777hx Privacy Policy — Your Data, Your Rights

This Privacy Policy is published by 777hx (referred to throughout as "777hx", "we", "us", or "our") and applies to all personal data collected through the 777hx website accessible at 777hx.app, its associated mobile interfaces, and all related services and communications operated under the 777hx brand.

777hx is committed to handling the personal information of its players — the majority of whom access the platform from cities across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad — with the care, transparency, and security that players deserve. This policy has been written in plain, accessible English so that every player can understand exactly how their information is used.

This Privacy Policy should be read alongside the 777hx Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between 777hx and its players.

For the purposes of this Privacy Policy, 777hx acts as the data controller in respect of the personal information of its registered players and site visitors. As data controller, 777hx is responsible for determining the purposes and means by which your personal data is processed.

Where 777hx engages third-party service providers — such as payment processors, identity verification providers, or fraud detection platforms — those providers act as data processors on 777hx's behalf, processing personal data only according to 777hx's documented instructions and within the scope of their contractual obligations to 777hx.

777hx collects several categories of personal data from players. A summary of these categories is provided in the data table above. In more specific terms, the personal data we may collect includes:

• Registration data: Full legal name, date of birth, email address, Pakistani mobile number, preferred username, and account password (stored in encrypted form).
• Identity verification data: A copy of your valid CNIC (Computerised National Identity Card), and where applicable a selfie or video confirmation for biometric identity checks.
• Address data: Residential address, city (e.g. Karachi, Lahore, Faisalabad), and postcode, as provided during KYC or account updates.
• Financial data: Details of the payment method used for deposits (JazzCash wallet number, EasyPaisa account, HBL / UBL / Meezan Bank account reference, SadaPay number, USDT TRC20 wallet address, or debit card details processed via our secure payment provider). Full card numbers are never stored by 777hx directly.
• Transaction data: Records of all deposits, withdrawals, bonus credits issued, wagers placed, and game results associated with your account.
• Device and technical data: IP address, device identifiers, browser type and version, operating system, screen resolution, and connection type.
• Behavioural and usage data: Pages viewed, games launched, session durations, betting patterns, and responsible gaming tool interactions.
• Communications data: Content of live chat sessions with 777hx support, email correspondence, and any feedback or complaints submitted to 777hx.

777hx collects personal data through several distinct channels:

• Direct provision: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you browse or interact with the 777hx platform, via server logs, session tracking, and platform analytics tools.
• Cookies and similar technologies: Information gathered through cookies, pixel tags, and local storage mechanisms as described in Section 9 of this policy.
• Third-party sources: In certain circumstances, 777hx may receive supplementary identity or fraud-risk data from third-party identity verification providers, credit reference agencies, or fraud prevention databases to assist with KYC and anti-money laundering (AML) checks.

777hx processes your personal data for the following purposes:

• Account management: Creating, maintaining, and operating your 777hx player account, including processing login authentication and account security.
• KYC and regulatory compliance: Verifying your identity and age (minimum 21 years) as required by applicable gaming regulations and anti-money laundering obligations.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, bank transfer, and other accepted payment methods available to Pakistani players.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the platform.
• Customer support: Responding to player queries, resolving disputes, and improving the quality of 777hx support services.
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling, administering self-exclusion requests, deposit limits, and reality check tools.
• Platform improvement: Analysing usage patterns to improve the design, functionality, and game selection offered on the 777hx platform.
• Marketing: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. Marketing consent can be withdrawn at any time.

777hx shares personal data with third parties only in the following limited and necessary circumstances:

• Payment processors: Financial data is shared with our approved payment processing partners (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and card processing providers) solely for the purpose of executing deposit and withdrawal transactions.
• Identity verification providers: Identity documents and verification data may be transmitted to third-party KYC/AML verification service providers for the purpose of confirming player identity and age. These providers are contractually bound to process such data solely for verification purposes.
• Fraud prevention services: Technical and transaction data may be shared with fraud detection platforms to protect the 777hx platform and its player community from fraudulent activity.
• Game providers: Certain game providers integrated into the 777hx platform may process limited gameplay data (such as session tokens and wager amounts) as part of delivering their game services. Game providers do not receive full player identity data.
• Regulatory and legal authorities: 777hx will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or in response to a valid regulatory request.
• Business transfers: In the event of a merger, acquisition, or transfer of 777hx's business operations, player data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained by the acquiring entity.

777hx retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as is required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of the active player relationship and for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable financial crime regulations.
• Transaction records: All deposit, withdrawal, and wager records are retained for a minimum of five (5) years from the date of the relevant transaction.
• Support communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the relevant communication.
• Marketing data: Opt-in consent records and associated marketing interaction data are retained for up to two (2) years from the date of last interaction, or until consent is withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in line with 777hx's data disposal procedures.

