01Who We Are
c777 ("we", "us", "our") operates the online gaming and sports betting platform available at c777.world and associated mobile interfaces (collectively "the Platform"). For the purposes of data protection law, c777 is the data controller responsible for the personal data of all registered and prospective players in Pakistan.
This Privacy Policy applies to all personal data collected in connection with your use of the c777 Platform, including during the registration process, while playing games, when making deposits or withdrawals, when contacting our support team, and when receiving our marketing communications.
This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy. By registering a c777 account or using the Platform, you acknowledge that you have read and understood how we handle your personal data as described in this document.
If you have questions about this Privacy Policy or your data before registering, please contact us at support@c777.world — our team will respond within 24 hours.
02Personal Data We Collect
c777 collects only the personal data that is genuinely necessary to provide a safe, compliant, and high-quality gaming experience. We do not collect data speculatively or beyond what is required. Below is a full breakdown of what we collect and when.
| Category | Data Collected | When Collected |
|---|---|---|
| Identity | Full legal name, date of birth, CNIC number, gender | Registration & KYC verification |
| Contact | Email address, mobile number, residential address | Registration |
| Financial | Easypaisa / JazzCash / bank account details (account holder name, account number), transaction history | First deposit & withdrawals |
| Verification Documents | CNIC front & back, selfie with CNIC, proof of payment method ownership | KYC process |
| Account Activity | Login timestamps, session durations, game history, bet records, bonus usage | Ongoing use of Platform |
| Technical | IP address, device type, browser type & version, operating system, screen resolution | All Platform visits |
| Communications | Live chat logs, email correspondence, support ticket content | When you contact support |
| Marketing Preferences | Email/SMS opt-in status, notification preferences, preferred game categories | Registration & account settings |
Data We Do Not Collect
c777 does not collect your full credit or debit card number — only the last four digits and card type are stored for reference. We do not collect biometric data beyond what is provided in KYC selfies. We do not monitor your activity outside the c777 Platform.
Providing accurate personal data is a condition of your c777 account. Submitting false information violates our Terms and Conditions and may result in account closure. See our Terms and Conditions for full details.
03How We Use Your Personal Data
Every piece of data c777 collects is used for a specific, documented purpose. We do not process your data for purposes beyond those described below without obtaining your explicit consent first.
Account Administration
We use your identity and contact data to create and manage your c777 account, process your login credentials securely, communicate account-related information such as withdrawal confirmations and security alerts, and reset your password if you lose access. This processing is essential for the operation of your account — without it, we cannot provide the service.
Identity Verification & KYC Compliance
c777 is required by anti-money laundering regulations to verify the identity of players before processing withdrawals above certain thresholds. Your CNIC documents and proof of payment method are used solely for this purpose. KYC documents are reviewed by c777's compliance team and, where we use a third-party KYC service, by that service under strict data processing agreements. Documents are not stored beyond the period required by regulation — see Section 7 for retention details.
Payment Processing
Your financial data is used to process deposits to your c777 balance and to return withdrawals to your registered payment method. c777 does not process payments directly — this is handled by our payment service providers (Easypaisa, JazzCash, NayaPay, SadaPay, bank networks, and card schemes). Only the minimum data required to execute a transaction is shared with each payment provider.
Fraud Prevention & Security
Technical data such as your IP address, device fingerprint, and login patterns are used to detect and prevent fraudulent account access, multi-accounting, bonus abuse, and money laundering. This processing is in c777's legitimate interest and is also required to fulfil our regulatory obligations.
Responsible Gaming Monitoring
Your account activity data — session length, deposit frequency, loss patterns, game selections — is used by c777's responsible gaming system to identify behaviour that may indicate problem gambling. Where such patterns are identified, c777 may make contact proactively or apply account-level safeguards. This processing is carried out in your vital interest and in fulfilment of our responsible gaming obligations.
Customer Support
When you contact c777's support team, the content of your communications is used to investigate and resolve your query. Support communications are logged and retained for quality assurance and to maintain a history of resolved issues. Logs may also be used in the event of a formal dispute.
Platform Improvement
Aggregated, anonymised data about how players use the c777 Platform — which games are most popular, which sections are most visited, where players drop off during registration — is used to improve the Platform's design and functionality. This analysis does not identify individual players.
04Legal Basis for Processing
Every data processing activity at c777 is grounded in a recognised legal basis. Here is how each basis applies:
- Contractual necessity: Processing your identity, contact, financial, and account activity data to operate your account and fulfil the agreement set out in our Terms and Conditions.
