Privacy Policy – How l777 Protects Your Data in Pakistan

This Privacy Policy is issued by l777, the operator of the l777.cash online casino platform. When this document refers to "l777", "we", "us", or "our", it means the l777 operating entity responsible for the l777.cash website, mobile application, and all associated gaming services. When it refers to "you" or "your player", it means any person who registers an account, visits the l777 website, or otherwise interacts with any l777 service.

l777 is the data controller in respect of personal information collected through the l777 platform. This means l777 determines the purposes and means by which your personal data is processed. For questions about this policy or about your personal data held by l777, the primary contact is support@l777.cash.

l777 operates exclusively in Pakistani Rupees (PKR) and serves players based in Pakistan. All data processing activities described in this policy relate to that specific operational context. l777 does not intentionally collect data from persons outside Pakistan.

l777 collects personal data across four broad categories. The table below summarises what falls into each category and provides examples of the specific data points involved.

l777 collects personal data through three primary mechanisms. Understanding each one helps you know exactly what information l777 receives at each stage of your interaction with the platform.

• Directly from you: When you complete the l777 registration form, you provide your name, mobile number, email address, and date of birth. When you submit KYC documents, you provide your CNIC details and photograph. When you deposit or withdraw PKR, you provide payment account information. When you contact l777 support, you provide the content of that communication.
• Automatically during platform use: The l777 platform collects technical data during every session automatically. This includes your IP address (used to determine country-level location and detect fraud), the type of device and operating system you're using, your browser version, the pages or game screens you visit, session start and end times, and complete game round history including bet amounts and outcomes. This data is logged to our servers and retained according to the schedule in Section 8.
• From third-party verification services: When you complete KYC verification, l777 shares your provided identity details with a licensed third-party KYC verification provider. That provider confirms whether the details match official Pakistani identity records and returns a pass/fail result to l777 along with any flags raised. l777 does not receive raw data from government databases — only the verification result.
• From payment processors: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT, or Visa/Mastercard, l777 receives transaction confirmation data from the payment processor including transaction reference numbers, amounts, timestamps, and the masked identifier of the payment account used. l777 does not receive your full card numbers or mobile wallet PINs.

l777 uses your personal data for specific, clearly defined purposes. The following explains each purpose and why it matters to the operation of your l777 account and your experience as a Pakistani player on the platform.

• Account creation and management: We use your identity and contact data to create, maintain, and secure your l777 account. This includes verifying that your registration information is complete and accurate, providing password reset services via your registered mobile number, and sending account security alerts when unusual login activity is detected.
• Processing PKR deposits and withdrawals: Your financial data is used to process every deposit and withdrawal transaction on your l777 account. We use your payment method identifiers to confirm that deposits are credited to the correct account and that withdrawals are sent to a payment method registered in your own name — a critical anti-money-laundering control.
• KYC and identity verification: Pakistani and international anti-money-laundering requirements oblige l777 to verify the identity of players before processing significant withdrawals. We use your CNIC data and photograph for this purpose. KYC data is processed by our verification partner and then retained by l777 for the legally required period.
• Fraud prevention and security: Technical and usage data — particularly IP addresses, device fingerprints, and game play patterns — is analysed by l777's security systems to identify unusual activity that may indicate fraudulent account use, coordinated bonus abuse, money laundering, or attempts to access another player's account.
• Delivering and improving the l777 platform: Usage data helps l777 understand how Pakistani players interact with the platform — which games are most popular, where players encounter errors, how the mobile experience compares to desktop, and where the navigation could be simplified. This analysis drives product improvements that benefit all l777 players.
• Responsible gaming monitoring: l777 analyses game play patterns and deposit frequency to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are detected, l777's responsible gaming tools are proactively surfaced to the affected player. This use of data is explained further in our Responsible Gaming policy.
• Marketing communications (with your consent): If you have consented to receive promotional communications, l777 uses your email address and mobile number to send information about bonuses, promotions, new games, and events relevant to Pakistani players. You can withdraw this consent at any time — see Section 9.

Every data processing activity at l777 has a specific legal basis. l777 does not process personal data without a clear justification. The four legal bases l777 relies on are summarised below.

• Contract performance: Processing your identity data, contact data, and financial data to create your account, process your PKR deposits and withdrawals, and deliver the games and services you've signed up for is necessary to perform the contract between you and l777. Without this processing, l777 cannot provide its services to you.
• Legal obligation: Processing your identity data for KYC verification and retaining transaction records for the legally required period is necessary for l777 to comply with anti-money-laundering obligations and other applicable regulatory requirements. l777 cannot opt out of this processing and neither can you — but you can always ask for clarity about exactly what is retained and why.
• Legitimate interests: Processing technical and usage data to detect fraud, prevent security breaches, improve platform performance, and conduct responsible gaming monitoring is based on l777's legitimate interest in operating a secure and responsible platform. l777 has assessed that this legitimate interest does not override players' privacy rights, given the limited and specific nature of the data involved.
• Consent: Processing your contact data to send promotional communications is based on your explicit consent, given at registration or through your account marketing preferences. This consent can be withdrawn at any time without affecting any other aspect of your l777 account.

l777 does not share personal data freely or indiscriminately. The following categories of third parties receive personal data from l777, in each case only to the extent necessary to fulfil the specific function described and subject to contractual data protection obligations.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, Pakistani bank IBFT networks, and Visa/Mastercard acquiring partners receive the minimum financial data necessary to process your specific PKR transaction. These providers are independently regulated financial institutions subject to their own data protection obligations under Pakistani law.
• KYC and identity verification providers: A licensed third-party verification provider receives your name, CNIC number, and date of birth to cross-reference against identity verification databases. This provider is contractually prohibited from using this data for any purpose other than the specific KYC verification requested by l777.
• Game providers: The third-party companies whose games are available in the l777 lobby receive technical session data (anonymised session identifiers and game round data) necessary to deliver game content and calculate outcomes. Game providers do not receive your name, CNIC details, or payment information.
• IT and platform infrastructure providers: Companies providing hosting, database management, security monitoring, and technical support services to l777 may process personal data as part of their service delivery. All such providers operate under data processing agreements with l777 that restrict their use of data to the contracted service.
• Regulatory and law enforcement authorities: l777 will disclose personal data to competent authorities when required to do so by applicable law, court order, or regulatory direction. l777 will, where legally permitted, notify the affected player of any such disclosure request before complying.

