Who this policy applies to: This Privacy Policy applies to all registered players and visitors to the CD777 platform (cd777.online). By registering on CD777 or continuing to use our services, you confirm that you have read and understood this policy. This policy forms part of the CD777 Terms and Conditions.
1. Data Controller
CD777 — operated through cd777.online — is the data controller responsible for the personal information collected from Pakistani players who register and use the platform. As data controller, CD777 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is lawful, fair, and transparent.
If you have any questions about how CD777 handles your personal data, or if you wish to exercise any of your data rights, you can contact our privacy team at any time through the contact details provided in Section 13 of this policy.
2. Personal Data We Collect
CD777 collects personal data in the categories described below. We collect only what is necessary for the purposes outlined in Section 4 of this policy.
| Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Account registration, age verification, KYC |
| Contact Data | Pakistani mobile number, email address | Account communication, OTP verification, support |
| Financial Data | Payment method details (wallet ID, card last four digits, bank details), transaction history | Payment processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type and OS, browser type and version, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Games played, bet history, login frequency, session duration, features used | Service improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, WhatsApp messages | Customer support, dispute resolution, quality monitoring |
| Verification Documents | CNIC scan or photograph, proof of address, payment proof | KYC compliance, withdrawal processing |
CD777 does not collect sensitive personal data such as biometric data, health information, religious or political affiliations, or racial and ethnic origin, unless required by law in specific circumstances.
3. How We Collect Your Data
CD777 collects personal data through the following channels:
3.1 Direct Collection
The majority of data we hold about you is provided directly by you when you register an account on CD777, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to promotions and surveys. You are always aware of these interactions because you initiate them.
3.2 Automated Technical Collection
When you visit the CD777 platform, our systems automatically collect technical data including your IP address, device identifiers, browser details, and session behaviour data. This collection happens through server logs, cookies, and similar tracking technologies as described in Section 9. This data is used primarily for security, fraud prevention, and platform improvement purposes.
3.3 Third-Party Sources
In limited circumstances, CD777 may receive personal data about you from third-party sources to support fraud prevention and identity verification. These sources may include identity verification service providers, payment processors, and financial intelligence systems. Any data received from third-party sources is treated with the same level of security and protection as data collected directly.
4. Why We Use Your Personal Data
CD777 processes your personal data for specific, legitimate purposes. We do not process data for purposes that are incompatible with those stated below:
- Account Registration and Management — creating and maintaining your CD777 account, verifying your identity and age, managing your preferences and account settings
- Payment Processing — processing your deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments; maintaining transaction records
- KYC and Regulatory Compliance — verifying player identity and payment ownership as required by anti-money laundering (AML) obligations and responsible gaming standards
- Fraud Prevention and Security — detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, money laundering, and other security threats
- Customer Support — responding to your queries, resolving complaints, and maintaining records of support interactions
- Responsible Gaming — monitoring gameplay patterns to identify potential problem gambling indicators and to support the effective operation of self-exclusion and limit tools
- Service Improvement — analysing aggregated usage data to improve the CD777 platform, game selection, and payment experience for Pakistani players
- Legal and Regulatory Obligations — complying with applicable legal obligations including record-keeping requirements and responding to lawful authority requests
- Marketing Communications — sending you promotional offers and updates about CD777 services, subject to your communication preferences, which you can update at any time
You can opt out of marketing communications from CD777 at any time by updating your preferences in account settings or by contacting support. Opting out of marketing will not affect your ability to use any CD777 service.
5. Legal Basis for Processing
CD777 processes your personal data on the following legal bases, applied depending on the specific purpose of processing:
- Contractual Necessity — processing that is necessary for the performance of the contract between you and CD777 (i.e., the account registration agreement and Terms and Conditions). This includes account management, payment processing, and customer support.
- Legal Obligation — processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and record-keeping obligations.
- Legitimate Interests — processing for CD777's legitimate business interests, such as fraud prevention, platform security, service improvement, and responsible gaming monitoring, where those interests are not overridden by your fundamental rights.
- Consent — processing based on your freely given, specific, and informed consent, primarily for marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.
6. Sharing Your Personal Data
CD777 does not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary for the stated purpose:
6.1 Service Providers
CD777 shares data with carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include: payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, and card payment networks); identity verification providers; game software providers; customer support platform operators; and IT infrastructure and hosting providers. All service providers are required to maintain the confidentiality and security of your data.
6.2 Regulatory and Law Enforcement Authorities
CD777 may be required to disclose your personal data to relevant regulatory authorities, law enforcement agencies, or courts in response to lawful requests, legal proceedings, or regulatory investigations. Such disclosures are made only to the extent required by applicable law and CD777 will notify you of such disclosures where legally permitted to do so.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of CD777's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to the handling of your data that may result from it, before the transfer takes effect.
CD777 does not transfer personal data of Pakistani players to countries outside the region unless adequate data protection safeguards are in place. Where international transfers occur, appropriate contractual protections are applied.
