Contents
1 Definitions
Throughout this Privacy Policy, the following terms carry the meanings set out below. Where the context requires, the singular includes the plural and vice versa.
| Term | Meaning |
|---|---|
| "cct777" / "we" / "us" | The legal entity operating the cct777 online gaming platform at cct777.one, licensed under the applicable gaming regulatory framework. |
| "You" / "Player" / "User" | Any natural person who visits, registers on, or uses the cct777 platform, including visitors who do not complete registration. |
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, CNIC number, financial data, device identifiers, and gaming activity records. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, and deletion. |
| "Data Controller" | cct777, as the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| "Platform" | The cct777 website, mobile interface, games lobby, betting markets, account portal, and all associated digital services accessible at cct777.one. |
| "KYC" | Know Your Customer — the mandatory identity and age verification process conducted by cct777 in accordance with anti-money-laundering and licensing obligations. |
2 Scope of This Policy
This Privacy Policy applies to all Personal Data collected by cct777 in connection with your use of the Platform, regardless of the device or browser through which you access it. It applies to registered Account holders, persons who have commenced but not completed the registration process, and anonymous visitors to cct777.one.
This Policy does not apply to third-party websites, payment platforms, or services that may be linked to or from the cct777 Platform. Where you interact with a payment provider such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Bank Alfalah, your data is subject to that provider's own privacy policy. cct777 is not responsible for the data practices of third-party providers.
Applicable to Pakistani Players: cct777's primary player community is based in Pakistan. This Policy is drafted with Pakistani player context in mind, including reference to Pakistani identity documents (CNIC), Pakistani payment methods, and Pakistani regulatory context. Processing obligations are also governed by the laws of the jurisdiction in which cct777 is licensed.
3 Personal Data We Collect
cct777 collects the following categories of Personal Data, depending on how you interact with the Platform:
3.1 Registration and Identity Data
- Full legal name as it appears on your CNIC or other government-issued identity document.
- Date of birth — collected to verify compliance with the minimum age requirement of 21 years.
- CNIC number — required for KYC identity verification prior to any withdrawal being processed.
- Residential address — city, district, and province within Pakistan (or country of residence where applicable).
- Gender — collected as part of the registration form and used for account administration purposes.
3.2 Contact Data
- Mobile telephone number — used for OTP-based login verification, SMS notifications, and support communications. Pakistani network format (Jazz, Zong, Ufone, Telenor, Warid) is accepted.
- Email address — used for account communications, promotional messaging (where consented), and formal correspondence.
3.3 Financial and Transaction Data
- Payment method details — JazzCash account number, EasyPaisa mobile number, or bank account reference used for deposits and withdrawals. Full payment credentials are processed by the relevant payment provider, not stored by cct777.
- Deposit history — amounts, dates, methods, and reference numbers for all deposits to your cct777 Wallet.
- Withdrawal history — corresponding records for all withdrawal requests and completions.
- PKR Wallet balance records — current and historical balance information.
3.4 Gaming Activity Data
- Bet history — a full record of all wagers placed, including stake amounts, game or market type, odds accepted, and settlement outcomes.
- Session data — login times, session durations, and logout times, used for responsible gaming monitoring and account security purposes.
- Bonus activity — activation, wagering progress, and redemption records for all promotional offers used by your Account.
3.5 Technical and Device Data
- IP address — recorded at login and during significant account activities for fraud detection and geolocation purposes.
- Device type, operating system, and browser — collected automatically to optimise Platform performance.
- Cookie identifiers and session tokens — used to maintain your login session and improve navigation. See Section 8 for full cookie details.
3.6 Communications Data
- Records of your communications with the cct777 support team via live chat or email, including the content of messages and resolution notes.
- Complaint and dispute correspondence, retained for compliance and quality assurance purposes.
4 How We Collect Your Data
cct777 collects Personal Data through several channels, each of which is described below:
- Directly from you: When you complete the cct777 registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in a promotional campaign.
- Automatically from Platform use: When your device connects to the cct777 Platform, technical data including IP address, device identifiers, browser type, and session information is collected automatically through server logs and cookies.
- From payment providers: When you make a deposit or withdrawal, cct777 receives a transaction confirmation reference from the relevant payment provider (JazzCash, EasyPaisa, HBL, etc.). Full payment credentials remain with the provider — cct777 does not receive or store complete payment instrument numbers.
- From third-party identity verification services: Where cct777 engages an accredited KYC or AML verification provider to assist in confirming your identity, that provider may return verification results or risk flags to cct777 in connection with your Account.
