Your Privacy Matters to df777
This Privacy Policy ("Policy") is issued by df777 ("we", "us", "our") and applies to all registered and unregistered users who access the df777 website, mobile interface, and any related services available at df777.org. It governs the collection, processing, storage, and disclosure of personal data provided by or collected from users of the platform, including players based in Pakistan.
df777 is committed to handling your personal data with transparency and integrity. We collect only what is necessary to operate the platform safely and comply with our international gaming licence obligations. We do not sell your data, and we never share it with advertisers or unrelated third parties.
End-to-End Encryption
All data transmitted between your device and df777 servers is protected by TLS encryption. Your login credentials, payment details, and personal information are never sent in plain text.
No Data Selling
df777 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your information exists on our platform to serve you — full stop.
KYC Compliance
Identity verification is conducted in line with international AML standards. KYC documents submitted to df777 are stored securely and accessed only by authorised compliance personnel.
PKR Payment Privacy
Payment data for JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay transactions is processed via encrypted channels. df777 does not store full payment credentials on its servers.
Your Controls
You can access, update, or request deletion of your personal data at any time through your account settings or by contacting our support team. We process all data requests within 30 days.
Cookie Transparency
df777 uses cookies solely for platform functionality, session management, and aggregate analytics. No third-party advertising cookies are deployed on this platform.
Overview
df777 is an internationally licensed online casino and sports betting platform serving English-speaking players in Pakistan. As part of operating a regulated gambling platform, we are required to collect and process certain personal data from our users. This obligation arises from our gaming licence requirements, anti-money laundering (AML) regulations, and the need to maintain a safe and fair gaming environment.
This Policy covers all data processing activities conducted by df777 in relation to the platform. It does not apply to third-party websites or services that may be linked from the df777 platform — those parties operate under their own privacy policies, and df777 assumes no responsibility for their data practices.
- This Policy applies to all registered users, guest browsers, and any individual who interacts with df777's communication channels (email, live chat, social media).
- Data collected is processed lawfully, fairly, and in a transparent manner consistent with applicable data protection principles.
- df777 processes data only for specified, explicit, and legitimate purposes and does not further process data in a manner incompatible with those purposes.
- We take reasonable steps to ensure that personal data we hold is accurate and kept up to date.
Data We Collect
df777 collects the minimum personal data necessary to operate the platform, verify user identities, process payments, and comply with regulatory obligations. The categories of data we collect are outlined in the table below:
| Data Category | Examples | Mandatory? |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Yes — KYC requirement |
| Contact Data | Email address, mobile phone number, residential address | Yes — account registration |
| Financial Data | Payment method details (JazzCash account, EasyPaisa number, bank account name), transaction history | Yes — deposits & withdrawals |
| Account Data | Username, account balance, bonus status, wagering history, login timestamps | Yes — platform operation |
| Technical Data | IP address, device type, browser, operating system, session duration | Yes — security & fraud prevention |
| Behavioural Data | Game preferences, betting patterns, session frequency, bonus participation | No — analytics only |
| Communications Data | Live chat transcripts, support emails, feedback submissions | Conditional — support interactions |
| KYC Documents | CNIC copy, utility bill or bank statement for address verification, payment method screenshot | Yes — before first withdrawal |
How We Collect Your Data
df777 collects personal data through the following channels and interactions:
- Account Registration: When you create a df777 account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
- KYC Verification: When you submit identity documents (such as your CNIC or proof of address) in response to a KYC request, that data is collected and stored securely in our compliance system.
- Deposits & Withdrawals: When you initiate a transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, payment-related data is collected to process and record the transaction.
- Platform Usage: As you browse and play on df777, we automatically collect technical and behavioural data — including your IP address, device information, session data, and gameplay activity — through server logs and analytics tools.
- Customer Support: When you contact df777 via live chat or email, the content of that communication — including any personal data you provide — is collected and stored to enable us to assist you effectively.
- Cookies and Tracking Technologies: df777 uses cookies and similar technologies to manage sessions, remember preferences, and gather aggregate usage analytics. Please refer to Section 9 for full details.
- Third-Party Sources: In limited circumstances, we may receive data about you from third-party fraud prevention services or payment processors — for example, a flag from a payment provider indicating that your submitted payment details do not match the account name on file.
Purpose of Data Processing
df777 processes your personal data only for the specific, legitimate purposes listed below. We do not process data beyond what is necessary for these stated purposes:
- Account Management: To create, maintain, and administer your df777 account, including managing your balance, bonus entitlements, and account settings.
- Identity Verification: To comply with KYC obligations under our international gaming licence and to confirm that all users are aged 21 or above before processing withdrawals.
- Payment Processing: To facilitate PKR deposits and withdrawals via your chosen payment method, and to maintain an accurate transaction record for your account.
- Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform, in compliance with our licence obligations.
- Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion requests.
- Customer Support: To respond to your queries, resolve disputes, and provide technical assistance related to your df777 account.
- Platform Improvement: To analyse aggregate usage data and improve the functionality, content, and overall user experience of the df777 platform.
- Legal Compliance: To fulfil any legal obligations to which df777 is subject, including responses to lawful requests from regulatory authorities or law enforcement agencies.
