End-to-End Encryption
All data transmitted between your device and dd777 is protected with industry-standard TLS encryption. Your personal and financial details never travel in plain text.
KYC Data Handled Securely
Identity documents submitted for KYC verification on dd777 are stored in encrypted form and accessed only by authorised compliance personnel on a strict need-to-know basis.
No Unauthorised Selling
dd777 never sells your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve the dd777 platform for Pakistani players.
You Are in Control
dd777 players can request access to, correction of, or deletion of their personal data at any time. Your data rights are real and we honour them without unnecessary delay.
Payment Data Isolated
JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 transaction records are held in isolated, access-controlled data stores separate from general account data.
Licensing-Grade Compliance
As an internationally licensed gaming operator, dd777 meets the data protection standards mandated by its licensing authority, including mandatory KYC and AML data handling requirements.
Table of Contents
1 Introduction
This Privacy Policy ("Policy") describes how dd777 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the dd777 online gaming platform at dd777.bio. This Policy applies to all services offered on dd777, including cricket betting, slot games, live casino, Lucky Dice, the dd777 Loyalty Program, and all associated account management and customer support services.
dd777 is committed to handling your personal data responsibly, transparently, and in full compliance with the data protection obligations imposed by our international gaming licence. By registering a dd777 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the dd777 Terms and Conditions and the dd777 Responsible Gaming Policy, both of which are incorporated by reference. If there is any conflict between those documents and this Policy on matters relating specifically to personal data, this Policy shall prevail.
2 Data We Collect
dd777 collects personal data that is necessary for the provision of our gaming services, the fulfilment of our legal and regulatory obligations, and the improvement of player experience on the Platform. We collect the following categories of personal data:
2.1 Identity Data
- Full legal name as it appears on your CNIC, passport, or other government-issued identification document
- Date of birth (used to verify that you meet the 21+ age requirement)
- National Identity Card (CNIC) number or passport number, submitted during KYC verification
- Scanned or photographed copies of identity documents provided for KYC purposes
- Photographs or selfies submitted for identity verification, where requested
2.2 Contact Data
- Email address registered to your dd777 account
- Pakistani mobile number associated with your account
- Residential city and province (e.g., Karachi, Lahore, Islamabad)
2.3 Financial Data
- JazzCash or EasyPaisa mobile wallet numbers used for deposits or withdrawals
- HBL, UBL, Meezan Bank, or SadaPay account details used for bank transfers
- USDT TRC20 wallet addresses used for cryptocurrency transactions
- Transaction history including deposit amounts, withdrawal amounts, and timestamps
- PKR amounts associated with gaming activity and account balances
2.4 Technical Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser information
- Unique device identifiers used for fraud detection and security purposes
- Session data including login timestamps and session durations
2.5 Gaming Activity Data
- Betting history including markets wagered on, stakes placed, and outcomes
- Game session records for slots, live casino, Lucky Dice, and other game categories
- Loyalty Program points accrued and redeemed, and tier progression history
- Responsible gaming tool usage, including deposit limits and self-exclusion records
2.6 Communications Data
- Records of communications between you and dd777 customer support
- Feedback, complaints, or dispute submissions made through the Platform
- Marketing communication preferences (opt-in and opt-out records)
3 How We Collect Your Data
3.1 Directly From You
The majority of personal data held by dd777 is provided directly by you in the course of your interaction with the Platform. This includes data provided at the time of account registration, during KYC verification, when making deposits or withdrawals, when contacting customer support, and when using responsible gaming tools such as deposit limits or self-exclusion requests.
3.2 Automatically Through Platform Use
dd777's systems automatically collect certain technical data when you access the Platform. This includes your IP address, device type, browser fingerprint, session timestamps, and navigation patterns within the Platform. This data is collected through standard web server logs, analytics tools, and security systems operated by dd777.
3.3 Through Cookies and Similar Technologies
dd777 uses cookies and similar tracking technologies to enhance the functionality of the Platform, to maintain your session state, and to analyse usage patterns. Full details of the cookies used by dd777 are set out in Section 9 of this Policy.
3.4 From Third-Party Payment Processors
When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, dd777 receives transaction confirmation data from those payment service providers. This data is limited to what is necessary to verify, credit, or debit your dd777 wallet and to maintain accurate financial records in compliance with our licensing obligations.
