Privacy Policy — all777

all777 is an online casino and sports betting platform operated under international gaming licensing standards and accessible at all777.ws. all777 serves players primarily based in Pakistan, offering a fully localised PKR gaming experience that includes live casino tables, certified slot titles, crash games, and PSL cricket betting markets.

For the purposes of this Privacy Policy, all777 is the data controller in respect of personal data collected from players registered on the platform. As data controller, all777 determines the purposes and means by which your personal data is processed.

If you have any questions about how all777 handles your personal data, or wish to exercise any of the rights described in this Policy, please contact the all777 Data Support team. Contact details are provided in Section 14 of this document.

all777 collects the following categories of personal data from registered players and site visitors. The specific data points collected in each category are listed below.

all777 collects personal data through the following channels and methods:

• Direct Registration: When you create an all777 account, you voluntarily provide identity, contact, and account credential data through the registration form.
• KYC Verification Submissions: When you submit CNIC documents, proof of address, or source-of-funds documentation to the all777 compliance team in response to a verification request.
• Deposit and Withdrawal Transactions: Financial data is collected each time you initiate a deposit or withdrawal through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Bank Alfalah. This data is processed via our payment processing partners.
• Platform Usage: Gaming activity data and technical data are collected automatically as you use the all777 platform — including when you place bets, launch games, navigate between pages, or interact with the live casino interface.
• Cookies and Tracking Technologies: Cookies, local storage, and similar technologies collect technical and session data when you visit all777.ws. See Section 7 for full details of our cookie practices.
• Customer Support Interactions: When you contact all777 via live chat or email, the content of that communication — including any personal data you voluntarily include — is collected and stored as part of the support record.
• Third-Party Verification Providers: all777 may receive identity verification data from third-party KYC service providers used to verify CNIC authenticity and confirm age eligibility.

all777 uses personal data collected from players for the following purposes. Each purpose is linked to a legal basis described in Section 5.

• Account Administration: Creating and maintaining your player account, authenticating your login sessions, and managing account settings and preferences.
• Age and Identity Verification: Verifying that you are aged 21 or above and confirming your identity in compliance with KYC obligations under our operating licence. This is a mandatory process and cannot be waived.
• Payment Processing: Processing deposit and withdrawal requests in PKR via your chosen payment method, and maintaining accurate financial records for each transaction.
• Gaming Services: Delivering the all777 gaming experience — including slot titles, live casino tables, cricket betting markets, and crash games — and recording all associated gaming activity as required for regulatory compliance and dispute resolution.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multiple account registration, bonus abuse, money laundering, and unauthorised access to player accounts.
• Responsible Gaming Enforcement: Applying and monitoring deposit limits, loss limits, cooling-off periods, and self-exclusion requests set by players to fulfil our responsible gaming obligations.
• Regulatory Compliance and AML: Fulfilling Anti-Money Laundering (AML) reporting obligations, responding to lawful requests from regulatory or law enforcement authorities, and maintaining transaction records as required under our licence.
• Customer Support: Responding to support queries, managing complaints, and maintaining a record of all communications for quality assurance and dispute resolution purposes.
• Platform Improvement: Using aggregated, anonymised technical and usage data to identify performance issues, improve user experience, and develop new features on the all777 platform.
• Promotional Communications: Sending bonus offers, reload promotions, PSL season notifications, and other marketing communications to players who have opted in to receive them. You may opt out at any time via your account settings or by contacting support.

all777 processes personal data on the following legal bases. Where multiple bases apply to a single processing activity, the primary basis is listed.

all777 does not sell, rent, or trade personal data. all777 shares personal data with third parties only in the circumstances listed below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive financial transaction data necessary to process your deposit and withdrawal requests. These providers are bound by their own data protection obligations and do not receive gaming activity data.
• KYC and Identity Verification Providers: Third-party identity verification services may receive CNIC data and associated identity documents for the purpose of age and identity verification. These providers are contractually bound to process data solely for verification purposes.
• Game Technology Providers: Certified game providers — including third-party RNG slot and live dealer suppliers — receive the minimum technical data required to deliver their games within the all777 platform. These providers do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: all777 may be required by law or under the terms of its operating licence to disclose player data to regulatory bodies, financial intelligence units, or law enforcement agencies. all777 will comply with any such lawful request and, where legally permitted, will notify affected players.
• IT and Hosting Providers: Cloud hosting and infrastructure providers who store and process all777 platform data on all777's behalf are bound by data processing agreements that restrict their use of data to infrastructure purposes only.
• Professional Advisers: In connection with legal proceedings, audits, or regulatory reviews, all777 may share relevant data with lawyers, auditors, or compliance consultants under strict confidentiality obligations.

all777.ws uses cookies and similar technologies (including local storage and session tokens) to operate the platform, maintain security, and improve your experience. The following categories of cookies are used:

all777 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using any transactional features of the platform.

all777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law or under our operating licence. The following retention periods apply:

