cf777 Privacy Policy

1. Scope & Controller

This Privacy Policy applies to all personal data collected and processed by cf777 in connection with the website cf777.bio and all associated gaming, sportsbook, payment, account management, and customer support services (collectively, the "cf777 Platform").

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is the entity operating the cf777 Platform under its international gaming licence. If you have any questions regarding the identity of the data controller or the lawful basis for any specific processing activity, please contact cf777 support via the details in Section 14.

This Policy applies to all current and former registered players, prospective players who have begun but not completed registration, and visitors to cf777.bio who interact with any functional feature of the website (such as live chat). It applies regardless of the device or network used to access the cf777 Platform, including mobile devices commonly used by players across Karachi, Lahore, Faisalabad, and Islamabad.

2. Data We Collect

cf777 collects the following categories of personal data, depending on how you interact with the Platform:

cf777 does not intentionally collect special category data (such as health, biometric, or religious data) except where a player voluntarily discloses such information in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.

3. How We Collect Data

cf777 collects personal data through the following means:

• Direct input: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically as you navigate cf777.bio, including via cookies, server logs, and session tracking technologies. See Section 9 for full cookie details.
• Third-party KYC providers: cf777 uses trusted identity verification service providers to validate Pakistani CNIC documents and perform liveness checks. These providers return a verification result to cf777; the underlying data is processed in accordance with the provider's own privacy standards and under a data processing agreement with cf777.
• Payment processors: Transaction confirmations, reference numbers, and in some cases account holder name data are received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners when you deposit or withdraw funds.
• Fraud and compliance data: cf777 may receive data from fraud prevention databases, sanctions screening services, and responsible gaming self-exclusion registers for the purpose of protecting the platform and its players.

4. Purposes & Legal Basis

cf777 processes personal data only for the following defined purposes, each of which has a documented lawful basis:

• Account creation and management — necessary for the performance of our contract with you as a registered player. Without this data, we cannot provide any cf777 service.
• Identity verification (KYC) — required by our legal obligation under applicable anti-money laundering and gaming regulatory requirements. Pakistani players must verify their CNIC before withdrawals can be processed.
• Payment processing — necessary for the performance of our contract. Deposit and withdrawal transactions cannot be executed without collecting and transmitting the relevant payment details.
• Fraud prevention and platform security — based on our legitimate interest in protecting the cf777 Platform, its players, and the integrity of the gaming environment from fraud, money laundering, and abuse.
• Customer support — necessary for the performance of our contract and based on legitimate interest in resolving player queries effectively.
• Responsible gaming compliance — required by our legal obligation under our gaming licence to monitor player activity for problem gambling indicators, implement self-exclusion tools, and enforce deposit and loss limits.
• Marketing communications — based on your explicit consent only. You may opt out of marketing emails or SMS notifications at any time via your cf777 account settings or by contacting support.
• Legal and regulatory compliance — required to fulfil our obligations to gaming regulators, financial intelligence units, law enforcement bodies, and courts where we receive lawful disclosure requests.

5. Data Sharing

cf777 does not sell your personal data. We share data only in the following circumstances, and only to the minimum extent necessary:

• Service providers acting as data processors: Third parties engaged by cf777 to provide specific services — including KYC verification providers, payment processors (JazzCash, EasyPaisa, and banking partners), cloud hosting providers, live chat software providers, and game content providers — process data solely on cf777's instructions and under binding data processing agreements.
• Gaming regulators and licensing authorities: cf777 is required to share player data — including identity records, transaction histories, and gaming activity — with its licensing authority upon request, as a condition of operating under its international gaming licence.
• Law enforcement and government authorities: cf777 will disclose personal data where required to do so by a valid legal order, court judgment, or governmental request from a competent authority. cf777 will, where legally permissible, notify the affected player of such a request.
• Financial intelligence units (AML reporting): Where cf777's AML monitoring identifies a transaction or pattern of activity that meets the threshold for a suspicious activity report, relevant data will be disclosed to the appropriate financial intelligence unit as required by law.
• Business transfers: In the event that cf777 is involved in a merger, acquisition, or sale of its business or assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transition.

6. International Transfers

cf777 operates under an international gaming licence, and certain data processing activities — including cloud infrastructure hosting and third-party service provider operations — may involve the transfer of your personal data outside of Pakistan to other jurisdictions.

Where such transfers occur, cf777 takes steps to ensure that your personal data receives an adequate level of protection, including by:

• Entering into standard contractual clauses or equivalent data transfer agreements with recipient entities;
• Engaging only service providers in jurisdictions with recognised data protection frameworks or whose processing infrastructure meets cf777's security standards; and
• Conducting transfer impact assessments where required to evaluate the risk to your rights and freedoms in the destination jurisdiction.

You may request further information about the safeguards applicable to any specific international transfer of your data by contacting cf777 support.