3.5 From Identity Verification Services
dd777 may use third-party identity verification service providers to assist in the processing of KYC documents. Such providers operate under data processing agreements with dd777 and are contractually prohibited from using your data for any purpose other than identity verification on dd777's behalf.
4 How We Use Your Data
dd777 uses the personal data collected from Pakistani players for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity data, contact data |
| KYC and age verification | Identity data, contact data |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing and improving gaming services | Gaming activity data, technical data |
| Fraud prevention and security monitoring | Technical data, financial data, identity data |
| Responsible gaming tools and compliance | Gaming activity data, communications data |
| Customer support and dispute resolution | Communications data, gaming activity data |
| Marketing communications (where consented) | Contact data, gaming activity data |
| Regulatory reporting and AML compliance | Identity data, financial data |
| Loyalty Program administration | Gaming activity data, identity data |
4.1 Marketing Communications
dd777 will only send you promotional communications — including bonus offers, PSL betting promotions, new game announcements, and Loyalty Program updates — where you have provided explicit consent to receive such communications. You may withdraw your marketing consent at any time by updating your communication preferences within your account settings or by contacting dd777 customer support.
4.2 Automated Decision-Making
dd777 may use automated systems to make certain decisions that affect your account, including automated fraud detection, responsible gaming trigger alerts, and duplicate account identification. Where an automated decision has a material effect on your account (for example, a temporary suspension triggered by an automated fraud flag), you have the right to request human review of that decision by contacting dd777 support.
5 Legal Basis for Processing
dd777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you under the dd777 Terms and Conditions — including account registration, payment processing, and the provision of gaming services.
- Legal Obligation: Processing required to comply with our legal and regulatory obligations under our gaming licence, including KYC verification, AML monitoring, and regulatory reporting to our licensing authority.
- Legitimate Interests: Processing carried out in pursuit of dd777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform analytics, where those interests are not overridden by your fundamental privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent that can be withdrawn at any time without affecting the provision of core gaming services.
6 Data Sharing & Disclosure
dd777 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.
6.1 Service Providers
dd777 engages third-party service providers to assist in the operation of the Platform. These providers may include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20 processors), identity verification services, IT infrastructure providers, customer support platform operators, and analytics providers. All such providers operate under data processing agreements with dd777 and are contractually restricted to processing your data only for the purposes specified by dd777.
6.2 Game Software Providers
dd777's slot games, live casino tables, and other game categories are powered by third-party game software providers. These providers may receive limited game session data — such as stake amounts and game outcomes — as part of the technical operation of their software. They do not receive your full identity data unless required for the operation of a specific service (e.g., a progressive jackpot validation process).
6.3 Regulatory and Legal Disclosure
dd777 may disclose your personal data to our licensing authority, to law enforcement agencies, or to other regulatory bodies where we are legally obligated to do so. This includes disclosures required under anti-money laundering regulations, counter-terrorism financing rules, and any court order or equivalent legal process with jurisdiction over dd777's operations.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of all or a material part of dd777's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your dd777 account prior to the transfer taking effect, and you will be given the opportunity to close your account if you do not consent to the transfer of your data.
7 Data Retention
dd777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account and identity data | Duration of account plus 5 years post-closure | Licensing obligation and AML compliance |
| KYC documents | Duration of account plus 5 years post-closure | Regulatory requirement |
| Financial transaction records | Duration of account plus 7 years post-closure | AML and financial record-keeping obligations |
| Gaming activity logs | Duration of account plus 3 years post-closure | Dispute resolution and responsible gaming audit |
| Customer support communications | 3 years from last communication | Dispute resolution and service improvement |
| Marketing consent records | Until consent withdrawn plus 3 years | Proof of consent for compliance |
| Technical and session logs | 13 months from collection | Security monitoring and fraud detection |
Upon expiry of the applicable retention period, dd777 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.
8 Data Security
dd777 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS Encryption in Transit: All data transmitted between your browser or app and dd777's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This prevents interception of your data during transmission.
- Encryption at Rest: Sensitive personal data stored in dd777's databases — including identity documents, financial account references, and password hashes — is encrypted at rest using AES-256 or equivalent cryptographic standards.
- Access Controls: dd777 operates a strict role-based access control system. Only authorised personnel with a documented operational need may access personal data, and all access is logged and periodically audited.
- Two-Factor Authentication: dd777 strongly encourages all players to enable two-factor authentication on their accounts. Internal dd777 systems handling personal data require mandatory multi-factor authentication for all administrative access.
