preferences and the communications sent to you. You may withdraw your marketing consent at any time through your account settings or by contacting support.

777sf uses the personal data we collect strictly for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those stated here without first obtaining your explicit consent or unless required by applicable law.

3.1 Account Management. We use your identity and contact data to create, maintain, and administer your 777sf account. This includes processing your deposits and withdrawals in PKR, applying bonuses and promotions, and maintaining an accurate record of your gaming activity.

3.2 Identity Verification and KYC Compliance. We use your identity documents and registration data to verify that you are aged 21 or above and to confirm your identity in accordance with our international gaming license requirements. Age and identity verification is mandatory and cannot be waived.

3.3 Fraud Prevention and Platform Security. We use your technical data, transaction data, and device information to detect and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. This processing is essential to protecting both the platform and other legitimate players.

3.4 Responsible Gaming Monitoring. 777sf uses your gaming session data, transaction history, and behavioural patterns to identify signs of problem gambling and to trigger responsible gaming interventions where appropriate, including proactive outreach and the automatic application of account restrictions in serious cases.

3.5 Customer Support. We use your communications data and account history to respond to your enquiries, resolve disputes, and process complaints in accordance with the timelines stated in our Terms & Conditions.

3.6 Marketing and Promotions. Where you have provided your explicit consent, we use your contact details and gaming preference data to send you personalised promotional offers, PSL cricket betting alerts, slot tournament invitations, and other relevant communications. You can opt out of all marketing communications at any time, and doing so will not affect your access to the platform.

3.7 Regulatory Compliance. We use your data as required to comply with our obligations under applicable gaming regulations, anti-money laundering legislation, and the lawful instructions of regulatory and law enforcement authorities.

Every instance of personal data processing by 777sf is grounded in one of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and 777sf — including account management, payment processing, and bonus administration.
• Legal Obligation: Processing required to comply with 777sf's obligations under gaming regulations, anti-money laundering laws, and lawful regulatory instructions — including KYC verification and transaction record-keeping.
• Legitimate Interests: Processing carried out for 777sf's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, platform security, and responsible gaming monitoring — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

777sf does not sell your personal data to third parties under any circumstances. We may share your personal data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection agreements:

5.1 Payment Processors. To facilitate deposits and withdrawals, we share the minimum necessary financial data with our regulated payment processing partners, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and supported cryptocurrency network processors. All payment partners operate under their own regulated security and privacy frameworks.

5.2 Identity Verification Providers. We engage regulated third-party identity verification services to assist with KYC document checks and age verification. These providers receive only the specific documents and data points necessary to complete the verification and are prohibited from using the data for any other purpose.

5.3 Gaming Software Providers. The games available on the 777sf platform are powered by licensed third-party game studios. Game studios may receive anonymised or pseudonymised session data for the purpose of game performance monitoring and fairness auditing. They do not receive personally identifiable information that would allow them to identify individual players.

5.4 Regulatory and Law Enforcement Authorities. We may disclose your personal data to gaming regulators, licensing authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

5.5 Professional Advisors. In limited circumstances, we may share relevant personal data with our legal advisors, auditors, or insurers where necessary for the purposes of professional advice, auditing, or insurance claims. All professional advisors are bound by confidentiality obligations.

5.6 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of the assets of 777sf, your personal data may be transferred to the successor entity. We will provide reasonable notice of any such transfer via the registered email address on your account and will ensure that the successor entity is bound by privacy obligations equivalent to those set out in this Privacy Policy.

The 777sf platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing identifiers. No consent is required for these cookies as they are necessary to provide the service you have requested.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, session time reminder settings, and last-used deposit method, to provide a more convenient experience on repeat visits.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the 777sf platform, including which pages are most visited, average session durations, and common navigation paths. This data helps us improve platform performance and user experience for our Pakistani player base.
• Marketing Cookies: Where you have consented to receiving personalised promotions, we may use cookies to understand which types of content — cricket betting offers, PSL markets, slot promotions — are most relevant to your preferences so that we can tailor our communications accordingly.

You can manage your cookie preferences through your browser settings at any time. Disabling cookies beyond strictly necessary cookies may affect the functionality of certain features of the 777sf platform.

