da777 Privacy Policy

This Privacy Policy ("Policy") is published by da777 ("the Company", "da777", "we", "us", "our") and governs the collection, use, storage, processing, and disclosure of personal data relating to players who access or use the da777 online gaming platform available at da777.bio (the "Platform"), including all associated gaming services, sports betting interfaces, account management systems, and customer support channels.

da777 is committed to protecting the privacy and personal data of all players, including the Pakistani players who form the core of our gaming community. This Policy is written in plain, accessible English and is designed to give you a clear and honest understanding of how your personal data is handled when you engage with da777.

This Policy should be read in conjunction with da777's Terms and Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with the da777 platform.

For the purposes of applicable data protection legislation, da777 is the data controller in respect of personal data collected from players through the Platform. As data controller, da777 is responsible for determining the purposes and means by which your personal data is processed.

da777 operates under an international online gaming licence and is subject to the data protection and player privacy obligations imposed by that licensing framework. These obligations are no less stringent than the requirements applied to licensed gaming operators in regulated markets globally.

All queries, subject access requests, and data-related complaints should be directed to da777 using the contact information provided in Section 16 of this Policy. da777 will acknowledge all data-related enquiries within a reasonable timeframe and respond substantively within the period required by applicable regulation.

da777 collects personal data from players through several channels during the account registration, verification, and gameplay process. The categories of personal data we collect are as follows:

3.1 Registration Data

When you create a da777 account, we collect the personal information you provide during the registration form, including:

• Full legal name as it appears on your Pakistani National Identity Card (CNIC);
• Date of birth (for mandatory age verification purposes);
• Pakistani mobile phone number (used as your account identifier and for two-factor authentication);
• Email address (for account communications and promotional notifications where consented);
• Residential address within Pakistan.

3.2 Identity Verification (KYC) Data

As required under our international gaming licence, all players must complete Know Your Customer verification before withdrawals are processed. KYC data collected includes:

• Photographs or scans of your Pakistani CNIC (front and back);
• A recent selfie holding your CNIC for live identity confirmation;
• Proof of payment method ownership (e.g., screenshot of registered JazzCash or EasyPaisa wallet).

3.3 Financial Transaction Data

• Deposit amounts, dates, and payment method identifiers;
• Withdrawal amounts, dates, and beneficiary payment details;
• Transaction history, account balance records, and wagering activity logs.

3.4 Gaming Activity Data

• Games played, wagers placed, wins, losses, and session duration data;
• Sports betting market selections, stake amounts, and settlement records;
• Bonus and promotion usage records.

3.5 Technical and Device Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Session timestamps, login history, and access logs;
• Cookies and similar tracking technologies (see Section 7).

3.6 Communications Data

• Content of live chat sessions, email correspondence, and any written complaints or enquiries submitted to da777 support;
• Records of calls or messages made through any telephone support channel da777 may operate.

da777 uses personal data collected from players for the following specific purposes:

da777 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have accepted, including account operation, payment processing, and delivery of gaming services;
• Legal Obligation: Processing required to comply with our obligations under applicable anti-money laundering regulations, gaming licence requirements, and valid legal orders;
• Legitimate Interests: Processing carried out in pursuit of da777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your fundamental privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — for example, receiving marketing communications. You may withdraw consent at any time by contacting da777 support or updating your account communication preferences.

da777 does not sell, rent, or trade your personal data to third parties for any commercial purpose. We may share your personal data with third parties in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own data protection obligations and are not permitted to use your data for any purpose other than the relevant transaction;
• KYC and Identity Verification Providers: Third-party identity verification services engaged by da777 to process CNIC documents and confirm player identity for compliance purposes;
• Gaming Software Providers: International game developers who supply the software powering da777's casino and sports betting platforms may receive anonymised or session-level data necessary for game operation, fault resolution, and RNG auditing. They do not receive personally identifiable registration data;
• Fraud and Anti-Money Laundering Services: Specialist third-party services engaged to detect and investigate potentially fraudulent or criminal activity on the Platform;
• Regulatory and Law Enforcement Authorities: da777 will disclose personal data to relevant gaming regulators, law enforcement agencies, or courts where legally required to do so by valid legal process, regulatory instruction, or court order;
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by da777 on a confidential basis where necessary for corporate governance purposes.

da777 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and gather aggregated analytical data. When you access da777 through a browser, cookies may be set on your device in the following categories:

• Essential Cookies: Strictly necessary for the operation of the Platform. These include session authentication tokens that keep you logged in to your da777 account, security tokens that protect against cross-site request forgery, and cookies that remember your language and regional preferences. Essential cookies cannot be disabled without impairing Platform functionality;
• Functional Cookies: Enable enhanced Platform features such as remembering your game lobby preferences, last played game position, and responsible gaming tool settings. These cookies improve your da777 experience but are not strictly essential to platform operation;
• Analytical Cookies: Allow da777 to understand how players use the Platform in aggregate — which sections of the lobby are most visited, average session lengths, and common navigation paths. This data is used exclusively to improve Platform design and performance. Analytical cookies do not identify individual players;
• Marketing Cookies: Only set where you have provided explicit consent, these cookies may track whether you arrived at da777 through a specific marketing channel, enabling da777 to measure the effectiveness of promotional campaigns without targeting you as an individual for third-party advertising.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies selectively. Please note that disabling essential cookies will prevent you from logging in to your da777 account and using core Platform features.

