Privacy Policy

1 Introduction

CS777 ("CS777", "we", "us", "our") operates the online gaming and sports betting information platform accessible at cs777.cam and its associated subdomains (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses or uses our Platform, including users based in Pakistan and internationally.

This Privacy Policy ("Policy") sets out in full how CS777 collects, uses, stores, discloses and protects your personal data. It applies to all personal information you provide to us directly — for example when registering an account — as well as data we collect automatically through your use of the Platform, such as device identifiers, IP addresses and browsing behaviour.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference. Where any conflict exists between this Policy and those documents in matters relating to personal data, this Policy shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

"Personal Data"

Any information relating to an identified or identifiable natural person. This includes your name, email address, date of birth, postal address, payment details, device identifiers and any other data that can directly or indirectly identify you.

"Processing"

Any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction.

"Data Controller"

The natural or legal person who determines the purposes and means of processing personal data. For the purposes of this Policy, CS777 is the Data Controller in respect of your personal data.

"Data Processor"

A third party that processes personal data on behalf of the Data Controller under a written data processing agreement. Examples include payment gateway providers and KYC/AML verification services.

"Consent"

A freely given, specific, informed and unambiguous indication of your wishes by which you agree to the processing of your personal data for one or more specified purposes.

"Cookies"

Small text files stored on your device by your web browser that allow the Platform to recognise your device, maintain session state and gather analytical data about usage patterns.

3 Data We Collect

3.1 Data You Provide Directly

When you register an account, complete a verification process or contact our support team, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, nationality;
• Contact data: Email address, residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or other), phone number;
• Verification documents: Copies of government-issued identification (e.g., Pakistani CNIC, passport, driving licence), proof of address and, where required, source-of-funds documentation;
• Financial data: Payment method details, transaction records and account balance history. Note: full card numbers are never stored on CS777 servers — payment processing is handled by PCI-DSS-compliant third-party processors;
• Correspondence data: Content of messages, complaints or enquiries you send to our support team via email or live chat.

3.2 Data Collected Automatically

When you access the Platform, our systems and analytics tools automatically collect certain technical data, including:

• IP address and approximate geolocation derived therefrom;
• Device type, operating system version and browser type;
• Pages visited, session duration, click paths and features accessed;
• Referral URL (the page from which you arrived at cs777.cam);
• Cookie identifiers and similar tracking technologies as described in Section 7.

3.3 Data from Third Parties

We may receive limited personal data from trusted third-party sources to supplement or verify the information you provide, including identity verification results from KYC service providers, fraud risk scores from AML screening tools, and payment authentication confirmations from gateway providers such as those supporting Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. References to these providers are for informational context only and do not constitute an endorsement or imply that these providers support gambling activities.

4 Legal Basis for Processing

CS777 processes your personal data only where a lawful basis exists to do so. The primary legal bases on which we rely are set out in the table below:

5 How We Use Your Data

5.1 Account Administration

We use your registration data to create and manage your CS777 account, authenticate your identity on each login, process your transactions and maintain an accurate record of your account history. This processing is necessary for us to deliver the services you have requested.

5.2 Regulatory Compliance

As a platform operating in the online gaming sector, CS777 is subject to a range of legal and regulatory obligations. We process your identity and financial data to comply with know-your-customer (KYC) requirements, anti-money laundering (AML) obligations and responsible gambling regulations. This may include screening your details against sanctions lists and politically exposed persons (PEP) databases.

5.3 Responsible Gambling

We monitor account activity — including deposit frequency, session length, betting patterns and use of responsible gambling tools — to identify indicators of potential harm. Where concerning patterns are detected, our responsible gambling team may reach out proactively to offer support. This processing is conducted in your interest and in compliance with our duty-of-care obligations.

5.4 Platform Improvement and Analytics

Aggregated and anonymised usage data helps us understand how users interact with the Platform — which features are most used, where friction points exist, and how to optimise the overall experience. This analytics processing does not identify you personally and relies on our legitimate interest in improving our product.

5.5 Marketing Communications

With your explicit consent, we may send you promotional emails, push notifications or SMS messages about bonuses, new game releases, cricket betting promotions (including Pakistan Super League and ICC tournament coverage) and other platform updates. You can withdraw consent and unsubscribe at any time as described in Section 10.

