Privacy Policy – 777ap

1. Introduction

777ap ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access the Platform at https://777ap.org. This Privacy Policy has been prepared to ensure transparency regarding how personal data is handled across all 777ap services, including sports betting, live casino, slots, and account management functions.

By registering an account with 777ap or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data in the manner described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform immediately.

This Policy should be read alongside the Terms & Conditions, which govern the overall use of the 777ap Platform.

2. Personal Data We Collect

777ap collects the following categories of personal data from users:

• Identity Data: Full legal name as it appears on your CNIC, date of birth, gender, nationality.
• Contact Data: Pakistani mobile number (registered in your name), email address where provided.
• Identity Verification Data: CNIC number, scanned or photographed images of your CNIC (front and back), selfie photograph taken alongside your CNIC for KYC verification purposes.
• Financial Data: JazzCash or Easypaisa mobile wallet number, bank account details (account title, IBAN, bank name — HBL, UBL, Meezan Bank, Bank Alfalah) for withdrawal processing, transaction history within the Platform.
• Account Data: Username, hashed password (the actual password is never stored in readable form), account balance, betting and gaming history, bonus activity, responsible gaming settings.
• Technical Data: IP address, device type, operating system, browser type, screen resolution, session timestamps, connection type (mobile data or Wi-Fi).
• Usage Data: Pages visited within the Platform, games played, markets accessed, search queries within the Platform, click patterns, and session duration.
• Communications Data: Records of live chat support interactions and any correspondence sent to 777ap support.

3. How We Collect Your Data

777ap collects personal data through the following channels:

• Direct submission: Information you provide during registration, KYC verification, deposit/withdrawal requests, or when contacting support via live chat.
• Automated technical collection: Technical and usage data is collected automatically when you access the Platform, through server logs, session tracking, and similar technologies.
• Payment processors: When you initiate a transaction via JazzCash, Easypaisa, or a bank transfer, the relevant payment provider transmits transaction confirmation data to 777ap for deposit/withdrawal reconciliation. 777ap does not store full payment credentials — only reference identifiers and transaction status records.
• KYC verification partners: In certain cases, identity document verification may be processed through a third-party compliance technology provider. Such providers are contractually bound to handle data only for the purpose of KYC verification on behalf of 777ap.

4. Purposes of Data Processing

777ap processes personal data for the following specific purposes:

• To create and administer your 777ap account and provide access to the Platform's Services.
• To verify your identity and age in compliance with responsible gaming standards (minimum age 18). 18+
• To process deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and other supported payment methods in PKR.
• To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as described in the Terms & Conditions.
• To administer bonuses, promotions, and loyalty programmes applicable to your account.
• To provide customer support via live chat and to maintain records of support interactions.
• To send service-related communications — such as security alerts, OTP codes for 2FA login, and KYC status notifications — via SMS to your registered Pakistani mobile number.
• To maintain responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion, in accordance with the Responsible Gaming framework.
• To comply with applicable legal obligations including anti-money laundering (AML) requirements.
• To improve the Platform through aggregated, anonymised analysis of usage patterns and technical performance data.

5. Legal Basis for Processing

777ap processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the services described in the Terms & Conditions, including account creation, bet placement, and payment processing.
• Legitimate interests: Security monitoring, fraud prevention, platform improvement, and maintaining the integrity of the betting and gaming environment.
• Legal obligation: KYC/AML compliance, age verification, and record-keeping obligations.
• Consent: Where applicable, where you have explicitly provided consent for a specific processing activity (e.g., marketing communications where offered). Consent may be withdrawn at any time via account settings or by contacting support.

6. KYC & Identity Document Data

6.1 Identity documents submitted for KYC — specifically CNIC images and selfie photographs — are treated as a special category of sensitive personal data and are subject to heightened security controls.

6.2 KYC documents are stored on encrypted servers with access restricted to authorised compliance personnel only. Documents are retained for the period required by applicable AML regulations and then securely deleted.

6.3 KYC documents are used solely for identity verification purposes. They are not used for any commercial profiling, advertising targeting, or shared with third parties other than as described in Section 9 of this Policy.

6.4 If your KYC submission is rejected, you will be notified via SMS and given the opportunity to resubmit. Rejected documents are deleted from the verification queue within 30 days of the rejection decision.

7. Payment Data

7.1 777ap uses tokenised payment processing for all transactions. This means that full JazzCash wallet credentials, Easypaisa PINs, or bank account login credentials are never transmitted to or stored on 777ap servers. Only transaction reference identifiers, amounts, timestamps, and status codes are retained by 777ap.

7.2 Bank account details (account title and IBAN) submitted for withdrawal purposes are stored in encrypted form and used exclusively for processing withdrawal requests to the account holder's verified account.

7.3 Transaction histories — showing deposit and withdrawal amounts, dates, and payment method identifiers — are retained as part of your account record for the duration of your account and for a period thereafter as required by applicable financial record-keeping obligations.