- Legal obligation: Processing identity and KYC documents to comply with anti-money laundering regulations and financial crime prevention requirements applicable to online gaming operators.
- Legitimate interests: Processing technical data for fraud detection, platform security, multi-account prevention, and aggregate analytics. c777's legitimate interest in maintaining a safe and compliant platform does not override your fundamental privacy rights.
- Consent: Processing your data for marketing communications — email newsletters, SMS promotions, personalised bonus offers — is based on your consent. You may withdraw this consent at any time without affecting your account or any other processing.
- Vital interests: Processing account activity data to identify and respond to problem gambling behaviour, where this may affect your wellbeing.
05Data Sharing & Third-Party Processors
c777 does not sell your personal data. We do not share your data with third parties for their own marketing purposes. We share data only with the specific categories of third-party processors listed below, and only to the extent necessary for the stated purpose.
Payment Processors
Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, Visa, and Mastercard each receive only the transaction data required to process your specific deposit or withdrawal. No additional personal data beyond what is required by the payment scheme is shared. All payment processors are contractually bound to use your data solely for transaction processing.
KYC Verification Services
Where c777 uses a third-party identity verification service to validate your CNIC or cross-reference identity data, that service receives your document images and personal details solely for verification purposes. The service is contractually prohibited from using your data for any other purpose and is required to delete raw document data following successful verification.
IT Infrastructure & Cloud Services
c777's Platform data is hosted on secure cloud infrastructure. Our hosting providers operate as data processors under written agreements that bind them to equivalent data protection standards. They do not have access to your data for any purpose beyond infrastructure provision.
Regulatory Authorities
Where required by applicable law or regulation, c777 will share personal data with government bodies, law enforcement agencies, or regulatory authorities. c777 is not required to notify you when data is shared in response to a lawful request from such authorities.
Professional Advisors
In the context of legal proceedings, audits, or regulatory reviews, c777's legal counsel, auditors, or compliance consultants may access personal data on a strictly need-to-know basis. All professional advisors are bound by confidentiality obligations.
Every third-party processor engaged by c777 is covered by a written Data Processing Agreement requiring them to handle your data with the same standard of care c777 applies internally. We review these agreements annually.
06Data Security
c777 applies a layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or loss. The following technical and organisational measures are in place:
- Encryption at rest and in transit: All personal data stored on c777's systems is encrypted using AES-256. All data transmitted between your device and c777's servers is protected by TLS 1.3. This means your data cannot be read in transit, even if intercepted.
- Access controls: Access to player personal data within c777 is restricted on a strict need-to-know basis. Staff roles are defined, and access rights are reviewed quarterly. All data access is logged and auditable.
- Two-factor authentication: 2FA is available for all player accounts and is required for all administrative staff access to systems containing personal data.
- Intrusion detection: c777's infrastructure is monitored continuously for anomalous activity. Automated alerts trigger immediate investigation of any suspicious access patterns.
- Penetration testing: c777 commissions independent penetration testing of its Platform and data systems at least annually, with any identified vulnerabilities remediated promptly.
- Incident response: In the event of a data breach, c777 has a documented incident response plan. Affected players will be notified within 72 hours of c777 becoming aware of a breach that poses a risk to their rights or freedoms.
While c777 takes all reasonable steps to protect your data, no digital system is completely immune from risk. You should also take steps to protect your own account — use a strong, unique password for your c777 account, enable two-factor authentication, and do not share your login credentials with anyone.
07Data Retention
c777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
- Active account data (identity, contact, financial, account activity): Retained for the duration of your account and for 7 years following account closure, in compliance with anti-money laundering record-keeping requirements.
- KYC documents (CNIC images, selfies): Retained for the duration of your account and for 5 years after account closure, or longer if required by a specific regulatory direction.
- Transaction records: Retained for 7 years following each transaction, as required by financial regulations.
- Support communications: Retained for 3 years from the date of the last communication in a support thread, to support dispute resolution and quality assurance.
- Technical / session data: Retained for 12 months, then anonymised or deleted.
- Marketing preferences and opt-in records: Retained for the life of your account and for 3 years following withdrawal of consent, to demonstrate compliance with consent requirements.
At the end of each applicable retention period, data is securely deleted or irreversibly anonymised. c777 does not retain identifiable personal data beyond what is legally required or operationally necessary.
08Cookies & Tracking Technologies
The c777 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used. A cookie is a small text file stored on your device by the Platform.
