was777 Privacy Policy

This Privacy Policy ("Policy") describes how was777 ("was777", "We", "Us", "Our") collects, processes, stores, uses, and protects personal data relating to individuals ("You", "User", "Player") who access or use the was777 online gaming platform available at was777.app.

was777 is committed to handling personal data responsibly, transparently, and in accordance with the data protection requirements imposed by its international gaming licensing authority. This Policy has been written to be as clear and straightforward as possible, so Pakistani players understand exactly how their information is handled when they use the was777 platform.

By registering a was777 account, accessing the platform, or using any was777 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not register an account or use the was777 platform.

was777 acts as the data controller for personal data collected through the was777 platform. As data controller, was777 determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable data protection obligations under its gaming licence.

Where was777 engages third-party service providers to process data on its behalf (such as payment processors or identity verification providers), those parties act as data processors under contractual terms that require them to process data only on was777's instructions and to maintain appropriate security standards. was777 remains responsible for such processing.

When you register a was777 account or interact with the platform, you provide us with personal data including:

• Identity data: Full legal name, date of birth, Pakistani CNIC number, nationality
• Contact data: Email address, Pakistani mobile phone number, residential address
• Account data: Username, password (stored as an encrypted hash — never in plain text), security questions
• Financial data: Deposit and withdrawal transaction history, payment method references (see Section 6 for payment data specifics)
• Verification documents: Copies of CNIC, proof of address documents, source of funds documentation where requested for KYC/AML compliance
• Communications data: Content of support chat conversations, email correspondence with was777

When you access the was777 platform, certain data is collected automatically:

• Technical data: IP address, device type, operating system, browser type and version
• Usage data: Pages visited, games played, bets placed, session duration, time and date of access
• Location data: General geographic location inferred from IP address (used for access control and fraud detection)
• Cookie data: As described in Section 7

was777 processes personal data only for specific, lawful purposes. The following table summarises the key processing activities, their purposes, and the legal basis for each:

was777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency exchange partners process transaction data as required to execute deposits and withdrawals.
• Identity verification providers: Third-party KYC providers verify CNIC documents and identity data as required by was777's licensing obligations.
• Fraud detection services: External fraud screening platforms receive IP address, device data, and transaction patterns to detect suspicious activity.
• Technology infrastructure providers: Cloud hosting, database, and platform maintenance providers may have access to data under strict contractual confidentiality terms.

was777 may be required to disclose personal data to its licensing authority, law enforcement agencies, or other governmental bodies where required by law or where necessary to comply with a valid legal request. was777 will disclose only the minimum information required to satisfy such requests and will notify affected users where legally permitted to do so.

was777 does not store full payment credentials on its own systems. When you make a deposit or withdrawal using JazzCash, EasyPaisa, a bank transfer, SadaPay, or USDT TRC20, your payment credentials are handled directly by the respective payment provider using their own security infrastructure.

was777 retains only the following payment-related data:

• Transaction reference numbers
• Transaction amounts in PKR (or USDT equivalent)
• Payment method type (e.g., JazzCash, HBL)
• Date and time of transaction
• Transaction status (completed, pending, failed)
• The last four digits of a mobile number or account reference, for identification purposes only

This transaction data is retained as part of was777's AML and KYC record-keeping obligations and is stored securely in accordance with was777's data security standards as described in Section 9.

was777 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse platform performance. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in while you navigate the site. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and display configurations.
• Analytics cookies: Collect aggregated and anonymised data about how the platform is used. This helps was777 identify which features work well and which need improvement.
• Security cookies: Used by fraud detection and security systems to identify suspicious sessions, bot activity, and unauthorised access attempts.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair platform functionality and may prevent you from logging in or playing games. Analytics and functional cookies can be disabled without affecting core platform access.

was777 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the minimum retention periods required by its licensing authority. The following retention schedule applies:

• Active account data: Retained for the full duration of your active account.
• Closed account data: Retained for a minimum of 5 years from the date of account closure, as required by AML and licensing record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Support correspondence: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years after opt-out to demonstrate compliance.

After applicable retention periods expire, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

was777 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your device and was777 servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data stored in was777 databases is encrypted at rest using industry-standard algorithms.
• Password hashing: Account passwords are stored only as salted cryptographic hashes. was777 staff cannot view your password.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. was777 staff access is role-based and logged.
• Two-factor authentication: Available to all players and strongly recommended. Players with 2FA enabled receive an additional layer of account protection.
• Intrusion detection: was777 employs real-time monitoring and intrusion detection systems to identify and respond to security incidents.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, was777 will notify affected users and relevant authorities in accordance with its licensing obligations, within the timeframe required.

As a data subject, you have the following rights in relation to your personal data held by was777. Requests to exercise any of these rights should be submitted in writing to was777 support. was777 will respond within 30 days of a valid request.

Note that certain rights are subject to exceptions. For example, the right to erasure does not apply to data that was777 is legally required to retain under its licensing obligations. was777 will clearly explain any applicable exceptions when responding to your request.

was777 sends promotional communications — including bonus offers, new game announcements, and VIP programme updates — only to players who have provided explicit consent to receive marketing at the time of registration or thereafter. Marketing communications are sent via email and, where consented, via SMS to your registered Pakistani mobile number.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link at the bottom of any was777 marketing email
• Updating your communication preferences in your was777 account settings
• Contacting was777 support and requesting removal from all marketing lists

Withdrawal of consent does not affect was777's ability to send transactional communications (such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts). These are necessary for the operation of your account and are not classified as marketing.

was777 is a 21+ platform. The collection of personal data from individuals under the age of 21 is strictly prohibited. was777 employs age verification processes at registration and may request documentary proof of age at any time. Any account found to belong to an individual under 21 years of age will be immediately suspended, and any funds held in the account will be returned to the source of deposit after identity verification.

If you are a parent or guardian and believe that a minor has provided personal data to was777, contact was777 support immediately. was777 will investigate and, if confirmed, take all necessary steps to remove the data and close the account.

Personal data collected by was777 may be transferred to, stored in, or processed in jurisdictions outside Pakistan where was777 operates infrastructure or where third-party service providers are based. Such transfers occur only where necessary to provide the was777 service and only to jurisdictions that provide an adequate level of data protection or where appropriate safeguards are in place.

Where personal data is transferred to third countries, was777 ensures that such transfers are made in accordance with its licensing obligations and that appropriate contractual or technical safeguards (such as Standard Contractual Clauses) are in place to protect your data rights.

was777 reserves the right to amend this Privacy Policy at any time to reflect changes in its data processing practices, legal obligations, or platform functionality. Material changes that affect how your personal data is processed will be communicated to registered players via email to the address on file, with a minimum notice period of 14 days before the amended Policy takes effect.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the was777 platform after the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to submit a complaint regarding how was777 processes your personal data, you may contact was777 through the following channels:

• Live Chat: Available 24/7 via the was777 platform — average response time under 2 minutes
• Support Email: [email protected]
• Data Protection Requests: Direct data subject access requests and formal privacy complaints to was777 support, clearly marked "Data Protection Request" in the subject line

was777 aims to acknowledge all data protection requests within 24 hours and resolve them within 30 days. Complex requests may take longer; in such cases, was777 will inform you of the delay and provide an estimated timeline.

If you are dissatisfied with was777's response to a data protection complaint, you have the right to lodge a complaint with the relevant supervisory data protection authority in the jurisdiction where was777 is licensed or where you reside.