5 Purposes of Processing
cct777 processes your Personal Data exclusively for the following documented purposes:
| Purpose | Data Categories Used |
|---|---|
| Account Registration & Management | Identity data, contact data, device data |
| Age Verification (21+ Compliance) | Date of birth, CNIC number, identity documents |
| KYC & Anti-Money Laundering | Identity data, financial data, CNIC, address |
| Processing Deposits & Withdrawals | Financial data, contact data, identity data |
| Providing Gaming Services | Gaming activity data, wallet data, session data |
| Responsible Gaming Monitoring | Gaming activity, session data, financial data |
| Fraud Detection & Security | Technical data, financial data, identity data |
| Customer Support | Communications data, identity data, account data |
| Promotional Communications (with consent) | Contact data, gaming preferences |
| Legal & Regulatory Compliance | All categories, as required by regulators |
6 Legal Basis for Processing
cct777 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing required to perform the gaming services contract you entered into when registering an Account with cct777, including account administration, deposit processing, game provision, and withdrawal facilitation.
- Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC verification, anti-money-laundering record-keeping, and reporting obligations under cct777's gaming license.
- Legitimate interests: Processing necessary for the legitimate business interests of cct777, including fraud prevention, platform security, responsible gaming monitoring, and improving Platform services — provided such interests are not overridden by your rights and interests.
- Consent: Where you have provided explicit consent, specifically in the context of receiving promotional communications by email or SMS. You may withdraw this consent at any time without affecting the lawfulness of prior processing.
Withdrawing Consent: If you have consented to receiving marketing communications from cct777, you may withdraw that consent at any time by updating your notification preferences in your Account settings or by contacting our support team at the email address set out in Section 15. Withdrawal of consent does not affect the legality of processing that took place prior to withdrawal.
7 Data Sharing & Disclosure
cct777 does not sell, rent, or commercially exploit your Personal Data. Data is shared with third parties only in the following specific and controlled circumstances:
- Payment providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive only the transaction reference and amount information necessary to process your payment. Full financial credentials are handled exclusively by those providers' own secure systems.
- KYC and identity verification providers: Accredited third-party verification services engaged by cct777 to assist in CNIC verification and AML screening. These providers operate under binding data processing agreements and are not permitted to use your data for any other purpose.
- IT infrastructure and cloud service providers: Hosting and database providers who maintain the cct777 Platform infrastructure. All such providers are bound by strict data processing agreements and operate under the same confidentiality obligations as cct777 itself.
- Gaming regulators and licensing authorities: cct777 may be required to disclose player data to its licensing authority or regulatory body in connection with audits, compliance investigations, or specific regulatory requests.
- Law enforcement and legal authorities: Where cct777 is required by law, court order, or formal regulatory direction to disclose Personal Data, we will comply with such obligations. Where legally permissible, cct777 will endeavour to notify you of such disclosures in advance.
- Fraud prevention agencies: Where cct777 has reason to suspect fraudulent, collusive, or money-laundering activity, data may be shared with relevant fraud prevention or anti-crime bodies in accordance with our licensing obligations.
No Commercial Data Sale: cct777 has never sold player Personal Data to advertisers, data brokers, or other commercial third parties, and we commit to never doing so. If this position were to change materially, affected players would be notified in advance and offered meaningful opt-out choices.
8 Cookies & Tracking Technologies
The cct777 Platform uses cookies and similar tracking technologies to provide core Platform functionality, maintain your login session, remember your preferences, and analyse Platform usage patterns to improve the player experience.
The following categories of cookies are used by cct777:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintains your login session, security tokens, and essential Platform functionality. Cannot be disabled without breaking core features. | Session / up to 24 hrs |
| Functional | Remembers your language, display, and notification preferences across sessions. | Up to 12 months |
| Analytical | Collects anonymised data on page performance, navigation patterns, and feature usage to improve the cct777 Platform. | Up to 24 months |
| Security | Detects unusual login behaviour, multiple account signals, and suspicious transaction patterns for fraud prevention. | Session-based |
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your cct777 Account and will prevent most Platform functionality from operating correctly. cct777 does not use third-party advertising cookies or behavioural tracking for commercial advertising purposes.
9 Data Security
cct777 implements a layered security framework to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our technical and organisational security measures include:
- Encryption in transit: All data exchanged between your device and cct777 servers is encrypted using TLS 1.2 or TLS 1.3 protocols. This prevents interception of data during transmission over networks including Pakistani mobile internet (4G/5G) and Wi-Fi connections.
- Encryption at rest: Databases containing Personal Data are encrypted using AES-256 encryption at the storage layer. Passwords are hashed using industry-standard one-way cryptographic functions and are never stored in recoverable plain text.
- Access controls: Access to Personal Data within cct777 systems is restricted to employees and contractors with a documented operational need. Access is controlled through role-based permissions, unique credentials, and multi-factor authentication for administrative access.
- Intrusion detection and monitoring: cct777's infrastructure is monitored around the clock for anomalous activity. Security events trigger automated alerting and manual investigation processes.
- Regular security auditing: The Platform undergoes periodic independent security assessments as part of cct777's licensing compliance cycle.
While cct777 takes all reasonable technical and organisational measures to protect your Personal Data, no system is entirely immune to all security threats. You also have an important role in protecting your own data — particularly by using a strong, unique password for your cct777 Account, enabling two-factor authentication, and ensuring you log out from shared devices.
