cn777 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is published by cn777, the operator of the online gaming platform accessible at cn777.biz ("Platform"). It explains how cn777 ("we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "your", "Player") who visit, register on, or use our Platform in any capacity.

This Policy applies to all personal data processed in connection with your use of the cn777 Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals via JazzCash, EasyPaisa, and other payment methods, use of casino and sportsbook features, and all interactions with our customer support team.

By registering an account on cn777 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the cn777 Platform.

This Policy should be read in conjunction with our Terms & Conditions (available at cn777.biz/terms-conditions) and our Responsible Gaming Policy (cn777.biz/responsible-gaming).

2. Data Controller

For the purposes of applicable data protection legislation, cn777 acts as the Data Controller in respect of all personal data collected from players and visitors through the Platform. As Data Controller, cn777 is responsible for determining the purposes and means of processing personal data and for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data subject rights described in Section 11 of this Policy, please contact our Data Protection point of contact using the details provided in Section 15.

3. Personal Data We Collect

cn777 collects personal data through multiple channels in the course of operating the Platform. The categories of personal data we collect are set out below.

3.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, Pakistani mobile number, email address, username, and chosen password (stored in hashed, non-recoverable format).
• Identity verification (KYC) data: Scanned copies of your CNIC (Computerised National Identity Card), and in some cases, proof of address documents or payment method ownership documentation.
• Payment data: Transaction amounts, timestamps, JazzCash or EasyPaisa mobile numbers, bank account reference details for HBL, UBL, Meezan Bank, or card metadata (partial card numbers) for Visa/Mastercard transactions. Full card or account numbers are not stored by cn777 — they are handled by our PCI-DSS compliant payment processor partners.
• Support communications: Records of live chat conversations, email correspondence, and any documentation you voluntarily submit to our support team.
• Responsible gaming preferences: Deposit limits, session time limits, cooling-off configurations, and self-exclusion status applied through your cn777 account settings.

3.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage and behavioural data: Pages visited, games played, bets placed, session duration, login timestamps, navigation paths, and in-game actions.
• Cookie and tracking data: Information collected via cookies and similar tracking technologies as described in Section 8 of this Policy.
• Geolocation data: Approximate geographic location derived from IP address, used to enforce jurisdictional access restrictions and for fraud prevention purposes.

Data Category	Examples	Collection Method
Identity Data	Name, DOB, CNIC number	Registration & KYC form
Contact Data	Mobile number, email address	Registration form
Financial Data	Transaction records, payment method reference	Deposit/withdrawal process
Technical Data	IP address, device info, browser	Automatic on site visit
Usage Data	Games played, bets placed, session logs	Automatic during gameplay
KYC Documents	CNIC copy, address proof	Verification submission
Communications	Support chat transcripts	Live chat / email

4. How We Use Your Personal Data

cn777 uses the personal data we collect for the following purposes:

1. Account creation and management: To register your cn777 account, maintain accurate account records, and provide you with access to all Platform features including the casino, sportsbook, and responsible gaming tools.
2. Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard; to verify payment method ownership; and to maintain complete transaction records as required by our licensing obligations.
3. Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years, to confirm your identity before processing withdrawal requests, and to comply with our anti-money laundering (AML) obligations.
4. Security and fraud prevention: To detect and prevent unauthorised access, multi-accounting, bonus abuse, money laundering, and other fraudulent or prohibited activities on the cn777 Platform.
5. Regulatory compliance: To fulfil our obligations under our international gaming licence, including player fund segregation requirements, transaction monitoring, self-exclusion enforcement, and audit reporting.
6. Responsible gaming: To monitor for signs of problematic gambling behaviour, to enforce player-applied responsible gaming settings, and to provide targeted support to players who may be at risk.
7. Customer support: To respond to your enquiries, resolve complaints, and maintain a record of all support interactions for quality assurance and compliance purposes.
8. Platform improvement: To analyse aggregated, anonymised usage data to understand how players navigate and engage with cn777, and to make product improvements based on that analysis.
9. Legal and compliance purposes: To respond to lawful requests from regulatory authorities, law enforcement agencies, and judicial bodies as required under applicable law.

