com777 Privacy Policy

com777 ("we," "us," "our," "the Company") operates the online gaming platform accessible at com777.bio, offering live casino games, cricket betting, slot games, Teen Patti 20-20, Pool Rummy, and a range of other gaming products to eligible users aged 21 and above.

com777 is operated under an international gaming licence and is the data controller responsible for the personal information you provide when registering and using our platform. For all privacy-related matters, the primary point of contact is our Data Protection team, reachable at [email protected].

com777 collects personal data through several channels, including account registration forms, KYC submissions, payment transactions, customer support interactions, and automatic technical data collection when you use the platform. The categories of data we collect are as follows:

com777 does not collect sensitive personal data beyond what is necessary for KYC and AML compliance. We do not collect biometric data, religious affiliation, political opinions, or health information.

com777 processes your personal data for the following clearly defined purposes:

• Account Registration & Management: To create, maintain, and administer your com777 account, including updating your details and managing your account settings.
• Identity Verification (KYC): To verify your identity in accordance with our obligations under our gaming licence and applicable AML regulations. CNIC data is cross-referenced with NADRA records for this purpose.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to fulfil withdrawal requests to your registered payment accounts.
• Regulatory Compliance: To meet our reporting obligations under anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licence regulations, including sharing data with regulatory bodies as legally required.
• Responsible Gaming: To monitor gaming behaviour and intervene where patterns suggest problematic gambling activity, including enforcing self-exclusion orders and deposit limit settings.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, and other forms of platform abuse.
• Customer Support: To handle your queries, complaints, and support requests effectively and to maintain records of communications for quality assurance purposes.
• Marketing Communications: To send you relevant bonus offers, promotions, and platform updates by email or SMS, where you have provided explicit consent to receive such communications.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve our games, user interface, payment processing speeds, and overall platform performance.

com777 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and com777 — including account registration, payment processing, game access, and withdrawal of funds.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, gaming licence conditions, and mandatory reporting to regulatory and law enforcement authorities.
• Legitimate Interests: Processing carried out for com777's legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and platform analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications by email or SMS. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Where processing is based on consent, you can withdraw that consent at any time by updating your marketing preferences within your com777 account dashboard or by contacting [email protected].

As a licensed gaming operator, com777 is obligated to carry out Know Your Customer (KYC) verification on all registered accounts. This is a mandatory regulatory requirement and is not optional. Failure to complete KYC will result in withdrawal restrictions being applied to your account.

KYC documents submitted to com777 — including CNIC scans, utility bills, and bank statements — are:

• Transmitted over TLS-encrypted connections to our secure verification infrastructure.
• Stored in encrypted format on access-controlled servers with strict internal access permissions limited to authorised compliance personnel only.
• Cross-referenced with NADRA records and, where applicable, Pakistani AML watchlists for the purpose of identity confirmation and fraud screening.
• Retained in accordance with our data retention schedule set out in Section 9.
• Never shared with commercial third parties for marketing, profiling, or any purpose beyond regulatory compliance.

com777 processes financial transactions in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Financial data is handled with the highest level of security and in strict compliance with our AML obligations.

• Payment account numbers and bank details are stored in encrypted format and are accessible only to authorised payment processing personnel.
• com777 does not store full bank card numbers on its servers. Where card-based transactions are processed, card data is handled exclusively by our PCI-DSS compliant payment gateway partners.
• All transaction records — including deposit amounts, withdrawal requests, bonus credits, and wagering activity — are retained for a minimum of five (5) years to satisfy AML record-keeping obligations under our licensing framework.
• Transaction data may be shared with Pakistani financial intelligence units or law enforcement agencies where we are under a legal obligation to do so, or where we identify credible indicators of financial crime.

com777 does not initiate any payment transaction without your explicit instruction through the platform's deposit or withdrawal interface. We will never debit your JazzCash, EasyPaisa, or bank account without your action-initiated consent.

com777 uses cookies and similar tracking technologies on com777.bio to enable essential platform functionality, improve your experience, and support our security and analytics activities. The types of cookies we use are as follows:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, game lobby layout, and last-used payment method, to provide a more personalised experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users navigate and interact with com777.bio. This data is used exclusively for internal platform improvement. com777 does not share analytics data with advertising networks.
• Security Cookies: Used by our fraud detection systems to identify unusual access patterns, bot activity, and potential account takeover attempts.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing your com777 account or using core platform features. com777 does not use third-party advertising cookies or cross-site tracking technologies.

com777 does not sell your personal data. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

