cf777 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is issued by cf777 ("cf777", "we", "us", "our") and applies to all personal data processed in connection with your use of the cf777 website, mobile platform, sportsbook, casino games, payment services, and any other cf777 products or communications (collectively, the "Platform").

By registering a cf777 account or continuing to use the cf777 Platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described here, you must discontinue use of cf777 immediately and may request account closure as described in the cf777 Terms & Conditions.

02 Data Controller

cf777 is the data controller responsible for your personal data processed through the cf777 Platform. As data controller, cf777 determines the purposes and means by which your personal data is collected and used, and is responsible for ensuring that such processing is carried out lawfully and transparently.

cf777 operates under an international gaming licence. All data processing activities on the cf777 Platform are conducted in compliance with the data protection requirements imposed by cf777's licensing authority and with internationally recognised privacy standards including the principles of the General Data Protection Regulation ("GDPR") as a best-practice framework, where applicable.

For all data protection enquiries, requests, or complaints, players may contact cf777's designated Data Protection Officer ("DPO") using the contact details provided in Section 15 of this Policy.

03 Personal Data We Collect

cf777 collects personal data that is necessary for the operation of a regulated online gaming platform, including the fulfilment of our legal, regulatory, and contractual obligations. The categories of personal data cf777 collects are set out in the table below.

cf777 does not collect or process special category data (such as health data, religious beliefs, or biometric data) except where strictly required by applicable law or licensing regulations — for example, where a player's self-exclusion or responsible gaming status must be recorded and acted upon.

04 How We Collect Your Data

cf777 collects personal data through the following channels:

• Direct registration: Data you provide when creating a cf777 account, completing KYC verification, or updating your account profile.
• Transactions: Data generated when you make deposits via JazzCash, EasyPaisa, or Pakistani bank transfer, or when you request a PKR withdrawal.
• Platform interaction: Data collected automatically as you navigate the cf777 website, place sports bets (including PSL and international cricket markets), or play casino games.
• Cookies and tracking technologies: Data collected via cookies, pixel tags, and similar technologies as detailed in Section 12 of this Policy.
• Third-party providers: Data received from payment processors, identity verification providers, fraud prevention services, and game software providers who supply content to cf777.
• Customer support interactions: Data you share when contacting cf777 via live chat, email, or any other support channel.
• Publicly available sources: Data from publicly accessible records used for enhanced due diligence or AML screening purposes only.

05 How We Use Your Personal Data

cf777 uses your personal data only for specific, documented purposes. We do not sell your personal data to third parties under any circumstances. The primary purposes for which cf777 processes your personal data are:

• Creating, managing, and verifying your cf777 account, including age verification (21+ requirement) and KYC identity checks.
• Processing PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and maintaining accurate financial records of all transactions.
• Providing access to and personalising your experience on the cf777 platform, including cricket betting, live dealer games, slot games, and instant games.
• Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the cf777 Terms & Conditions.
• Complying with cf777's legal and regulatory obligations under its international gaming licence, including AML reporting requirements.
• Administering responsible gaming tools including deposit limits, loss limits, session timers, cool-off periods, and self-exclusion — and monitoring player activity for signs of problem gambling.
• Communicating with you regarding your account, transactions, security alerts, and policy updates.
• Sending promotional communications about cf777 bonuses, PSL cricket betting promotions, and new game launches — only where you have provided opt-in consent or where cf777 has a legitimate interest basis.
• Improving the cf777 platform through aggregated analytics, A/B testing, and user experience research.
• Resolving disputes between cf777 and players and maintaining records for audit and compliance purposes.

06 Legal Basis for Processing

cf777 processes your personal data only where a valid legal basis exists. The legal bases cf777 relies upon are:

• Contract performance: Processing necessary to create and manage your cf777 account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with cf777's obligations under its international gaming licence, AML regulations, and applicable data retention laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving cf777's products and services — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies — only where you have provided freely given, specific, and informed consent, which you may withdraw at any time.

07 Data Sharing & Third Parties

cf777 does not sell, rent, or trade your personal data. cf777 may share your data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay receive the minimum data required to process your PKR transactions. USDT TRC20 transactions are processed via blockchain infrastructure.
• KYC and identity verification providers: Third-party services that assist cf777 in verifying CNIC documents and confirming your identity and age in compliance with licensing requirements.
• Fraud and AML screening providers: Services that analyse transaction data and account behaviour to identify suspicious activity in accordance with cf777's AML obligations.
• Game software providers: Third-party studios and live dealer operators whose games are available on the cf777 platform. These providers receive the minimum session and wagering data required to operate their games.
• Regulatory and licensing authorities: cf777's international gaming licence authority and, where legally required, Pakistani financial intelligence or law enforcement agencies.
• IT and cloud infrastructure providers: Hosting, content delivery, and cybersecurity service providers that support cf777's platform operations under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by cf777, subject to professional confidentiality obligations.

