he777 Privacy Policy

Introduction & Scope

he777 (referred to in this policy as "he777", "we", "us", or "our") operates the online gaming platform accessible at he777.cam and its associated subdomains and mobile-optimised interfaces (collectively, the "Platform"). This Privacy Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact he777's customer support.

This Privacy Policy describes what personal data he777 collects, the purposes for which it is processed, the legal basis for each processing activity, how long data is retained, with whom data may be shared, and what rights you hold in relation to your personal data. By accessing or using the he777 Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform after any update to this policy constitutes your acceptance of the revised terms.

This Privacy Policy should be read alongside the he777 Terms & Conditions, which govern your use of the Platform more broadly. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data protection matters, this Privacy Policy shall prevail.

Data Controller

For the purposes of applicable data protection law, he777 is the data controller in respect of the personal data collected and processed through the Platform. As data controller, he777 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

he777 operates under an internationally recognised online gaming licence. All data processing activities described in this Privacy Policy are conducted in accordance with the data protection obligations imposed by he777's licensing authority and applicable international data protection standards, including the principles of data minimisation, purpose limitation, storage limitation, and data accuracy.

If you have any questions about how he777 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 10 of this policy, you may contact he777's data protection contact using the details provided in Section 14 below.

Information We Collect

3.1 Information You Provide Directly

he777 collects personal information that you voluntarily provide when registering an account, completing identity verification, contacting customer support, or participating in promotions. This information may include:

• Identity data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification;
• Contact data: Residential address (including city, province, and postal code in Pakistan), email address, and Pakistani mobile phone number;
• Identity document data: Pakistani National Identity Card (CNIC) number, passport number, or other government-issued identification provided during the KYC verification process;
• Financial data: Payment method details including JazzCash account number, EasyPaisa wallet number, bank account details (HBL, UBL, Meezan Bank), and transaction history on the Platform;
• Communications data: Records of your communications with he777's customer support team via live chat, email, or any other channel.

3.2 Information Collected Automatically

When you access and use the he777 Platform, he777 automatically collects certain technical and usage data, including:

• Device data: Device type, operating system, browser type and version, screen resolution, and device language settings;
• Usage data: Pages visited, features used, games played, betting activity, session duration, click patterns, and navigation paths within the Platform;
• Network data: IP address, approximate geolocation derived from IP address, mobile network operator, and connection type;
• Cookie data: Information stored and retrieved via cookies and similar tracking technologies as described in Section 7 of this policy.

3.3 Information from Third Parties

he777 may receive personal data about you from third parties in limited circumstances, including from identity verification service providers during the KYC process, from payment processors to confirm the status of financial transactions, and from fraud detection and anti-money laundering service providers.

How We Use Your Data

he777 uses the personal data it collects for the following purposes:

Legal Bases for Processing

he777 processes your personal data only where there is a valid legal basis for doing so. The primary legal bases on which he777 relies are:

• Contractual necessity: Processing that is necessary for the performance of the contract between you and he777, including account management, payment processing, and service delivery. Without this processing, he777 cannot provide you with the services available on the Platform.
• Legal obligation: Processing that is required for he777 to comply with its legal and regulatory obligations, including KYC verification, AML compliance, and responding to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of he777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for purposes where he777 has obtained your specific, informed, and freely given consent, such as the sending of marketing communications. Where consent is the legal basis for processing, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Data Sharing & Disclosure

he777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. he777 may share your personal data with the following categories of recipients in the circumstances described below:

• Payment service providers: he777 shares necessary financial data with payment processors (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) solely for the purpose of processing your deposit and withdrawal transactions.
• Identity verification providers: he777 uses third-party KYC and identity verification service providers to verify player age, identity, and source of funds as required by its licensing obligations.
• Game software providers: he777 uses third-party game engines and live casino platforms provided by certified gaming software companies. These providers may process limited technical data (such as session identifiers) to deliver game services.
• Fraud and AML service providers: he777 may share data with specialist fraud detection and anti-money laundering screening providers to protect the integrity of the Platform and comply with regulatory requirements.
• Regulatory and licensing authorities: he777 may be required to disclose player data to its licensing authority or other competent regulatory bodies in the exercise of their supervisory functions.
• Law enforcement and legal authorities: he777 will disclose personal data to law enforcement agencies, courts, or other public authorities where required to do so by applicable law, court order, or where he777 has a good-faith belief that disclosure is necessary to prevent serious harm or illegal activity.
• Group companies and service providers: he777 may share data with members of its corporate group or with carefully selected third-party service providers (such as hosting, analytics, and customer support technology providers) who process data on he777's behalf and under data processing agreements that impose equivalent data protection obligations.

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. he777 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, remember your preferences, analyse Platform usage, and deliver a personalised experience.

