Privacy Policy for
by777 — Pakistan's Gaming Platform

This Privacy Policy describes how by777 ("we", "us", "the platform") collects, uses, stores, and protects the personal information of users ("you") who access or use the by777 website and mobile application. This includes all services on the platform — sports betting, slots, fish games, and any other features available to registered users in Pakistan.

By creating a by777 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and agree to the data practices described here. This policy forms part of our Terms and Conditions.

01. Who We Are

by777 is an online entertainment platform offering sports betting, casino-style games, slots, and fish games to adult users in Pakistan. All transactions on the platform are processed in PKR. by777 operates the website at by777.win and the associated mobile application available for Android download.

For the purposes of this Privacy Policy, by777 is the data controller responsible for the personal information collected through the platform. If you have any questions about how your data is handled, you can reach our support team at the contact details provided at the end of this policy.

02. What Data We Collect

We collect personal data from you in several ways — directly when you register or use the platform, automatically as you interact with the site, and in some cases from payment providers when you make a deposit or withdrawal.

We only collect data that is necessary for the purpose it is being used for. We do not collect sensitive categories of personal data such as biometric data, health records, or religious beliefs.

03. How We Use Your Data

The data we collect is used for specific, legitimate purposes related to operating by777 as a platform. We do not use your data in ways that go beyond what is reasonably expected when you sign up for an online betting and gaming service.

• Account management: Creating and maintaining your by777 account, verifying your identity, and managing your login.
• Processing transactions: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, cards, and mobile wallets.
• Service delivery: Providing access to sports betting markets, slots, fish games, VIP benefits, and other platform features.
• Security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, and financial fraud.
• Customer support: Responding to your queries, complaints, and account-related requests.
• Platform improvement: Analysing usage patterns to improve the platform experience — e.g., which Cricket or PSL markets are most used, how the app performs on common Pakistani devices.
• Responsible gaming: Monitoring for patterns that may indicate a problem and applying account-level tools when requested or required.
• Communications: Sending you important account notifications, security alerts, and — where you have opted in — promotional offers relevant to events like PSL season or T20 tournaments.

04. Payment Information and PKR Transactions

by777 processes all financial transactions in PKR through trusted payment providers. When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, a bank account, or a card, some financial data is necessarily shared with those payment providers to complete the transaction.

We do not store full card numbers or full JazzCash/Easypaisa PINs on our servers. Payment credentials are handled directly by the payment provider using their own security infrastructure. by777 only retains the transaction reference, amount, timestamp, and the masked identifier associated with your payment method (for example, the last four digits of a card number or the registered mobile number associated with a JazzCash account).

• Payment data is used only to process, verify, and reconcile your deposits and withdrawals.
• We may retain records of transactions as required for internal accounting and fraud investigation purposes.
• In the event of a disputed transaction or chargeback investigation, your financial data may be reviewed by our payments team.

05. Cookies and Tracking Technologies

by777 uses cookies and similar tracking technologies to make the platform work properly and to understand how users interact with it. A cookie is a small file stored on your device when you visit a website. It helps the site remember your preferences and session state across pages.

We use the following types of cookies:

• Essential cookies: Required for the platform to function. These handle your login session, keep you signed in while you navigate between pages, and maintain your account security token. You cannot opt out of these without affecting platform functionality.
• Analytics cookies: Help us understand which pages are visited most, how long users spend on the platform, and which features are most used. This data is aggregated and anonymised — it does not identify you personally.
• Preference cookies: Remember your language settings, display preferences, and any customisation you have applied to your account view.
• Security cookies: Used to detect and prevent unusual login patterns, multiple account attempts, and suspicious session activity.

You can manage cookie preferences through your browser settings. Blocking essential cookies may prevent you from logging in or using core platform features. Blocking analytics cookies will not affect your ability to bet, play games, or make transactions.

