cy777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is published by the operating entity behind the cy777 online casino and sports betting platform, accessible at cy777.asia (referred to throughout this document as "cy777," "we," "us," or "our"). cy777 acts as the data controller in respect of all personal data collected from users of the cy777 platform — meaning cy777 is the entity that determines the purposes and means of processing your personal information.

For any queries regarding this Privacy Policy or your personal data held by cy777, you may contact our data protection team at [email protected]. All data-related requests should be submitted via email with the subject line "Data Privacy Request" to ensure prompt routing to the appropriate team.

cy777 collects two broad categories of personal data: information you actively provide to us during the registration and use of the platform, and information that is automatically generated by your use of the platform.

cy777 collects personal information through the following means:

• Direct interactions: Information you provide when registering a cy777 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically via server logs, cookies, pixel tags, and similar technologies when you access or use the cy777 platform.
• Third-party payment processors: Financial data shared with cy777 by payment providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processors when you initiate a transaction.
• Identity verification services: Data returned by third-party KYC and anti-fraud providers that cy777 uses to verify the identity and age of account holders.
• Publicly available sources: In limited circumstances, cy777 may supplement account data with information from publicly available registers where this is necessary for regulatory compliance or fraud prevention.

cy777 processes personal data only where a valid legal basis for doing so exists. The legal bases on which cy777 relies for the processing activities described in this Policy are as follows:

• Contractual necessity: Processing required to fulfil cy777's obligations under the account agreement, including operating your account, processing deposits and withdrawals, and providing the gaming services you have requested.
• Legal obligation: Processing required for cy777 to comply with applicable anti-money laundering regulations, responsible gaming obligations, age verification requirements, and other legal duties.
• Legitimate interests: Processing that is necessary for cy777's legitimate business interests, including fraud detection, security monitoring, platform analytics, and improving the player experience — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for the use of non-essential cookies or for receiving marketing communications from cy777. You may withdraw consent at any time without affecting the lawfulness of prior processing.

cy777 uses personal data for the following specific purposes, in each case consistent with the legal bases identified in Section 4:

• To register and administer your cy777 account, including identity verification and age confirmation in compliance with the 21+ policy.
• To process deposits, withdrawals, and all financial transactions conducted through your cy777 account.
• To deliver the gaming and sports betting services available on the cy777 platform.
• To detect, investigate, and prevent fraud, money laundering, account compromise, and other prohibited activities.
• To comply with our responsible gaming obligations, including monitoring for indicators of problem gambling and facilitating self-exclusion requests.
• To communicate with you regarding your cy777 account, including transaction confirmations, security alerts, and support responses.
• To send promotional communications about cy777 bonuses and offers where you have not opted out of receiving such communications.
• To analyse platform usage and improve the cy777 experience for Pakistani players and our broader user base.

cy777 does not sell personal data to third parties. cy777 may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card processors, and USDT payment infrastructure providers, to the extent necessary to process your transactions.
• KYC and fraud prevention providers: Third-party identity verification and anti-fraud service providers used to fulfil cy777's regulatory obligations.
• Technology and infrastructure providers: Cloud hosting, content delivery, and platform infrastructure providers engaged by cy777 to operate the platform.
• Regulators and law enforcement: Competent regulatory authorities, law enforcement agencies, or courts, where cy777 is required by applicable law to disclose information.
• Gaming licence regulators: The international gaming authority or regulatory body under whose licence cy777 operates, as required for licensing compliance and audit purposes.

cy777 uses cookies and similar tracking technologies on the cy777 platform to enable essential platform functionality, analyse usage patterns, and — where you have consented — deliver personalised content. Cookies are small data files placed on your device by your browser when you visit cy777.asia.

cy777 uses the following categories of cookies: Essential cookies, which are strictly necessary for the platform to function correctly and cannot be disabled; analytical cookies, which help cy777 understand how players interact with the platform in order to improve the user experience; and preference cookies, which remember your language and platform settings between sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent certain features of the cy777 platform from functioning correctly. Non-essential cookies can be disabled without affecting your core access to cy777's gaming services.

cy777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between user devices and cy777's servers.
• Encryption of sensitive data fields at rest within cy777's database infrastructure.
• Role-based access controls limiting employee access to personal data to those with a documented need for such access.
• Two-factor authentication available to all cy777 account holders and enforced internally for cy777's administrative systems.
• Regular independent security audits and penetration testing of the cy777 platform.
• A documented data breach response procedure, including notification obligations to affected players and regulators in the event of a confirmed breach.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. cy777 strongly recommends that all players use strong, unique passwords for their cy777 accounts and enable two-factor authentication.

cy777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any mandatory retention periods imposed by applicable law. Specifically: account data is retained for the duration of the active account relationship and for a minimum of five years following account closure, as required by international anti-money laundering regulations applicable to online gaming operators.

Financial transaction records are retained for a minimum of five years from the date of each transaction. KYC verification documents are retained for the period required by the applicable gaming regulatory framework. Support communications are retained for 24 months unless a longer retention period is required for an ongoing dispute or regulatory inquiry.

At the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised such that it can no longer be associated with an identifiable individual.

As an internationally operating platform, cy777 may process or store personal data in countries outside Pakistan. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that applicable under cy777's governing jurisdiction, cy777 implements appropriate safeguards to ensure that your data remains protected to an adequate standard.

These safeguards may include standard contractual clauses requiring recipient entities to process personal data only in accordance with cy777's data protection standards, or the use of service providers who operate under internationally recognised data protection certification schemes. By using the cy777 platform, you acknowledge that your data may be processed and stored outside Pakistan as described in this section.

As a cy777 account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, contact cy777 at [email protected] with the subject line "Data Rights Request." cy777 will respond within a reasonable timeframe and in no case later than 30 days from the date a valid request is received.

The cy777 platform is strictly intended for persons aged 21 years and above. cy777 does not knowingly collect personal data from any individual under the age of 21. If cy777 becomes aware that personal data has been collected from a minor, that data will be deleted and the associated account will be permanently closed in accordance with cy777's Terms and Conditions.

If you are a parent or guardian and believe that a minor has registered or attempted to register a cy777 account, please contact cy777 support at [email protected] immediately. cy777 will investigate and take appropriate action promptly upon receiving such a report.

cy777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the cy777 platform. Where changes are material — meaning they significantly affect how cy777 uses your personal data or the rights available to you — cy777 will notify registered account holders by email to the address associated with their cy777 account not less than 14 days prior to the amended Policy taking effect.

The current version of this Privacy Policy, including its effective date, will always be available at cy777.asia/privacy-policy. Your continued use of the cy777 platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you object to any amendment, you should close your cy777 account and cease use of the platform before the amendment takes effect.

For any questions, concerns, or requests relating to this Privacy Policy or cy777's handling of your personal data, please contact the cy777 data protection team using the following contact information. cy777 is committed to resolving privacy concerns promptly and transparently.

Email: [email protected] (subject line: "Privacy Policy Query" or "Data Rights Request")

If you are not satisfied with cy777's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority or gaming regulator in the jurisdiction under which cy777 operates. cy777 will cooperate fully with any regulatory investigation arising from a complaint made in good faith.