777sd Privacy Policy
Your Personal Data. Our Responsibility.

777sd is an online gaming platform accessible at 777sd.org, offering sports betting, live casino, slot games, and related gaming entertainment services to eligible adults in Pakistan and other permitted jurisdictions. 777sd operates under an international gaming license which imposes mandatory data protection obligations on the platform as a condition of licensure.

For the purposes of this Privacy Policy, 777sd acts as the data controller in respect of all personal data collected from Players and website visitors through the platform. This means 777sd determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

777sd collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are as follows:

• Full legal name as it appears on your Pakistani National Identity Card (CNIC).
• Date of birth.
• CNIC number and a copy of the front and back of your CNIC document (for mandatory age and identity verification).
• Registered email address.
• Pakistani mobile telephone number.
• Residential address (city, province, country).

• JazzCash and/or EasyPaisa mobile wallet identifiers used for deposits and withdrawals.
• Bank account details provided for bank transfer transactions (HBL, UBL, Meezan Bank, or other registered Pakistani banks).
• Debit and credit card details (card type, partial card number, expiry date — full card numbers are never stored by 777sd and are processed exclusively by PCI-DSS certified payment processors).
• Complete record of all deposits made to your 777sd account, including amounts in PKR, payment method used, and transaction timestamps.
• Complete record of all withdrawals requested and processed, including amounts in PKR, destination payment method, processing status, and timestamps.
• Records of all bets placed, games played, and associated outcomes.
• Source of funds documentation where requested under AML compliance obligations.

• IP address at the time of registration and on each subsequent login.
• Device type, operating system, and browser type and version.
• Pages and game categories accessed within the 777sd platform.
• Session start and end times, and duration of platform sessions.
• Click patterns, navigation behaviour, and feature usage within the platform.
• Geolocation data derived from IP address (country and city level only).

• Content of any written communications submitted to 777sd support, including live chat transcripts, email correspondence, and complaint submissions.
• Marketing preferences and communication opt-in/opt-out records.
• Responses to surveys or feedback requests, where voluntarily provided.

• Deposit and loss limits set by the Player.
• Cooling-off and self-exclusion elections, including activation dates and durations.
• Responsible gaming assessment questionnaire responses, where completed.

777sd collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide actively when completing the 777sd registration form, submitting KYC verification documents, completing a deposit or withdrawal request, contacting 777sd support, or updating your account profile settings.
• Automated collection: Technical and usage data collected automatically by 777sd's platform systems and analytics tools as you navigate and interact with the website and gaming content. This includes data collected via cookies and similar tracking technologies, described further in Section 7.
• Payment processors: Transaction confirmation data and payment status updates received from 777sd's authorised payment processing partners — including JazzCash, EasyPaisa, and card processing services — following completion of a deposit or withdrawal.
• Identity verification providers: Verification status and risk signals from KYC and AML compliance service providers engaged to assist with document authentication and identity verification in satisfaction of 777sd's gaming license obligations.
• Fraud prevention services: Device fingerprinting and risk-scoring data from authorised fraud prevention partners used to protect the platform and its Players from unauthorised access and financial crime.

777sd processes your personal data for the specific purposes set out in the table below. We do not use your data for any purpose incompatible with those listed, and we do not sell your personal data to third parties for marketing or commercial purposes.

777sd processes your personal data in reliance on one or more of the following legal bases, as applicable to the specific processing activity:

• Contract Performance: Processing that is necessary to provide the 777sd gaming services to you, including account management, payment processing, and customer support, is carried out on the basis that it is necessary for the performance of the contract between you and 777sd.
• Legal Obligation: Certain processing activities — including KYC identity verification, AML transaction monitoring, responsible gaming record-keeping, and regulatory reporting — are required by the legal obligations imposed on 777sd by its gaming license and applicable laws. This processing occurs regardless of consent and cannot be opted out of without impacting account functionality.
• Legitimate Interests: Processing for fraud prevention, platform security, technical performance optimisation, and aggregate analytics is carried out where 777sd has assessed that its legitimate business interests in operating a secure and efficient platform outweigh any privacy impact on Players.
• Consent: Where processing is not required by the above bases — specifically in respect of non-essential cookies and direct marketing communications — 777sd relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

