he777 Privacy Policy

Introduction

he777 ("we", "us", "our") operates an online gaming platform accessible at he777.im, offering sports betting, cricket wagering, live casino, and slot gaming services to registered players in Pakistan. In the course of providing these services, he777 necessarily collects and processes certain personal information about you.

This Privacy Policy sets out in clear, honest terms exactly what personal data we collect, the purposes for which we use it, how long we keep it, the circumstances in which we may share it with others, and the rights you hold as a data subject. We are committed to handling your information responsibly and in accordance with applicable data protection principles.

This Policy applies to all personal data collected through the he777 website, mobile application, customer support channels, and any other touchpoints through which you interact with the he777 platform. It does not apply to third-party websites or services that may be linked to or from the he777 platform.

Data Controller

he777 acts as the data controller in respect of all personal data collected from registered players and website visitors. As data controller, he777 determines the purposes and means by which your personal data is processed.

All data-related enquiries, access requests, and complaints should be directed to the he777 support team. Contact details are provided in Section 15 of this Policy. he777 aims to respond to all data-related requests within 30 calendar days of receipt.

Personal Data We Collect

he777 collects the following categories of personal data from players and website visitors. We collect only what is necessary for the purposes described in this Policy:

he777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where relevant to a responsible gaming assessment conducted at your explicit request.

How We Collect Your Data

he777 collects your personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotional communications.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar technologies whenever you access the he777 website or mobile application.
• Third-party payment processors: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when processing your transactions. he777 receives only the data necessary to verify and record the transaction — full card or account credentials are handled directly by the payment processor.
• Identity verification providers: In some cases, he777 may use a third-party identity verification service to cross-reference CNIC details against authoritative databases. Only the verification outcome (pass/fail) and reason codes are stored by he777; raw database queries are not retained.
• Fraud prevention services: Technical signals such as IP address reputation, device fingerprint flags, and behavioural risk scores received from fraud prevention partners during account registration and login.

How We Use Your Personal Data

he777 uses your personal data for the following purposes. We use only the minimum data necessary for each purpose:

• Account creation and management: To register your he777 account, verify your identity, and maintain your player profile throughout your time on the platform.
• Service delivery: To allow you to place bets on cricket, PSL, and other sports markets; access live casino games and slots; and use all features of the he777 platform.
• Payment processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to process withdrawal requests to your verified payment method.
• KYC and regulatory compliance: To verify your age (21+) and identity, satisfy anti-money laundering obligations, and meet any reporting requirements under applicable law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other illegal or prohibited conduct on the platform.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to implement deposit limits and self-exclusion instructions you have given us, and to provide relevant support resources.
• Customer support: To respond to your queries, complaints, and account-related requests promptly and accurately.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, reliability, and content of the he777 platform.
• Marketing communications: To send you information about he777 promotions, bonuses, and new features — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time by contacting support.

Legal Basis for Processing

he777 processes your personal data on the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform our obligations under the player agreement — including account management, bet processing, payment handling, and providing customer support.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and any law enforcement or regulatory disclosure requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where we rely on your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

he777 does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers who assist in verifying CNIC details and age. These providers are bound by strict data processing agreements and may not use your data for any purpose other than the verification service.
• Fraud prevention partners: Service providers who assist in detecting and preventing fraudulent activity on the platform. Data shared is limited to technical signals and does not include your full identity documentation.
• Game software providers: Some casino and slot game providers may receive anonymised or pseudonymised player session data for the purpose of game performance monitoring and RNG auditing. No directly identifiable personal data is shared with game providers.
• Legal and regulatory authorities: Where required by applicable law, court order, or instruction from a law enforcement or regulatory authority, he777 may be required to disclose personal data. he777 will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of he777's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity honouring commitments consistent with this Privacy Policy.

All third parties with whom he777 shares personal data are subject to contractual obligations requiring them to implement appropriate technical and organisational security measures and to process your data only for the specified purpose.