- Marketing Communications: To send you promotional emails, bonus alerts, and platform updates — only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.
Legal Basis for Processing
Each data processing activity conducted by df777 is grounded in one or more of the following legal bases:
- Contract Performance: Processing is necessary to deliver the services you signed up for — including account management, payment processing, and gameplay access — under the contract formed by your acceptance of the df777 Terms & Conditions.
- Legal Obligation: Processing is required for df777 to comply with applicable laws and regulatory requirements, including KYC verification, AML record-keeping, and reporting obligations under our international gaming licence.
- Legitimate Interests: Processing is carried out in df777's legitimate business interests — such as fraud prevention, platform security, and internal analytics — where these interests are not overridden by your data protection rights.
- Consent: Certain processing activities — specifically, the sending of marketing communications and the use of non-essential cookies — are conducted only where you have given clear, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
Data Retention
df777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC Documents | 5 years from date of submission | Licensing & AML compliance |
| Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Support Communications | 3 years from last interaction | Dispute resolution & quality assurance |
| Technical / Log Data | 12 months from collection | Security monitoring |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent compliance |
| Self-Exclusion Records | Permanently or until exclusion period ends | Responsible gaming enforcement |
Upon expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.
Data Security
df777 implements a robust set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS Encryption: All data in transit between your device and df777's servers is encrypted using Transport Layer Security (TLS) protocols. This applies to all pages on df777.org, including the login interface, cashier, and support chat.
- Data Encryption at Rest: Sensitive data — including KYC documents and payment records — is encrypted when stored on df777's servers using industry-standard encryption algorithms.
- Access Controls: Access to personal data within df777's internal systems is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are subject to confidentiality obligations and undergo regular data protection training.
- Two-Factor Authentication: df777 supports two-factor authentication (2FA) for player accounts and mandates 2FA for all internal staff accessing backend systems containing personal data.
- Penetration Testing: df777's platform and infrastructure undergo regular security assessments, including penetration testing by independent cybersecurity specialists, to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, df777 will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.
Your Data Rights
As a user of the df777 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] or via live chat. We will respond within 30 days of receiving a valid request.
Right to Access
Request a copy of all personal data df777 holds about you, including account records, transaction history, and KYC data.
Right to Rectification
Request correction of inaccurate personal data held about you. Name or date of birth changes require supporting documentation.
Right to Erasure
Request deletion of your personal data where it is no longer required for its original purpose, subject to legal retention obligations.
Right to Restriction
Request that df777 restricts processing of your data — for example, while you dispute the accuracy of information we hold about you.
Right to Portability
Request your personal data in a structured, machine-readable format where processing is based on consent or contract performance.
Right to Object
Object to processing carried out on the basis of legitimate interests — including any profiling or analytics activities conducted by df777.
Minors & Age Restriction
df777 is a strictly 21+ platform. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered users before any withdrawal is processed.
- If df777 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended pending investigation. Any funds deposited will be reviewed and handled in accordance with applicable regulatory guidance.
- Parents and guardians in Pakistan who believe a minor may have accessed or registered on df777 should contact us immediately at [email protected]. We will take prompt action to investigate and close the relevant account.
- We recommend that parents and guardians use parental control software on shared devices to prevent minors from accessing online gambling platforms, including df777.
Cross-Border Data Transfers
As an internationally licensed platform, df777 may transfer personal data to servers or service providers located outside of Pakistan. These transfers occur in connection with cloud hosting, payment processing, and third-party game delivery infrastructure.
- All cross-border data transfers are conducted under appropriate data protection safeguards, including contractual clauses that require receiving parties to handle data in accordance with standards equivalent to those described in this Policy.
- df777 does not transfer personal data to jurisdictions that do not offer adequate data protection standards unless specific contractual and technical safeguards are in place.
- Where data is processed by third-party game providers such as Pragmatic Play, Jili, or PG Soft in connection with delivering games on the platform, those providers are contractually obligated to maintain the security and confidentiality of any data processed on df777's behalf.
Changes to This Policy
df777 reserves the right to update or amend this Privacy Policy at any time. Changes may be required to reflect updates to our platform, new regulatory obligations, or improvements to our data practices. When material changes are made, we will notify you through one or more of the following methods:
- A prominent notice posted on the df777 website at the time of your next login session.
- An email notification sent to the address registered on your df777 account, at least 7 days before the changes take effect.
- An in-platform notification visible from your account dashboard.
The "Effective Date" at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically so you remain informed about how df777 handles your personal data. Your continued use of the platform after the effective date of any changes constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way df777 handles your personal data, please get in touch with our Data Protection team through the following channels:
- Email: [email protected] — for all data subject access requests, erasure requests, consent withdrawals, and privacy-related complaints. We respond within 24 hours on business days and fulfil substantive requests within 30 days.
- Live Chat: Available 24 hours a day, 7 days a week from your df777 account dashboard. Live chat is the fastest route for urgent privacy concerns, including suspected unauthorised access to your account.
- Formal Complaints: If you are not satisfied with df777's response to your privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to our gaming licence authority's dispute resolution mechanism.