ch777 Privacy Policy

This Privacy Policy ("Policy") describes how ch777 ("we," "us," "our") collects, uses, stores, protects, and discloses personal data relating to individuals who visit ch777.org, register a ch777 account, or otherwise interact with any ch777 product, service, or communication channel (collectively, the "Platform").

This Policy applies in full to all registered ch777 Players and to any unregistered visitor who accesses the ch777 website. It applies to all personal data collected through the Platform regardless of the device or method of access — desktop browser, mobile browser, or any future ch777 application.

This Policy should be read alongside the ch777 Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with ch777. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy, this Policy shall prevail.

For the purposes of applicable data protection law, ch777 — the operator of the ch777 online gaming platform accessible at ch777.org — is the Data Controller in respect of personal data collected through the Platform.

As Data Controller, ch777 determines the purposes and means by which your personal data is processed. ch777 is accountable for the proper handling of your personal data under the terms of its international gaming license, which includes data protection obligations consistent with internationally recognised data protection standards.

All data protection enquiries, subject access requests, and complaints may be directed to the ch777 data team via email at [email protected], with the subject line marked "Data Privacy Request" for expedited handling.

ch777 collects personal data through several channels — directly from you during registration and use of the Platform, automatically through your device and browser, and in limited circumstances from trusted third-party sources used for identity verification. The categories of personal data ch777 may collect are set out below.

ch777 uses the personal data it collects for the following specific purposes:

• Account Creation & Management: To register your ch777 account, verify your identity, manage your player profile, and maintain your PKR wallet balance.
• Service Delivery: To provide access to all ch777 products — cricket betting, live casino, slots, Lucky Dice, Tower — and to process your bets, game results, and PKR transactions.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to execute withdrawal payments to your registered payment accounts.
• KYC & Regulatory Compliance: To verify your identity and age (21+ requirement), to fulfil obligations under our international gaming licence, and to comply with applicable anti-money-laundering (AML) regulations.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, account sharing, and other prohibited activity on the Platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problematic gambling, to apply and enforce responsible gaming limits requested by the Player, and to facilitate self-exclusion requests.
• Customer Support: To respond to your support enquiries, resolve disputes, and provide account assistance via email or other support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve ch777's products, fix technical issues, and enhance the player experience for Pakistani users.
• Legal Compliance: To comply with any legal obligation, court order, or direction from a competent regulatory authority requiring ch777 to process or disclose personal data.
• Marketing Communications: To send you ch777 promotional offers, bonus alerts, and platform updates, where you have consented to receive such communications.

ch777 processes your personal data only where a valid legal basis exists to do so. The legal bases applicable to ch777's data processing activities are as follows:

• Contractual Necessity: The majority of ch777's data processing is necessary to perform the contract between ch777 and the Player — specifically, to operate the player's account, process deposits and withdrawals, deliver game services, and manage bet settlement.
• Legal Obligation: ch777 processes identity data, financial transaction records, and KYC documentation as required by its international gaming licence and applicable AML regulations. This processing is mandatory and cannot be declined by the Player without affecting their ability to use the Platform.
• Legitimate Interests: ch777 processes certain technical and usage data on the basis of its legitimate interest in maintaining Platform security, preventing fraud, improving its services, and protecting the integrity of the gaming environment.
• Consent: ch777 processes your personal data for direct marketing communications only where you have given explicit, informed consent to receive such communications. You may withdraw this consent at any time by updating your account marketing preferences or by emailing [email protected].

ch777 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. ch777 may share your personal data with third parties only in the following strictly limited circumstances:

• Payment Processors: ch777 shares the minimum necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners solely for the purpose of processing your deposits and withdrawals. These parties are bound by their own data protection obligations.
• Identity Verification Providers: ch777 may use third-party KYC verification services to assist in verifying your identity and age. These providers process your CNIC data solely for verification purposes and are contractually prohibited from retaining or repurposing it.
• Game Content Providers: Where you play live casino games or slots hosted by third-party studios (such as Evolution Gaming or Pragmatic Play), that provider's systems will process your in-game activity. These providers operate under their own licensing obligations and data protection frameworks.
• Regulatory & Law Enforcement Authorities: ch777 may disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Fraud Prevention Services: ch777 may share technical and behavioural data with industry fraud prevention services to protect the Platform and other players from fraudulent activity.
• Professional Advisers: ch777 may share personal data with its legal, financial, or audit advisers where necessary and subject to appropriate confidentiality obligations.

As an operator holding an international gaming licence, ch777 is required by law to implement and maintain a Know Your Customer (KYC) programme and to comply with applicable anti-money-laundering (AML) regulations. These obligations require ch777 to collect, verify, and retain identity documentation from all players prior to processing their first withdrawal.

7.1 KYC Data Required. To complete the KYC verification process, ch777 requires a clear, unaltered copy of your Pakistani Computerised National Identity Card (CNIC). ch777 may additionally request a recent selfie photograph to confirm the identity of the document holder. ch777 will never request your CNIC PIN or any banking authentication credentials.

