Privacy Policy – v777 Pakistan Data Protection & Your Rights

v777 (referred to in this policy as "v777", "we", "us", or "our") is the operator of the online gaming platform accessible at v777.world. v777 is the data controller for the personal information collected and processed in connection with your use of the platform.

This Privacy Policy applies to all users of the v777 platform, including registered account holders and visitors who browse the site without registering. It covers all personal data collected through the v777 website, mobile-optimised platform, and any associated communications.

If you have questions about how v777 handles your personal data, or if you wish to exercise any of the rights described in this policy, contact us at support@v777.world. We will respond within 7 business days.

v777 collects only the data necessary to provide you with a functioning, secure, and compliant gaming platform. We do not collect data speculatively or build profiles beyond what is needed for your account and our regulatory obligations.

We do not collect payment card CVV numbers — these are entered directly with the payment processor and are never stored on v777 systems.

v777 collects personal data through the following channels. Each channel collects only the data relevant to its function.

• Registration form: Name, phone number, date of birth, email, and password at the point of account creation.
• KYC submission: Identity documents provided by you when verification is requested.
• Deposit and withdrawal flows: Payment method details provided when you add a payment method or initiate a transaction.
• Platform activity: Game logs, betting records, and session data generated automatically as you use the platform.
• Support interactions: Content of messages, emails, or live chat conversations you initiate with v777 support.
• Cookies and technical data: Device and browser information collected automatically — see Section 11 for full cookie details.

v777 uses your personal data for the following specific purposes. We do not use your data for purposes beyond this list without informing you first.

• Account operation: To create and maintain your account, authenticate your logins, and enable all platform features.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method.
• Identity verification: To comply with Know Your Customer requirements and verify that you meet the minimum age of 18.
• Fraud and security: To detect and prevent fraudulent transactions, multi-accounting, money laundering, and unauthorised account access.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes using game and transaction logs.
• Responsible gaming: To enforce deposit limits, self-exclusion settings, and session time restrictions you have selected.
• Platform improvement: To analyse aggregated, anonymised usage patterns and improve game performance, load times, and user experience.
• Communications: To send you account-related notifications — password resets, deposit confirmations, withdrawal updates, and important policy changes. Promotional communications are sent only if you have opted in.
• Legal compliance: To maintain records required by applicable regulatory and anti-money-laundering obligations.

v777 processes your personal data on the following legal bases, each tied to the specific purpose for which the data is used:

• Contract performance: Processing necessary to operate your account, process payments, and deliver the services you have contracted with v777 to receive.
• Legal obligation: Processing required to comply with identity verification, anti-money-laundering, and record-keeping obligations under applicable regulations.
• Legitimate interests: Security monitoring, fraud detection, and aggregated analytics — where our legitimate interest in protecting the platform and its users does not override your privacy rights.
• Consent: Promotional and marketing communications, where you have explicitly opted in. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing message.

v777 does not sell your personal data. We share it only in the specific, limited circumstances described below.

• Payment processors: Your payment details are shared with the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, Visa/Mastercard networks) solely to execute your deposit or withdrawal transaction. These processors are bound by their own data protection obligations.
• Game providers: Your account identifier and bet data are shared with licensed game providers (e.g., Pragmatic Play, Play'n GO) to enable game access and resolve technical disputes. Game providers do not receive your payment details or CNIC information.
• Regulatory and law enforcement authorities: v777 will disclose account and transaction data to competent authorities when legally required to do so — including in response to court orders, regulatory requests, or investigations into money laundering, fraud, or other criminal activity.
• Fraud prevention services: Anonymised or pseudonymised risk signals may be shared with specialist fraud detection services to protect the platform and its users. No directly identifiable data is shared with these services.
• Business transfers: In the event that v777 undergoes a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller before it takes effect.

Payment data on v777 receives a higher level of protection than standard account data, reflecting the sensitivity of financial information. The following specific measures apply to all payment-related data processed on the v777 platform.

• Mobile wallet numbers (Easypaisa, JazzCash) stored in your account are masked — only the last four digits are displayed in the account interface. Full numbers are accessible only by the payments processing system for transaction execution.
• Bank account details provided for IBFT transfers are encrypted at rest using AES-256 encryption and are only decrypted by the payments system at the point of processing a transaction.
• Card numbers (Visa/Mastercard) are handled by the card network's tokenisation system — v777 never receives or stores your full card number. Only a token and last-four-digits reference are held on v777 systems.
• CVV codes are never stored under any circumstances. They are submitted directly to the payment gateway and immediately discarded after authorisation.
• All payment data is accessible internally only to the v777 payments team, with access logs maintained and regularly reviewed by the compliance function.

v777 is required by its operating framework to verify the identity of players before processing significant withdrawals or upon reasonable suspicion of fraud or underage access. The KYC process involves collecting identity documents — primarily your CNIC — and matching them against your registered account details.