5. Legal Basis for Processing

cn777 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and cn777 — specifically, to operate your account, process PKR deposits and withdrawals, and provide access to all gaming features.
• Legal obligation: Processing required to comply with our international gaming licence, anti-money laundering laws, age verification requirements, and other applicable regulatory obligations.
• Legitimate interest: Processing required for security monitoring, fraud prevention, responsible gaming oversight, and platform improvement — where these interests do not override your fundamental data rights.
• Consent: Where required, we will seek your explicit consent before processing data for purposes not covered by the above — for example, for certain types of direct marketing communications. Consent may be withdrawn at any time by contacting support.

6. Data Sharing and Disclosure

cn777 does not sell, rent, or trade personal data to any third party for commercial, marketing, or advertising purposes. We share personal data only in the following circumstances and only to the extent strictly necessary for each purpose:

6.1 Service Providers

cn777 engages a limited number of third-party service providers who process personal data on our behalf as data processors. These include: payment processing partners (including the technology platforms that process JazzCash, EasyPaisa, and card transactions); KYC and identity verification service providers; customer support platform providers; and server infrastructure and cloud hosting providers. All third-party processors are contractually bound to process data only on cn777's documented instructions and to maintain security standards equivalent to our own.

6.2 Regulatory and Legal Disclosure

cn777 may disclose personal data to gaming regulators, anti-money laundering authorities, tax authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so. All such disclosures are made only to the extent required by the relevant legal obligation, and we will notify affected players of any such disclosure where we are legally permitted to do so.

6.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or a material part of cn777's business, personal data held by cn777 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change of data controller prior to the transfer taking effect, and will be given the opportunity to close their accounts and request data deletion before the transfer occurs.

7. KYC and Identity Verification Data

KYC (Know Your Customer) verification is a mandatory requirement under cn777's international gaming licence before any withdrawal can be processed. Pakistani players are required to submit a clear copy of their valid CNIC. In some circumstances, additional documentation may be requested, including proof of address, a recent JazzCash or EasyPaisa transaction screenshot, or a selfie with the CNIC.

All KYC documents submitted to cn777 are:

• Stored in encrypted, access-restricted document vaults separate from general account data
• Accessible only to a limited number of specifically authorised cn777 compliance personnel
• Never shared with any third party except where required by law or by our KYC service provider under a strictly controlled data processing agreement
• Retained for the period specified in Section 9 of this Policy, after which they are securely deleted

KYC verification is also used to enforce cn777's minimum age requirement of 21 years. Where identity verification reveals that an account holder is under the age of 21, the account will be permanently closed and any funds handled in accordance with our Terms & Conditions and applicable regulatory requirements.

8. Cookies and Tracking Technologies

cn777 uses cookies and similar browser-based tracking technologies to enable essential platform functionality, maintain your login session, detect fraud, and analyse platform usage patterns. The cookies we use fall into the following categories:

• Essential cookies: Required for the Platform to function. These include session cookies that keep you logged into your cn777 account and security cookies used to detect fraudulent login attempts. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations across sessions. Disabling these will not prevent access to the Platform but may affect personalisation.
• Analytical cookies: Used to collect aggregated, anonymised data about how players navigate the cn777 Platform — which pages are visited most frequently, where players encounter difficulties, and how game sections are used. This data is used purely to improve the Platform and is not linked to individually identifiable players in its analytical form.

You can manage cookie preferences through your browser settings. Note that disabling all cookies will impair the functionality of the cn777 Platform, particularly the ability to remain logged into your account. cn777 does not use third-party advertising cookies or permit any external advertising network to track player behaviour on the Platform.

9. Data Retention

cn777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and accounting obligations. Our standard retention periods are as follows:

• Account data (active accounts): Retained for the full duration of the account relationship and for five (5) years following permanent account closure, to meet our regulatory and anti-money laundering retention obligations.
• KYC and identity documents: Retained for five (5) years from the date of account closure or from the last transaction date, whichever is later, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for five (5) years from the date of each transaction, as required under financial record-keeping obligations applicable to our operating licence.
• Support communications: Retained for three (3) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Technical and usage data: Retained in identifiable form for up to twenty-four (24) months, after which data is anonymised and retained in aggregated form for analytical purposes only.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction. If you request deletion of your data before the end of an applicable retention period, we will delete all data that is not subject to a legal hold obligation and will clearly inform you of any data categories that must be retained for legal compliance reasons.