- Penetration Testing: dd777's platform undergoes regular independent security assessments, including penetration testing by qualified third-party security professionals, to identify and remediate vulnerabilities before they can be exploited.
- Data Breach Response: dd777 maintains an internal incident response plan that provides for prompt detection, containment, and notification of personal data breaches. Where a breach poses a risk to affected players, dd777 will notify impacted players without undue delay.
9 Cookies & Tracking Technologies
dd777 uses cookies — small text files stored on your device — and similar tracking technologies to enable certain features of the Platform, to maintain your login session, and to collect aggregate analytics data. The cookies used by dd777 fall into the following categories:
9.1 Strictly Necessary Cookies
These cookies are essential for the operation of the dd777 Platform. They include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery attacks, and cookies that remember your language and currency preferences. These cookies cannot be disabled without severely impairing your ability to use the Platform.
9.2 Functional Cookies
Functional cookies enable dd777 to remember your preferences and customisation choices across sessions. For example, your preferred game lobby view, notification settings, and responsible gaming tool configurations are stored using functional cookies. These cookies improve your experience on the Platform but are not strictly necessary for its core operation.
9.3 Analytics Cookies
dd777 uses analytics cookies to collect aggregate, anonymised data about how players interact with the Platform. This data helps us understand which features are most used, where players encounter difficulties, and how the Platform can be improved. Analytics data is processed in aggregate and is not used to identify individual players.
9.4 Managing Your Cookie Preferences
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use dd777. Disabling functional or analytics cookies will not prevent you from accessing the Platform but may affect the quality of your experience. dd777's cookie consent manager, accessible on your first visit to the Platform, allows you to make granular choices about non-essential cookie categories.
10 Your Privacy Rights
As a dd777 player, you have the following rights with respect to your personal data. These rights are provided in accordance with the data protection standards applicable under dd777's licensing framework:
- Right of Access: You have the right to request a copy of all personal data that dd777 holds about you. We will respond to verified access requests within 30 days of receipt.
- Right to Rectification: If any personal data held by dd777 about you is inaccurate or incomplete, you have the right to request that we correct or complete that data. You can update most account information directly within your dd777 account settings.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that this right is subject to our legal and regulatory data retention obligations, meaning we may be required to retain certain data (particularly KYC and financial records) for prescribed periods even after your account is closed.
- Right to Restrict Processing: You have the right to request that dd777 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
- Right to Data Portability: Where dd777 processes your data by automated means on the basis of your consent or on the basis of contractual necessity, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to dd777's processing of your personal data where that processing is carried out on the basis of legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
- Right to Withdraw Consent: Where dd777 processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
11 Minors & Age Restriction
dd777 is strictly an adult gaming platform. Access to and use of dd777 is prohibited for any individual under the age of 21. dd777 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.
dd777 uses age verification measures during the registration process, including mandatory disclosure of date of birth and KYC document verification, to prevent underage access. Where dd777 becomes aware that personal data has been collected from an individual under 21, we will delete that data immediately and close the relevant account. Any deposits made by an underage player will be returned and any winnings will be forfeited.
Parents and guardians who are concerned about a minor's access to online gaming platforms are encouraged to use parental control software and to keep gaming device passwords secure. dd777 supports all responsible gaming tools available within the Platform and encourages adults in Pakistani households to discuss responsible gaming habits with younger family members.
12 Changes to This Privacy Policy
dd777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or changes in the services offered on the Platform. The "Last Updated" date at the top of this Policy will be revised each time a material change is made.
Where changes to this Policy are material — meaning they could meaningfully affect your privacy rights or the way your data is processed — dd777 will notify you via the email address registered to your account and/or by displaying a prominent notification on the Platform prior to the changes taking effect. Your continued use of dd777 following the effective date of any revised Policy constitutes your acceptance of the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how dd777 protects your personal data. If you have any concerns about a change to this Policy, you are welcome to contact our support team using the details provided in Section 13 below.
13 Contact & Data Requests
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about the way dd777 handles your personal data, please contact our support team. dd777's customer support team is available 24 hours a day, seven days a week via the live chat function within the Platform.
For formal written data requests — including subject access requests, erasure requests, and objections to processing — please contact dd777 using the email address listed in the footer of this page. Please include your full name, your registered dd777 username, and a clear description of your request. We may ask you to verify your identity before processing any data rights request.
dd777 will acknowledge all written data requests within 5 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you promptly of the extension and the reason for it.