777at Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 777at ("the Company", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the 777at online casino and sports betting platform, accessible at 777at.app and any associated mobile-optimised interfaces.

This Policy applies to all registered players, prospective users, and visitors to the 777at platform regardless of their country of access. It has been written to align with internationally recognised data protection standards, including principles derived from the General Data Protection Regulation (GDPR), and reflects our ongoing commitment to handling your personal information with care, integrity, and full transparency.

This Policy should be read in conjunction with the 777at Terms and Conditions and our Responsible Gaming Policy, both of which form part of the complete agreement between you and 777at.

2. Data Controller

For the purposes of applicable data protection laws, 777at is the data controller responsible for the personal data collected through the 777at platform. As data controller, 777at determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing is carried out lawfully and in accordance with this Policy.

All data protection enquiries, subject access requests, and complaints relating to 777at's data processing activities should be directed to our support team at [email protected]. We will acknowledge all data protection requests within 5 business days and aim to resolve them within 30 calendar days of receipt.

3. Data We Collect

777at collects personal data through several channels — directly from you when you register and use the platform, automatically through technical systems as you interact with the site, and from third-party verification partners during the KYC process. The categories of data we collect are described in the table below.

4. Why We Collect Your Data

777at processes your personal data only for specific, legitimate purposes. We do not use your data for purposes beyond those described in this Policy without your additional consent. The purposes for which we process personal data include the following:

• Account Creation and Management: To create and maintain your 777at player account, verify your identity, and provide access to the full range of platform features including casino games, sports betting, and crypto transactions.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to maintain accurate financial records in compliance with applicable regulations.
• KYC and Fraud Prevention: To verify that you meet the minimum age requirement of 21 years, confirm your identity, prevent fraud, money laundering, and terrorist financing, and comply with applicable anti-money laundering regulations.
• Regulatory Compliance: To meet the record-keeping, reporting, and audit requirements imposed by 777at's operating licence and applicable international gaming regulations.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion requests, apply deposit limits, and operate session time reminders and cooling-off periods at your request.
• Customer Support: To resolve your queries, investigate complaints, and provide technical assistance through our live chat and email support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the technical performance, user interface, and game selection of the 777at platform.
• Marketing Communications: To send you promotional emails, bonus notifications, and platform updates where you have given consent to receive such communications. You may withdraw this consent at any time.
• Security: To detect and prevent unauthorised account access, identify suspicious activity, and protect the integrity of the 777at platform and its players.

5. Legal Basis for Processing

Every instance of personal data processing by 777at is grounded in one of the following recognised legal bases in accordance with internationally accepted data protection standards:

• Contractual Necessity: Processing required to perform the contract between you and 777at — including account management, payment processing, and platform access — is necessary for the fulfilment of that contract.
• Legal Obligation: Processing required to comply with anti-money laundering laws, gaming regulations, and other applicable legal obligations that bind 777at as an operator.
• Legitimate Interests: Processing necessary for 777at's legitimate business interests, such as fraud detection, platform security, and product improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have provided explicit, freely given consent, such as receiving marketing communications. You may withdraw your consent at any time by contacting [email protected] or using the unsubscribe link in marketing emails.

6. Data Sharing with Third Parties

777at does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. We share personal data only where necessary and only with the categories of recipients described below, each of whom is bound by appropriate data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network operators receive the minimum financial data necessary to process your deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party identity verification providers receive copies of your government-issued ID and related documentation solely for the purpose of verifying your identity and age in compliance with regulatory requirements.
• Fraud and AML Detection Services: Specialist third-party tools used to detect suspicious transactions, unusual betting patterns, and potential money laundering activity may process limited transactional and technical data.
• Regulatory and Law Enforcement Authorities: 777at will disclose personal data to relevant regulatory bodies, law enforcement agencies, and courts where required to do so by applicable law, court order, or regulatory direction.
• IT and Infrastructure Providers: Hosting providers and technical infrastructure partners who process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Responsible Gaming Partners: Where applicable, anonymised data may be shared with responsible gaming research organisations to support the development of player protection tools and policies.

All third-party data processors engaged by 777at are required to implement appropriate technical and organisational security measures and are prohibited from processing your personal data for any purpose other than the specific service they provide to 777at.

7. International Data Transfers

777at operates as an international platform and, as a consequence, your personal data may be transferred to, stored in, and processed in countries outside of Pakistan. These countries may have data protection laws that differ from those applicable in Pakistan.

Where personal data is transferred internationally, 777at ensures that appropriate safeguards are in place to protect your information. These safeguards include contractual clauses requiring third-party recipients to apply data protection standards equivalent to those described in this Policy, and the selection of processors operating in jurisdictions that maintain internationally recognised data protection frameworks.

8. Data Retention

777at retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and audit obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual. Where anonymisation is not technically feasible, the data is securely destroyed.

9. Security Measures

777at implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in Transit: All data exchanged between your browser or app and 777at's servers is encrypted using TLS 1.3 protocol. Connections using outdated SSL/TLS versions are rejected.
• Encryption at Rest: Personal data stored in 777at's databases is protected with AES-256 encryption, the same standard used by international financial institutions.
• Access Controls: Access to personal data within 777at's internal systems is restricted on a strict need-to-know basis. All staff with data access receive mandatory data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts. Internal system access by 777at staff requires multi-factor authentication at all levels.
• Intrusion Detection: 777at's infrastructure is monitored 24/7 by automated intrusion detection systems. Any anomalous access patterns trigger immediate security alerts.
• Penetration Testing: 777at commissions periodic third-party security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Data Breach Response: In the unlikely event of a personal data breach, 777at has an incident response plan in place. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

While 777at takes all reasonable steps to protect your personal data, no system is entirely immune to risk. You are responsible for keeping your own account credentials secure and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

777at uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how users interact with the site. Cookies are small text files placed on your device when you visit 777at.app. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable features such as user authentication, session management, and security. These cookies cannot be disabled without disrupting your ability to use 777at.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred games, and display options — to provide a more personalised experience on return visits.
• Analytics Cookies: 777at uses privacy-respecting, first-party analytics to understand aggregate usage patterns, popular game categories, and platform performance. No individual user profiles are built from this data and it is never shared with advertising networks.
• Security Cookies: These support 777at's fraud detection and bot prevention systems by analysing technical signals associated with your session.

777at does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will impair your ability to log in and use the platform.

11. Your Data Rights

Depending on applicable data protection law, you may have the following rights in relation to your personal data held by 777at. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

12. Minors and Age Restriction

777at strictly prohibits the use of its platform by individuals under the age of 21 years. We do not knowingly collect, process, or store personal data belonging to minors. Age verification is a mandatory step of the KYC process and is enforced before any financial transactions are permitted.

If 777at becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, delete the data, and — where applicable — return any deposited funds to the originating payment method after completing the necessary investigation.

13. Changes to This Privacy Policy

777at reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable laws, or regulatory guidance. Where changes are material — meaning they significantly affect how we collect or use your personal data — we will notify registered players by email and/or through a prominent notice on the 777at platform at least 14 days before the changes take effect.

Non-material amendments, such as clarifications of existing language or corrections of typographical errors, may be made without specific advance notice. The "Last Updated" date displayed at the top of this page will always reflect when the most recent revision was made.

Your continued use of the 777at platform following the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and request account closure by contacting [email protected].

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 777at processes your personal data, please get in touch with our support team. We are committed to addressing all data protection enquiries promptly and transparently.

You can reach the 777at data protection team at: [email protected]

Please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line of your message so our team can route your enquiry to the appropriate department without delay. We aim to acknowledge all incoming data protection correspondence within 5 business days.