Privacy Policy – World777 Pakistan Online Casino Data Protection

Who We Are and What This Policy Covers

World777 ("we," "us," "the platform," "World777") operates the online casino and sports betting website at world777-jit.com. This Privacy Policy explains how World777 collects, processes, stores and protects the personal information of players and visitors based in Pakistan.

This Policy applies to every interaction you have with World777 — registering an account, making a deposit, placing a bet, using live chat, responding to a promotional email or simply browsing the website. It covers data collected through our website and through our mobile-optimised Progressive Web App interface.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which contain additional commitments relevant to how we handle your account information.

What Personal Data World777 Collects

World777 collects only the data necessary to operate the platform, verify your identity, process payments, comply with anti-fraud and responsible gaming obligations, and improve your experience. We do not collect data for its own sake.

World777 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, biometric identifiers or health information unless specifically required by applicable law for identity verification purposes, in which case such data is handled with heightened protection and disclosed only to certified verification service providers.

How World777 Uses Your Personal Data

Every piece of data World777 collects has a specific, documented purpose. The table below outlines the primary uses of each data category and links each use to its legal basis (see Section 4 for full detail on legal bases).

• To create and manage your account: Identity and contact data is used to register your account, verify your identity, process OTP authentication and manage your account settings. Without this data, the account cannot exist.
• To process financial transactions: Transaction data is used to execute deposits and withdrawals, reconcile your balance and maintain financial records. This is essential for operating any real-money gaming platform.
• To provide and improve games and services: Gaming data and technical data help World777 maintain game performance, diagnose technical issues, resolve game disputes by reference to session records and improve the overall platform experience.
• To comply with anti-fraud and anti-money-laundering obligations: Transaction patterns, device data and IP information are monitored to detect fraudulent activity, identify suspicious financial patterns and prevent the platform from being used for money laundering. This is a legal obligation, not a discretionary activity.
• To fulfil responsible gaming obligations: Gaming data, deposit patterns and session duration data are monitored to detect signs of problem gambling. Where concerning patterns are identified, World777 may reach out proactively or apply account protections. This is done in the genuine interest of player welfare.
• To send service communications: Contact data is used to send essential account notifications — deposit confirmations, withdrawal status updates, security alerts and account changes. These communications are not marketing and cannot be opted out of while your account is active.
• To send marketing communications (with consent only): Where you have opted in to receive promotional emails or SMS, World777 uses your contact data to send relevant bonus offers, tournament announcements and platform news. You may withdraw this consent at any time through your account notification settings.
• To resolve disputes and legal claims: Communication data, transaction records and game session logs may be referenced in resolving player disputes or responding to legal proceedings.

Legal Basis for Processing Your Data

World777 processes your personal data under the following legal bases:

• Contract performance: Processing necessary to fulfil the agreement between you and World777 — operating your account, processing bets and transactions, and delivering the gaming services you have signed up for.
• Legal obligation: Processing required by applicable law — including identity verification for KYC compliance, transaction monitoring for anti-money-laundering purposes and record-keeping for regulatory requirements.
• Legitimate interests: Processing where World777 has a legitimate business interest that is not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring and improving service quality.
• Consent: Processing for optional purposes where you have given explicit, informed consent — specifically, marketing communications by email or SMS. Consent can be withdrawn at any time without affecting your ability to use the platform.

Payment Data & Financial Security

World777 processes PKR transactions through the following payment methods available to Pakistani players: Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT and Visa/Mastercard. The way your payment data is handled depends on the method used.

Mobile wallets (Easypaisa, JazzCash, NayaPay, SadaPay): When you deposit or withdraw via mobile wallet, World777 initiates the transaction through an API integration with the wallet provider. Your mobile number is transmitted to the provider to authorise the transaction. World777 retains a transaction record (amount, timestamp, method type, success/failure status) but does not store your mobile wallet PIN or any authentication credential.