777hx implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS): All data in transit between your device and 777hx servers is encrypted using TLS 1.2 or higher.
• At-rest encryption: Sensitive data stored on 777hx servers — including identity documents and financial details — is encrypted at rest using AES-256 encryption.
• Access controls: Platform systems that hold personal data are subject to role-based access controls, ensuring that only personnel with a documented operational need can access specific data categories.
• Audit logging: All access to player personal data by 777hx internal systems and personnel is logged. Logs are reviewed regularly as part of 777hx's internal security audit programme.
• Penetration testing: 777hx's platform undergoes periodic security testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: 777hx maintains a data breach incident response procedure. In the event of a breach affecting player personal data, affected players will be notified promptly in accordance with applicable notification requirements.

777hx uses cookies and similar tracking technologies on its platform to enable core functionality, improve user experience, and monitor platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 777hx platform to function. They enable session management, login persistence, and security features. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: These cookies remember your preferences — such as language settings, game lobby display options, and responsible gaming tool configurations — to provide a more personalised experience.
• Analytics Cookies: These cookies collect anonymised or pseudonymised data about how players navigate and interact with the 777hx platform. This information is used internally to identify areas for improvement and to optimise the player experience.
• Marketing Cookies: Where a player has provided consent, marketing cookies may be used to track engagement with 777hx promotional content. Players who have not consented will not be subjected to marketing cookie tracking.

Players may manage cookie preferences through their browser settings. Note that disabling strictly necessary cookies will affect the usability of the 777hx platform. Detailed cookie management instructions are available from the support section of your 777hx account.

777hx sends promotional communications — including bonus offers, tournament announcements, PSL cricket betting promotions, and platform feature updates — only to players who have explicitly opted in to receive such communications during registration or through their account settings.

Marketing communications may be delivered via email or SMS to the mobile number registered on the player's 777hx account. The frequency and content of marketing messages will be relevant to the player's gaming interests and platform activity.

Players may withdraw their marketing consent at any time by:

• Updating their communication preferences in the 777hx account settings panel.
• Clicking the unsubscribe link included in any 777hx marketing email.
• Contacting 777hx support directly and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of marketing preference as they are operationally necessary.

Players have the following rights in relation to their personal data held by 777hx:

• Right of Access: You may request a copy of the personal data that 777hx holds about you at any time. 777hx will provide this information within a reasonable timeframe following receipt of a verified request.
• Right to Rectification: If you believe that any personal data 777hx holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Identity data corrections may require re-verification of documentation.
• Right to Erasure: In certain circumstances, you may request that 777hx delete your personal data. This right is subject to override where 777hx is required to retain data under applicable legal or regulatory obligations (such as AML record-keeping requirements).
• Right to Restrict Processing: You may request that 777hx restricts the processing of your personal data where you contest its accuracy, object to its use, or where the data is no longer needed but you require it for legal claims.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that 777hx provides your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where 777hx relies on legitimate interests as the legal basis for processing, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the 777hx privacy team at the contact details provided in Section 15 of this policy. 777hx will acknowledge and respond to all valid privacy rights requests within a reasonable timeframe.

777hx enforces age verification as a mandatory step in the account registration and KYC process. Any account found — at any time — to be held by a person under the age of 21 will be immediately closed. Any deposits made to such an account will be returned, and all gaming activity conducted on the account will be voided.

If 777hx becomes aware that personal data has been collected from an individual under the age of 21 without adequate age verification having taken place, 777hx will take immediate steps to delete that data from its systems. Parents or guardians who believe that a minor has registered on the 777hx platform are encouraged to contact 777hx support immediately.

For more information about 777hx's age restriction policies and the responsible gaming tools available to players, please visit the Responsible Gaming page.

The 777hx platform integrates with a number of third-party service providers to deliver its gaming, payment, and security functionality. These include game content providers, payment gateway operators, and fraud prevention platforms. Each of these providers operates under their own applicable privacy and data protection frameworks, and 777hx selects third-party partners based in part on their commitment to data security and privacy compliance.

777hx is not responsible for the privacy practices of third-party platforms that may be referenced in game content or promotional materials. Players accessing any platform outside of 777hx.app do so subject to that platform's own privacy terms.

777hx does not embed third-party advertising networks or data brokers into its platform. No player data is transmitted to advertising technology providers without explicit player consent.

777hx reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable privacy law, regulatory guidance, or 777hx's operational practices. When material changes are made, the revised policy will be published on this page with an updated "Last Updated" date.

For significant changes that materially affect player rights or the way 777hx processes personal data, registered players will be notified via their registered email address prior to the changes taking effect, where operationally feasible.

Continued use of the 777hx platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not agree with the changes are encouraged to contact 777hx support to discuss their options, including account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 777hx processes your personal data, please contact the 777hx privacy team using the following details:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry — [Your Registered Username]
• Response time: 777hx aims to respond to all privacy-related enquiries within five (5) business days of receipt.

For account-specific data requests (access, rectification, erasure), please include your registered email address and a brief description of your request. For security purposes, 777hx may require identity verification before actioning certain privacy rights requests.

For urgent responsible gaming concerns, including self-exclusion requests, please use the live chat feature available within your 777hx account for the fastest response.