o777 Privacy Policy — How We Handle Your Data

01 Introduction

o777 ("we", "us", "our") operates the online gaming and sports betting platform accessible at o777.bio (the "Platform"). This Privacy Policy describes how o777 collects, uses, shares, retains, and protects personal information ("Personal Data") belonging to users who access or use the Platform ("you", "your").

o777 serves players across Pakistan — including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi — and is designed to handle the personal data of its user base with the same standard of care and transparency that internationally regulated gaming platforms are held to under their licensing obligations.

This Policy applies to all Personal Data collected through: account registration, deposits and withdrawals, gameplay and betting activity, customer support interactions, marketing communications, and your use of the o777 website and any associated applications or platforms.

02 Data Controller

For the purposes of this Privacy Policy, o777 is the data controller in respect of the Personal Data collected from users of the Platform. As data controller, o777 determines the purposes and means by which your Personal Data is processed.

If you have any questions, concerns, or requests relating to the processing of your Personal Data by o777, please contact us at: [email protected]

03 Personal Data We Collect

3.1 Data Provided Directly by You

When you register an account, transact, or interact with o777, you provide us with the following categories of Personal Data:

• Identity Data: Full legal name, date of birth, gender, CNIC number (for KYC verification), passport number (where applicable).
• Contact Data: Pakistani mobile number, email address, residential address.
• Financial Data: Payment method details (JazzCash account, EasyPaisa wallet, bank account number, card details), transaction history, deposit and withdrawal records.
• KYC Documentation: Copies of identity documents, proof of address, and payment method ownership documents submitted during verification.
• Account Credentials: Username and encrypted password (o777 does not store plaintext passwords).
• Support Communications: Records of chat, email, and other communications with o777's customer support team.

3.2 Data Collected Automatically

When you use the o777 Platform, certain data is collected automatically through technical systems:

• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, and in-platform navigation history.
• Device Data: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Network Data: IP address, approximate geographic location derived from IP, internet service provider.
• Cookie Data: Information collected via cookies and similar tracking technologies as described in Section 7.

3.3 Data from Third Parties

o777 may receive Personal Data about you from third-party sources in the following circumstances: identity verification and KYC service providers; fraud detection and anti-money laundering screening services; payment processors used to facilitate your deposits and withdrawals; and responsible gaming databases where you have previously registered a self-exclusion.

04 How We Use Your Personal Data

o777 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and administering your o777 Account, including processing your registration, verifying your identity, and managing your login and session security.
• Service Delivery: Processing your bets, casino gameplay, slot game sessions, deposits, and withdrawals; crediting winnings and bonuses; managing your o777 Circle loyalty account.
• Legal and Regulatory Compliance: Fulfilling our obligations under applicable international anti-money laundering regulations, age verification requirements, responsible gaming obligations, and our gaming licence conditions.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account compromises, money laundering, and other prohibited activities on the Platform.
• Customer Support: Responding to your queries, resolving complaints, processing account recovery requests, and maintaining a record of communications for quality and dispute resolution purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour; administering deposit limits, cooling-off periods, and self-exclusion requests; and fulfilling mandatory responsible gaming programme obligations.
• Platform Improvement: Analysing aggregated usage data to improve the Platform's performance, user experience, game selection, and feature offerings — always in anonymised or pseudonymised form where possible.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to users who have provided explicit consent for marketing communications. See Section 13 for opt-out information.

05 Legal Basis for Processing

o777 processes your Personal Data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the o777 Terms and Conditions — including account management, service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, tax obligations, age verification requirements, and gaming licence conditions.
• Legitimate Interests: Processing conducted in pursuit of o777's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular for direct marketing communications. You may withdraw consent at any time.

06 Data Sharing and Disclosure

o777 does not sell or commercially trade your Personal Data. We share your data only in the following limited and controlled circumstances:

• KYC and Identity Verification Providers: Third-party services used to verify your identity and age as required by our licensing obligations. These providers are contractually bound to process your data only for verification purposes.
• Payment Processors: Financial institutions and payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard networks — as necessary to process your deposit and withdrawal transactions.
• Game Providers: Where required by game providers (e.g., live dealer studios) to facilitate gameplay, limited technical session data may be shared. Game providers are contractually prohibited from using this data for any other purpose.
• Fraud and AML Screening Services: Third-party risk and compliance providers used to screen transactions and account activity for money laundering and fraud indicators.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or our gaming licence — including disclosures to financial intelligence units or law enforcement agencies in connection with anti-money laundering investigations.
• Responsible Gaming Registers: Where a self-exclusion or responsible gaming intervention requires registration with an external database, limited data may be shared with that database as required.

