o777 Privacy Policy – How We Handle Your Data

1. Introduction

o777 is committed to protecting the privacy and personal data of all players using the Platform, including the significant number of Pakistani players who access o777 from cities including Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad. This Policy is written in plain, accessible English and is intended to be transparent about our data handling practices.

This Policy should be read in conjunction with the o777 Terms and Conditions, which govern the overall relationship between o777 and registered players. In the event of any conflict between this Policy and the Terms and Conditions regarding privacy matters, this Policy shall prevail.

2. Personal Data We Collect

o777 collects personal data in the following categories:

• Registration Data: Full name, email address, date of birth, residential address (including city and province in Pakistan), and preferred currency (PKR).
• Identity Verification (KYC) Data: Copy of National Identity Card (CNIC), proof of current residential address, and any additional documentation requested as part of enhanced due diligence procedures.
• Financial Data: Payment method identifiers (e.g., JazzCash mobile number, Easypaisa account reference, bank account name for HBL/UBL/Meezan Bank/Bank Alfalah transactions), deposit and withdrawal history, and account balance records.
• Gaming Activity Data: Betting history, game sessions, wagering amounts, win/loss records, and responsible gaming tool usage (e.g., deposit limit settings, self-exclusion requests).
• Technical Data: IP address, browser type and version, device type and operating system, session timestamps, and referral source data collected automatically when you access the o777 Platform.
• Communication Data: Records of correspondence between you and the o777 support team, including email content, support ticket history, and any feedback submitted through the Platform.

3. How We Use Your Personal Data

o777 uses the personal data collected for the following purposes:

• Creating and managing your o777 account, including verifying your identity and age (18+) through the KYC process.
• Processing PKR deposits and withdrawals via JazzCash, Easypaisa, and Pakistani bank accounts, and maintaining accurate transaction records.
• Complying with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations applicable to o777's operations.
• Providing customer support, responding to account queries, and resolving disputes through the o777 support team.
• Enforcing responsible gaming commitments — including applying deposit limits, processing self-exclusion requests, and identifying problematic gaming patterns that may require intervention.
• Improving the Platform through analysis of aggregated, anonymised usage data. o777 does not use individual player gaming data for commercial profiling beyond Platform improvement purposes.
• Sending transactional communications (account confirmations, withdrawal notifications, security alerts) to your registered email address. o777 will only send promotional communications where you have provided explicit consent to receive them.
• Detecting, investigating, and preventing fraudulent activity, account abuse, and breaches of the o777 Terms and Conditions.

4. Legal Basis for Processing

o777 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under the o777 Terms and Conditions — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with KYC, AML, and CTF obligations, including retention of identity documents and transaction records for the periods required by applicable regulations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming enforcement, and Platform improvement — where these interests do not override your fundamental privacy rights.
• Consent: Processing for optional promotional communications, where your explicit opt-in consent has been obtained. You may withdraw consent for promotional communications at any time by contacting o777 support.

5. Data Sharing & Third Parties

5.1 o777 does not sell, rent, or trade your personal data to third parties for their own marketing, advertising, or commercial purposes under any circumstances.

5.2 o777 may share personal data with the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and associated payment gateway providers, for the sole purpose of processing deposits and withdrawals.
• KYC/Identity Verification Providers: Third-party services engaged to assist with identity document verification, age checking, and AML screening, where applicable.
• Technology and Hosting Providers: Cloud infrastructure and data hosting providers who process data on behalf of o777 under contractual data processing agreements that impose equivalent privacy obligations.
• Regulatory and Law Enforcement Authorities: Where o777 is legally required or compelled by a valid legal order to disclose personal data to governmental, regulatory, or law enforcement bodies.

5.3 All third-party service providers engaged by o777 are required to maintain appropriate security standards and to process personal data only for the specific purposes for which they have been engaged.

6. Payment Data

6.1 When you make a deposit or request a withdrawal via JazzCash, Easypaisa, or a Pakistani bank account, the payment transaction is processed directly by the relevant payment provider or banking institution. o777 receives only transaction confirmation data (amount, reference number, timestamp) and does not receive or store your full mobile wallet PIN, online banking password, or payment card number.

6.2 o777 retains transaction records — including amounts, dates, payment methods used, and account references — for the period required by applicable financial compliance obligations and for dispute resolution purposes.

