CS777 Privacy Policy — Your Data, Your Rights, Our Responsibility

CS777 processes all financial transactions in Pakistani Rupees (PKR) through a secure payment gateway that is isolated from the main platform. Financial data — including your Easypaisa or JazzCash account number, bank account details and card numbers — is never stored on CS777's main application servers. Card transactions use tokenisation, meaning that the actual card number is replaced with a unique token for all subsequent processing — CS777 never has access to your full card number after the initial transaction.

All communication between your device and CS777's payment systems is encrypted using TLS 1.3, the current industry standard for financial data in transit. CS777 uses PCI DSS compliant processes for all card payment handling — meaning your card data is processed under the same standards used by Pakistan's major banks.

Every transaction at CS777 generates a unique reference number that is available in your account transaction history. If you believe a payment has been processed incorrectly, this reference number is what CS777's support team will use to investigate and resolve the issue. Transaction records at CS777 are retained for a minimum of five years as required by applicable financial regulations.

CS777 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit the platform. CS777 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including your login session, security tokens and language preferences. You cannot opt out of these without stopping use of the platform.
• Functional Cookies: These remember your preferences — such as your preferred table stake level or your last-used payment method — to make your CS777 experience more convenient.
• Analytics Cookies: CS777 uses anonymised analytics to understand how Pakistani players use the platform — which pages are visited most, which games are most popular, and where navigation could be improved. No personally identifiable information is associated with analytics data.
• Marketing Cookies (opt-in): If you have opted in to marketing communications, CS777 may use cookies to personalise the promotions and offers you see on the platform.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling functional cookies may affect some personalisation features on the CS777 platform.

CS777 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by law. The following retention periods apply:

• Account Registration Data: Retained for the duration of your account plus five years following permanent account closure — required for anti-money-laundering compliance.
• Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• KYC Documents: CNIC copies and other identity verification documents are retained for five years following account closure or the last transaction, whichever is later.
• Gaming Activity Data: Retained for the duration of your account plus three years. This data may be used for responsible gaming monitoring purposes during the retention period.
• Support Communications: Live chat and email records are retained for three years from the date of the communication.
• Marketing Preferences: Consent records for marketing are retained for as long as you remain an active CS777 member, plus one year.

When data reaches the end of its retention period, it is deleted or permanently anonymised so that it can no longer be associated with any individual player.

As a CS777 member, you have the right to access, correct, restrict, object to and request deletion of your personal data. These rights are summarised in the table above and are described in more detail here:

Access Request: You can request a complete copy of all personal data CS777 holds about you. Send your request to support@cs777.im with the subject line "Data Access Request" and include your registered mobile number. CS777 will verify your identity before responding and will provide the data within thirty days of verification.

Correction Request: If you believe any data CS777 holds about you is inaccurate, contact support@cs777.im or update your account details directly in account settings where available. Name corrections typically require CNIC verification.

Deletion Request: You have the right to request that CS777 delete your personal data. Note that CS777 may be unable to fulfil a deletion request where the data is required for legal or regulatory compliance purposes — in which case CS777 will explain specifically what data must be retained and why.

Opting Out of Marketing: You can unsubscribe from CS777 marketing emails and SMS notifications at any time through your account settings under "Communication Preferences". Opt-out requests are processed immediately.

CS777 has implemented a comprehensive security framework to protect the personal data of its Pakistani players. Key elements of this framework include:

• Encryption: All data in transit is protected by TLS 1.3. All data at rest on CS777 servers is encrypted using AES-256 — the standard used by financial institutions globally.
• Access Controls: Access to personal data within CS777's systems is strictly role-based — only staff whose job functions specifically require access to personal data are granted it, and all access is logged and audited.
• Two-Factor Authentication: CS777's internal systems require two-factor authentication for all staff accessing player data systems. CS777 also offers and encourages two-factor authentication for member accounts.
• Regular Security Audits: CS777 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the platform's infrastructure.
• DDoS Protection & Firewalls: The CS777 platform is protected by enterprise-grade DDoS mitigation and web application firewalls that filter malicious traffic before it reaches player data systems.
• Breach Response Plan: CS777 maintains a documented data breach response plan. In the event of a breach affecting player data, CS777 will notify affected members directly and promptly, and will take immediate steps to contain and remediate the breach.

CS777 is a platform intended solely for adults aged eighteen years and above. CS777 does not knowingly collect personal data from individuals under the age of eighteen, and does not permit minors to register accounts or participate in any gaming activity on the platform.

CS777 employs multiple age verification mechanisms to prevent underage access — including date of birth verification at registration, CNIC-based identity checks for withdrawals, and fraud monitoring patterns that flag accounts whose activity is inconsistent with an adult user profile.

If CS777 becomes aware that it has inadvertently collected personal data from a minor, the account will be immediately closed, all data associated with the account will be deleted, and any deposits will be returned to the originating payment method. Parents or guardians who believe that a minor has registered with CS777 should contact support@cs777.im immediately.

CS777 may update this Privacy Policy from time to time to reflect changes in the platform's data practices, applicable law or the services CS777 provides. When changes are made, the updated Policy will be published on this page with a revised effective date.

For material changes — those that significantly affect how your personal data is used — CS777 will notify you directly via the mobile number or email address associated with your account at least seven days before the changes take effect. This gives you the opportunity to review the changes and, if you do not agree, to request account closure and data deletion before they apply.

Your continued use of the CS777 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. CS777 recommends reviewing this Policy periodically so you are always aware of how your data is being handled.

CS777 has a dedicated privacy contact point for all data-related queries. If you have any question about how your personal data is used, want to exercise any of your data rights, or want to raise a concern about CS777's privacy practices, you can reach the privacy team in the following ways:

• Email: support@cs777.im — mark your email "Privacy Query" or "Data Request" in the subject line for fastest routing to the privacy team.
• Live Chat: CS777's 24/7 live chat support team can handle most data queries in real time or escalate to the privacy team when required.

CS777 aims to respond to all data-related queries within 48 hours and to complete all formal data requests within 30 days. If CS777 cannot complete a request within that timeframe, you will be notified before the deadline expires with an explanation and a revised completion date.

If you are not satisfied with CS777's response to a privacy concern, you have the right to raise the matter with the relevant data protection authority in your jurisdiction. CS777 will cooperate fully with any regulatory inquiry into its data practices.