KYC documents submitted to v777 are handled under strict controls:

• Documents are reviewed only by trained members of the v777 compliance team. Access is role-restricted and logged.
• CNIC scans are stored in an encrypted document management system separate from your main account record and linked only by an internal reference number.
• v777 does not use CNIC data for any purpose beyond identity verification and regulatory compliance. Your CNIC number is never used to contact NADRA or any government database independently — verification is based on the document you provide matching your registered account details.
• KYC documents are retained for as long as your account is active plus the regulatory retention period described in Section 10. After that, they are securely deleted.

v777 applies layered security controls to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following measures are in place across all v777 systems.

• Encryption in transit: All data transmitted between your device and v777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to every page, game session, and API call on the v777 platform.
• Encryption at rest: Sensitive data fields — payment details, identity documents, hashed passwords — are encrypted at rest using AES-256.
• Access controls: Internal access to personal data is role-restricted on a need-to-know basis. All access events are logged and subject to regular audit by the v777 compliance team.
• Intrusion detection: v777 operates continuous network monitoring with automated alerts for anomalous access patterns, including unusual login locations, bulk data queries, and payment anomalies.
• Password security: Passwords are hashed using a strong one-way cryptographic function before storage. v777 cannot retrieve your password — only reset it through an authenticated channel.
• Security reviews: v777 conducts periodic security assessments of its platform infrastructure and data handling practices.

Despite these measures, no internet-based system can be guaranteed 100% secure. In the event of a data breach that poses a significant risk to your privacy, v777 will notify affected users promptly and take immediate steps to contain and remediate the incident.

v777 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable regulations. The following retention schedule applies.

• Active account data: Retained for the lifetime of your account.
• Transaction records (deposits, withdrawals, game stakes): Retained for a minimum of 5 years after the transaction date to satisfy anti-money-laundering and financial record-keeping requirements.
• KYC documents: Retained for the lifetime of your account plus 5 years after account closure.
• Support communications: Retained for 3 years after the conversation close date.
• Technical and security logs: Retained for 12 months, after which they are deleted or anonymised.
• Self-excluded accounts: Basic account information and self-exclusion status are retained for the duration of the exclusion period plus 5 years to prevent re-registration in violation of the exclusion.

When data is no longer required and the retention period has expired, it is securely deleted from v777 systems using overwrite-based deletion methods that prevent recovery.

v777 uses a minimal set of cookies necessary to operate the platform. We do not use third-party advertising cookies or behavioural tracking technologies. The cookies v777 uses fall into the following categories.

• Essential session cookies: Required to keep you logged in during your session and to maintain security state. Without these, the platform cannot function. These cannot be disabled while using v777.
• Security cookies: Used to detect and prevent cross-site request forgery (CSRF) attacks and other session-based threats. Automatically set and cannot be disabled.
• Performance cookies: Anonymised data about page load times and error rates — used to identify and fix technical problems. No personal data is included in these measurements. You may opt out by contacting support, though this will not affect your platform experience.

v777 does not use marketing cookies, Facebook Pixel, Google Analytics for advertising purposes, or any cross-site tracking technology. If you use a browser-level cookie blocker, essential session cookies must be permitted for the v777 platform to function correctly.

As a v777 player, you have the following rights over your personal data. These rights apply to data that identifies you or can reasonably be linked to you. To exercise any of them, email support@v777.world with the subject line "Data Rights Request — [your username]".

v777 will not charge a fee for reasonable data rights requests. We may ask you to verify your identity before fulfilling a request to ensure we do not disclose data to the wrong person.

v777 is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been created by a minor, the account will be closed immediately, all balances will be forfeited, and all data associated with the account will be deleted beyond what is required for regulatory purposes.

If you are a parent or guardian and believe that a minor under your care has registered on v777, contact us immediately at support@v777.world. We will investigate and close the account within 24 hours of a confirmed report. We recommend that parents and guardians use parental control tools on shared devices to prevent access to real-money gaming content.

v777 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or regulatory requirements. When we make material changes — changes that meaningfully affect how we use your data or what rights you have — we will notify you at least 7 days before the changes take effect through one or more of the following channels:

• An in-app notification when you next log in to v777.
• An email to your registered address.
• A notice on this page with the updated effective date.

Your continued use of the v777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change, you may close your account before the effective date by contacting support.

Minor updates — corrections of typographical errors, clarifications that do not change the substance of the policy — may be made without specific notice, but the "Last Updated" date at the top of this page will always reflect the most recent revision.

For any privacy-related query, data rights request, or complaint about how v777 has handled your personal data, use the following contact details:

• Email: support@v777.world — subject: "Privacy Query" or "Data Rights Request — [username]"
• Live Chat: Available 24/7 after login on the v777 platform
• Response time: We aim to respond to all privacy-related contacts within 7 business days. Complex data rights requests may take up to 14 business days.