6 Data Sharing & Disclosure

CS777 does not share your personal data with third parties except in the following circumstances:

• Authorised Data Processors: We engage carefully selected third-party service providers who process data solely on our behalf and under our instructions — including payment gateway operators, identity verification (KYC) providers, fraud prevention services, cloud infrastructure providers and customer support software vendors. All processors are bound by written data processing agreements;
• Licensed Operators: Where you choose to interact with a third-party gambling operator referenced or accessible through the CS777 Platform, certain data (such as your registered email address and account identifiers) may be shared with that operator solely to facilitate your access to their services. The operator's own privacy policy then governs their use of that data;
• Legal and Regulatory Authorities: We may disclose personal data to competent authorities — including law enforcement agencies, regulatory bodies and financial intelligence units — where we are required to do so by applicable law, court order or regulatory directive, including in connection with AML and CTF reporting obligations;
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of CS777's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and any choices you may have via a prominent notice on the Platform prior to the transfer taking effect;
• With Your Consent: We may share data with third parties in any other circumstance where you have provided explicit, informed consent for that specific sharing activity.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored in your browser when you visit a website. They allow the site to remember your preferences, maintain your session state and gather anonymised usage analytics. CS777 uses cookies exclusively for the purposes described below — we do not use cookies for cross-site advertising or third-party tracking.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, CSRF protection tokens and load-balancing identifiers. These cannot be disabled without breaking core Platform functionality;
• Analytics Cookies: Used to collect anonymised, aggregated data about how visitors interact with the Platform — pages visited, session duration and navigation flow. This data is used solely to improve Platform performance and user experience;
• Preference Cookies: Used to remember your settings such as display language, responsible gambling tool preferences and notification settings across sessions;
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access attempts and bot traffic.

7.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Browser-level cookie management is available through the settings or preferences menu of all major browsers including Chrome, Firefox, Safari and Edge.

8 Data Retention

CS777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Our general retention schedules are as follows:

• Account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction in accordance with financial record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Support correspondence: Retained for a maximum of three (3) years from the date of last communication, unless the content forms part of an ongoing dispute or legal proceeding;
• Analytics data: Retained in anonymised, aggregated form for up to two (2) years for the purpose of ongoing platform analysis and trend reporting.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is required for the defence or prosecution of legal claims, we may retain it beyond the standard schedule until the claim is resolved.

9 International Data Transfers

CS777's servers and operational infrastructure may be located outside Pakistan. As a result, your personal data may be transferred to, stored in and processed in countries other than your country of residence, including jurisdictions that may not have data protection laws equivalent to those in Pakistan.

Where such transfers occur, CS777 takes appropriate safeguards to ensure your data remains protected to a standard consistent with this Policy. These safeguards may include the use of standard contractual clauses, binding corporate rules or adequacy decisions recognised by the relevant data protection authority in the jurisdiction of our operations.

By using the CS777 Platform, you acknowledge and consent to the transfer of your personal data outside Pakistan subject to the protections described in this section.

10 Your Data Rights

Subject to applicable data protection legislation and certain exemptions (for example, where retention is required for legal compliance), you have the following rights in respect of your personal data held by CS777:

• Right of Access: You may request a copy of all personal data we hold about you, together with information about how it is used and with whom it has been shared;
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data. For basic account details, you may update these directly within your account settings;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, and where no overriding legal obligation requires its retention;
• Right to Restriction of Processing: You may request that we limit the processing of your data in certain circumstances, for example while the accuracy of data is being contested;
• Right to Data Portability: You may request that we provide your personal data to you or to another controller in a structured, commonly used, machine-readable format where technically feasible;
• Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please submit a written request to our Data Protection contact at [email protected]. We will respond within thirty (30) calendar days of receiving a verified request. We may ask you to provide proof of identity before processing your request.

11 Data Security

CS777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• End-to-end TLS 1.2/1.3 encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored at rest on our infrastructure;
• Multi-factor authentication (MFA) for all administrative access to production systems;
• Role-based access controls (RBAC) ensuring that employees can only access personal data necessary for their specific job function;
• Regular third-party penetration testing and vulnerability assessments;
• Continuous intrusion detection monitoring and automated anomaly alerting;
• Documented incident response procedures with defined notification timelines in the event of a data breach.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. While we take every reasonable precaution, CS777 cannot guarantee absolute security. In the event of a data breach that poses a material risk to your rights and freedoms, we will notify affected users without undue delay in accordance with applicable law.

12 Children's Privacy

The CS777 Platform is strictly intended for adults aged 18 and above, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from any individual under the age of 18.

If you are a parent or guardian and believe that a minor has provided us with personal data without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete all associated personal data and close any account opened by an underage individual.

13 Updates to This Policy

CS777 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes, we will notify registered users by email and post a prominent notice on the Platform homepage, with a revised effective date displayed at the top of this page.

We encourage you to review this Policy periodically. If you continue to use the CS777 Platform after an updated Policy has taken effect, you are deemed to have accepted the revised terms. If you do not agree with any update, you should stop using the Platform and close your account by contacting [email protected].

14 Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact our Data Protection team using the details below. We aim to respond to all privacy-related enquiries within 30 calendar days.

For questions about our game rules or account terms, see our Terms & Conditions. For guidance on responsible gambling tools, visit our Responsible Gambling page.