International Data Transfers

The he777 platform serves players based in Pakistan. Some of our third-party service providers — including payment processors, fraud prevention services, and hosting infrastructure providers — may be located outside Pakistan. Where your personal data is transferred to a jurisdiction that may not provide the same level of data protection as Pakistan, he777 takes steps to ensure that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to protect your data to a standard consistent with this Policy.

If you have concerns about international data transfers relating to your personal data, please contact us at the address provided in Section 15.

Data Retention

he777 retains your personal data for as long as your account is active and for a reasonable period thereafter, in order to fulfil the purposes described in this Policy, comply with legal obligations, and resolve any disputes or enforce our agreements.

• Active account data: Retained for the duration of your account registration and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the interaction, or longer if the communication relates to a formal dispute.
• Technical and usage data: Typically retained in identifiable form for up to 13 months, after which it is aggregated and anonymised for platform analytics purposes.
• Marketing consent records: Retained for the duration of your marketing consent and for one year following withdrawal, to demonstrate compliance.

When personal data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Security Measures

he777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols on all network communications.
• Encryption of sensitive data at rest, including identity documents and payment references.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Audit logging of all access to sensitive data categories, including KYC documents and financial records.
• Regular security assessments and penetration testing of the he777 platform infrastructure.
• Multi-factor authentication requirements for internal staff systems that handle personal data.
• Formal data breach response procedures, including notification protocols for affected players where required.

While he777 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your own account login credentials. If you suspect your account has been compromised, contact he777 support immediately.

Your Data Subject Rights

As a registered player and data subject, you have the following rights in relation to your personal data held by he777. To exercise any of these rights, please contact us using the details in Section 15. We will respond within 30 calendar days of receiving your request.

• Right of Access: You may request a copy of the personal data he777 holds about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your he777 account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to limitations where we are required by law to retain certain data — for example, KYC records and transaction histories under AML regulations.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including for marketing purposes. Where you object to marketing communications, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Cookies & Tracking Technologies

The he777 website uses cookies and similar technologies to operate the platform correctly and to improve your experience. A cookie is a small text file stored on your device by your browser when you visit a website. he777 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your language preference. The platform cannot operate without these cookies, and they cannot be disabled.
• Functional cookies: Used to remember your preferences — such as your display settings and responsible gaming limit configurations — across sessions. These improve your experience but are not essential to basic platform operation.
• Analytics cookies: Used to collect anonymised, aggregated information about how players use the he777 platform, such as which pages are visited most frequently and where users exit the site. This data is used solely to improve the platform and is not linked to individual player identities.

he777 does not use third-party behavioural advertising cookies or cross-site tracking technologies. You can manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the he777 platform.

Minors & Age Restriction

he777 requires all new players to provide their CNIC number and date of birth during registration, and to undergo CNIC-based age verification before withdrawal privileges are activated. If he777 discovers or reasonably suspects that personal data has been submitted by a person under the age of 21, the relevant account will be immediately suspended and all personal data associated with that account will be securely deleted, subject to any mandatory legal retention obligations.

If you are a parent or guardian and believe that a minor has registered an account on the he777 platform using false information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Changes to This Privacy Policy

he777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material — meaning they significantly affect your rights or how we use your data — he777 will notify registered players by email or through an in-platform notification at least 7 days before the changes take effect.

Minor or administrative changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact information — will take effect immediately upon publication on the he777 website. The "Last Updated" date at the top of this document will always reflect the most recent revision.

Your continued use of the he777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the platform and request account closure.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how he777 handles your personal data, please get in touch with our support team:

When contacting us regarding a privacy matter, please include your registered he777 username and a clear description of your request or concern. Do not include your full CNIC number in the initial email — our team will request the minimum identification details needed to verify your identity securely.

For further information about your rights regarding online privacy and data protection in Pakistan, you may refer to the guidelines published by the Pakistan Telecommunication Authority (PTA).