7.2 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly and cannot be switched off. They include cookies that maintain your login session, remember your language preference, and ensure the security of your account. These cookies do not require your consent.
• Performance and analytics cookies: These cookies collect anonymous information about how visitors use the Platform, such as which pages are visited most frequently and how long sessions last. This data helps he777 improve Platform performance and user experience.
• Functionality cookies: These cookies allow the Platform to remember choices you have made (such as your preferred language or display settings) and provide enhanced, personalised features.
• Marketing cookies: Where you have consented, these cookies track your activity on the Platform to deliver more relevant promotional communications. You may withdraw this consent at any time via your account cookie preferences settings.

7.3 Managing Cookies

Most web browsers allow you to control cookie settings via the browser's privacy or settings menu. You may choose to block or delete cookies, though doing so may affect the functionality of the he777 Platform. Strictly necessary cookies cannot be disabled without affecting the core operation of the Platform.

Data Retention

he777 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data and KYC records: Retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with he777's AML and licensing obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, as required by applicable financial regulations.
• Customer support communications: Retained for a period of three (3) years from the date of the communication, or longer where the communication relates to an ongoing dispute or legal matter.
• Marketing consent records: Retained until you withdraw your consent, and for a further period of one (1) year thereafter as evidence of your consent status.
• Technical and usage logs: Retained for a period of up to twelve (12) months for security monitoring and fraud prevention purposes, after which they are anonymised or deleted.

At the end of each applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. he777 reviews its data retention practices on a regular basis to ensure they remain proportionate and compliant with applicable law.

Data Security

he777 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational security measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport layer security: All data transmitted between your device and the he777 Platform is encrypted using industry-standard 256-bit SSL/TLS encryption protocols;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. he777 personnel with access to personal data are subject to confidentiality obligations and receive regular data protection training;
• Secure data storage: Personal data is stored in secure, access-controlled server environments with regular security audits and penetration testing;
• Two-factor authentication: he777 offers and encourages the use of two-factor authentication (2FA) for player accounts to add an additional layer of protection against unauthorised access;
• Incident response: he777 maintains a data security incident response procedure. In the event of a data breach that poses a risk to player rights and freedoms, he777 will notify affected individuals and relevant authorities in accordance with applicable law.

Your Rights

Subject to applicable data protection law, you hold the following rights in relation to your personal data processed by he777. To exercise any of these rights, please contact he777 using the details in Section 14. he777 will respond to all valid requests within a reasonable timeframe and in any event within 30 days of receipt:

• Right of access: You have the right to request a copy of the personal data that he777 holds about you and information about how it is processed.
• Right to rectification: You have the right to request that he777 corrects any inaccurate or incomplete personal data it holds about you.
• Right to erasure: In certain circumstances, you have the right to request that he777 deletes your personal data. This right is not absolute and does not apply where retention is required by applicable legal or regulatory obligation.
• Right to restriction of processing: In certain circumstances, you have the right to request that he777 restricts its processing of your personal data while a complaint or rectification request is being considered.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on he777's legitimate interests. You also have an absolute right to object to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

The he777 Platform is strictly intended for adults aged 21 years and above. he777 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The Platform implements age verification checks as part of the registration and KYC process specifically to prevent access by minors.

If he777 discovers or has reason to believe that personal data has been submitted by or in relation to an individual under the age of 21, he777 will immediately suspend the relevant account, delete all associated personal data that is not required to be retained for legal or regulatory purposes, and refund any deposits made to the account in accordance with applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account or submitted personal data to he777, please contact he777 immediately using the details in Section 14. he777 will treat such reports as a priority and take immediate remedial action.

International Data Transfers

he777 operates as an internationally licensed platform. In the course of providing its services and fulfilling its legal obligations, personal data may be transferred to and processed in countries other than Pakistan. This may occur, for example, when personal data is processed by he777's third-party service providers, game software partners, or data hosting providers located in other jurisdictions.

Where personal data is transferred outside of Pakistan, he777 takes appropriate safeguards to ensure that such transfers are carried out in compliance with applicable data protection requirements and that an adequate level of data protection is maintained. These safeguards may include standard contractual clauses, adequacy decisions, or other appropriate transfer mechanisms recognised under applicable law.

By using the he777 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan as described in this section, and you consent to such transfers where they are necessary for the provision of the he777 services.

Changes to This Policy

he777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or he777's data processing practices. When material changes are made, he777 will notify registered players via email to their registered address and will display a prominent notice on the Platform prior to the changes taking effect.

The revised Privacy Policy will specify its effective date. Your continued use of the he777 Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. The current version of the Privacy Policy is always available at he777.cam/privacy-policy. If you do not agree with the revised Privacy Policy, you must cease using the Platform and may request account closure by contacting customer support.

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which he777 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 10, please contact he777 using the following details:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Live Chat: Available 24/7 in English and Urdu via he777.cam
• Subject line: "Privacy Policy Enquiry" or "Data Subject Rights Request"

he777 will acknowledge your request promptly and will provide a substantive response within 30 days of receipt. Where a request is particularly complex or where he777 is dealing with a high volume of requests, this period may be extended by a further 60 days, in which case he777 will inform you of the extension and the reasons for it within the initial 30-day period.

If you are not satisfied with he777's response to your privacy complaint or data subject rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the licensing authority under which he777 operates.