7.2 AML Transaction Monitoring. ch777 is required to monitor all financial transactions on the Platform for indicators of money laundering, terrorist financing, or other financial crime. Where suspicious activity is identified, ch777 is legally obligated to file reports with the relevant financial intelligence authority and may be prohibited from alerting the subject of those reports to the existence of such a filing.

7.3 Record Retention. KYC documentation and AML transaction records are retained by ch777 for the period mandated by its licensing authority — typically a minimum of five years from the date of account closure. This retention is a legal obligation and cannot be overridden by a player's data deletion request.

ch777 uses cookies and similar browser-based technologies to operate the Platform, maintain your login session, ensure security, and gather anonymised analytics on Platform usage. The following types of cookies are used by ch777:

ch777 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and ch777 servers is encrypted using TLS 1.2 or higher with 256-bit cipher suites. The ch777 Platform enforces HTTPS on all pages and connections.
• Encryption at Rest: Sensitive personal data fields — including CNIC data, payment identifiers, and hashed passwords — are encrypted at rest within ch777's database infrastructure.
• Access Controls: Access to personal data within ch777's internal systems is restricted to personnel who require it to perform their job functions, on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication: ch777's internal administrative systems require multi-factor authentication. Players are strongly encouraged to enable 2FA on their own ch777 accounts via the account security settings.
• Penetration Testing: ch777 engages independent security professionals to conduct periodic penetration tests of the Platform's security infrastructure.
• Incident Response: ch777 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to affected Players, ch777 will notify affected individuals promptly and take immediate remedial action.

ch777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply to key data categories:

Upon expiry of the applicable retention period, ch777 will securely delete or irreversibly anonymise the relevant personal data. Where legal obligations require retention beyond a Player's account closure date, ch777 will restrict access to that retained data to the minimum number of personnel required to manage the legal obligation.

As a ch777 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact ch777 at [email protected] with the subject line "Data Rights Request." ch777 will respond to all valid requests within 30 days.

ch777 may send you promotional communications — including bonus offers, reload promotions, PSL cricket betting alerts, new game announcements, and VIP programme invitations — via SMS to your registered Pakistani mobile number or via email where an address has been provided.

ch777 will only send marketing communications where you have explicitly consented to receive them during account registration or subsequently through your account marketing preferences. You may withdraw consent for marketing communications at any time by:

• Updating your marketing preferences in your ch777 account settings.
• Replying STOP to any ch777 SMS marketing message.
• Emailing [email protected] with the subject line "Marketing Opt-Out."

ch777 will process all opt-out requests within 48 hours. Note that opting out of marketing communications does not affect transactional messages — ch777 will continue to send you account security alerts, deposit/withdrawal confirmations, and mandatory responsible gaming notifications regardless of marketing preferences.

ch777 is strictly prohibited from providing services to persons under 21 years of age. ch777 does not knowingly collect personal data from individuals under 21. If ch777 becomes aware that a person under 21 has registered an account or provided personal data, ch777 will immediately close that account, delete all associated personal data to the extent legally permissible, and return any deposited funds.

Parents and guardians who believe a minor may be using or may have used a ch777 account are urged to contact [email protected] immediately. ch777 treats all such reports as urgent and processes them with the highest priority. ch777 also encourages the use of parental control software and device-level restrictions to prevent underage access to online gambling platforms.

ch777 operates server infrastructure that may be located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than Pakistan in the course of providing ch777 services.

Where personal data is transferred internationally, ch777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by ch777's licensing jurisdiction. Such safeguards may include standard contractual clauses with data processors, adequacy decisions, or other recognised transfer mechanisms.

In particular, personal data may be transferred to the jurisdiction in which ch777's international gaming licence is held, for purposes of regulatory compliance and audit. Such transfers are conducted under the strict data protection provisions of ch777's licensing agreement.

ch777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform functionality, or ch777's data processing practices.

Material changes to this Policy — particularly changes that expand the categories of personal data collected, introduce new purposes for processing, or affect Player rights — will be communicated to registered ch777 Players via Account notification or SMS to the registered mobile number no less than 14 days prior to the effective date of the change.

The current version of this Privacy Policy, clearly dated with its effective date, will always be available at ch777.org/privacy-policy. Players are encouraged to review this page periodically to remain informed of ch777's current data practices.

If you have any questions, concerns, or complaints regarding this Privacy Policy or ch777's handling of your personal data, please contact the ch777 data protection team using the details below. ch777 is committed to resolving all data privacy concerns fairly and promptly.

• Email: [email protected] (subject line: "Data Privacy Request")
• Response Time: ch777 aims to acknowledge all data privacy enquiries within 5 business days and to resolve them within 30 days of receipt.
• Language: Requests may be submitted in English.

If you are dissatisfied with ch777's response to your data privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction in which ch777 holds its international gaming licence. ch777 will provide the relevant authority's contact details upon request.