plus777 Privacy Policy —
Your Data, Handled
with Transparency and Care

1. Introduction

This Privacy Policy ("Policy") describes how plus777 ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data provided by or collected about users ("you", "the Player") of the plus777 online casino and sports betting platform available at plus777.games.

plus777 operates as an international online gaming platform serving players in Pakistan and other eligible jurisdictions. We are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and principles. This Policy is designed to give you a clear, complete picture of our data practices so that you can make informed decisions about your privacy when using the plus777 Platform.

This Policy applies to all personal data collected through the plus777 website (plus777.games), the plus777 login and account management portal, the game lobby and all games accessed through it, the cashier and all PKR payment processes, customer support communications, and any electronic communications between you and plus777.

2. Who We Are — Data Controller

plus777 acts as the data controller in respect of personal data collected and processed through the Platform. As data controller, plus777 determines the purposes for which and the means by which personal data is processed. Our contact details for all privacy-related matters are set out in Section 14 of this Policy.

Where plus777 engages third-party service providers to process personal data on its behalf — such as identity verification providers, payment processors, or analytics platforms — those parties act as data processors under instructions from plus777. plus777 maintains contractual data processing agreements with all such processors to ensure that your data is handled consistently with this Policy.

3. Personal Data We Collect

plus777 collects personal data through several channels and for several defined purposes. The categories of data we collect and the primary collection method for each are set out in the table below.

plus777 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where strictly required for identity verification under applicable KYC and AML regulations, in which case such data is handled with enhanced security controls and is not used for any purpose beyond regulatory compliance.

4. How We Use Your Personal Data

plus777 uses personal data for the following specific purposes:

• Account registration and management: To create, maintain, and administer your plus777 account, verify your identity, and give you access to the Platform and its features.
• Payment processing: To process PKR deposits via Easypaisa, JazzCash, SadaPay, Raast, bank IBFT, and USDT TRC20, and to execute PKR withdrawal requests to verified payment methods in your name.
• KYC and AML compliance: To verify your identity in accordance with know-your-customer and anti-money laundering obligations, including the review and storage of CNIC documents and related verification data.
• Gaming and betting operations: To provide access to games and betting markets, record gaming history, resolve disputes, detect cheating or collusion, and ensure fair play across the platform.
• Responsible gaming: To operate responsible gaming tools including deposit limits, session time-outs, and self-exclusion; to monitor for signs of problem gambling and reach out where appropriate; and to enforce the 18+ age requirement.
• Customer support: To investigate and resolve account queries, payment issues, bonus disputes, and technical problems reported via live chat or email.
• Fraud prevention and security: To detect, investigate, and prevent fraud, account takeover, bonus abuse, and other security threats.
• Regulatory compliance: To comply with legal and regulatory obligations including reporting requirements, sanctions screening, and law enforcement requests where legally mandated.
• Platform improvement: To analyse usage patterns, improve the user interface, optimise game loading performance, and develop new features relevant to Pakistan players.
• Direct communications: To send account notifications, transaction confirmations, promotional offers (where you have opted in), and required legal communications.

5. Legal Bases for Processing

plus777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you under the plus777 Terms & Conditions — including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable law — including KYC, AML, sanctions screening, and regulatory record-keeping obligations.
• Legitimate interests: Processing necessary for plus777's legitimate interests in operating the Platform securely and efficiently, preventing fraud and abuse, and improving the user experience, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed consent — principally in the context of marketing communications. You may withdraw marketing consent at any time by contacting support at [email protected].

6. Data Sharing and Disclosure

6.1 Authorised Third-Party Processors

plus777 shares personal data with the following categories of third-party processors strictly for the purposes set out in Section 4 and under binding data processing agreements:

• Identity verification providers: To perform CNIC document verification and biometric liveness checks as part of KYC processes
• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, and banking partners — to process PKR transactions
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and others — limited technical session data for game launch and certification purposes
• Cloud infrastructure providers: Server and database hosting providers operating under contractual data security obligations
• Fraud prevention and analytics providers: For detecting security threats and analysing Platform performance
• Customer support platform providers: For operating the live chat and email support systems

6.2 Regulatory and Legal Disclosure

plus777 may disclose personal data to regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required by applicable law, court order, or regulatory instruction. plus777 will not notify you of such disclosures where prohibited from doing so by applicable law.

