777mc Privacy Policy

This Privacy Policy ("Policy") is issued by 777mc ("777mc", "we", "us", "our") and sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by us in connection with your use of the 777mc platform accessible at https://777mc.cam ("Platform").

777mc is committed to protecting the privacy and security of your personal data. We process personal data only for legitimate, specified purposes and in accordance with the data protection standards applicable in the jurisdictions in which we operate. We do not sell personal data to third parties for marketing purposes without your explicit, informed consent.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are published on this Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

The following defined terms are used throughout this Policy:

This Policy applies to all Personal Data processed by 777mc in connection with:

• Your registration and use of an Account on the Platform;
• Your browsing of the Platform as an unregistered visitor;
• Your correspondence with 777mc's customer support team;
• Your participation in any promotional programme, survey or feedback mechanism operated by 777mc;
• Any other interaction between you and 777mc in the context of the Platform's services.

This Policy does not apply to third-party websites, services or applications that may be linked to or integrated with the Platform. Such third parties operate under their own privacy policies, and 777mc accepts no responsibility for their data handling practices.

777mc collects and processes the following categories of Personal Data in connection with the operation of the Platform:

We do not intentionally collect sensitive categories of Personal Data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than liveness-check images used solely for KYC identity matching), or health data, unless specifically required to meet a legal obligation.

777mc collects Personal Data through the following mechanisms:

• Directly from you — when you register an Account, complete KYC verification, make a deposit, submit a withdrawal request, contact support, or respond to a promotional survey;
• Automatically — via cookies, web beacons and server logs that record Technical Data as you interact with the Platform (see Section 12 for full cookie details);
• From third-party service providers — including KYC verification partners who may return identity-check results to us, and payment processors who confirm deposit or withdrawal statuses;
• From fraud and AML screening tools — which may cross-reference data points against relevant databases to identify risk indicators.

777mc processes Personal Data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you entered into with 777mc, including account management, payment processing, and dispute resolution;
• Legal obligation: Processing required to comply with applicable AML, KYC, and responsible gambling regulatory requirements;
• Legitimate interests: Processing required for fraud prevention, platform security, abuse detection and internal analytics, where our interests are not overridden by your rights and freedoms;
• Consent: Where we process data for direct marketing or non-essential cookies, we rely on your freely given, specific and informed consent, which you may withdraw at any time.

777mc uses your Personal Data for the following purposes:

1. Account registration and management — creating and maintaining your Account, authenticating your identity on login, and communicating account-related notifications;
2. KYC and age verification — confirming that you meet the minimum age requirement (18+ or higher as applicable) and verifying your identity documents as required by our compliance obligations;
3. Payment processing — facilitating deposits and withdrawals and reconciling transaction records;
4. Fraud prevention and AML monitoring — detecting and investigating suspicious account activity, unusual betting patterns, and potential money laundering behaviour;
5. Responsible gambling — monitoring account activity for indicators of problem gambling and administering the limit and self-exclusion tools described in our Responsible Gambling Policy;
6. Platform personalisation and improvement — using aggregated and anonymised Technical Data to understand how the Platform is used and to improve performance, particularly on mobile devices used across Pakistan;
7. Customer support — responding to your enquiries, resolving disputes and processing complaints;
8. Marketing communications — where you have given your consent, sending you information about relevant promotions, offers and platform updates. You may withdraw consent at any time by contacting us.

777mc does not sell, rent or otherwise transfer your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• KYC and identity verification providers — third-party services that assist in verifying identity documents, conducting liveness checks and performing age verification;
• Payment processors — financial intermediaries required to process deposit and withdrawal transactions. Payment method names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are independent providers, and data shared with any such processor is limited to what is necessary to process your specific transaction;
• Fraud and AML screening services — automated systems that assess transaction and account data against risk databases;
• IT infrastructure and cloud service providers — entities that host, maintain and support the Platform infrastructure under strict data processing agreements;
• Legal and regulatory authorities — where disclosure is required by applicable law, court order, regulatory direction or law enforcement request;
• Professional advisers — lawyers, auditors, and accountants who require access to data in the course of providing professional services to 777mc, subject to confidentiality obligations.

Any third party acting as a Data Processor on behalf of 777mc is required by contract to process Personal Data only on our instructions, to maintain appropriate security measures, and not to sub-process data without our prior written authorisation.

Given the global nature of internet-based services, your Personal Data may be transferred to, stored in, or processed in countries other than the country in which you are resident, including countries that may not offer the same level of data protection as your home jurisdiction.