The collection and processing of KYC documents — including your Pakistani CNIC and associated identity photographs — is a mandatory requirement under da777's international gaming licence obligations. da777 treats identity documentation with the highest level of data protection controls:

• KYC documents are transmitted to da777's servers using TLS 1.3 encrypted channels and are stored in encrypted form at rest;
• Access to KYC documents is restricted to da777 compliance personnel and authorised third-party KYC verification providers on a strict need-to-know basis;
• CNIC document images are not used for any purpose other than identity verification, age confirmation, and anti-money laundering compliance;
• KYC records are retained for the minimum period required under applicable gaming licence conditions, typically for a defined period following account closure;
• Players may request information about how their KYC documents are stored and processed by contacting da777 support.

da777 does not use automated decision-making based solely on KYC document analysis without human review. All KYC rejections involve human assessment and players are given an opportunity to resubmit documentation where appropriate.

da777 applies strict controls to the handling of financial transaction data. Key protections include:

• Payment transactions are processed exclusively through certified payment gateways. da777 does not store full card numbers, CVV codes, or JazzCash/EasyPaisa PIN credentials on its own servers at any time;
• All financial transaction data in transit is protected by TLS 1.3 encryption;
• Withdrawal requests are subject to manual or automated verification to confirm they match the player's registered payment method and verified identity, preventing fraudulent withdrawal attempts;
• da777 maintains audit logs of all financial transactions for compliance and dispute resolution purposes. These logs are held securely and accessed only by authorised personnel;
• In the event of a suspected security breach affecting payment data, da777 will notify affected players and relevant authorities in accordance with applicable obligations.

da777 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. The following general retention principles apply:

• Active Account Data: All personal and gaming data associated with an active da777 account is retained for the duration of the account's existence plus any mandatory post-closure retention period required by da777's gaming licence;
• KYC and Identity Documents: Retained for the period mandated by applicable anti-money laundering and gaming licence regulations, which may extend beyond account closure;
• Transaction Records: Financial transaction logs are retained for a defined period as required by applicable regulatory and accounting obligations;
• Support Communications: Records of customer support interactions are retained for a reasonable period to assist with dispute resolution and quality review purposes;
• Marketing Consent Records: Records of your marketing consent are retained for as long as you are a registered player and for a reasonable period thereafter;
• Anonymised Analytics Data: Aggregated, anonymised usage data from which no individual player can be identified may be retained indefinitely for platform improvement purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

da777 respects and supports your rights in relation to the personal data we hold about you. Subject to applicable law and regulatory restrictions, you have the following rights:

To exercise any of the above rights, contact da777 support using the details in Section 16. da777 may require you to verify your identity before processing a rights request. We will respond within the applicable legal timeframe. Please note that certain rights may be subject to limitations where da777 is required to retain data for legal compliance or legitimate fraud prevention purposes.

da777 is strictly prohibited to persons under the age of 21. We do not knowingly collect personal data from anyone under the age of 21. All account registrations are subject to mandatory age verification through CNIC document checks, and accounts belonging to minors — if discovered — are terminated immediately with all associated data handled in accordance with applicable child protection obligations.

If you believe that da777 has inadvertently collected personal data from a person under the age of 21, please contact da777 support immediately using the details provided in Section 16. We will take immediate steps to investigate and, where confirmed, to delete the data and close the associated account.

As an internationally licensed online gaming platform, da777 may process and store personal data on servers located outside Pakistan. In operating the Platform, your data may be transferred to or processed in countries where da777's technology infrastructure, KYC providers, gaming software suppliers, or fraud prevention systems are hosted.

Where personal data is transferred internationally, da777 takes the following steps to ensure that appropriate protections remain in place:

• All international data transfer arrangements with third-party service providers include contractual data processing obligations that meet applicable international standards;
• Data transmitted internationally is encrypted in transit using TLS 1.3;
• da777 selects service providers whose data security and privacy standards are commensurate with the protections applied on the Platform itself.

By using da777 and accepting this Privacy Policy, you acknowledge and consent to the international transfer and processing of your personal data as described herein, subject to the protections outlined above.

da777 maintains a comprehensive information security programme designed to protect player personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: TLS 1.3 for all data transmitted between player devices and da777 servers;
• Encryption at rest: Sensitive data stored on da777 servers, including KYC documents and financial records, is encrypted at rest using industry-standard algorithms;
• Password hashing: Account passwords are never stored in plain text. They are processed through cryptographic hashing functions that make passwords irretrievable even in the event of a data breach;
• Access controls: Internal access to player data is restricted on a strict need-to-know basis with role-based access controls, audit logging of all data access events, and multi-factor authentication required for administrative systems;
• Vulnerability management: da777 conducts regular security assessments of the Platform infrastructure to identify and remediate potential vulnerabilities before they can be exploited;
• Incident response: da777 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights and freedoms, da777 will notify affected players and relevant authorities in accordance with applicable obligations.

Despite these measures, no online system can guarantee absolute security. da777 encourages all players to take personal responsibility for their account security by using strong, unique passwords, enabling two-factor authentication, and not sharing account credentials with third parties.

da777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, technological developments, or changes to our data processing practices. All changes will be reflected in a revised version of this Policy published on the Platform.

For material changes to this Policy — those that meaningfully affect how we collect or use your personal data — da777 will provide advance notice to registered players via the email address associated with their account, or through a prominent notice on the Platform, prior to the amended Policy taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage all da777 players to review this Policy periodically to remain informed about how their personal data is protected. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or da777's handling of your personal data, please contact the da777 Data Protection team using the details below. All data-related correspondence should be submitted in English and should include your registered account username or Pakistani mobile number for identification purposes.

Players who believe their privacy rights have not been adequately addressed by da777 may also have the right to raise a complaint with a relevant supervisory authority under applicable data protection regulations. da777 encourages players to first contact us directly so that we have the opportunity to resolve any concern before escalation.