by777 Privacy Policy

by777 is an online gaming platform operating at https://by777.onl, offering sports betting, live casino games, slot titles, and instant win products to players across Pakistan and internationally. by777 acts as the data controller in respect of all personal data collected through the Platform.

As data controller, by777 determines the purposes and means of processing your personal data. Where by777 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by data processing agreements that prohibit any use of your data beyond the specific services they deliver to by777.

For all privacy-related enquiries, data subject access requests, or complaints, please contact the by777 Data Privacy team using the contact details provided in Section 13 of this Policy.

by777 collects personal data through several distinct channels. The categories of data collected, their source, and their purpose are set out below:

Data You Provide Voluntarily: The majority of personal data by777 holds is provided directly by you — through the registration process, KYC submission, payment method setup, customer support contact, and account preferences management.

Data Collected Automatically: When you access the by777 Platform, certain technical data is automatically logged by our servers, including your IP address, device identifiers, and session activity. This data is used for platform security, fraud prevention, and service quality monitoring.

by777 uses the personal data it holds for the following purposes:

• Account Management: To create, maintain, verify, and administer your by777 account, including processing your registration, verifying your identity and age (21+), and managing account settings and security.
• Service Delivery: To provide you with access to the by777 gaming catalogue, process your deposits and withdrawal requests in PKR, apply bonus credits, and deliver the core Platform services you have registered for.
• Compliance & Regulation: To fulfil by777's legal and regulatory obligations, including Know Your Customer (KYC) identity verification, anti-money laundering (AML) screening, age verification, and responsible gaming monitoring obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on the Platform. This includes automated risk assessment using technical and gaming activity data.
• Customer Support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, game recommendations, and relevant by777 news where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the by777 Platform, optimise game loading performance, and enhance the overall user experience for Pakistani players.
• Responsible Gaming: To monitor gaming activity patterns and proactively identify behaviours associated with problem gambling, enabling by777 to offer appropriate responsible gaming interventions and tools.

by777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and by777 — including account management, game access, payment processing, and withdrawal handling — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — including KYC identity verification, AML screening, age verification, and gaming compliance reporting — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for by777's legitimate interests — including fraud prevention, Platform security monitoring, and aggregate analytics for service improvement — is conducted where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications and non-essential analytical cookies are processed solely on the basis of your freely given, specific, and informed consent. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5.1 Our Commitment. by777 does not sell, rent, trade, or otherwise commercially disclose your personal data to third parties for their own marketing or commercial purposes. Your data is shared only where it is necessary to deliver our services or comply with legal requirements.

5.2 Service Providers. by777 shares personal data with the following categories of third-party service providers, all of whom are bound by data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL Bank, UBL Bank, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 network providers receive transaction data necessary to process deposits and withdrawals in PKR.
• Identity Verification Providers: KYC and AML compliance partners receive identity documentation to verify account holder identity and screen against financial crime watchlists.
• Gaming Software Licensors: Game providers whose titles are accessible through the by777 Platform may receive anonymised session data as part of their licensing and technical support obligations.
• Cloud Infrastructure Providers: by777's hosting and database infrastructure providers process data on our behalf under strict data processing terms, with no independent access to personal data.
• Customer Support Platforms: Support tooling providers process communications data for the sole purpose of facilitating customer support delivery.

5.3 Legal Disclosures. by777 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, regulation, or valid legal process. Where legally permissible, by777 will notify affected account holders of such disclosures.

6.1 What Are Cookies. Cookies are small text files stored on your device by your web browser when you access the by777 Platform. They allow by777 to recognise your device across sessions, maintain your login state, remember your preferences, and in some cases analyse how the Platform is used.

6.2 Types of Cookies Used. by777 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential to the basic functioning of the Platform. These include session authentication cookies that keep you logged into your by777 account and security cookies that help protect against CSRF attacks. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and chosen display options. These cookies improve your experience but are not essential to Platform operation.
• Analytical Cookies: Used to understand how visitors interact with the Platform — including which pages are most visited and where technical errors occur. Analytical cookies are only placed with your prior consent and use anonymised or pseudonymised data.