Where such transfers occur, 777mc endeavours to ensure that adequate safeguards are in place, which may include:

• Standard contractual clauses or equivalent data transfer mechanisms recognised under applicable data protection frameworks;
• Transfers to processors in jurisdictions recognised as providing an adequate level of data protection;
• Binding corporate rules or equivalent intra-group data transfer agreements where applicable.

Pakistani users should be aware that data may be transferred to and processed in jurisdictions outside Pakistan. By using the Platform, you acknowledge and, where legally required, consent to such international transfers.

777mc retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. The following general retention guidelines apply:

• Account data — retained for the duration of your Account's active status and for a minimum of five (5) years following Account closure, in accordance with standard AML retention obligations;
• KYC and identity documents — retained for a minimum of five (5) years following the date of verification or Account closure, whichever is later, as required by anti-money-laundering regulations;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications — retained for up to three (3) years following the resolution of the relevant query, unless the communication is relevant to a pending legal matter;
• Technical and log data — retained for up to twelve (12) months for security and fraud-prevention purposes, after which it is deleted or anonymised;
• Marketing consent records — retained for the duration of the consent and for up to three (3) years after withdrawal, to demonstrate compliance with consent obligations.

When Personal Data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

777mc implements technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Access controls — Personal Data is accessible only to authorised personnel whose role requires access, subject to least-privilege principles;
• Secure document handling — KYC documents are processed exclusively through the operator's secure HTTPS verification portal. Documents submitted via unsecured channels will not be accepted and may be destroyed;
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities and intrusion attempts;
• Incident response procedures — in the event of a data breach that poses a risk to your rights, 777mc will take appropriate remedial action and notify affected Data Subjects and relevant authorities as required by applicable law.

The 777mc Platform uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and — where you have consented — to deliver relevant promotional content and measure marketing performance.

A cookie is a small text file placed on your device by the Platform. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the Platform. For browsers available on Android and iOS devices — the primary devices used by most of our Pakistani users — cookie management options are available in your browser's Privacy or Settings menu.

Subject to the applicable data protection law in your jurisdiction, you may hold some or all of the following rights with respect to your Personal Data held by 777mc. The availability of specific rights depends on the legal framework applicable to you.

To exercise any of the above rights, please contact our Data Support team at the contact details provided in Section 17. We will respond to verified requests within a reasonable timeframe consistent with applicable law — typically within 30 days of receipt. We may require proof of identity before processing a data rights request.

The 777mc Platform is strictly intended for adults aged 18 years and above, or such higher minimum age as may be required by the operator's licence jurisdiction. We do not knowingly collect, process or retain Personal Data relating to minors.

If we become aware that Personal Data has been collected from or in relation to a minor — including through the detection of a false date of birth provided during registration — we will take immediate steps to close the relevant Account, delete or anonymise the associated data to the extent permitted by our legal obligations, and, where required, notify the relevant authorities.

If you believe that a minor has registered an Account on the Platform using false information, please contact us immediately using the details in Section 17 so that we can investigate and take appropriate action.

777mc processes certain Account Activity Data for the specific purpose of monitoring compliance with our responsible gambling obligations and protecting players from harm. This processing includes:

• Automated monitoring of betting frequency, deposit volumes and session durations against responsible gambling risk thresholds;
• Recording and enforcing deposit limits, loss limits and session timers set by you or applied by 777mc under our responsible gambling policy;
• Maintaining records of self-exclusion requests and ensuring that excluded players are prevented from accessing Real-Money Play features;
• Retaining records of responsible gambling interactions — including limit changes, exclusion requests and re-activation requests — for regulatory compliance and dispute resolution purposes.

This processing is carried out on the basis of legal obligation and legitimate interests in protecting users from gambling harm. Responsible gambling data is not used for marketing profiling and is not shared with third parties except where required by our licensing obligations. For full information on the responsible gambling tools available to you, please visit our Responsible Gambling page.

777mc reserves the right to update, revise or replace this Privacy Policy at any time, including to reflect changes in applicable law, our data processing practices, or the services we provide. The "Last Reviewed" date at the top of this document will be updated accordingly.

Where we make a material change to this Policy — for example, a change to the categories of Personal Data collected or the introduction of a new processing purpose — we will endeavour to notify registered users via the email address associated with their Account or by a prominent notice on the Platform prior to the change taking effect.

Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or to the processing of your Personal Data by 777mc — including requests to exercise your data rights under Section 13 — please contact us using the details below:

When submitting a data rights request, please clearly identify the right you wish to exercise and provide sufficient information to allow us to verify your identity. We may require supporting documentation before actioning certain requests in order to protect your data from unauthorised access.