7. Cookies and Tracking Technologies

plus777 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function — including session management, login state maintenance, and security tokens. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your Platform preferences such as language, preferred game category, and responsible gaming settings.
• Analytics cookies: Measure aggregate usage patterns to help plus777 understand which pages and features are most used by Pakistan players, enabling data-driven improvements to the Platform.
• Security cookies: Used for fraud detection, bot prevention, and login anomaly detection.

plus777 does not use third-party advertising cookies or retargeting pixels that track your activity outside the plus777 Platform. You can manage non-essential cookie preferences through your browser settings. Disabling essential cookies may impair your ability to log in and use core Platform features.

8. Data Security

plus777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the plus777 Platform
• AES-256 encryption for personal data stored in plus777 databases
• Password hashing using industry-standard cryptographic algorithms — passwords are never stored in plain text
• Two-factor authentication (2FA) available to all players and mandatory for account management staff
• Role-based access control limiting internal staff access to personal data on a strict need-to-know basis
• Automated anomaly detection monitoring for unusual login patterns, transaction irregularities, and potential data breaches
• Regular third-party security audits and penetration testing of Platform infrastructure
• Physical security controls for data centre facilities operated by plus777's cloud infrastructure partners

In the event of a personal data breach that poses a risk to your rights and freedoms, plus777 will notify affected individuals and relevant regulatory authorities in accordance with its legal obligations and without undue delay. Notification will be provided via the email address or mobile number associated with your plus777 account.

9. Data Retention

plus777 retains personal data only for as long as is necessary for the purpose for which it was collected or as required by applicable law. The general retention principles applied by plus777 are:

• Active account data: Retained for the duration of your active plus777 account relationship
• Closed account data: Retained for seven (7) years following account closure to meet AML record-keeping requirements and to defend against any potential legal claims
• KYC documentation: Retained for seven (7) years from the date of submission or account closure, whichever is later, in compliance with financial services regulation
• Transaction records: Retained for seven (7) years in compliance with financial record-keeping obligations
• Support communication records: Retained for three (3) years from the date of the communication
• Technical and usage data: Retained in aggregate, anonymised form beyond the periods specified above for long-term analytics purposes

Upon expiry of the applicable retention period, plus777 will securely delete or anonymise personal data in accordance with its data disposal procedures. Anonymised data that no longer identifies any individual may be retained indefinitely for statistical and analytical purposes.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by plus777. To exercise any of these rights, submit a written request to [email protected] with your full name, registered mobile number, and a clear description of the right you wish to exercise. plus777 will respond within 30 calendar days of receiving a valid, verifiable request.

11. Children's Privacy

The plus777 Platform is strictly for users aged 18 years and above. plus777 does not knowingly collect personal data from individuals under the age of 18. Registration requires provision of CNIC details, and identity verification confirms that account holders are adults of legal gaming age.

If plus777 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the relevant account will be closed, and any associated funds will be handled in accordance with applicable law and our Terms & Conditions. If you believe that a minor may have registered a plus777 account using adult identification, please contact us immediately at [email protected].

12. International Data Transfers

plus777 is an international platform and may process and store personal data on servers located in jurisdictions outside Pakistan. Where personal data is transferred outside the country where it was collected, plus777 ensures that appropriate safeguards are in place to protect the data to at least the same standard as required under applicable privacy law. Such safeguards include contractual data transfer agreements with service providers, encryption of data in transit and at rest, and access controls limiting cross-border data access to authorised personnel only.

By registering a plus777 account and using the Platform, you acknowledge that your personal data may be transferred to, processed in, and stored in countries other than your country of residence, and that the data protection laws in those countries may differ from the laws applicable in your country.

13. Changes to This Privacy Policy

plus777 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. Material changes will be communicated to registered players via email to your registered address and/or via a prominent notice on the Platform before the updated Policy takes effect. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the plus777 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with any changes, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions. plus777 maintains an archive of previous versions of this Policy, which is available on request.

14. Contact and Privacy Complaints

For all privacy-related enquiries — including data access requests, correction requests, erasure requests, or complaints about how plus777 has handled your personal data — please contact the plus777 Data Protection team through the following channels:

• Live Chat: Available 24/7 inside your logged-in plus777 account — reference "Privacy Request" at the start of your message for routing to the Data Protection team
• Email: [email protected] — please include "Privacy Policy Request" in your subject line (displayed as plain text; copy and paste into your email client)

plus777 will acknowledge receipt of your privacy request within 3 business days and will provide a full response within 30 calendar days. Where a request is complex or involves a high volume of data, plus777 may extend this period by a further 30 days and will notify you accordingly.

If you are not satisfied with plus777's response to your privacy concern, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. plus777 will provide relevant contact information for the appropriate authority upon request.