07 Cookies and Tracking Technologies

o777 uses cookies and similar tracking technologies on the Platform to ensure functionality, enhance user experience, and support analytics and security monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how users navigate the Platform — including pages visited, session duration, and device type — to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences and settings, such as language selection, game lobby view preferences, and responsible gaming tool configurations.
• Marketing Cookies: Used to deliver relevant promotional content within the Platform. These are only activated where you have provided consent to marketing communications.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the o777 Platform. For mobile app users on Android and iOS, equivalent device-level settings apply.

08 Data Retention

o777 retains your Personal Data only for as long as is necessary for the purposes described in this Policy, subject to mandatory legal retention requirements as follows:

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with o777's data destruction procedures.

09 Data Security

o777 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or disclosure:

• All data in transit is protected by 256-bit SSL/TLS encryption.
• Personal Data stored on o777 servers is encrypted at rest using AES-256.
• Password data is stored as one-way cryptographic hashes — o777 staff cannot retrieve your password in plaintext.
• Access to Personal Data is restricted on a strict need-to-know basis, with role-based access controls and comprehensive access audit logging.
• o777's infrastructure is monitored 24/7 for intrusion attempts, unusual access patterns, and potential security incidents.
• Regular penetration testing and vulnerability assessments are conducted on o777's systems by independent security specialists.
• All staff with access to Personal Data receive mandatory data protection training.

10 International Data Transfers

o777 operates internationally and your Personal Data may be processed in jurisdictions outside Pakistan. Where data is transferred to third countries, o777 ensures that appropriate safeguards are in place — including contractual data protection clauses with recipients — to maintain the level of protection described in this Policy.

Game provider partners, KYC services, and payment processors may process data in their own operating jurisdictions. In all cases, these third parties are contractually required to apply data security and privacy standards consistent with this Policy and with o777's licensing obligations.

11 Minors and Age Verification

o777 employs age verification procedures at registration and as part of the KYC process to enforce this requirement. Parents and guardians who believe that a minor has registered an account on o777 should contact us immediately at [email protected] so that appropriate action can be taken without delay.

12 Exercising Your Data Rights

To exercise any of the data rights described in this Policy — including access, rectification, erasure, restriction, portability, or objection — please contact o777 using the details in Section 16. Requests will be acknowledged within 72 hours and responded to substantively within 30 days.

o777 will not charge a fee for processing data rights requests unless requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable fee may apply. We may request proof of identity before processing a request to ensure that Personal Data is not disclosed to the wrong person.

Note that certain rights are subject to limitations. For example, the right to erasure does not apply where o777 is required to retain data by law (such as anti-money laundering record-keeping obligations) or where data is necessary for the establishment, exercise, or defence of legal claims.

13 Marketing Communications

o777 will only send you direct marketing communications — including promotional offers, bonus notifications, PSL season betting promotions, new game announcements, and Circle loyalty programme updates — where you have explicitly opted in to receive such communications at the time of registration or via your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your o777 Account settings;
• Clicking the unsubscribe link included in any marketing email from o777;
• Contacting o777 support directly at [email protected] and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to use the o777 Platform or receive service-related communications (such as transaction confirmations, security alerts, and account notifications) which are sent as part of service delivery regardless of marketing preferences.

14 Third-Party Links and Services

The o777 Platform may contain links to third-party websites, game provider platforms, or promotional content relating to third-party products. This Privacy Policy applies solely to data processed by o777 through the o777 Platform. o777 is not responsible for the privacy practices of third-party websites and recommends that users review the privacy policies of any third-party platform they visit.

15 Amendments to This Privacy Policy

o777 reserves the right to update, amend, or replace this Privacy Policy at any time. The current version will always be published at o777.bio/privacy-policy with the "Last Updated" date clearly stated at the top of the document.

Where changes are material — meaning they significantly alter how your Personal Data is processed or your rights in relation to it — o777 will provide advance notice via email to your registered address or through a prominent in-Platform notification. Continued use of the o777 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

16 Contact and Data Enquiries

For any questions, concerns, data rights requests, or privacy-related complaints regarding o777's handling of your Personal Data, please contact us through the following channels:

If you are unsatisfied with o777's response to a privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Details of the appropriate authority are available upon request.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the o777 Privacy Policy. We recommend saving or printing a copy for your records.