Protecting your personal data from unauthorised access, disclosure, or modification is a top operational priority at l777. The following security measures are in place across the l777 platform as standard — not as optional extras.

• Transport Layer Security (TLS 1.3): All data transmitted between your device and l777's servers is encrypted using TLS 1.3. This applies to every page of the l777 website, the mobile application, all API calls made during gameplay, and all financial transaction flows. There are no unencrypted endpoints on the l777 platform.
• Encrypted data storage: Sensitive data fields — including CNIC numbers, payment account identifiers, and hashed passwords — are stored with AES-256 encryption at rest. Even if a storage system were compromised, this data could not be read without the encryption keys, which are stored separately from the data they protect.
• Access controls: Internal access to player personal data at l777 is restricted on a strict need-to-know basis. Staff handling payment disputes see only the minimum financial data needed to resolve the specific issue. Support staff cannot access full CNIC numbers or bank account details. Access is logged and audited regularly.
• Regular security audits: l777 engages independent security specialists to conduct penetration testing and vulnerability assessments on a scheduled basis. Findings are remediated on a defined timeline based on severity. l777 also maintains a responsible disclosure process for security researchers.
• Incident response: In the event of a data breach that affects your personal information, l777 will notify affected players as soon as reasonably practicable, describing the nature of the breach, the data involved, and the steps being taken to contain it and prevent recurrence.

l777 retains personal data only for as long as necessary for the purpose it was collected, or for the period required by applicable law — whichever is longer. The following retention schedule applies to the main categories of data l777 holds.

When data reaches the end of its retention period, it is securely deleted or anonymised so it can no longer be linked to an individual. Anonymised aggregate data (such as overall game popularity statistics that cannot identify any individual player) may be retained indefinitely for analytical purposes.

As a player on the l777 platform, you have specific rights over your personal data. These rights are available to every Pakistani l777 player and can be exercised at any time by contacting support@l777.cash.

The l777 website and application use cookies and similar tracking technologies to make the platform function correctly and to understand how Pakistani players use it. The following categories of cookies are used on l777.

• Strictly necessary cookies: These cookies are essential for the l777 platform to operate. They maintain your login session after you authenticate, remember your language and currency preferences, and ensure that form submissions (such as deposit forms) function correctly. These cookies cannot be disabled without breaking core platform functionality.
• Security cookies: l777 uses session tokens and CSRF protection cookies to prevent cross-site request forgery attacks and to identify devices that have logged into your account before. These are security-critical and cannot be opted out of.
• Analytics cookies: l777 uses first-party analytics (data collected and processed by l777 directly, not shared with third-party analytics platforms) to understand which pages are most visited, where players encounter errors, and how overall platform usage patterns change over time. These cookies do not collect personally identifiable information — they use anonymised session identifiers.
• Preference cookies: These remember optional settings you've configured, such as game display preferences or notification settings, so you don't have to reconfigure them every time you log in to l777.

l777 does not use third-party advertising cookies. Your browsing activity on l777 is not shared with ad networks, social media platforms, or any other third party for advertising targeting purposes. Analytics cookies can be disabled in your browser settings, though this may affect some non-essential platform features.

l777 is strictly an adult platform for persons aged 18 and over. l777 does not knowingly collect personal data from anyone under the age of 18. The registration process includes a date of birth declaration, and l777 uses KYC verification to confirm age where required.

If l777 identifies or is made aware that an account has been registered by a person under 18, the account will be suspended immediately. Any deposits made will be returned to the payment method of origin. All data associated with that account will be deleted as soon as the investigation is complete. l777 does not retain any personal data relating to verified minors beyond the period required to complete the refund process.

If you are a parent or guardian and believe your child has registered an l777 account, contact support@l777.cash immediately with the subject "Under-18 Account Report". l777 treats these reports as urgent and will respond within 24 hours.

l777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform services. When material changes are made — meaning changes that affect your rights or how your personal data is processed in a significant way — l777 will notify you via email to your registered address and via an in-app notification before the changes take effect.

• The effective date of the current version of this policy is shown in the "Last Updated" badge at the top of this page. l777 recommends bookmarking this page and reviewing it periodically.
• Minor amendments — such as correcting typographical errors or clarifying language without changing the substance of any provision — may be made without advance notice. The Last Updated date will always reflect the most recent change of any kind.
• Archived versions of previous Privacy Policy documents are available on request by contacting support@l777.cash.
• Continuing to use the l777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an update, you should stop using l777 and request account closure before the new policy takes effect.

If you have any questions about this Privacy Policy, about how l777 handles your personal data, or if you want to exercise any of the data rights described in Section 9, please contact the l777 privacy team using the details below. We aim to respond to privacy-related enquiries within 5 working days.

For other policies that work alongside this Privacy Policy, please also review l777's Terms and Conditions and Responsible Gaming policy.