Privacy Policy — by777

1 Introduction

This Privacy Policy ("Policy") is issued by by777 (the "Company", "we", "us" or "our") and applies to all personal data collected through the by777 platform available at https://by777.cam (the "Platform"), including through account registration, payment processing, customer support interactions and general browsing.

by777 is committed to the responsible handling of personal data. This Policy explains what data we collect, why we collect it, how we use and protect it, how long we keep it, and what rights you hold in relation to your data.

By registering an account on or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not accept this Policy, you must not use the Platform.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly — including name, email address, date of birth, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" means by777, which determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means a third party engaged by by777 to process Personal Data on its behalf under appropriate contractual safeguards.
• "KYC Data" means identity and address verification documents provided by a User during the Know Your Customer verification process.
• "User" means any individual who accesses, registers on or uses the Platform.
• "Cookies" means small text files placed on a User's device by the Platform to facilitate functionality and analytical purposes.

3 Data We Collect

by777 collects Personal Data through several channels. The categories of data collected are set out below.

3.1 Registration Data

• Full legal name, date of birth and gender (where required).
• Email address and, where provided, a mobile telephone number.
• Residential address, including city and country.
• Username and encrypted account credentials.

3.2 KYC Verification Data

• Government-issued photo identification (national identity card, passport or driving licence).
• Proof of address documents (utility bill, bank statement dated within three months).
• Proof of payment method ownership (where applicable — e.g., a screenshot of a registered Easypaisa or JazzCash account showing the account holder's name). Such references are for verification purposes only; payment providers do not endorse or affiliate with by777.
• Source of funds documentation, where required by applicable anti-money-laundering (AML) obligations.

3.3 Transactional Data

• Deposit and withdrawal amounts, dates and methods.
• Wager history, game activity records and account balance movements.
• Transaction reference numbers and payment method identifiers (e.g., masked card numbers or wallet account references).

3.4 Technical & Usage Data

• IP address, device type, operating system and browser version.
• Session start and end times, pages viewed and features accessed within the Platform.
• Login history and authentication events.
• Cookie and session data as described in Section 7.

3.5 Communications Data

• Content of support enquiries submitted via live chat or email, including attachments.
• Records of complaint submissions and dispute resolutions.
• Marketing consent preferences and communication opt-out requests.

4 Data Processing & Legal Basis

by777 processes Personal Data only where a valid legal basis exists. The table below summarises the primary legal bases relied upon:

5 How We Use Your Data

by777 uses the Personal Data it collects for the following purposes:

• Account Management: Creating, maintaining and securing your account, including processing login authentication and account recovery requests.
• Payment Processing: Facilitating deposits and withdrawals, reconciling transactions and preventing fraudulent payment activity.
• KYC & AML Compliance: Verifying your identity, confirming your age eligibility and meeting anti-money-laundering regulatory obligations.
• Responsible Gambling: Monitoring account activity for indicators of problem gambling behaviour, enforcing self-exclusion requests and maintaining cooling-off and limit controls.
• Customer Support: Responding to enquiries, resolving disputes and maintaining records of account-related communications.
• Platform Improvement: Analysing usage patterns (using aggregated, de-identified data where possible) to improve platform performance, navigation and feature set.
• Marketing (consent-based): Sending promotional communications, bonus offers and product updates where you have opted in to receive them. You may opt out at any time.
• Legal & Regulatory Compliance: Fulfilling obligations under applicable law, responding to lawful requests from competent authorities and maintaining required business records.

6 Data Sharing & Disclosure

by777 does not sell, rent or trade Personal Data to third parties. We may share data in the following limited circumstances:

6.1 Service Providers (Data Processors)

by777 engages third-party service providers who process data on our behalf under appropriate contractual data-processing agreements. These include payment gateway operators, identity verification providers, cloud hosting services and customer support platforms. Such providers are contractually restricted from using your data for any purpose beyond the contracted service.

6.2 Legal & Regulatory Authorities

by777 will disclose Personal Data to competent law enforcement agencies, regulatory bodies or courts where required by applicable law, a valid legal process or in connection with the prevention, detection or prosecution of fraud or other criminal activity.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of by777's business assets, Personal Data held by the Company may be transferred to the acquiring entity. Users will be notified of such a transfer and of any change to the applicable privacy policy in advance.

6.4 Responsible Gambling Partners

Where a User activates self-exclusion or where by777 is required to report problem gambling activity to a recognised responsible gambling body under applicable licensing obligations, limited data may be shared with such bodies for that purpose only.

7 Cookies & Tracking Technologies

by777 uses cookies and similar technologies to operate the Platform, maintain session integrity and improve user experience. The categories of cookies in use are described below:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing certain Platform features. by777 does not deploy advertising cookies or cross-site tracking technologies for marketing profiling purposes.

8 Data Retention

by777 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in line with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of the most recent transaction, or longer where required by applicable regulation.
• Transaction Records: Retained for a minimum of five years from the transaction date for AML and financial record-keeping purposes.
• Support Communications: Retained for up to three years following the resolution of the relevant enquiry or dispute.
• Marketing Consent Records: Retained until withdrawn by the User, plus a reasonable period thereafter to evidence compliance.
• Technical / Log Data: Generally retained for up to 12 months, unless longer retention is required for security investigations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical purposes.

9 Data Security

by777 implements technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction or alteration. These measures include:

• HTTPS/TLS encryption for all data in transit between User devices and by777 servers.
• Encryption of sensitive data at rest, including account credentials and KYC documents.
• Role-based access controls ensuring that Personal Data is accessible only to authorised personnel who require it to perform their duties.
• Regular security assessments and monitoring of Platform infrastructure.
• Two-step verification available to Users to secure their individual accounts.

No data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to Users' rights and freedoms, by777 will notify affected Users and relevant authorities as required by applicable law.

10 User Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data by777 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention obligations.
• Right to Restrict Processing: You may request that by777 restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract, you may request a structured, machine-readable copy of the data you have provided to by777.
• Right to Object: You may object to processing based on legitimate interests. You have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact by777's support team. We will respond within 30 days of receiving a verifiable request. We may require you to verify your identity before processing a rights request.

11 Minors

The by777 Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the applicable jurisdiction. by777 does not knowingly collect Personal Data from individuals under the required minimum age.

If by777 discovers or is notified that it has collected Personal Data from a minor, the relevant account will be suspended immediately, all associated funds will be returned (net of any applicable deductions), and the Personal Data will be deleted as soon as practicable in accordance with applicable law.

If you believe that by777 has inadvertently collected data from a minor, please contact support immediately.

12 International Data Transfers

by777 may transfer Personal Data to countries outside your country of residence in connection with the operation of the Platform, including to countries where by777's servers, Data Processors or support teams are located. Such transfers may include countries that do not have the same data protection standards as your home jurisdiction.

Where such transfers occur, by777 will implement appropriate safeguards to protect your Personal Data, which may include standard contractual clauses, data processing agreements or equivalent protective mechanisms recognised under applicable law.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data on this basis.

13 Pakistan User Notice

14 Policy Amendments

by777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in Platform operations, applicable law or data protection best practices. When material changes are made, the effective date at the top of this page will be updated, and Users will be notified via email or an in-platform notification where required.

Your continued use of the Platform following the publication of an amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have concerns about how by777 handles your Personal Data, please contact our support team through the following channels:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 via the Help Centre on the Platform.
• Help Centre: Searchable knowledge base accessible after login, covering privacy, account and payment topics.

Data rights requests will be acknowledged within 5 business days and resolved within 30 days. Where additional time is required due to complexity, we will inform you and provide a revised expected completion date.