8. Cookies & Tracking Technologies

8.1 The 777ap Platform uses session cookies and persistent cookies to maintain your logged-in state, remember your language and display preferences, and support the Platform's technical functionality. These are first-party cookies operated by 777ap only.

8.2 Session cookies expire when you close your browser. Persistent cookies remain on your device for a set period (typically 30 days for the "Remember me" login preference) and can be deleted via your browser settings at any time.

8.3 777ap uses server-side analytics to understand aggregate usage patterns for Platform improvement purposes. This data is anonymised and does not identify individual users. No third-party advertising trackers or social media pixels are used on the 777ap Platform.

8.4 You can disable cookies via your browser settings, but doing so may affect the functionality of certain Platform features, including the persistent login option and some aspects of the live casino interface.

9. Data Sharing & Third Parties

777ap does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared with third parties only in the following limited circumstances:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, and banking partners solely for the purpose of processing your deposits and withdrawals.
• KYC technology providers: CNIC and selfie data may be processed by a contracted identity verification service provider, bound by strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or regulatory requirement, 777ap may disclose account or transaction data to competent authorities. 777ap will notify affected users of such disclosures to the extent permitted by law.
• Fraud prevention: Where there is reasonable suspicion of fraud or financial crime, relevant data may be shared with fraud prevention databases or law enforcement agencies.

All third-party service providers engaged by 777ap are contractually required to process personal data only for the purpose for which it was shared and to maintain security standards consistent with 777ap's own data protection standards.

10. Data Retention

10.1 Account data is retained for the duration of an active account. If an account is closed voluntarily or suspended, data is retained for a minimum of five (5) years thereafter for AML compliance and dispute resolution purposes, after which it is securely deleted or anonymised.

10.2 KYC identity documents are retained for the period required by applicable AML regulations from the date of verification. After this period, document images are securely deleted.

10.3 Live chat support records are retained for 24 months for quality assurance and dispute resolution purposes.

10.4 Aggregated, anonymised usage and analytics data may be retained indefinitely as it does not constitute personal data.

11. Data Security

11.1 All data transmitted between your device and the 777ap Platform is encrypted using TLS 1.2 or higher (256-bit encryption), indicated by the HTTPS protocol and padlock icon in your browser address bar.

11.2 Account passwords are stored using one-way cryptographic hashing. 777ap employees cannot read your password. If you forget your password, it must be reset — not recovered.

11.3 Sensitive data at rest (KYC documents, IBAN details) is stored with AES-256 encryption on access-controlled servers. Access is restricted to authorised personnel with a legitimate business need.

11.4 777ap conducts regular internal security reviews. In the event of a personal data breach that poses a risk to your rights and freedoms, 777ap will notify affected users within a reasonable timeframe and take immediate remedial action.

11.5 You play a role in your own data security. 777ap strongly recommends enabling two-factor authentication (2FA) via SMS OTP in your account security settings, particularly given that your JazzCash or Easypaisa wallet is linked to the same mobile number.

12. Your Data Rights

As a 777ap account holder, you have the following rights with respect to your personal data, subject to applicable legal constraints:

• Right of access: You may request a copy of the personal data held about you. Requests will be responded to within 30 days.
• Right to rectification: You may correct inaccurate personal data (e.g., a misspelled name) by contacting support via live chat. Note that name corrections must be consistent with your CNIC.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to our legal retention obligations. Data subject to AML record-keeping requirements cannot be deleted within the mandatory retention period.
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances while a dispute or concern is being investigated.
• Right to data portability: You may request your account and transaction data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time via account settings or by contacting support.

To exercise any of the above rights, contact 777ap via the live chat function on this page. We may need to verify your identity before processing your request.

13. Children's Privacy

The 777ap Platform is strictly for individuals aged 18 and above. 18+ We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user under 18 has registered an account, we will close the account immediately and delete associated personal data, retaining only what is required by law. Parents and guardians who suspect a minor has registered on 777ap should contact support immediately via live chat.

14. Third-Party Links

The 777ap Platform does not contain links to external websites or third-party platforms. This Privacy Policy applies exclusively to data collected through https://777ap.org and its associated interfaces. 777ap is not responsible for the privacy practices of any external platform.

15. Changes to This Privacy Policy

777ap reserves the right to update this Privacy Policy at any time. Material changes will be communicated via SMS notification to your registered Pakistani mobile number prior to the effective date of the change. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Platform following notification constitutes acceptance of the updated Policy.

16. Contact & Data Queries

For any queries, concerns, or requests relating to this Privacy Policy or your personal data held by 777ap, please contact our support team via the 24/7 live chat available on all pages of the Platform. You may also direct written data enquiries to: [email protected]

We aim to acknowledge all data enquiries within 48 hours and to resolve them within 30 days.