Privacy Policy

This Privacy Policy ("Policy") describes how 777fa ("the Platform", "we", "us", "our") collects, processes, stores, shares and protects personal data relating to users ("you", "your") who access or use the website located at https://777fa.cam and all associated services.

777fa is an English-language online sports betting and casino platform designed for Pakistani users. The platform displays balances in Pakistani Rupees (PKR/Rs) and covers sports including Pakistan cricket, PSL T20, ICC tournaments, football and UFC. By registering an account or continuing to use the platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

References to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah appear in this Policy solely as contextual payment references familiar to Pakistani users. None of these entities are affiliated with, endorse, or are responsible for the data practices of 777fa.

In this Policy, the following terms carry the meanings defined below unless the context requires otherwise:

• "Account" means the personal registered user account created by you on the 777fa platform.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this case, the operator of 777fa.
• "Cookie" means a small text file placed on your device by the platform for session management, analytics or preference storage.
• "Data Subject" means any identified or identifiable individual whose personal data is processed — in this context, you as the user.
• "KYC" means Know Your Customer — the identity and document verification process required before processing withdrawals or as triggered by compliance review.
• "Personal Data" means any information that identifies or could identify you as a natural person, including name, email address, CNIC number, IP address and payment details.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, deletion or transfer.
• "Processor" means a third party that processes personal data on behalf of 777fa under a data processing agreement.
• "Sensitive Data" means personal data requiring heightened protection — including identity documents, financial records and, where applicable, information relating to health or self-exclusion status.
• "Third Party" means any entity other than you and 777fa.

777fa collects personal data in categories proportionate to the purpose for which each category is needed. The categories of personal data we collect are set out in the table below.

We do not intentionally collect special category data (such as racial or ethnic origin, religious beliefs, or health data) beyond what may be incidentally included in identity documents submitted for KYC. Where such data appears in KYC documents, it is processed solely to verify identity and is not used for any other purpose.

We collect personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit, contacting support or filling out any on-platform form.
• Automated collection: Technical and usage data collected automatically when you access the platform — including cookies, log files, device fingerprinting signals and session tracking technologies.
• Third-party sources: Identity verification and fraud screening data received from licensed KYC/AML service providers, payment processors and responsible gambling screening databases.
• Publicly available sources: In limited circumstances, we may consult publicly available information to verify identity or investigate fraud — for example, checking published sanctions lists.

We process your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to open and manage your account, verify your identity, process deposits and withdrawals, and provide the sports betting and casino services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, KYC requirements, fraud prevention duties and any applicable data retention laws in the jurisdiction where 777fa is licensed.
• Legitimate interests: Processing carried out for purposes such as fraud prevention, network and platform security, responsible gambling monitoring, and improvement of platform features — where these interests do not override your fundamental rights.
• Consent: Where we rely on consent — for example, for non-essential marketing communications or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Where processing is based on consent, you will be given a clear opportunity to provide or decline that consent at the point of collection. Withdrawal of consent for marketing will not affect your ability to continue using the platform.

Personal data collected by 777fa is used for the following purposes:

• Account management: Creating, maintaining, verifying and securing your registered account on the platform.
• Service delivery: Processing bets, casino game sessions, deposits, withdrawals and bonus allocations in PKR.
• KYC and compliance: Verifying your identity, age and eligibility; fulfilling AML screening obligations; maintaining compliance records.
• Fraud and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting and abuse of promotional offers.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions.
• Responsible gambling: Monitoring betting behaviour for signs of problem gambling; enforcing self-exclusion, deposit limits and loss limits set by you or triggered by our responsible gambling protocols.
• Platform improvement: Analysing usage patterns to optimise platform performance, user experience and content relevance — including cricket odds displays, PSL markets and live casino features.
• Communications: Sending account-related notifications such as transaction confirmations, security alerts and policy updates. Where you have opted in, we may also send promotional communications about 777fa offers.
• Legal compliance: Maintaining records as required by applicable law and responding to lawful requests from competent authorities.

777fa does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Licensed third-party providers engaged to verify identity documents, conduct liveness checks and screen against sanctions and politically exposed persons (PEP) lists.
• Payment processors: Entities that facilitate deposit and withdrawal transactions on the platform. These processors receive only the data required to execute the transaction and are bound by their own data protection obligations.
• Fraud prevention services: Specialised platforms that assist in detecting multi-accounting, bonus abuse, device fingerprint matching and suspicious transaction patterns.
• Responsible gambling screening services: Databases operated under licence authority that allow cross-platform self-exclusion and problem gambling detection.
• Technology and hosting partners: Cloud infrastructure and software providers who host platform data under contractual data processing agreements that require compliance with applicable data protection standards.
• Legal and regulatory authorities: Where required by a court order, regulatory instruction or applicable law, we may disclose personal data to law enforcement or government authorities. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of assets involving the 777fa platform, personal data may form part of the transferred assets. Users will be notified in advance where required by applicable law.

