777zy Privacy Policy — How We Handle Your Data

1. Introduction

This Privacy Policy describes how 777zy ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of players ("you") who use the 777zy website at 777zy.pro, the 777zy mobile application, and any related services.

We take your privacy seriously. This policy is written in plain language so you understand exactly what happens to your information from the moment you register an account to the point you choose to close it.

By registering an account on 777zy, you confirm that you have read and understood this Privacy Policy. This policy should be read alongside the Terms and Conditions which govern your use of the platform.

2. Data We Collect

The categories of personal data 777zy collects are listed below. We do not collect any category of data that is not necessary for the operation of the platform and the services it provides.

We do not collect the full credentials of your JazzCash, Easypaisa, or bank account. Payment authentication is handled by your chosen provider — we receive only confirmation of transaction completion and the associated reference.

3. Why We Collect This Data

Each category of data collected has a specific purpose. The table below explains the link between the data and the reason it is needed:

• Account data is needed to create and manage your 777zy account, verify your identity, and ensure communications reach you.
• Identity documents are required for KYC verification, which is mandatory before any withdrawal is processed. This also protects against fraud and underage access.
• Transaction data is retained for account management, dispute resolution, responsible gaming monitoring, and to meet financial record-keeping obligations.
• Gaming activity is used to manage your account balance, apply bonuses correctly, detect unusual patterns that may indicate problem gambling, and ensure game integrity.
• Technical data is used to maintain platform security, detect and prevent fraudulent login attempts, and improve platform performance across devices and network conditions common in Pakistan.
• Support communications are retained to provide continuity of service and to resolve disputes or complaints accurately.
• Preference data is used to deliver the platform experience as you have configured it — including responsible gaming limits, which are enforced in real time from this data.

4. Legal Basis for Processing

777zy processes your personal data on the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to provide the service you have signed up for — account management, transaction processing, game access, and bonus administration.
• Legal obligation: Processing required to comply with applicable obligations, including financial record retention and identity verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and improving the service — where these interests are balanced against your rights and do not override them.
• Consent: For marketing communications, where consent has been given and can be withdrawn at any time through account settings or by contacting support.

5. Who We Share Your Data With

777zy does not sell your personal data. We share it only with the following categories of third parties, and only to the extent necessary for them to provide their service to us:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners — to process your deposits and withdrawals. They receive only what is needed to complete each transaction.
• KYC and identity verification providers: Third-party services that help us verify the authenticity of identity documents submitted during account verification.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, and others whose games are available in the 777zy lobby. These providers may log game session data for integrity and auditing purposes under their own applicable policies.
• Platform infrastructure providers: Hosting, security, and technical support partners that operate elements of the 777zy platform.
• Legal and regulatory authorities: Where we are required by law to disclose information — for example, in connection with a formal investigation. We disclose only what is legally required.

All third parties we work with are required to handle your data securely and use it only for the purposes we have specified. We do not permit them to use your data for their own marketing or to share it further without authorisation.

6. Data Storage & Security

Your personal data is stored on secure servers. The following security measures are in place across the 777zy platform:

• 128-bit SSL encryption on all data transmissions between your device and our servers.
• Encrypted password storage — passwords are hashed and never stored in plain text.
• Two-factor authentication available on all accounts and strongly recommended.
• Biometric login available on the mobile app to reduce reliance on passwords.
• Access controls — internal access to player data is restricted to staff who need it for their role and is logged for audit purposes.
• Regular security reviews — the platform undergoes periodic security assessments to identify and address vulnerabilities.

No digital system is completely immune to security incidents. In the event of a data breach that is likely to affect your rights, 777zy will notify affected players promptly and take immediate steps to contain and address the incident.

7. How Long We Keep Your Data

We retain personal data for as long as it is needed for the purpose it was collected, or for as long as required by applicable obligations. The general retention periods are:

• Account data: Retained for the life of the account plus five years after closure, to support dispute resolution and compliance requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• KYC documents: Retained for five years from the date of verification or account closure, whichever is later.
• Gaming activity logs: Retained for five years.
• Support communications: Retained for two years from the date of the last interaction.
• Technical logs: Retained for up to 12 months and then deleted or anonymised.

