Privacy Policy — How 777q Handles Your Data

This Privacy Policy ("Policy") describes how 777q ("the Platform", "we", "us", "our"), operated via the website at 777q.bid, collects, uses, stores, shares, and protects the personal data of registered players and visitors to the platform. It applies to all users of 777q services, including players located in Pakistan and all other jurisdictions from which the platform is accessible.

777q is committed to handling your personal data responsibly, lawfully, and transparently. This Policy has been written in plain English to ensure that you can understand exactly what we do with your information without needing a legal background to interpret it. Where technical or legal terms are unavoidable, we have defined them clearly.

This Policy should be read alongside the 777q Terms and Conditions, which are available at 777q.bid/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions regarding personal data matters, this Privacy Policy shall prevail.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could identify a living individual, either directly (e.g., name, CNIC number) or indirectly (e.g., IP address in combination with other identifiers).
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction — whether automated or manual.
• "Data Controller" means 777q, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of 777q and under 777q's documented instructions.
• "KYC" means Know Your Customer — the identity verification process required under 777q's international gaming licence.
• "Player" means any individual who has registered and holds an active or historical account on the 777q platform.
• "Sensitive Data" means a subset of personal data that warrants heightened protection, including identification document numbers, financial account details, and data about gambling behaviour that could relate to vulnerability.

777q collects personal data directly from players at the point of registration and throughout the account lifecycle, as well as automatically through technical systems when you interact with the platform. The categories of data collected are set out in the table below.

777q collects only the data that is necessary for the purposes described in Section 5 of this Policy. We do not collect biometric data, health data, or political opinions.

777q processes personal data only where a recognised lawful basis exists for doing so. The primary lawful bases applicable to 777q's data processing activities are:

• Performance of a Contract: The majority of data processing is necessary to provide you with 777q services in accordance with our Terms and Conditions — including account management, game access, deposit processing, and withdrawal fulfilment.
• Legal Obligation: Certain processing is required by law or by the conditions of 777q's international gaming licence — particularly KYC identity verification, anti-money laundering (AML) screening, age verification, and transaction record-keeping.
• Legitimate Interests: 777q processes certain data based on legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the platform experience — provided those interests do not override your fundamental privacy rights.
• Consent: Where processing is not covered by the above bases — for example, optional marketing communications — 777q will seek your explicit consent and will provide a clear mechanism to withdraw that consent at any time.

777q uses your personal data for the following specific purposes:

Account Management

To create, maintain, and administer your 777q account — including verifying your identity, authenticating your logins, enabling account recovery, and managing your account preferences and settings.

Payment Processing

To process deposits via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, USDT TRC20, and cash deposit channels, and to process withdrawal requests to your verified payment method. Financial data is shared with payment processors solely to execute transactions.

KYC and Regulatory Compliance

To verify your age (minimum 21 years), identity, and source of funds as required under 777q's international gaming licence. This data is also used to comply with applicable anti-money laundering and counter-terrorism financing obligations, including filing reports with relevant authorities where legally required.

Game Services and Sportsbook

To provide access to 777q's full game library — including live casino, slots, cricket betting (PSL, ICC, Asia Cup), UFC markets, and live game shows — and to maintain accurate records of game sessions, bets placed, and outcomes for dispute resolution purposes.

Responsible Gaming

To monitor gaming behaviour patterns that may indicate problem gambling and to apply and enforce player-requested responsible gaming controls, including deposit limits, session time limits, cooling-off periods, and self-exclusion. This processing is carried out under 777q's legitimate interests in player welfare and licensing compliance.

Fraud Prevention and Security

To detect and prevent fraudulent activity, bonus abuse, multiple account creation, unauthorised access attempts, and other breaches of the 777q Terms and Conditions. Technical data including IP addresses and device identifiers are used as part of this fraud detection system.

Customer Support

To respond to inquiries, resolve disputes, process complaints, and provide general platform assistance via live chat and email. Communications data is retained in accordance with the retention schedule in Section 8.

777q shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, SadaPay, and USDT network processors receive the transaction data necessary to process deposits and withdrawals. These processors are engaged under contractual data processing agreements.
• KYC and Identity Verification Services: Third-party KYC verification providers receive submitted identity documents for the purpose of authenticating player identity and age. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game Content Providers: Third-party game studios and live dealer platform providers may receive your player session data (anonymised where possible) as necessary to deliver game content and resolve game-related disputes.
• Fraud Prevention Systems: 777q uses third-party fraud detection systems that may process technical data (IP addresses, device fingerprints, login patterns) to identify fraudulent activity patterns.
• Regulatory Authorities: 777q's international gaming licence and applicable anti-money laundering legislation may require disclosure of specific transaction data or player information to licensing authorities or law enforcement agencies, without prior notice to the Player.
• Professional Advisers: Legal, audit, and accounting professionals retained by 777q may access personal data in the performance of their professional services, subject to professional confidentiality obligations.

All third-party data processors engaged by 777q are required to implement appropriate technical and organisational data security measures and are contractually prohibited from using player data for purposes beyond those specified in their data processing agreements with 777q.