Bank IBFT: World777 retains the bank account details you provide for IBFT withdrawals in an encrypted format to enable repeat withdrawals to the same account without re-entry. These details are accessible only to World777's certified financial operations team and are never shared with third parties outside of what is required to execute the specific transaction.

Visa/Mastercard: Card transactions are processed through a PCI-DSS certified payment gateway. World777 does not store your full card number, CVV or expiry date. The payment gateway provides World777 with a tokenised card reference that can be used to initiate further transactions to the same card without re-transmitting the underlying card data.

Cookies, Session Data & Tracking Technologies

World777 uses cookies and similar session technologies to maintain the security and functionality of your logged-in session and to gather analytics on how the platform is used. We do not use third-party advertising cookies or behavioural tracking technologies for commercial profiling.

• Essential cookies: Required to maintain your login session, remember your game preferences and ensure secure authentication. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: First-party cookies that help World777 understand which pages are visited most, how long sessions last and where technical errors occur. This data is aggregated and anonymised before being reviewed by the platform team. No individual player is profiled through analytics data.
• Responsible gaming session tracking: Session duration and frequency data is tracked to support the responsible gaming system — specifically to trigger reality-check notifications and enforce session limits where a player has set them.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from maintaining a logged-in session on World777. Blocking analytics cookies will not affect your ability to use any platform feature.

Third-Party Data Sharing – Who Receives Your Data

World777 does not sell, rent or share your personal data with third parties for marketing, profiling or commercial purposes. The only third-party sharing that occurs is what is strictly necessary to operate the platform. The categories of third parties who may receive limited data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT providers and card payment gateways receive the transaction data necessary to execute your deposit or withdrawal. Each payment processor operates under its own data protection obligations.
• Game providers: When you play a game, the game provider's software processes your gameplay. Providers receive anonymised session data (bet amounts, game outcomes, session duration) for RTP verification and game performance purposes. They do not receive your name, contact details or payment information.
• Identity verification services: Where KYC verification is triggered, an encrypted verification request may be passed to a certified identity verification service to check the authenticity of documents provided. This service does not retain the data beyond the verification transaction.
• Fraud prevention services: IP addresses, device fingerprints and transaction patterns may be checked against fraud prevention databases operated by certified third-party providers. These checks are automated and do not result in human review of individual player accounts unless an alert is triggered.
• Legal and regulatory authorities: Where required by applicable law, court order or regulatory direction, World777 may be required to disclose account or transaction records to authorised bodies. World777 will only comply with legally valid requests and will inform affected players where permitted by law.

How World777 Keeps Your Data Secure

Data security at World777 is not an afterthought — it is a core operational requirement. The following technical and organisational measures are in place to protect your personal information:

• Encryption at rest: All personal data stored on World777 infrastructure is encrypted using AES-256 encryption. This means that even in the event of a server-level compromise, stored data is unreadable without the decryption keys, which are managed separately.
• Encryption in transit: All data transmitted between your browser or device and the World777 platform uses TLS 1.2 or higher. The padlock symbol in your browser address bar confirms this protection is active.
• Access controls: Access to World777's player database is restricted to staff who require it for their specific job function. Access is logged, audited and reviewed regularly. No contractor or third-party vendor has unmediated access to raw player data.
• Intrusion detection: World777 operates automated intrusion detection systems that monitor for unusual access patterns, bulk data queries and other indicators of a potential breach. Alerts trigger immediate investigation by the security team.
• Account authentication: OTP-based two-factor authentication is used for all World777 account logins. This significantly reduces the risk of account compromise through credential theft.
• Regular security reviews: World777 conducts periodic security assessments of its infrastructure and processes to identify and address vulnerabilities before they can be exploited.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that affects your personal information, World777 will notify affected players through their registered contact details without undue delay and will take immediate steps to contain and remediate the breach.

How Long World777 Keeps Your Data

World777 retains personal data only as long as necessary for the purpose for which it was collected, subject to any legal retention obligations that may require longer storage.