At the end of the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

If you submit a deletion request before the end of a retention period, we will delete what we legally can and explain which elements need to be retained and why.

8. Cookies & Tracking

777zy uses cookies — small text files stored on your device — to make the platform function properly and to improve your experience. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, notification choices, and responsible gaming limits so you do not need to reset them each session.
• Analytics cookies: Help us understand which parts of the platform are used most, how players navigate between sections, and where technical problems occur. This data is used in aggregate to improve the platform and is not used to identify individual players.

We do not use third-party advertising cookies or allow advertising networks to track your activity on 777zy.

You can control cookies through your browser settings. Disabling essential cookies will affect platform functionality. Disabling analytics cookies will not affect your ability to use the platform.

9. Your Data Rights

You have a number of rights regarding the personal data 777zy holds about you. These are explained below along with how to exercise each one.

10. Children and Minors

777zy is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18.

During the registration process, you are required to confirm that you are 18 or over. KYC verification — including submission of a valid government-issued ID showing your date of birth — is required before any withdrawal is processed. This serves as a further check on age eligibility.

If we become aware that an account has been registered by or on behalf of a minor, the account will be closed immediately, any balance will be forfeited, and any data collected will be deleted promptly.

If you are aware of a minor accessing 777zy, please contact support immediately.

11. Payment Data

777zy handles payment transactions through third-party payment processors — JazzCash, Easypaisa, Raast, and banking partners. This means your full financial credentials are managed by your chosen provider, not by 777zy directly.

What 777zy does record in connection with payments:

• The payment method type used (e.g., JazzCash, bank transfer)
• Transaction amount in PKR
• Transaction reference number from the payment provider
• Date and time of the transaction
• Whether the transaction was a deposit or withdrawal and its status

We do not store your full mobile wallet account number, bank account number, or any authentication credentials associated with your payment method. This data is held by your payment provider under their own applicable security standards.

For withdrawal processing, we verify that the withdrawal destination matches the payment method used for your most recent deposit, and that the account name matches your verified 777zy account details.

12. Marketing Communications

777zy may send you promotional communications about bonuses, new games, and platform updates. This happens only where you have opted in to receive such messages during registration or through your account notification preferences.

• You can opt out of marketing communications at any time through the notification settings in your account, or by contacting support and requesting to be removed from our mailing list.
• Opting out of marketing does not affect essential communications — we will still contact you about account security alerts, verification requests, withdrawal confirmations, and other service-related messages.
• We do not share your contact details with third parties for their own marketing purposes.

If you receive a communication claiming to be from 777zy that seems unusual — for example, asking for your password or directing you to a website that is not 777zy.pro — treat it as suspicious and contact support before taking any action.

13. Changes to This Policy

777zy may update this Privacy Policy from time to time. Material changes — those that meaningfully affect your rights or how your data is used — will be communicated to active account holders via email or an in-account notification before the change takes effect.

Minor updates, such as clarifications to existing language or corrections to formatting, may be made without advance notice. The "last updated" date at the top of this page reflects every revision.

Continuing to use 777zy after a policy update takes effect constitutes your acknowledgement of the updated policy. If you disagree with any material change, you should close your account and withdraw your balance before the change takes effect.

14. Contact — Data Queries

For any question about this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the 777zy support team through any of the following channels:

• Live chat: Available 24/7 within your account dashboard. The quickest route for most queries — typical first response under two minutes.
• Email: [email protected] — for detailed data subject requests or where documents need to be shared securely. Monitored around the clock.
• FAQ: Common questions about account data, KYC, and privacy are covered at the FAQ page.

When submitting a data subject request by email, please include your registered account email address and a brief description of your request so it can be directed to the right team promptly. We will acknowledge receipt and aim to fulfil the request within 30 days.