10. Data Security

cn777 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cn777 Platform — including login credentials, payment data, and KYC submissions
• Cryptographic hashing of all account passwords, ensuring that even cn777 personnel cannot read stored passwords in plain text
• Access controls: Role-based internal access policies ensuring that employee access to player data is limited to that strictly necessary for their specific function
• Isolated document storage for KYC files, with encrypted-at-rest storage and separate access logging
• Login monitoring: Automatic detection of suspicious login patterns, including multiple failed attempts and logins from unusual IP addresses or device types
• Regular security reviews: Periodic internal audits and vulnerability assessments of the Platform's data handling practices

Despite these measures, no digital system can be guaranteed to be 100% secure. cn777 will notify affected players and relevant authorities of any data breach that is likely to result in a risk to individual rights and freedoms, in accordance with applicable breach notification requirements.

11. Your Data Rights

Under internationally recognised data protection standards, you have the following rights in relation to the personal data cn777 holds about you:

1. Right of Access: You have the right to request a copy of the personal data cn777 holds about you, along with information about how it is used, where it is stored, and with whom it has been shared. Requests will be responded to within 30 days.
2. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data cn777 holds about you. Where practicable, corrections will be made within 14 days of verification.
3. Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. Deletion requests are subject to our legal retention obligations described in Section 9.
4. Right to Restriction: You may request that cn777 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
5. Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
6. Right to Object: You have the right to object to processing based on legitimate interests. cn777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
7. Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the cn777 support team using the details in Section 15. We may request proof of identity before processing data rights requests to ensure we do not disclose or modify data belonging to someone other than you.

12. Children's Privacy and Underage Access

The cn777 Platform is intended exclusively for adults aged 21 and above. cn777 does not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to age verification, and any account found to belong to a person under 21 will be permanently suspended immediately upon discovery.

If you are a parent or guardian and believe that a minor in your care has registered an account on cn777 using false information, please contact our support team immediately. We will take prompt action to close the account, delete any associated personal data that is not subject to legal hold obligations, and handle any funds in accordance with our Terms & Conditions.

cn777 strongly supports and actively participates in parental controls and underage gambling prevention initiatives. We cooperate fully with any regulatory enquiry related to underage account access.

13. International Data Transfers

As an internationally operated platform, cn777 may transfer personal data to service providers and infrastructure partners whose systems are located outside of Pakistan. Any such transfer is governed by appropriate safeguards to ensure that your data receives a level of protection consistent with the standards described in this Policy and with applicable international data protection frameworks.

Safeguards for international transfers include: contractual data processing agreements with all third-party processors that impose binding data protection obligations; transfer impact assessments where required; and adherence to the data protection requirements of cn777's operating jurisdiction. cn777 does not transfer KYC documentation to any jurisdiction with materially lower data protection standards without explicit additional safeguards in place.

14. Changes to This Privacy Policy

cn777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to applicable law, or changes to the structure or functionality of the Platform. The date at the top of this Policy indicates when it was last revised.

Material changes to this Policy — particularly those that affect how we collect, use, or share personal data in ways that are meaningfully different from what is described in the current version — will be communicated to registered players via email to the address registered on their cn777 account, or through a prominent notice displayed on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the cn777 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material changes, you should close your account and request data deletion before the revised Policy takes effect.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the cn777 Data Protection team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly from the cn777 Platform. Our support team can handle general data enquiries and will escalate data rights requests to the appropriate internal team.
• Support Email: [email protected] — plain text address only; not a clickable link. Email responses are provided within 4 hours during normal operating conditions and within 24 hours during peak periods.

Formal data rights requests (access, deletion, portability, etc.) submitted by email will be acknowledged within 3 business days and actioned within 30 calendar days, subject to identity verification requirements. Please include "Data Rights Request" in the subject line of any such correspondence to ensure prompt routing to the correct team.