7. Data Retention Periods
CD777 retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal / AML obligation |
| Financial Transaction Records | 7 years from transaction date | Legal / AML obligation |
| KYC Documents | 5 years from account closure | Legal obligation |
| Support Communications | 3 years from last interaction | Legitimate interest |
| Usage & Gameplay Data | 3 years from collection | Legitimate interest |
| Technical / Log Data | 12 months | Security / legitimate interest |
| Marketing Preferences | Until withdrawal of consent | Consent |
After applicable retention periods expire, personal data is securely deleted from CD777 systems or, where deletion is not immediately practical, it is anonymised so that it can no longer identify any individual player.
8. Security Measures
CD777 takes the security of Pakistani player data seriously and implements a combination of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration:
- 256-bit SSL/TLS encryption on all data transmitted between player devices and CD777 servers
- Encryption at rest for sensitive stored data including financial information and identity documents
- Access controls — only authorised CD777 personnel with a legitimate need can access player personal data, and all access is logged and monitored
- Two-factor authentication available and recommended for all player accounts on CD777
- Regular security audits and penetration testing of CD777 infrastructure by qualified third-party security professionals
- Incident response procedures — CD777 maintains documented procedures for detecting, responding to, and notifying players of data security incidents
- Staff training — all CD777 staff who handle personal data receive regular privacy and security training
In the unlikely event of a data breach that affects player data, CD777 will notify affected players and relevant authorities as required under applicable law, providing clear information about what occurred and what steps are being taken.
9. Cookies and Tracking Technologies
CD777 uses cookies and similar tracking technologies on the platform to enable core functionality, improve performance, and understand how players use the service. Here is a plain explanation of what we use:
9.1 Essential Cookies
These cookies are strictly necessary for CD777 to function. They manage your login session, remember your authentication status, and enable core platform features. You cannot opt out of essential cookies while using the platform, because without them the site will not work correctly. No personal browsing data is collected by essential cookies.
9.2 Performance and Analytics Cookies
CD777 uses performance cookies to understand how players navigate and use the platform. This includes which pages are visited most, how long sessions typically last, and where players encounter errors. Data collected through performance cookies is aggregated and anonymised — it does not identify individual players. This data helps us improve the CD777 experience for Pakistani users.
9.3 Functional Cookies
Functional cookies remember your preferences — such as your preferred game category, last visited section, or notification settings — to provide a more personalised experience on CD777. These cookies improve convenience but are not strictly required for core functionality.
9.4 Managing Cookie Preferences
You can manage non-essential cookie settings through the cookie preference panel accessible from the footer of the CD777 platform. You may also manage cookies through your browser settings. Disabling non-essential cookies may reduce the quality of your CD777 experience but will not prevent you from using the core platform.
10. Your Data Rights
As a CD777 player in Pakistan, you have the following rights in relation to your personal data. These rights can be exercised by contacting us through the channels listed in Section 13. CD777 aims to respond to all data rights requests within 30 days.
You can request a copy of the personal data CD777 holds about you, along with information about how it is being used. This is sometimes called a Subject Access Request.
If any personal data CD777 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic information directly through your account settings.
You can request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to legal retention obligations.
You can object to CD777 processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though CD777 may have compelling grounds to continue in certain circumstances.
In certain circumstances — such as while a rectification request is being verified — you can request that CD777 restrict processing of your data to storage only, without further use.
Where processing is based on consent or contractual necessity, you can request a copy of your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another controller.
To exercise any of these rights, contact the CD777 privacy team at support@cd777.online with the subject line "Data Rights Request" and your registered account details. We will verify your identity before processing the request to protect your data from unauthorised disclosure.
11. Minors and Child Protection
CD777 strictly prohibits the registration and use of its services by anyone under the age of 18. The CD777 platform is not directed at, designed for, or marketed to minors. CD777 does not knowingly collect personal data from anyone under 18 years of age.
If CD777 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe a minor in your care has registered on CD777, please contact us immediately at support@cd777.online so that we can take immediate corrective action. We take this responsibility extremely seriously and will always respond to such reports as a matter of urgent priority.
12. Changes to This Privacy Policy
CD777 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, new services, legal obligations, or regulatory guidance. Material changes — those that significantly affect how your data is used or your rights in relation to it — will be communicated to you by on-screen notification at login or by email to your registered address, with at least 14 days' notice before the changes take effect.
Non-material changes such as typographical corrections, clarifications of existing language, or the addition of examples that do not change the substance of the policy may be made without specific notice. The date at the top of this page always reflects when the policy was last updated. We encourage you to review this policy periodically to stay informed about how CD777 is protecting your information.
13. Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the way CD777 handles your personal data, please reach out through any of the following channels. Our privacy team is committed to responding to all inquiries in a timely and helpful manner.
- Email — support@cd777.online (mark your email "Privacy Query" for fastest routing; responses within 24 hours)
- Live Chat — available 24/7 directly on the CD777 platform; ask to be connected to the privacy team for data-related queries
- WhatsApp Support — contact details available within your CD777 account settings after login
Please note that for security and verification purposes, CD777 may need to confirm your identity before processing certain data rights requests, particularly Subject Access Requests and deletion requests. This step is in place to protect you — not to create barriers.
Related policies: Terms and Conditions | Responsible Gaming | FAQ