y777 Privacy Policy – How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by y777 ("y777", "we", "us", "our") and governs the collection, processing, storage, disclosure, and protection of personal data relating to all individuals ("Players", "Users", "you") who register an account on, access, or otherwise interact with the y777 online gaming platform available at https://y777.lol and any associated mobile-optimised interfaces.

y777 is Pakistan's premier online gaming platform, offering cricket betting, live casino games, slot titles, jackpot bingo, and an integrated PKR wallet that Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities use on a daily basis. Given the nature of our services — which involve real-money transactions, identity verification, and ongoing account management — the responsible handling of personal data is not merely a legal obligation for y777. It is a fundamental aspect of the trust our players place in us.

By registering an Account on y777, by logging in at any time, or by using any feature of the y777 Platform, you acknowledge that you have read this Policy in full and that you consent to the collection and processing of your personal data as described herein. If you do not agree to any part of this Policy, you must cease using the y777 Platform and may request account closure by contacting our support team.

For the purposes of applicable data protection legislation, the data controller in respect of personal data collected and processed through the y777 Platform is the entity that holds y777's international online gaming licence and operates y777.lol. The data controller is responsible for determining the purposes for which and the manner in which personal data collected through y777 is processed.

All enquiries, requests, and complaints relating to the processing of your personal data by y777 should be directed to the y777 Data Privacy team via the contact details set out in Section 15 of this Policy. y777 endeavours to respond to all data-related correspondence within thirty (30) calendar days of receipt.

y777 collects personal data from Players through several means: directly when you register and complete your profile, automatically when you use the Platform, and from third parties in the course of identity verification and payment processing. The categories of personal data we collect are set out in the table below:

y777 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which y777 relies are as follows:

• Contractual Necessity: Processing required to provide the y777 gaming services to you under the Terms & Conditions you accepted at registration — including account management, payment processing, bet settlement, and bonus administration.
• Legal Obligation: Processing required to comply with y777's obligations under its gaming licence — including KYC identity verification, anti-money laundering (AML) checks, responsible gaming record-keeping, and regulatory reporting.
• Legitimate Interests: Processing carried out in pursuit of y777's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, improving gaming experiences, and analytics that help us serve Pakistani players better.
• Consent: Where you have given specific, informed, and freely withdrawn consent — primarily in the context of optional marketing communications (email newsletters, promotional SMS to your registered Pakistani mobile number, and push notifications if applicable). You may withdraw marketing consent at any time.

y777 uses personal data collected from Pakistani players for the following specific purposes, each linked to a legal basis described in Section 4:

1. Account Creation & Management: To register your y777 Account, authenticate your identity at login, maintain your account preferences, and enable the full suite of y777 gaming and wallet services.
2. Age & Identity Verification (KYC): To verify that you are aged 21 or above — a strict requirement for all y777 players — and to confirm your identity in compliance with our licensing obligations. CNIC-based verification is mandatory before any withdrawal is processed.
3. Payment Processing: To process deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency; to credit winnings and bonuses to your PKR Wallet; and to process withdrawal requests to your verified payment method.
4. Game Provision & Bet Settlement: To operate cricket betting markets (PSL, T20, ODI, Test), live casino tables, slot games, and jackpot bingo; to record your bets and settle outcomes accurately; and to maintain a complete audit trail of your gaming activity.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, duplicate accounts, bonus abuse, money laundering, and unauthorised access to your y777 Account.
6. Responsible Gaming: To monitor gaming patterns that may indicate problem gambling; to enforce deposit limits, cool-off periods, and self-exclusion settings you have activated; and to fulfil y777's obligations to protect vulnerable players.
7. Customer Support: To respond to your enquiries via live chat or email at [email protected]; to resolve disputes and complaints; and to maintain records of support interactions for quality and training purposes.
8. Marketing Communications (with consent): To send promotional emails, SMS notifications to your registered Pakistani mobile number, and bonus alerts regarding y777 offers — only where you have opted in to receive such communications and have not subsequently withdrawn that consent.
9. Platform Improvement & Analytics: To analyse aggregated, anonymised usage data to understand how Pakistani players interact with y777; to improve game selection, interface design, payment flows, and customer support quality.
10. Legal & Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities.

y777 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes — under any circumstances. We share personal data only in the following specific and limited contexts:

y777 engages carefully selected third-party service providers who process personal data on y777's behalf under written data processing agreements. These providers include: KYC identity verification platform operators; payment gateway providers (JazzCash, EasyPaisa, and banking partners); game software studios (who receive anonymised session tokens, not personally identifiable information); cloud hosting and data centre operators; fraud detection and AML screening services; and customer support platform providers.

y777 may disclose your personal data to its gaming regulator, financial intelligence units, tax authorities, or law enforcement agencies where required to do so by applicable law, court order, or regulatory instruction. y777 will, where legally permissible, notify you of such a disclosure.