6.3 What by777 Does Not Use. by777 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies on the Platform.

6.4 Managing Cookies. You can control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the by777 Platform, including the ability to remain logged in.

by777 implements a layered approach to data security, combining technical controls, organisational measures, and staff training to protect the personal data of Pakistani players and international account holders against unauthorised access, disclosure, alteration, or destruction.

Technical measures in place include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; multi-factor authentication requirements for all by777 internal system access; regular penetration testing and vulnerability scanning; and automated intrusion detection systems.

Organisational measures include: role-based access controls that restrict personal data access to only those staff members who require it for their specific function; mandatory data protection training for all personnel; documented incident response procedures; and regular data protection impact assessments for high-risk processing activities.

In the event of a personal data breach that poses a risk to your rights and freedoms, by777 will notify affected account holders without undue delay and will take all reasonable steps to contain and remediate the breach.

by777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted from by777 systems or irreversibly anonymised such that it can no longer be linked to any individual account holder.

Subject to applicable law and certain limited exceptions, you have the following rights in relation to the personal data by777 holds about you:

• Right of Access: You may request a copy of all personal data by777 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account profile.
• Right to Erasure: In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected and no legal retention obligation applies — you may request deletion of your personal data.
• Right to Restriction: You may request that by777 restrict the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is being investigated.
• Right to Data Portability: You may request a copy of personal data you have provided to by777 in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling, where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the by777 Data Privacy team using the contact details provided in Section 13. Requests are processed free of charge and by777 targets a response time of thirty (30) days. For complex or high-volume requests, by777 may extend this period by a further thirty (30) days with prior notification.

by777 may request verification of your identity before processing any data subject request to ensure that personal data is not disclosed to unauthorised persons.

The by777 Platform is strictly restricted to individuals aged 21 years and over. by777 does not knowingly collect personal data from any person under the age of 21, and does not permit persons under this age to register an account, access gaming services, or engage in any financial transaction on the Platform.

Age verification is conducted as a mandatory step in the KYC process for all by777 account holders. Any account found to belong to a person under the age of 21 will be immediately and permanently closed, all balances will be returned via the original deposit method, and the relevant data will be securely deleted in accordance with by777's data retention obligations.

If you have reason to believe that a minor has registered a by777 account, please contact by777 support immediately using the details in Section 13. Parents and guardians are strongly encouraged to use device-level parental control software to prevent minors from accessing online gaming platforms.

by777 operates as an international gaming platform and, in the course of delivering services to Pakistani players, some personal data may be processed by by777's service providers on servers located outside of Pakistan. This may include cloud hosting infrastructure, gaming software systems, and identity verification platforms.

Where personal data is transferred internationally, by777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided for under applicable data protection principles. These safeguards include contractual data transfer mechanisms, binding corporate rules where applicable, and the selection of service providers operating in jurisdictions recognised as providing adequate data protection standards.

by777 does not transfer personal data to any third country or organisation unless satisfied that the receiving party provides adequate protection for that data and is bound by enforceable obligations to that effect.

by777 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. Material changes to this Policy will be communicated to registered account holders via their registered contact details, with a minimum of seven (7) days' notice prior to the changes taking effect.

The current version of this Privacy Policy will always be accessible at https://by777.onl/privacy-policy. The effective date and last updated date displayed at the top of the document will be revised each time the Policy is updated. We encourage you to review this Policy periodically to stay informed about how by777 protects your personal data.

Where changes to this Policy require your fresh consent — for example, where we propose to use your data for a new purpose not previously disclosed — by777 will seek that consent separately before the new processing begins. Your continued use of the Platform following a non-material update constitutes your acknowledgement of the revised Policy.

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or complaints regarding by777's handling of your personal data, please contact the by777 Data Privacy team. We are committed to addressing all legitimate privacy concerns promptly and transparently.

Where you are not satisfied with by777's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority or independent dispute resolution body applicable under by777's operating framework.