• Active Account Data: Identity, contact, and financial data is retained for the full duration of the player account's active status.
• Post-Closure Retention: Following account closure — whether by the player or by all777 — all777 retains identity and financial transaction records for a minimum of five (5) years. This retention period is required for AML compliance and regulatory audit purposes.
• Gaming Activity Logs: Bet history, game session records, and wagering data are retained for a minimum of three (3) years following the date of the activity, for dispute resolution and regulatory compliance purposes.
• Customer Support Records: Live chat transcripts and email correspondence are retained for a minimum of two (2) years following the date of the interaction.
• Technical and Analytics Data: Anonymised analytics data is retained indefinitely as it contains no personally identifiable information. IP address logs are retained for 12 months.
• Marketing Consent Records: Records of your marketing consent (opt-in) or opt-out are retained for the duration of your account and for three (3) years following account closure, to demonstrate compliance.

When the applicable retention period expires, all777 securely deletes or anonymises the relevant personal data. Secure deletion means data is permanently removed from all777's systems in a manner that prevents recovery.

all777 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your browser or app and all777's servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across all777.ws with HTTP Strict Transport Security (HSTS) headers.
• Encryption at Rest: Sensitive data including financial records and identity documents is encrypted in storage using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within all777's internal systems is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background screening and are bound by confidentiality obligations.
• Two-Factor Authentication: all777 offers two-factor authentication (2FA) to all registered players and requires it for all internal staff accounts with access to player data.
• Monitoring and Incident Response: all777's infrastructure is monitored 24/7 for anomalous activity. A formal security incident response procedure is in place. In the event of a data breach affecting player data, all777 will notify affected players without undue delay.
• Penetration Testing: all777 commissions regular security assessments of its platform infrastructure to identify and remediate vulnerabilities.

While all777 takes every reasonable precaution to protect your data, no system is completely immune from risk. Players are advised to maintain strong, unique passwords and to enable 2FA on their all777 accounts. See our Terms & Conditions, Section 3, for player-side security responsibilities.

As a registered player on all777, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the all777 support team using the details in Section 14. all777 will respond to all valid rights requests within 30 days of receipt, subject to any legally permitted extensions.

• Right of Access: You have the right to request a copy of the personal data all777 holds about you. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data all777 holds about you is inaccurate or incomplete, you have the right to request correction. You may update certain details directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. This right is subject to all777's legal retention obligations, particularly in respect of AML and KYC records which must be retained for a minimum of five years.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that all777 restricts its processing of your personal data — for example, while a correction request is being assessed.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including where all777 uses your data for platform analytics. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent — particularly in respect of marketing communications — you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

All new registrations at all777 are subject to CNIC-based age verification. Players must submit a valid Pakistani CNIC or NICOP that confirms they are aged 21 or above before their account is fully activated and before any deposit, withdrawal, or participation in real-money gaming is permitted.

Parents and guardians are strongly advised to install parental control software on devices that may be accessed by children to prevent access to all777.ws and other gambling platforms. If you are concerned that a minor in your household has accessed all777, please contact our support team immediately at [email protected].

all777 operates under an international gaming licence and its infrastructure, including certain data processing activities, may involve transfers of personal data to servers or service providers located outside Pakistan. Where such transfers occur, all777 takes steps to ensure that adequate safeguards are in place to protect your personal data to a standard consistent with the protections described in this Privacy Policy.

Safeguards used for international transfers may include:

• Contractual data processing agreements that bind third-party processors to data protection obligations equivalent to those applied by all777.
• Use of service providers located in jurisdictions with internationally recognised data protection frameworks.
• Technical safeguards including encryption in transit and at rest, regardless of where data is processed.

Payment processing for PKR transactions via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is conducted within Pakistan-based infrastructure to the greatest extent possible. Where a Pakistani bank or payment provider requires data to be processed internationally as part of their own infrastructure, that processing is governed by the relevant provider's data protection obligations.

all777 reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be published at all777.ws/privacy-policy with the effective date clearly indicated at the top of the document.

Where all777 makes material changes to this Policy — for example, changes that affect the categories of data collected, the purposes for which data is used, or the rights available to players — all777 will notify registered players by email to the address on file and will display a prominent notice on the platform for a minimum of 30 days following the change.

Your continued use of the all777 platform following notification of a material change constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the updated terms, you should cease using the platform and may request account closure by contacting the support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way all777 handles your personal data, please contact the all777 Data Support team using the following details:

all777 takes privacy complaints seriously. If you submit a complaint, all777 will acknowledge receipt within 5 business days and provide a substantive response within 30 days. Where a complaint cannot be resolved within 30 days, all777 will inform you of the expected resolution timeline.

If you are not satisfied with all777's response to your privacy complaint, you may escalate the matter to the relevant supervisory authority under the jurisdiction of all777's operating licence. Details of the applicable supervisory authority are available on request from the support team.