06. Data Sharing and Third Parties

by777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share data only in the limited circumstances described below:

• Payment providers: JazzCash, Easypaisa, Raast, banks, and card processors receive transaction data necessary to complete your deposits and withdrawals.
• Identity verification partners: If we use a third-party KYC (Know Your Customer) service to verify your CNIC or identity documents, that provider will process your submitted data under their own data protection standards.
• Game providers: Slot and fish game providers may receive a session token and anonymised game data to run the game on their servers. They do not receive your full name, CNIC, or payment details.
• Platform infrastructure providers: Hosting, cloud storage, and technical service providers that power by777 may process data on our behalf under strict data processing agreements.
• Fraud and security services: We may share device fingerprinting and behavioural data with anti-fraud tools to protect the platform and all users.
• Legal requirements: If we are required to disclose data by a valid legal process or to prevent serious harm, we will do so. We will notify you if legally permitted.

All third parties who receive your data are required to handle it securely and use it only for the specific purpose for which it was shared.

07. How Long We Keep Your Data

We keep your personal data for as long as your account is active and for a reasonable period after closure to meet our internal record-keeping, fraud prevention, and dispute resolution obligations.

• Active account data: Retained for the full duration your account remains open on by777.
• Transaction records: Financial transaction history is retained for a minimum of five years following the transaction date for accounting and fraud investigation purposes.
• Verification documents: CNIC copies and identity verification records are retained for the period the account is active and for at least two years after account closure.
• Inactive accounts: If your account has been inactive for 12 months or more with no login, deposit, or betting activity, we may flag it for review. We will attempt to notify you before taking any action.
• Deleted or closed accounts: When an account is closed, personal data is retained in a restricted state for the minimum period required and then securely deleted or anonymised.

08. Your Rights Over Your Data

You have meaningful rights over the personal data that by777 holds about you. These rights can be exercised by contacting our support team directly.

• Right of access: You can request a copy of the personal data we hold on your account at any time.
• Right to correction: If any of your personal data is inaccurate or out of date, you can ask us to correct it. Some fields — such as your registered name — may require identity verification before they can be updated.
• Right to deletion: You can request that your personal data be deleted. This right applies in full once your account is closed and all retention obligations have been met. We cannot delete data that we are required to keep for fraud prevention or legal compliance purposes.
• Right to restrict processing: You can ask us to restrict how we use your data in certain circumstances — for example, if you have raised a dispute about the accuracy of your data.
• Right to object: You can object to us using your data for marketing communications at any time.
• Right to data portability: You can request your account data in a structured, commonly used format.

09. Children's Privacy

by777 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires users to confirm they are 18 or older, and we may verify age through identity document checks.

If we discover or are notified that a user under 18 has registered an account, that account will be closed immediately, all associated data will be handled in accordance with our responsible gaming policy, and any balance will be reviewed before any refund decision is made.

If you are a parent or guardian and believe a minor has used by777, please contact our support team immediately. We take this seriously and will act without delay.

10. How We Keep Your Data Secure

We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure.

• Encryption: Data transmitted between your device and by777 servers is encrypted using HTTPS/TLS protocols.
• Access controls: Only authorised by777 staff with a specific operational need can access personal account data. Access is logged and reviewed.
• Password security: Account passwords are stored in hashed form. We never store or transmit your plain-text password. We recommend using a unique, strong password for your by777 account.
• Session management: Login sessions automatically expire after a period of inactivity to reduce the risk of unauthorised access on shared devices.
• Fraud monitoring: Automated systems monitor for unusual activity patterns on accounts — including unusual login locations, rapid deposit-withdrawal cycles, and multiple account signals.

While we take data security seriously, no online platform can guarantee absolute security. You are responsible for keeping your login credentials, JazzCash/Easypaisa details, and device access secure on your end.

11. Changes to This Privacy Policy

by777 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable requirements. When we make significant changes, we will notify registered users via email or an in-platform notification before the update takes effect.

The updated policy will be published on this page with a revised "Last Updated" date at the top. Your continued use of by777 after a policy update constitutes your acceptance of the revised terms. We recommend reviewing this page periodically, especially around major platform updates or new features being introduced.

12. Contact Us About Your Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how by777 handles your personal data, please reach out to our support team. We aim to respond to all privacy-related queries within 7 business days.

You can contact us through the in-platform support chat available after login, or via the email address listed in the footer of this page. When submitting a data request, please include your by777 username and a clear description of your request so we can assist you efficiently.

For account-level concerns such as accessing your data, correcting inaccuracies, or requesting deletion, please also review your rights under Section 8 of this policy.