All third parties with whom cf777 shares personal data are required to maintain confidentiality and to process that data only for the specific purpose for which it was shared. cf777 does not permit third-party processors to use your data for their own commercial purposes.

08 International Data Transfers

As an internationally licensed gaming platform serving Pakistani players, cf777 may transfer your personal data to servers, processors, or service providers located outside of Pakistan. Such transfers are necessary to deliver the cf777 platform and to comply with our licensing obligations.

Where cf777 transfers personal data internationally, we ensure that adequate safeguards are in place, including:

• Data Processing Agreements incorporating standard contractual clauses or equivalent protections recognised under applicable data protection frameworks.
• Transfer only to jurisdictions that cf777's legal team has assessed as providing an adequate level of data protection for your personal information.
• Technical safeguards including encryption in transit (TLS 1.2 or higher) and encryption at rest for all databases containing player personal data.

09 Data Retention

cf777 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing regulations. The following retention periods apply as a general guide:

• Account and identity data: Retained for a minimum of five (5) years following permanent account closure, in compliance with cf777's AML obligations under its international gaming licence.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and audit purposes.
• Communications data: Live chat transcripts and email correspondence retained for three (3) years for dispute resolution and quality assurance purposes.
• Technical and usage data: Aggregated and anonymised after thirteen (13) months; raw log data deleted at the end of the calendar year in which it was collected.
• Marketing consent records: Retained for the duration of your marketing opt-in and for three (3) years thereafter as evidence of consent.
• Self-exclusion records: Retained permanently to prevent re-registration during exclusion periods and to comply with responsible gaming obligations under cf777's licence.

Upon expiry of the applicable retention period, cf777 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

10 Security Measures

cf777 implements a multi-layered information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• End-to-end TLS 1.2+ encryption for all data transmitted between your device and cf777's servers.
• AES-256 encryption at rest for all databases containing player identity, financial, and account data.
• Two-factor authentication (2FA) options available for all cf777 player accounts — strongly recommended for Pakistani players accessing cf777 via mobile.
• Strict access controls ensuring that only authorised cf777 personnel can access personal data, on a least-privilege basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Real-time fraud monitoring and anomaly detection systems that flag unusual account activity for immediate review.
• Incident response procedures that ensure cf777 can detect, contain, and report a personal data breach to the relevant licensing authority within 72 hours of discovery.

While cf777 takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. cf777 strongly recommends that all Pakistani players use a strong, unique password for their cf777 account and enable 2FA where available.

11 Your Data Subject Rights

As a cf777 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact cf777's DPO using the details in Section 15. cf777 will respond to all valid requests within thirty (30) days of receipt.

Please note that certain rights are subject to legal exemptions. In particular, cf777 may be required to retain transaction and identity data for a minimum period under AML and gaming licence regulations, even following a deletion request. cf777 will always notify you if a limitation applies to your request and explain the legal basis for that limitation.

12 Cookies & Tracking Technologies

cf777 uses cookies and similar tracking technologies to operate the Platform, analyse usage, personalise content, and support security measures. The categories of cookies cf777 uses are:

• Strictly necessary cookies: Essential for the cf777 platform to function. These include session authentication, security tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to measure how Pakistani players interact with the cf777 platform — which pages are most visited, average session duration, and error rates. Data is aggregated and anonymised.
• Functionality cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations.
• Marketing and targeting cookies: Used only with your consent to deliver relevant cf777 promotional content based on your browsing and betting behaviour. You may opt out at any time via your cf777 account settings.

You may manage your cookie preferences at any time via the cookie settings panel accessible from the footer of the cf777 website. Disabling non-essential cookies will not prevent you from accessing or using the cf777 platform.

13 Minors & Age Restriction

The cf777 platform is strictly for adults aged 21 years or older. cf777 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step in the cf777 registration process, and KYC documentation confirming date of birth is required before any withdrawal can be processed.

If you are a parent or guardian and believe that a minor may have registered a cf777 account using false information, please contact cf777's support team immediately via live chat or email at [email protected].

14 Changes to This Privacy Policy

cf777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When a material change is made, cf777 will notify registered players via the email address on their cf777 account or via a prominent notice on the Platform, at least seven (7) days before the revised Policy takes effect.

The "Last Revised" date at the top of this Policy will be updated each time a new version is published. We encourage you to review this Policy periodically to stay informed about how cf777 protects your personal data. Your continued use of the cf777 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

15 Contact the Data Protection Officer

If you wish to exercise any of your data subject rights, raise a concern about cf777's data processing practices, or submit a formal privacy complaint, please contact cf777's Data Protection Officer using the details below. All privacy requests are acknowledged within 48 hours and resolved within 30 calendar days wherever possible.

If you are not satisfied with cf777's response to your privacy complaint, you may escalate the matter to cf777's licensing authority in accordance with the complaint procedures published on the licensing authority's official website.