777sd does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial use. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

777sd engages authorised third-party service providers who process personal data on 777sd's behalf and under 777sd's instruction as data processors. These include payment processing partners (JazzCash, EasyPaisa, card processors), KYC and identity verification providers, AML screening and fraud prevention services, cloud infrastructure providers hosting platform systems, and customer support platform providers. All such providers are contractually obligated to process data only as instructed by 777sd, maintain appropriate security measures, and not use the data for their own purposes.

777sd is required under its gaming license to provide certain player data and transaction records to its licensing regulator upon request. This disclosure is mandatory and constitutes a legal obligation. 777sd cannot prevent such disclosure where lawfully required by the regulator.

777sd may disclose personal data to law enforcement agencies, courts, or other governmental authorities where required to do so by applicable law, court order, or legitimate regulatory demand. 777sd will, where legally permitted, notify the affected Player prior to any such disclosure.

In the event that 777sd undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by 777sd may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy implications through platform notifications or registered email communications, prior to the transfer completing where practicable.

777sd uses cookies and similar tracking technologies on its website to enable platform functionality, improve user experience, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the basic operation of the 777sd platform, including session management, login authentication, and security functions. These cookies cannot be disabled without materially impairing your ability to use the platform. No consent is required for strictly necessary cookies.
• Functional Cookies: Cookies that remember your preferences and settings within the 777sd platform, such as language preferences, game category last visited, and display customisations. These improve your experience but are not essential to core platform operation.
• Analytics Cookies: Cookies used to collect aggregate and anonymised data about how Players navigate and use the 777sd platform. This data is used to identify areas for platform improvement. Analytics data is not linked to individual identities in reports.
• Marketing Cookies: Cookies used to measure the effectiveness of 777sd's own promotional campaigns. These are only activated where you have provided consent through the cookie preference tool on the platform.

You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use core platform features, including the 777sd login function. 777sd does not use third-party advertising network cookies to track your activity across non-777sd websites.

777sd retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and licensing obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active 777sd account is retained for the duration of the account relationship.
• Closed Accounts: Following the closure of a 777sd account, personal data — including identity verification records, transaction histories, and betting records — is retained for a minimum of five (5) years. This retention period is mandatory under 777sd's gaming license AML compliance obligations.
• Self-Excluded Accounts: Where a Player has self-excluded, 777sd retains the Player's personal data for the duration of the self-exclusion period and for five (5) years thereafter, in order to enforce the exclusion and comply with license obligations.
• Inactive Accounts: Accounts that have been inactive for twenty-four (24) consecutive months are subject to dormancy procedures. Personal data associated with dormant accounts is retained in accordance with the license-mandated minimum retention period.
• Marketing Data: Where data has been processed solely on the basis of consent for marketing purposes, 777sd will delete or anonymise such data promptly following withdrawal of consent, unless the data is also required to be retained for other legally mandated purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 777sd's data destruction procedures. Transaction records that have been anonymised may be retained beyond the retention period for aggregate statistical purposes.

777sd implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your device and the 777sd platform is encrypted using 256-bit SSL/TLS encryption. This applies to account login, all financial transactions, and all personal data submissions.
• Data Encryption at Rest: Sensitive personal data — including identity documents, financial account references, and account credentials — is stored in encrypted form in 777sd's systems.
• Access Controls: Access to personal data within 777sd's internal systems is restricted on a strictly need-to-know basis. Staff with access to Player personal data are subject to contractual confidentiality obligations and receive data protection training.
• Password Security: Player account passwords are stored in hashed form using industry-standard cryptographic techniques. 777sd does not store plain-text passwords.
• Payment Data: 777sd does not store full payment card numbers. Card data is processed exclusively by PCI-DSS Level 1 certified payment processors. JazzCash and EasyPaisa wallet identifiers are masked in account display systems.
• Incident Response: 777sd maintains documented procedures for responding to data security incidents, including assessment, containment, notification, and remediation protocols.