Security Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, cct777 will notify affected players and, where required, the relevant regulatory authority, within the timeframe required by applicable law. Notification will include the nature of the breach, the categories of data affected, and the steps cct777 is taking in response.
10 Data Retention
cct777 retains Personal Data for the periods set out below, after which data is securely deleted or anonymised. Retention periods are determined by the purpose of processing and applicable legal or regulatory requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of Account + 5 years post-closure | Licensing and AML compliance |
| KYC Documents (CNIC etc.) | Duration of Account + 5 years post-closure | Regulatory record-keeping obligation |
| Financial Transaction Records | 7 years from date of transaction | AML and financial record-keeping law |
| Gaming Activity & Bet History | 5 years from date of activity | Licensing audit requirements |
| Customer Support Records | 3 years from last interaction | Quality assurance and dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Evidence of lawful processing basis |
| Technical / Log Data | Up to 24 months | Security and fraud monitoring |
When a retention period expires, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Residual copies that may exist in backup systems are overwritten during normal backup rotation cycles.
11 Your Data Rights
You have the following rights in relation to Personal Data that cct777 holds about you. cct777 commits to responding to requests to exercise these rights within 30 calendar days of receipt. Requests may be submitted to [email protected], marked for the attention of the Data Protection team.
You may request a copy of all Personal Data that cct777 holds about you, along with information about how it is being processed and why. This is commonly called a Subject Access Request (SAR).
If any Personal Data held by cct777 is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain Account details directly within your cct777 Account settings.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. This right is subject to overriding legal retention obligations under AML and licensing law.
In certain circumstances — such as where you contest the accuracy of data or have objected to processing — you may request that cct777 restricts further processing of your data while the matter is resolved.
Where processing is based on your consent or a contract, you may request your Personal Data in a structured, machine-readable format for transfer to another controller. This right applies to data you have actively provided to cct777.
You may object to processing based on cct777's legitimate interests, including for marketing purposes. Where processing is for direct marketing, cct777 will cease such processing upon receipt of your objection without requiring justification from you.
12 International Data Transfers
cct777's core operational infrastructure is hosted by providers whose servers may be located outside of Pakistan. Where Personal Data is transferred internationally — including to the jurisdiction in which cct777's gaming license is held — cct777 ensures that appropriate safeguards are in place to protect your data to at least the same standard as this Policy requires.
Safeguards for international data transfers include contractual clauses requiring data processors to apply equivalent technical and organisational security measures, and restrictions on sub-processing without cct777's prior written consent. cct777 does not transfer player data to jurisdictions that have not been assessed as providing adequate data protection standards unless additional safeguards are implemented.
13 Children's Privacy and Minimum Age Policy
The cct777 Platform is strictly intended for adults aged 21 years and above. cct777 does not knowingly collect Personal Data from persons under the age of 21. The registration process includes a date-of-birth field and CNIC verification specifically to prevent underage access.
If cct777 becomes aware that Personal Data has been collected from a person who is under 21 years of age, that Account will be immediately suspended, any balance (including winnings) will be held pending parental or guardian notification, and the data will be securely deleted to the extent not required for reporting purposes. Where the registration involved fraudulent misrepresentation of age, the incident may be referred to relevant authorities.
Parental Responsibility: If you believe a person under the age of 21 in your household may have registered an account or accessed the cct777 Platform, please contact us immediately at [email protected]. We will act promptly to close the account and address any related concerns.
14 Updates to This Privacy Policy
cct777 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, Platform features, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this document.
Where an update is material — meaning it significantly alters your rights or the way cct777 processes your Personal Data — we will notify registered Account holders via email to the address on file, and post a prominent notice on the cct777 Platform, at least seven days before the change takes effect. Non-material updates (such as typographical corrections or clarifications that do not change the substance of any section) may be made without prior notice.
Your continued use of the cct777 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not accept a material change, you may request Account closure before the change takes effect by contacting our support team.
15 Contact — Data Protection Enquiries
For any questions, concerns, or requests relating to this Privacy Policy or cct777's data processing practices, please contact our data protection team through the channels below. All contact details are provided as plain text only and are not clickable links.
Data Protection & Privacy Enquiries:
Email: [email protected]
Subject Line: "Privacy / Data Protection Request"
Response commitment: Within 30 calendar days of receipt.
Live Chat Support:
Available 24 hours a day, 7 days a week via the cct777 Platform interface for
general account queries. For formal Subject Access Requests or legal data rights
exercises, written email correspondence is preferred.
Postal / Legal Correspondence:
Formal legal correspondence regarding data protection matters should be directed
to the cct777 Legal Department via the email address above, clearly marked
"Legal — Data Protection". Our team will acknowledge receipt within two business
days and respond substantively within the 30-day statutory window.
This Privacy Policy was last reviewed and updated on 1 January 2026 (Version 3.1). It supersedes all prior versions of the cct777 Privacy Policy. The current version is always the definitive version and is available on the cct777 Platform at all times.