All third-party processors engaged by 777fa are contractually required to process personal data only for the specified purpose and to maintain appropriate technical and organisational security measures.

777fa retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention guidelines we apply are as follows:

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where deletion is requested before the retention period expires, we will delete what we are permitted to delete and inform you of any data we are legally required to retain and the reason why.

777fa uses cookies and similar technologies (including local storage objects and session tokens) to operate core platform functions, maintain the security of your session and understand how users interact with the platform.

The types of cookies we use are described below:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Functional cookies: Store your preferences such as language settings, display preferences and remembered login state. Disabling these may reduce convenience but will not prevent basic access.
• Analytics cookies: Used to understand aggregate usage patterns — which pages are visited, session lengths, navigation paths — to help us improve the platform. No individually identifiable data is shared with analytics providers.
• Security and fraud detection cookies: Help identify suspicious behaviour patterns such as rapid account creation attempts or login anomalies.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will impair your ability to use the platform. Our cookie consent tool, available on first visit, allows you to accept or decline non-essential cookie categories.

777fa implements a layered security approach to protect your personal data from unauthorised access, accidental loss, alteration or disclosure. Our technical and organisational security measures include:

• Encryption in transit: All data transmitted between your device and the 777fa platform is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive data fields — including identity data and financial records — are encrypted at rest within our database infrastructure.
• Access controls: Access to personal data by 777fa staff is limited on a strict need-to-know basis, governed by role-based access control (RBAC) policies.
• Two-factor authentication: Account access is protected by optional two-factor authentication (2FA), which we strongly recommend enabling for all accounts.
• Penetration testing: The platform undergoes periodic security assessments to identify and address vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities in accordance with applicable requirements.

Subject to applicable law in the jurisdiction where 777fa is licensed, you hold the following rights over your personal data. To exercise any of these rights, contact us through the on-site live chat or the support email address listed in Section 15.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Where possible, you can update some data directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent was the legal basis). This right is subject to any overriding legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data — for example, while a rectification request is under review.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time. You have an unconditional right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to verified data rights requests within 30 days of receipt. Where a request is complex or involves large volumes of data, we may extend this period by a further 30 days, with notification provided. We do not charge a fee for standard data rights requests.

777fa is strictly an adults-only platform. Users must be at least 18 years of age — or the higher minimum age required by the operator or applicable license jurisdiction — to register an account and use the platform. The platform is not intended for, and does not knowingly collect personal data from, individuals under the applicable minimum age.

Age verification is conducted as part of the KYC process. Where we determine or have reasonable grounds to believe that personal data has been provided by an individual below the minimum age, we will:

• Immediately suspend the relevant account.
• Void any wagers placed.
• Refund any deposits made (net of bonuses utilised).
• Delete the personal data of the underage individual promptly.

If you are a parent or guardian and believe that a minor has registered on the 777fa platform, please contact us immediately through the on-site live chat or the support email address in Section 15 so that appropriate action can be taken without delay.

As an international online platform, 777fa may transfer personal data to, and process personal data in, countries other than Pakistan. These may include the jurisdiction in which 777fa is licensed and incorporated, as well as countries where our technology infrastructure and third-party service providers operate.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements with receiving parties that require equivalent data protection standards.
• Use of processors located in jurisdictions with recognised adequate data protection frameworks.
• Technical safeguards including encryption to protect data during transfer.

By using 777fa, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan for the purposes described in this Policy.

777fa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, we will endeavour to provide reasonable advance notice — for example, by posting a prominent notification on the platform or sending an email to your registered address.

The "Last reviewed" date at the top of this page will be updated each time the Policy is materially revised. We recommend checking this page periodically. Your continued use of the 777fa platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy.

If you do not agree with an amendment to this Policy, you should cease using the platform and contact support to request account closure. Prior to closure, your data will continue to be processed in accordance with the version of the Policy in effect at the time of collection.

If you have any questions about this Privacy Policy, wish to exercise a data right, want to report a privacy concern, or need assistance related to how your personal data is handled, please reach out to the 777fa support team.

For players based anywhere in Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — all privacy queries are handled through the same digital channels. There are no physical offices or walk-in locations.

For urgent account security matters or responsible gambling requests such as self-exclusion, the on-site live chat channel provides the fastest response. Our support team handles all communications in English, with Urdu assistance available on request.

Data rights requests submitted via the support email will receive an acknowledgement within 5 business days and a substantive response within 30 days, in line with Section 11 of this Policy.