7. Retention Periods

cf777 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and identity data (KYC records): Retained for a minimum of five years from the date of account closure, as required under anti-money laundering regulations applicable to our gaming licence jurisdiction.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction.
• Gaming activity logs: Retained for three years from the date of the session, used for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support communications: Retained for two years from the date of the interaction, unless a complaint or dispute remains open, in which case records are retained until resolution plus two years.
• Marketing consent records: Retained for the duration of the account and for two years after account closure, to evidence the lawfulness of any marketing communications sent during that period.
• Technical / server log data: Retained for 12 months and then deleted or anonymised.

Upon expiry of the applicable retention period, cf777 will securely delete or irreversibly anonymise your personal data. Anonymised data (which can no longer identify you) may be retained for statistical and platform improvement purposes indefinitely.

8. Security Measures

cf777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption on all data transmissions between your browser or app and cf777 servers;
• Encryption at rest for sensitive data categories including CNIC images, payment details, and authentication credentials;
• Role-based access controls limiting internal access to personal data to cf777 employees and contractors with a documented operational need;
• Multi-factor authentication for cf777 internal systems that contain player personal data;
• Regular security audits and penetration testing of the cf777 Platform and supporting infrastructure;
• Incident response procedures that require cf777 to notify affected players and relevant authorities of a confirmed data breach within the timeframes required by applicable law.

9. Cookies & Tracking

cf777.bio uses cookies and similar tracking technologies to operate the platform, maintain session integrity, and (where you have consented) analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled as they are essential to service delivery.
• Functional cookies: Enable personalisation features such as remembered language preferences, game lobby layout settings, and responsible gaming limit displays. These are set on first use and persist across sessions.
• Analytics cookies: Used to understand how players navigate cf777.bio — which pages are visited most, where drop-off occurs, and how platform features are used. This data is aggregated and used solely for platform improvement purposes. Analytics cookies are set only where you have consented via the cookie notice displayed on your first visit.
• Fraud prevention cookies: Lightweight device fingerprinting technologies used to identify and block suspicious access patterns, duplicate account creation, and bot activity. These operate on a legitimate interest basis and are not dependent on your consent.

You may manage your cookie preferences at any time via the cookie settings accessible from the cf777 footer. Disabling non-essential cookies will not affect your ability to play on cf777, but may reduce the quality of personalisation features.

10. Your Rights

Depending on applicable data protection law, you have the following rights in relation to the personal data cf777 holds about you. To exercise any of these rights, contact cf777 support as described in Section 14. Requests will be responded to within 30 days.

11. Minors & 21+ Policy

cf777 does not knowingly collect or process personal data belonging to individuals under the age of 21. Access to cf777 is strictly limited to adults aged 21 and above. Age verification is a mandatory step in the KYC process, and accounts found to belong to individuals under 21 will be closed immediately.

In the event that cf777 discovers that personal data has been collected from a person under 21 — whether due to fraudulent age misrepresentation or a failure in verification — cf777 will:

1. Immediately suspend the account and cease all processing of data for gaming purposes;
2. Return any deposited funds to the payment source used, subject to AML verification;
3. Delete all personal data associated with the underage account that is not required to be retained under AML or gaming licence obligations; and
4. Log the incident for regulatory reporting purposes where required.

If you believe a person under 21 has registered or accessed cf777, please report this immediately to cf777 support via live chat. Parental control software is also recommended for households with minors.

12. Third-Party Links

The cf777 Platform does not contain outbound links to third-party websites as part of its standard content. Where cf777 support documentation or responsible gaming sections reference external resources (such as problem gambling helplines or self-exclusion registries), those references are provided for informational purposes only.

cf777 is not responsible for the privacy practices of any third-party website or service that you may access independently. You should review the privacy policy of any third-party site before sharing personal data with it.

13. Policy Changes

cf777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of the cf777 Platform. The updated Policy will be published at cf777.bio/privacy-policy with a revised "Last Updated" date.

Where changes are material — for example, where we introduce a new category of data collection or a new purpose for processing — cf777 will notify registered players via email or an in-platform notification before the change takes effect. Your continued use of cf777 following such notification constitutes your acknowledgment of the revised Policy.

If you do not agree with a material change to this Policy, you may close your cf777 account without penalty by contacting support. Any real-money balance in your account will be processed for withdrawal to your verified payment method.

14. Contact & Complaints

To exercise any of your data rights, raise a privacy concern, or submit a complaint about cf777's handling of your personal data, you may contact the cf777 Privacy team through the following channels:

• Live chat: Available 24/7 on cf777.bio. For urgent privacy matters — such as a suspected data breach affecting your account — live chat is the fastest channel.
• Email: [email protected] — please include "Privacy Request" in the subject line and your registered email address or account username to help us locate your records. cf777 aims to acknowledge all privacy requests within five business days and to resolve them within 30 calendar days.

If you are not satisfied with cf777's response to a privacy complaint, you have the right to escalate the matter to the data protection authority in the jurisdiction applicable to cf777's gaming licence, or to seek an alternative dispute resolution mechanism as specified in the cf777 Terms & Conditions.