777q implements a multi-layered technical and organisational security framework to protect player personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• 256-bit SSL / TLS 1.3 Encryption: All data transmitted between player devices and 777q servers is protected by industry-standard SSL/TLS encryption. The padlock icon visible in your browser address bar confirms this protection is active during your session.
• Encrypted Data Storage: Personal data, KYC documents, and financial records held in 777q databases are stored in encrypted format. Database access is restricted and logged.
• Access Controls: Access to player personal data within 777q's systems is granted only to authorised personnel who require that data to perform their specific job functions. Access rights are regularly reviewed and revoked when no longer required.
• Intrusion Detection: 777q's infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data access patterns.
• Password Security: Player account passwords are stored using one-way cryptographic hashing — your actual password is never stored in readable form and cannot be retrieved even by 777q staff.
• Two-Factor Authentication: Optional SMS-based two-factor authentication is available for all registered 777q accounts as an additional access security layer.

777q retains personal data for as long as is necessary for the stated purpose and in accordance with applicable legal obligations. The following retention schedule applies:

• Account Data (active accounts): Retained for the duration of the account's active status plus five (5) years following permanent account closure.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required under international gaming licensing and anti-money laundering obligations.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming Session Records: Retained for three (3) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Support Communications: Live chat transcripts and email correspondence retained for two (2) years from the date of the most recent communication in the thread.
• Technical / Log Data: Server logs and IP records retained for twelve (12) months from the date of collection.
• Marketing Data: Retained until you withdraw marketing consent or unsubscribe, after which your data will be moved to a suppression list to ensure we do not contact you again.

At the end of each applicable retention period, data is securely deleted or anonymised in accordance with 777q's data deletion procedures. Anonymised, aggregated data (from which individual players cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

777q uses cookies and similar technologies (such as local storage objects and session tokens) on the 777q.bid website. Cookies are small text files placed on your device by your browser when you visit a website. They allow the website to function correctly and to remember your preferences across sessions.

Types of Cookies Used by 777q

• Strictly Necessary Cookies: These cookies are essential for the 777q platform to function. They include session authentication tokens that keep you logged in, security cookies that help prevent fraudulent logins, and cookies that manage your platform preferences. These cannot be disabled without disrupting core platform functionality.
• Performance and Analytics Cookies: 777q uses first-party analytics cookies to understand how players use the platform — which pages are most visited, where players encounter errors, and how navigation flows are used. This data is aggregated and does not identify individual players.
• Functionality Cookies: These cookies remember your language preferences, display settings, and other customisation choices so that you do not need to reconfigure them on each visit.

You can manage and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the 777q platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Age verification is a mandatory step in the 777q KYC process. Players are required to submit a valid government-issued photo ID confirming that they are aged 21 or above. This is not a self-declaration — it is a document verification process conducted by 777q or an authorised KYC service provider.

If you are aware of a minor who has registered or attempted to register a 777q account, please contact us immediately at [email protected] with the relevant details so that we can investigate and take appropriate action.

As a 777q player, you have the following rights in relation to your personal data. These rights can be exercised by submitting a written request to [email protected], clearly stating which right you wish to exercise and the data category concerned.

• Right of Access: You have the right to request a copy of the personal data 777q holds about you. We will respond to verified access requests within 30 calendar days.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data. Some corrections (e.g., name and date of birth) require supporting documentation to verify the change.
• Right to Deletion: You have the right to request deletion of your personal data where it is no longer necessary for its original purpose and where no overriding legal retention obligation exists. Note that KYC documents and transaction records are subject to mandatory retention periods under gaming licensing requirements and cannot be deleted before those periods expire.
• Right to Restriction: You have the right to request that 777q restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where 777q relies on legitimate interests as the lawful basis. 777q will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that occurred before withdrawal.

777q will not charge a fee for handling data rights requests unless the request is clearly unfounded, excessive, or repetitive. We will respond to all verified requests within 30 calendar days, or within 60 days for complex requests with notice to you.

777q operates under an international gaming licence, and some of the third-party service providers with whom personal data is shared (as described in Section 6) may be located in jurisdictions outside Pakistan. Transfers of personal data to these third parties are conducted only under contractual arrangements that require the recipient to maintain data protection standards equivalent to those applied by 777q.

In particular, data transferred to KYC service providers, payment processors, and game content providers is governed by data processing agreements that restrict the use of player data to the specific purpose for which it was shared, prohibit onward transfers without 777q's consent, and require implementation of appropriate technical security measures.

777q may send you promotional communications about bonuses, new game releases, PSL cricket betting promotions, and other platform features via email or SMS, where you have provided explicit consent to receive such communications during account registration or subsequently.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any 777q marketing email;
• Replying "STOP" to any 777q SMS marketing message;
• Updating your communication preferences in your account settings; or
• Contacting 777q support at [email protected] with an unsubscribe request.

Withdrawing marketing consent does not affect your ability to use the 777q platform or receive service-related communications such as transaction confirmations, account security alerts, or support responses. These service communications are sent on the basis of the contractual relationship between you and 777q, not on the basis of marketing consent.

777q reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the structure of our service offerings. When material changes are made to this Policy, 777q will notify registered players via the email address on file at least 14 days before the revised Policy takes effect.

The "Version" and "Effective Date" shown at the top of this document identify the current version. The most current version of this Privacy Policy is always available at 777q.bid/privacy-policy. Your continued use of the 777q platform following the effective date of any revised Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, about how 777q handles your personal data, or if you wish to exercise any of the data rights described in Section 11, please contact 777q's support team:

• Email: [email protected] (plain text — not a clickable link)
• Method: Live chat inside your 777q account (fastest response, available 24/7)
• Response Time: Email queries regarding data rights are responded to within 5 business days, with substantive resolution within 30 calendar days

This Privacy Policy was last reviewed and updated in January 2026. By continuing to use the 777q platform, you confirm your understanding and acceptance of the practices described in this Policy.