777sf retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with our international gaming license requirements and anti-money laundering obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction to which the KYC check relates, whichever is later.
• Transaction and Gaming Data: Retained for a minimum of five (5) years following the date of the transaction or gaming session, in accordance with regulatory record-keeping requirements.
• Communications Data: Support correspondence and complaint records are retained for three (3) years from the date of the final communication in a given thread, or for the duration of any ongoing dispute where relevant.
• Marketing Data: Marketing preference records and campaign interaction data are retained for two (2) years from the date of your last interaction with a 777sf marketing communication, or until you withdraw your marketing consent, whichever occurs first.
• Technical and Device Data: IP access logs and device fingerprint data are retained for twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted.

When personal data is no longer required for the stated purposes and is not subject to a mandatory retention obligation, it is securely deleted or irreversibly anonymised in accordance with 777sf's data destruction procedures.

777sf implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the 777sf platform is encrypted using 256-bit SSL/TLS protocols. This applies to account login, payment processing, KYC document uploads, and all support communications.
• Encryption at Rest: Sensitive personal data stored on 777sf servers — including identity documents and payment details — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data held by 777sf is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and are bound by confidentiality obligations. Access permissions are reviewed on a quarterly basis.
• Two-Factor Authentication: Player accounts are protected by optional two-factor authentication via SMS. We strongly recommend that all 777sf account holders enable 2FA from their account security settings.
• Penetration Testing: The 777sf platform undergoes regular independent security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to affected individuals, 777sf will notify impacted players via their registered email address and will report the incident to the relevant regulatory authority within the timeframes required by applicable law.

While we implement robust security measures, no system connected to the internet is entirely immune from security threats. You are responsible for maintaining the security of your own account credentials and for reporting any suspected unauthorised access to 777sf support without delay.

Subject to applicable data protection law and certain exemptions, you hold the following rights in respect of your personal data held by 777sf. To exercise any of these rights, please contact us using the details in Section 12. We will respond to all valid rights requests within thirty (30) calendar days of receipt.

The 777sf platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect or process personal data relating to children or minors under any circumstances. Age verification is applied at the point of account registration, and we reserve the right to request documentary proof of age at any subsequent point during the life of an account.

If 777sf becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the affected account, delete all associated personal data to the extent permitted by our legal obligations, and take any further action required under our international gaming license terms.

Parents and guardians who believe that a minor in their care may have accessed or registered on the 777sf platform are encouraged to contact us immediately at the address in Section 12. We treat all such reports with the highest priority and will act without delay.

We also encourage parents and guardians to use reputable internet filtering and parental control software to prevent minors from accessing online gaming platforms. Information on such tools is available from your internet service provider or mobile network operator.

11.1 Right to Amend. 777sf reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or changes to the services we provide. The effective date at the top of this policy will be updated whenever a material amendment is made.

11.2 Notification of Material Changes. Where a proposed amendment materially affects your rights as a data subject or significantly changes the way in which we process your personal data, we will provide reasonable prior notice via the email address registered to your 777sf account before the change takes effect. For non-material amendments — such as clarifications of existing language or corrections of typographical errors — updates will take effect immediately upon publication without prior individual notice.

11.3 Continued Use. Your continued use of the 777sf platform following the publication of any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept any amendment, you may close your account by contacting 777sf support and request deletion of your personal data subject to the retention obligations described in Section 7.

11.4 Version Archive. Previous versions of the 777sf Privacy Policy are available on request from our support team. Please reference the effective date of the version you wish to review in your request.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about the way in which 777sf has handled your personal data, please contact our privacy team. We are committed to resolving all privacy-related enquiries promptly, professionally, and in accordance with applicable data protection law.

Privacy enquiries: [email protected]

Please mark the subject line of your email clearly as "Privacy Request" or "Data Subject Rights Request" and include your registered username and a clear description of your enquiry. We will acknowledge all privacy-related requests within five (5) business days and provide a substantive response within thirty (30) calendar days, or within any shorter period required by applicable law.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction, or to the licensing authority under whose oversight 777sf operates. Details of the applicable escalation authority are available from our support team on request.