• Technology & Infrastructure Partners: Cloud hosting providers, database management services, and cybersecurity vendors who process data on com777's behalf under binding data processing agreements that impose the same data protection standards as this Privacy Policy.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other licensed payment service providers, solely for the purpose of executing deposit and withdrawal transactions.
• KYC & Identity Verification Services: Licensed third-party identity verification providers used to validate CNIC documents and cross-reference data with NADRA records and AML screening databases.
• Game Content Providers: Licensed game studios and live casino operators who provide game content on the com777 platform. These providers may receive anonymised session data required for game operation and RNG certification purposes.
• Regulatory & Law Enforcement Authorities: Gaming regulatory bodies, Pakistani financial intelligence units, and law enforcement agencies, where com777 is under a legal obligation to disclose data or where disclosure is required to prevent or investigate financial crime.

com777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data disposal protocols. Where data has been anonymised, it may be retained indefinitely for aggregated platform analytics purposes, as it can no longer be linked to any identifiable individual.

com777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and our servers.
• Access Controls: Role-based access control (RBAC) ensures that only authorised personnel can access specific categories of personal data, strictly on a need-to-know basis.
• Two-Factor Authentication (2FA): Mandatory 2FA on all internal administrative accounts. Strongly recommended (and available) for all player accounts.
• Penetration Testing: Regular third-party penetration testing and vulnerability assessments are conducted on our platform infrastructure.
• Incident Response: com777 maintains a documented data breach response procedure. In the event of a data breach that presents a risk to your rights and freedoms, we will notify affected users and relevant regulatory authorities within 72 hours of becoming aware of the incident.
• Staff Training: All com777 staff who handle personal data receive mandatory data protection and security awareness training on an annual basis.

As a com777 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request." We will respond within 30 days of receipt.

The com777 platform is strictly for individuals aged 21 years and above. com777 does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the mandatory KYC process through CNIC verification against NADRA records.

Parents and guardians in Pakistan are encouraged to make use of internet filtering tools and parental control software to prevent underage access to online gaming platforms. com777 cooperates fully with any verified report of underage gambling.

com777 may send you promotional communications, including bonus offers, PSL season promotions, slot tournaments, and platform updates, by email or SMS. These communications are sent only where you have provided explicit opt-in consent during registration or through your account settings.

• Opt-Out: You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email, by updating your notification preferences in your account dashboard, or by contacting [email protected].
• Transactional Communications: Even if you opt out of marketing, com777 will continue to send you essential transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and account security alerts. These are not marketing communications and cannot be opted out of while your account is active.
• No Third-Party Marketing: com777 does not share your contact details with any third-party marketing companies. All communications are sent directly by com777.

com777's marketing communications are designed in compliance with applicable anti-spam regulations. All marketing emails clearly identify com777 as the sender and include a visible, functional unsubscribe mechanism.

As an internationally licensed gaming platform, com777 may process and store your personal data on servers located outside of Pakistan. Where data is transferred internationally, com777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or higher than the protections set out in this Privacy Policy.

Safeguards for international transfers include:

• Data processing agreements with all third-party service providers that impose binding data protection obligations consistent with international standards.
• Transfer only to jurisdictions or service providers that maintain recognised data protection frameworks and security certifications, such as ISO 27001.
• Encryption of all data in transit and at rest, regardless of the jurisdiction in which it is stored.

com777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming licence obligations. When material changes are made, we will notify you by:

• Posting a prominent notice on the com777.bio homepage for a minimum of 30 days following the update.
• Sending an email notification to the registered email address on your account, providing a summary of the material changes and the effective date.

Your continued use of the com777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must cease using the platform and may request account closure by contacting [email protected].

Minor, non-material updates — such as typographical corrections, clarifications that do not alter the substance of the policy, or changes to contact details — may be made without individual notification but will always be reflected in the "Last Updated" date shown at the top of this page and in the Table of Contents sidebar.

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data com777 holds about you, please contact our Data Protection team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 inside your com777 account dashboard — including during PSL season, Eid holidays, and all Pakistani public holidays.
• Response Time: All data rights requests and privacy-related queries are acknowledged within 48 business hours and fully resolved within 30 calendar days.

For information about our responsible gaming tools, self-exclusion options, or deposit limit controls, please visit our Responsible Gaming page. For general questions about your account, deposits, withdrawals, or games, please visit our FAQ page.

If you wish to make a formal complaint about the way com777 has handled your personal data and are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority under the framework of our international gaming licence.