• Account data: Retained for the duration of your active account relationship with World777, plus a minimum of five years after account closure for regulatory and dispute resolution purposes.
• Transaction records: Retained for a minimum of seven years after the transaction date in accordance with standard financial record-keeping requirements.
• Game session records: Retained for a minimum of one year for dispute resolution purposes and up to three years for responsible gaming monitoring analysis.
• Identity verification records: Retained for the duration of the account relationship plus five years after closure. Copies of verification documents are deleted once verification is confirmed and the result logged.
• Marketing consent records: Retained until consent is withdrawn and for a further period of two years as evidence of the consent having been obtained and respected.
• Support communications: Retained for two years from the date of the final communication in a support thread, or longer where the communication relates to an ongoing dispute.

When retention periods expire, World777 securely deletes or anonymises the relevant data so it can no longer be associated with you as an individual.

Your Privacy Rights as a World777 Player

As a World777 player, you have specific rights regarding your personal data. World777 takes these rights seriously and has processes in place to respond to all valid requests within a reasonable timeframe — typically within thirty days of receipt.

• Right to access: You can request a copy of all personal data World777 holds about you. This is accessible through your account settings under "Data & Privacy" or by contacting support@world777-jit.com.
• Right to correction: If any personal data World777 holds about you is inaccurate or outdated, you can request correction. For basic contact details this can be done directly in your account settings. For identity-verified data (name, date of birth), a correction request must be submitted to support.
• Right to deletion: You can request deletion of your personal data. Note that certain data must be retained to comply with legal obligations — financial records and anti-fraud data cannot be deleted ahead of the applicable retention period. Where deletion is not possible for legal reasons, World777 will explain this clearly in its response.
• Right to restrict processing: Where you contest the accuracy of data, or believe World777 is processing it without a valid legal basis, you can request that processing be restricted to storage only while the matter is under review.
• Right to withdraw consent: Where World777 processes your data on the basis of consent — specifically, marketing communications — you can withdraw that consent at any time through your notification settings or by contacting support. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• Right to object: You can object to processing based on legitimate interests. World777 will review your objection and cease processing unless there are compelling legitimate grounds that override your interests.

To exercise any of these rights, contact World777 at support@world777-jit.com with the subject line "Privacy Request — [your registered mobile number]." We will verify your identity before processing any request to prevent unauthorised access to your data.

Children's Privacy – Under-18 Access Prevention

World777 is strictly an adult platform. Access is prohibited to any individual under the age of 18. World777 does not knowingly collect or process personal data from individuals under 18.

The platform employs age verification requirements at registration and may request identity documentation to confirm age where there is reasonable suspicion of underage access. Where an account is found to belong to an underage individual, it will be immediately closed, all deposited funds returned to the source payment method and no winnings paid.

If you believe a minor has accessed World777 using false identity information, please report this to support@world777-jit.com immediately. World777 takes underage gambling seriously as both a legal compliance and welfare concern.

Changes to This Privacy Policy

World777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or improvements to our platform. When material changes are made, World777 will:

• Update the "Last Updated" date at the top of this page
• Send a notification to your registered email address summarising the key changes
• Display a notification in your World777 account notification centre when you next log in

Your continued use of World777 after the effective date of a revised Policy constitutes acceptance of the updated terms. If you disagree with material changes to the Policy, you should close your account before the changes take effect. Archived versions of previous Privacy Policies are available by contacting support.

Contact Us & Privacy Complaints

For any questions, requests or complaints related to this Privacy Policy or World777's data handling practices, please contact our data team directly:

• Email: support@world777-jit.com (use subject line "Privacy — [your registered mobile number]" for fastest routing)
• Live Chat: Available 24/7 on the World777 website — ask to be connected to the privacy and data team for sensitive matters

World777 aims to resolve all privacy-related queries and complaints within thirty days of receipt. For complex matters requiring investigation, we will acknowledge your request within three business days and provide a realistic timeline for resolution.

If you are not satisfied with World777's response to a privacy complaint, you have the right to escalate the matter to applicable data protection authorities. Details of how to do this will be provided in World777's response to your original complaint if the matter is not resolved to your satisfaction.