In the event that y777 or its operating entity is involved in a merger, acquisition, asset sale, or restructuring, your personal data may be transferred as part of that transaction. y777 will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

y777 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with y777's data deletion procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregated analytics purposes.

y777 implements a comprehensive, multi-layer security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Transport Encryption: All data transmitted between your browser or mobile device and y777's servers is encrypted using TLS 1.3 with AES-256 cipher suites — the same standard used by major Pakistani banks including HBL and UBL for their online banking services;
• Data-at-Rest Encryption: Sensitive personal data stored in y777's databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption;
• Password Security: Account passwords are hashed using bcrypt with unique per-user salts. y777 never stores plain-text passwords and cannot retrieve your password — only reset it;
• Two-Factor Authentication (2FA): y777 offers and encourages SMS-based 2FA via your registered Pakistani mobile number for all account logins — providing a critical additional authentication layer even if credentials are compromised;
• Access Controls: y777 employee access to personal data is governed by a strict role-based access control system. Only personnel with a demonstrated operational need access Player personal data, and all access is logged and audited;
• Intrusion Detection: y777's infrastructure is monitored continuously for suspicious access patterns, with automated alerts and response procedures for potential security incidents;
• Data Minimisation: y777 collects only the personal data necessary for the stated purposes and does not retain data beyond the periods specified in Section 7.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, y777 will notify you without undue delay at your registered email address and will take all steps within our reasonable control to contain and mitigate the breach.

y777 uses cookies and similar browser-based tracking technologies to operate the Platform, maintain your login session, remember your preferences, analyse Platform usage, and detect fraudulent activity. The types of cookies used on y777 are:

• Strictly Necessary Cookies: Essential for the y777 Platform to function. These include session authentication cookies that keep you logged in during your gaming session, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cookies cannot be disabled without rendering the Platform non-functional.
• Analytics Cookies: Used to understand how Pakistani players navigate and use y777 — which game categories are most visited, where players encounter difficulties in the deposit or withdrawal flow, and how long players spend on different sections of the Platform. Data collected via analytics cookies is aggregated and does not identify you personally.
• Preference Cookies: Remember your Platform preferences such as language settings, preferred game categories, and notification preferences — so that your experience is consistent across sessions without you needing to re-configure settings each time you log in.

You can manage cookie preferences through your browser settings. Disabling analytics and preference cookies will not affect your ability to use the core y777 Platform, though some personalisation features may not function as intended. Disabling strictly necessary cookies will prevent you from logging in to y777.

As a y777 Player, you hold the following rights in respect of the personal data we process about you. You may exercise any of these rights at any time by contacting the y777 Data Privacy team via the details in Section 15:

y777 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is particularly complex or numerous, we may extend this period by a further 60 days, of which we will notify you in advance. All requests are processed without charge, except in cases of manifestly unfounded or excessive repetition.

y777 is strictly an adult gaming platform. The y777 registration process includes an age declaration, and CNIC-based KYC verification is used to confirm that every Player is at least 21 years of age before any withdrawal is approved. If y777 discovers or is notified that personal data belonging to a person under 21 has been collected, we will immediately:

• Close the Account in question without notice;
• Permanently delete all personal data associated with the Account to the extent not required to be retained by law;
• Forfeit any balance in the Account in accordance with y777's Terms & Conditions;
• Log the incident in our compliance records in accordance with regulatory requirements.

Parents and guardians who believe a minor has registered an account on y777 are urged to contact us immediately at [email protected] with relevant details so that we can take prompt action.

The y777 Platform serves Pakistani players, but some of our service providers — including cloud hosting infrastructure providers, game studios, and fraud detection services — may store or process personal data in jurisdictions outside Pakistan. Where such international transfers occur, y777 ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses in agreements with all international service providers that impose obligations equivalent to those in this Privacy Policy;
• Transfer only to providers in jurisdictions with an adequate level of data protection as assessed by y777's compliance team;
• Restriction of transferred data to the minimum necessary for the relevant service provider to perform their function.

The y777 Platform may contain references to or descriptions of third-party services — including game providers, payment processors, and responsible gaming organisations. y777 does not operate these third-party services and is not responsible for their privacy practices. This Privacy Policy applies exclusively to personal data processed by y777 in connection with the y777 Platform.

Where you interact directly with a third-party game provider's interface embedded within y777 — such as a live casino stream or a slot game — your interaction with that interface may be subject to the third-party provider's own privacy practices in addition to this Policy. y777 selects game providers who meet rigorous data protection standards as a condition of their presence on the Platform.

y777 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the y777 Platform's features and services. Where changes are material — meaning they meaningfully affect how your personal data is collected or used — y777 will provide at least fourteen (14) days' advance notice to your registered email address before the updated Policy takes effect.

For non-material changes — such as typographical corrections, minor clarifications, or updates that do not affect your rights — y777 may update the Policy without advance notice, reflecting the new Effective Date at the top of this page. We encourage all y777 Players to review this Privacy Policy periodically. Continued use of y777 following notification of a material change constitutes acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data y777 holds about you, please contact us through the following channels. Please include your registered y777 username and a description of your request to help us respond efficiently: