Privacy Policy — SF777 Platform

1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") describes how SF777 (hereinafter referred to as the "Platform", "we", "us" or "our") collects, uses, stores, shares and protects personal data relating to individuals who access or use the SF777 website at https://sf777.cam (the "Service").

SF777 is an English-language online casino and sports betting information platform primarily targeting users in Pakistan. We take our data protection obligations seriously and are committed to handling all personal data with care, transparency and in accordance with applicable data protection principles.

This Policy applies to all users of the Service, including registered Account Holders, visitors who browse the Platform without creating an account, and individuals who contact us through our support channels. By accessing or using the Service, you acknowledge that you have read and understood this Policy.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, financial information and device identifiers.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. SF777 acts as the Data Controller in respect of data collected through the Service.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller under a formal data processing agreement.
• "Consent" — A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their Personal Data for a specified purpose.
• "KYC Data" — Identity and verification documents provided by a User in the course of the Know Your Customer (KYC) verification process, including CNIC, passport and proof of address documentation.
• "Cookies" — Small data files placed on a User's device by the Platform to support functionality, session management and user experience.
• "User" — Any individual who accesses, registers on or uses the SF777 Service, whether as a registered Account Holder or as an anonymous visitor.

3. Data Controller

SF777 is the Data Controller responsible for Personal Data processed through the Service. For all data protection enquiries, rights requests or complaints, Users may contact the SF777 Data Protection team using the contact details set out in Section 15 of this Policy.

Where SF777 engages third-party Data Processors to carry out specific processing activities on its behalf (such as payment processing, identity verification services or hosting infrastructure), such processors are bound by contractual data processing agreements that restrict their use of Personal Data to the specific purposes authorised by SF777.

4. Data We Collect

SF777 collects Personal Data through several channels. The categories of data collected are described below:

4.1 Registration & Account Data

4.2 KYC & Verification Data

Where identity verification is required, SF777 may collect and process the following KYC Data:

• Government-issued photo identification: CNIC (Computerised National Identity Card), passport or equivalent;
• Proof of residential address (e.g., utility bill or bank statement, typically dated within 90 days);
• Selfie photographs or liveness verification imagery submitted alongside identity documents;
• Proof of payment method ownership where required by the operator's compliance procedures.

4.3 Financial & Transaction Data

SF777 collects data relating to deposits, withdrawals and account transactions for the purposes of account management, AML compliance and fraud prevention. This includes transaction amounts, dates, payment method identifiers and transaction reference numbers. Full card numbers and bank account credentials are handled exclusively by authorised payment processors and are not stored by SF777.

4.4 Technical & Usage Data

4.5 Support & Communications Data

When you contact SF777 support — whether by email or through the in-platform chat system — we retain records of those communications, including the content of messages and any attachments, to enable us to respond to your enquiry and for quality assurance purposes.

5. Purposes of Processing & Legal Basis

SF777 processes Personal Data for the following purposes and on the following legal bases:

SF777 does not use Personal Data for any purpose incompatible with the purposes for which it was originally collected. Where we intend to process data for a new purpose, we will notify affected Users and, where required, seek fresh consent.

6. Data Sharing & Disclosure

SF777 does not sell, rent or trade Personal Data. Data may be shared only in the following circumstances:

6.1 Payment Processors

Transaction data is shared with authorised payment processing partners to facilitate deposits and withdrawals. Pakistani users may encounter references to familiar payment services such as Easypaisa, JazzCash, Raast and bank transfers via institutions including HBL, UBL, Meezan Bank and Bank Alfalah. These references are for contextual familiarity only. SF777 does not share Personal Data with these providers beyond what is strictly necessary for transaction processing, and does not imply any endorsement, affiliation or partnership between these providers and gambling services.

6.2 Identity Verification Services

KYC Data may be shared with third-party identity verification service providers engaged by the operator to carry out document authentication and liveness checks. Such providers act as Data Processors under contractual obligations consistent with this Policy.

6.3 Regulatory & Legal Compliance

SF777 may disclose Personal Data to regulatory authorities, law enforcement agencies or other governmental bodies where required by applicable law, court order or regulatory obligation, including obligations under anti-money laundering and counter-terrorism financing (AML/CTF) legislation.

6.4 Platform Infrastructure Partners

Personal Data may be shared with cloud hosting providers, content delivery networks, security monitoring services and other infrastructure partners who process data on SF777's behalf as Data Processors under data processing agreements restricting their use of the data to the specific purposes authorised by SF777.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of SF777's assets, Personal Data may be transferred as part of that transaction. Users will be notified of any such transfer and given the opportunity to object where required by applicable law.

7. International Data Transfers

SF777 operates through infrastructure that may be located outside Pakistan. Personal Data may therefore be transferred to, stored and processed in countries other than Pakistan. Where such transfers take place, SF777 takes appropriate safeguards to ensure that the Personal Data continues to receive protection consistent with applicable data protection standards, including through the use of contractual data transfer agreements with Data Processors.

Users in Pakistan should be aware that their data may be stored and processed in jurisdictions outside Pakistan. By using the SF777 Service and accepting this Privacy Policy, you consent to such international transfers in accordance with the purposes described herein.

8. Data Retention

SF777 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention obligations. The following general retention principles apply:

• Account Data — Retained for the duration of the account relationship and for a defined period following account closure, as required by AML and other compliance obligations (typically five to seven years);
• KYC Data — Retained for the period required by applicable AML/CTF legislation following the conclusion of the business relationship;
• Transaction Data — Retained in accordance with financial record-keeping requirements under applicable law;
• Support Communications — Retained for a period of two to three years unless a specific legal obligation requires longer retention;
• Technical & Usage Data — Retained in aggregated or anonymised form for platform analytics purposes; identifiable data typically retained for up to twelve months from collection.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual User.

9. Security Measures

SF777 implements a range of technical and organisational security measures to protect Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between Users and the Platform;
• Encrypted storage of sensitive data at rest, including KYC documents and financial records;
• Access controls restricting Platform staff access to Personal Data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring of the Platform infrastructure;
• Two-step verification options for Account Holders to protect against unauthorised account access;
• Secure document handling procedures for KYC materials processed exclusively through the HTTPS verification portal.

10. Cookies & Tracking Technologies

SF777 uses cookies and similar tracking technologies (such as local storage and session storage) to operate the Platform and provide Users with a consistent, functional experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies — Required for basic Platform functionality including session management, login persistence and security token validation. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Preference Cookies — Store User preferences such as language settings, display options and previously selected configurations to personalise the experience on return visits.
• Analytics Cookies — Collect aggregated, anonymised data about how Users navigate the Platform to enable SF777 to identify performance issues and improve the user experience. No individually identifiable data is shared with analytics partners.

SF777 does not deploy third-party advertising cookies or tracking pixels that follow Users across external websites. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality.

11. Minors & Age Restriction

The SF777 Platform is strictly restricted to adults aged 18 or above — or the higher minimum age required by the operator's licence jurisdiction. SF777 does not knowingly collect or process Personal Data from individuals under the applicable minimum age. If we become aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and suspend the associated Account.

If you believe that a minor has registered on the Platform or that their Personal Data has been collected, please contact us immediately at [email protected] so that we can take prompt corrective action.

12. Your Data Rights

Subject to applicable law, Users hold the following rights in relation to their Personal Data processed by SF777. Requests to exercise any of these rights should be submitted to our support team using the contact details in Section 15. We will endeavour to respond to all valid requests within 30 calendar days.

We may require verification of your identity before processing any rights request to prevent unauthorised disclosure. Certain rights may be limited or restricted where legal, regulatory or contractual obligations require that data be retained or processed irrespective of your request.

13. Note for Pakistani Users

SF777 is an English-language information platform primarily targeting users in Pakistan, including users in major cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are committed to providing clear, honest and accessible privacy information to all Pakistani users.

Pakistani data protection law is evolving. The Personal Data Protection Act (PDPA) and related regulatory developments may affect how Personal Data collected from Pakistani residents must be handled. SF777 will monitor developments in Pakistani data protection law and update this Policy accordingly to the extent applicable.

14. Policy Amendments

SF777 reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the effective date shown at the top of this page and, where appropriate, notify registered Account Holders by email or through a prominent notice on the Platform prior to the changes taking effect.

We encourage Users to review this Policy periodically to remain informed about how we protect their Personal Data. Continued use of the Service following the publication of an updated Policy constitutes acceptance of the revised terms.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about how your Personal Data has been handled, please contact the SF777 Data Protection team using the details below. All correspondence should be submitted in English or, upon request, in Urdu.

Please note: do not attach sensitive identity documents to support emails. Any KYC-related submissions must be made exclusively through the secure verification portal within your Account dashboard.