Types of Cookies We Use
| Cookie Type | Purpose | Duration | Opt-Out Available |
|---|---|---|---|
| Login session management, security tokens, fraud detection, responsible gaming tools | Session / 30 days | No — required for Platform to function | |
| Aggregate usage statistics — page visits, session length, feature usage. Data is anonymised before analysis. | 12 months | Yes — via cookie settings | |
| Personalised content display and tracking campaign effectiveness. Used only if you have opted into marketing. | 90 days | Yes — via account preferences or cookie settings |
You can manage your cookie preferences at any time through the cookie settings panel accessible in the Platform footer. Disabling analytics or marketing cookies does not affect your ability to play games or use any Platform features — only essential cookies are required for functionality.
Your browser settings may also allow you to block or delete cookies across all websites. Note that blocking essential cookies will prevent you from logging into your c777 account.
09Your Data Rights
You have specific rights over your personal data as held by c777. These rights apply to all registered players. To exercise any of these rights, please contact our Data Protection team at support@c777.world with the subject line "Data Rights Request". We will respond within 30 days.
Request a copy of all personal data c777 holds about you. We will provide this in a portable, readable format within 30 days. No fee is charged for standard access requests.
Request correction of inaccurate or incomplete personal data. For most account details, you can update these directly in your account settings. For identity documents, contact support.
Request deletion of your personal data where it is no longer necessary for the purposes it was collected. Note: data subject to legal retention obligations (7 years for financial records) cannot be erased early.
Request that processing of your personal data be restricted — for example, while we verify the accuracy of a piece of data you have challenged. Restricted data is retained but not actively used.
Receive your personal data in a structured, commonly-used, machine-readable format (JSON or CSV). This applies to data you provided to us and that we process on the basis of contract or consent.
Object to processing based on legitimate interests — including profiling for fraud detection — where you believe your rights override our legitimate interest. We will review each objection individually.
Exercising your data rights will not result in your account being penalised or treated less favourably. However, certain rights — particularly erasure — may not be fully exercisable while you hold an active account balance or while an open investigation is in progress.
10Marketing Communications
c777 may send you promotional communications — bonus offers, new game announcements, PSL and cricket betting promotions, VIP Club invitations, and platform news — by email and SMS, but only if you have opted in to receive them. You can update your marketing preferences at registration or at any time through your account settings.
Opting out of marketing communications does not affect your account in any way. You will continue to receive essential transactional communications — withdrawal confirmations, security alerts, KYC requests, and account notifications — regardless of your marketing opt-in status, as these are necessary for the operation of your account.
c777 personalises marketing communications based on your game preferences, betting history, and promotional eligibility. For example, a player who frequently uses the PSL betting section may receive specific PSL-related bonus offers during the season. This personalisation is based on your c777 Platform activity only — we do not use data sourced from external platforms to build marketing profiles.
To unsubscribe from all marketing communications immediately, you may: (a) click the unsubscribe link in any marketing email; (b) reply STOP to any marketing SMS; or (c) update your notification preferences in your c777 account settings. Opt-out requests are processed within 48 hours.
11Children's Privacy
The c777 Platform is strictly for adults aged 18 and over. c777 does not knowingly collect personal data from anyone under the age of 18. Our registration process includes age declaration and date-of-birth collection specifically to screen out underage users. KYC verification provides a secondary check against registered age.
If c777 discovers or has reasonable grounds to believe that a registered account belongs to someone under 18, the account will be suspended immediately, all gameplay will be voided, any deposits will be returned to the funding payment method, and the matter will be referred to our responsible gaming safeguarding process.
If you are a parent or guardian and believe your child has registered a c777 account, please contact us immediately at support@c777.world. We will investigate and act promptly.
12Changes to This Privacy Policy
c777 reviews this Privacy Policy regularly and updates it to reflect changes in our data practices, applicable law, or regulatory guidance. When material changes are made to this policy, we will:
- Update the "Last Updated" date at the top of this page.
- Notify all registered players via email at least 14 days before material changes take effect.
- For changes that require your fresh consent (for example, a new use of data not previously disclosed), obtain that consent explicitly before the new processing begins.
Continued use of the c777 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the updated policy, you should stop using the Platform and contact support to close your account.
Minor clarifications, formatting corrections, or updates to contact details that do not alter the substance of the policy may be made without prior notice.
13Contact & Privacy Complaints
If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact c777's Data Protection team directly:
Subject: "Data Rights Request"
Response: within 30 days
For urgent data concerns
Avg. first response: <4 min
If you are not satisfied with c777's response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. c777 will cooperate fully with any such investigation.
c777 takes privacy complaints seriously. Every formal privacy complaint is acknowledged within 24 hours, assigned a reference number, and reviewed by a senior member of the compliance team. We aim to resolve all privacy complaints within 30 days of receipt.