777sd's platform infrastructure and some of its authorised service providers may be located outside Pakistan. As a result, personal data collected by 777sd may be transferred to, stored in, and processed in countries other than Pakistan. 777sd takes steps to ensure that any such international transfers of personal data are subject to appropriate safeguards, including:

• Transfer only to service providers whose data protection practices meet the standards required by 777sd's gaming license.
• Contractual data processing agreements that impose equivalent data protection obligations on receiving parties.
• Transfers for the specific and limited purposes of delivering the services described in this Policy, with no further use permitted by the receiving party.

By creating a 777sd account and using the platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan in order to deliver the gaming services and comply with 777sd's licensing obligations. 777sd does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate compensatory safeguards.

Subject to applicable law and the limitations of 777sd's legal obligations as a licensed gaming operator, Players have the following rights in respect of their personal data held by 777sd:

To exercise any of these rights, submit a written request to [email protected] including your full name, registered email address, account reference number, and a clear description of the right you wish to exercise. 777sd will respond within thirty (30) days. Where a request cannot be fulfilled due to a conflicting legal obligation — such as the mandatory AML data retention requirement — 777sd will explain the reason for any limitation on the right being exercised.

777sd enforces the 21+ age requirement through mandatory CNIC identity verification at registration, which requires the submission of a valid Pakistani National Identity Card — a document that cannot legally be issued to a person under the age of 18. This creates a structural barrier to minor registration that operates independently of any data processing consideration. If you are a parent or guardian and believe that a minor has gained access to a 777sd account, please contact 777sd support immediately at the email address set out in this Policy.

The 777sd platform integrates services provided by authorised third parties — including payment processors, game software providers, and customer support tools — in order to deliver the gaming experience. These third-party integrations involve the transmission of limited personal data to the relevant provider solely for the purpose of delivering the integrated service. All such providers are engaged under data processing agreements and are not permitted to use your data for their own independent purposes.

Game content displayed within the 777sd casino and slots sections is provided by licensed third-party game developers. When you access and play a game through 777sd, certain technical data — including session identifiers and game event logs — may be transmitted to the game provider's systems for the purposes of game operation, RNG certification compliance, and dispute resolution. 777sd does not control the data processing practices of game providers in respect of data processed within their game environments, and Players should be aware of this when reviewing 777sd's data practices.

777sd does not include links to external third-party websites that are not part of the 777sd gaming ecosystem. Where any third-party content is displayed on the 777sd platform, it is integrated under contractual terms that require data protection compliance. 777sd accepts no responsibility for the data practices of organisations that operate independently of 777sd's platform and contractual framework.

777sd reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in data processing practices, legal obligations, platform features, or regulatory requirements. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date. The date at the top of this page always reflects the most recent version in effect.

For material changes that significantly affect how 777sd processes your personal data or that materially reduce your rights under this Policy, 777sd will provide reasonable advance notice through platform notifications or registered email communications prior to the changes taking effect. Your continued use of the 777sd platform following publication of a revised Policy constitutes your acknowledgement of the updated terms. If you disagree with any change to this Policy, you should cease using the platform and may request account closure as described in Section 11 and the 777sd Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or 777sd's handling of your personal data, please contact us through the following channel:

If you are not satisfied with 777sd's response to a privacy-related complaint, you may have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which 777sd holds its gaming license, or to the dispute resolution mechanism established under that license. Details of the applicable supervisory authority and dispute resolution body are available upon request from the 777sd support team.

777sd takes all privacy-related complaints seriously and will investigate each submission thoroughly. We aim to resolve all privacy enquiries fairly and promptly. We are committed to your trust and will always strive to handle your personal data with the care and respect it deserves.