6.3 If you believe there has been an unauthorised transaction on your o777 account, you should contact o777 support immediately at [email protected] (plain text — not a clickable link) and, where relevant, contact your payment provider directly.

7. KYC & Identity Data

7.1 Identity documents submitted for KYC verification — including CNIC copies — are stored with elevated security controls and access restrictions. Only authorised o777 compliance personnel are permitted to access KYC documentation.

7.2 KYC data is used exclusively for age verification (confirming the player is 18 or older), identity confirmation, and compliance with AML and CTF obligations. KYC data is never used for marketing profiling or shared with unauthorised third parties.

7.3 o777 will retain KYC documentation for the period required by applicable regulatory obligations, which may extend beyond the period during which your account remains active. Following expiry of mandatory retention periods, KYC documents are securely deleted.

8. Cookies & Tracking Technologies

8.1 o777 uses cookies and similar tracking technologies to maintain session state (keeping you logged in during your visit), analyse Platform performance, and detect security anomalies such as unusual login locations.

8.2 o777 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These cannot be disabled without affecting core functionality, including account login and cashier access.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, enabling o777 to identify areas for improvement. Individual players are not identifiable from analytics data.
• Security Cookies: Used to detect and prevent fraudulent logins, unusual session patterns, and other security threats.

8.3 You may adjust cookie settings in your browser preferences. Disabling strictly necessary cookies will impair your ability to use the o777 Platform.

9. Data Retention

9.1 o777 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account registration data: for the duration of the account plus a minimum of five (5) years following account closure, in accordance with AML compliance requirements.
• Transaction records: a minimum of five (5) years from the date of each transaction.
• KYC documentation: as required by applicable regulatory obligations, typically a minimum of five (5) years from account closure.
• Customer support communications: three (3) years from the date of the communication, unless a longer period is required for ongoing dispute resolution.

9.2 Following expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised no longer constitutes personal data and is not subject to the same retention obligations.

10. Data Security

10.1 o777 implements technical and organisational security measures appropriate to the risk presented by the personal data processed on the Platform. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel, regular security reviews, and incident response procedures.

10.2 While o777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in risk to your rights, o777 will notify affected players in accordance with applicable obligations.

10.3 You are responsible for maintaining the security of your o777 account credentials. Do not share your password with any third party. o777 will never ask you for your password via email, chat, or phone.

11. Your Privacy Rights

As a player on the o777 Platform, you have the following rights regarding your personal data, subject to applicable legal limitations:

• Right of Access: You may request a copy of the personal data o777 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your o777 account.
• Right to Erasure: You may request deletion of your personal data where o777 no longer has a legal basis for retaining it. Mandatory retention obligations (e.g., AML requirements) may limit the scope of erasure requests.
• Right to Restrict Processing: You may request that o777 restrict processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
• Right to Object: You may object to processing of your personal data based on legitimate interests where you believe your fundamental rights override those interests.
• Right to Withdraw Consent: Where processing is based on consent (such as promotional email communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact o777 support at [email protected] (plain text — not a clickable link). o777 will acknowledge your request and respond within a reasonable timeframe.

12. Children's Privacy – 18+ Only

12.1 The o777 Platform is strictly intended for adults aged 18 years and above. o777 does not knowingly collect personal data from individuals under the age of 18.

12.2 Where o777 discovers that personal data has been collected from an individual under the age of 18, that data will be deleted immediately and the associated account will be closed in accordance with the o777 Terms and Conditions.

12.3 If you have reason to believe that an individual under 18 has registered on the o777 Platform, please notify our support team immediately so that appropriate action can be taken.

13. Amendments to This Policy

13.1 o777 reserves the right to update this Privacy Policy at any time. Material amendments will be communicated to registered players via their registered email address and/or by prominent notice on the Platform prior to the changes taking effect.

13.2 Continued use of the o777 Platform following notification of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept an amended Policy, you should cease using the Platform and contact support to request account closure.

14. Contact – Privacy Queries

For all privacy-related queries, data rights requests, or concerns regarding the handling of your personal data by o777, please contact our support team. The contact email is provided below as plain text only — it is not a clickable link:

[email protected]

Support is available 24 hours a day, 7 days a week in English. Urdu-friendly assistance is available on request.