Privacy Policy

This Privacy Policy ("Policy") describes how CA777 ("the Platform", "we", "us", "our") collects, uses, stores, shares and protects personal data in connection with your use of the CA777 website, mobile interface, gaming products and all related services (collectively, the "Services") available at ca777.cam.

CA777 is an English-language online gaming platform designed for users in Pakistan and other permitted jurisdictions. We are committed to handling your personal data with transparency, integrity and in accordance with the data protection principles applicable under the operator's license jurisdiction.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. In the event of any conflict, these documents shall be read together with our Terms & Conditions taking precedence on matters of contract.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, phone number, payment details, device identifiers and usage history.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, the operator of the CA777 Platform.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual obligation.
• "User" means any individual who accesses, registers on or otherwise uses the Services.
• "KYC" means Know Your Customer — the identity and age verification process applied to confirm a User's eligibility to access the Services.
• "Cookie" means a small text file placed on your device by the Platform to support session management, personalisation and analytics.

CA777 collects personal data through several channels in the course of providing its Services. The categories of data collected are set out below.

When you create an Account, we collect the information you provide, which may include your full name, date of birth, email address, mobile number, city of residence (for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and a username and password of your choosing.

To comply with applicable regulatory obligations and to verify that you meet our minimum age requirement of 18 years (or the higher minimum required by the operator/license jurisdiction), we may collect copies of government-issued identity documents, proof of address documentation and, where applicable, proof of payment method ownership.

We record details of all deposits, withdrawals and wagers made through your Account, including transaction amounts in PKR, timestamps, payment method references and transaction identifiers. Note that CA777 does not store full card numbers or banking credentials — these are handled by third-party payment processors.

We collect information about how you interact with the Platform, including pages visited, games played, bet history, session duration, click events and navigation paths. This data is used to improve the user experience and to detect unusual patterns that may indicate fraud or problem gambling.

We automatically collect technical data when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL and time-zone settings.

If you contact CA777 Support via email or live chat, we retain records of those communications, including the content of messages, timestamps and any attachments submitted for the purpose of resolving your enquiry and maintaining a service history.

Where you use our responsible gambling tools — such as deposit limits, loss limits, session reminders or self-exclusion — we record the settings you apply. This data is treated with heightened care and is used exclusively to enforce the restrictions you have chosen to implement.

CA777 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil the contract between you and CA777, including managing your Account, processing transactions and providing the Services you have requested.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements, including KYC verification, anti-money-laundering checks and the retention of financial records.
• Legitimate Interests: Processing carried out in pursuit of CA777's legitimate business interests — such as fraud prevention, platform security, responsible gambling monitoring and service improvement — where these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for specific processing activities — such as sending marketing communications — we will request your explicit agreement. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

CA777 uses your personal data for the following purposes:

• Creating, maintaining and administering your Account, including verifying your eligibility to access the Services.
• Processing deposits and withdrawals in PKR and maintaining accurate financial records in connection with your Account.
• Conducting KYC verification and ongoing due diligence as required by the operator's applicable license conditions.
• Detecting, investigating and preventing fraud, money laundering, collusion and other prohibited activities as described in our Terms & Conditions.
• Monitoring gameplay and transaction patterns to identify signs of problem gambling and to enforce responsible gambling tools where applicable.
• Providing customer support via email and live chat and resolving Account-related disputes or complaints.
• Analysing usage patterns and platform performance to improve the Services, fix technical issues and develop new features.
• Sending transactional communications — such as Account confirmations, deposit receipts and security alerts — that are necessary for the operation of your Account.
• Where you have provided consent, sending promotional communications about bonuses, new games and platform news. You may unsubscribe at any time.
• Complying with requests from competent regulatory or law enforcement authorities where legally required.

CA777 does not sell, rent or trade your personal data to any third party for their own marketing or commercial purposes. We may share your data with the following categories of recipients strictly as necessary:

• Identity Verification Providers: Third-party KYC and age-verification service providers who process identity documents on our behalf to confirm your eligibility to access the Services.
• Payment Processors: Technology providers who facilitate the processing of deposits and withdrawals. Payment methods referenced on CA777 — including familiar Pakistani options such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as contextual local references only. Their mention does not imply endorsement, active integration or partnership. Actual payment routing is handled by the operator's contracted payment infrastructure.
• Game Content Suppliers: Third-party game studios and live casino providers whose software is integrated into the Platform. These providers may receive limited session and bet data necessary to operate their games.
• Fraud Prevention & AML Services: Specialist compliance and fraud-detection providers who help CA777 identify and prevent prohibited activities.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent authorities where we are legally required or compelled to do so under applicable law or a valid court order.
• Corporate Transactions: In the event of a merger, acquisition or sale of all or part of our business, personal data may be transferred to the acquiring entity, subject to the same data protection obligations described in this Policy.

CA777 operates as an online platform and, as a result, your personal data may be processed by servers or third-party service providers located outside Pakistan. Where personal data is transferred internationally, CA777 takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection requirements and that adequate protections are in place.

Safeguards applied to international transfers may include contractual data processing agreements with standard data protection clauses, transfers to jurisdictions that maintain adequate data protection frameworks, or other legally recognised transfer mechanisms available under the operator's license jurisdiction.

CA777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, to comply with anti-money-laundering and record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or Account closure (whichever is later), consistent with regulatory requirements applicable to the operator's license jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial compliance and audit purposes.
• Support Communications: Retained for a period of three (3) years from the date of the communication, to support dispute resolution and service quality review.
• Marketing Preferences: Retained until you withdraw consent or request erasure, at which point the opt-in record will be deleted.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period and for a reasonable period thereafter, to prevent inadvertent re-registration during the exclusion window.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

CA777 uses cookies and similar tracking technologies to support the operation of the Platform, remember your preferences and analyse usage patterns. The categories of cookies we deploy are described below.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on cookie management, refer to the help section of your browser.

Depending on the data protection framework applicable to your use of the Services, you may hold the following rights in relation to your personal data. CA777 is committed to honouring these rights within a reasonable timeframe upon receipt of a valid request submitted through our Support team.

CA777 is strictly an adults-only platform. Access to the Services is limited to individuals aged 18 years and above, or the higher minimum age required by the operator or the applicable license jurisdiction. We do not knowingly collect, process or store personal data relating to any person under the applicable minimum age.

If CA777 becomes aware that personal data relating to a minor has been submitted — whether through a falsified registration or by any other means — we will promptly delete that data, void any associated bets and close the Account in question. If you believe a minor has accessed the Services using your Account, please contact Support immediately and change your Account password without delay.

CA777 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including identity documents and payment method references stored on CA777 servers.
• Strict role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need.
• Regular internal security reviews and vulnerability assessments to identify and remediate potential risks.
• Multi-factor authentication options available to Users to protect Account access.
• Monitoring systems that flag unusual login patterns, access attempts or transaction behaviour for review by our security team.

While CA777 takes all reasonable precautions to safeguard your data, no method of electronic storage or internet transmission is completely secure. We cannot guarantee absolute security, and Users are encouraged to maintain strong, unique passwords and to contact Support immediately if they suspect any unauthorised access to their Account.

CA777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements or applicable legal obligations. When material changes are made, we will update the "Last Updated" date displayed at the top of this page and, where appropriate, notify registered Users via email or a prominent in-platform notice.

Your continued use of the Services following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should discontinue use of the Services and may request Account closure by contacting our Support team.

We recommend that Users review this Policy periodically — particularly before engaging in significant transactions — to stay informed about how CA777 handles personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please reach out to the CA777 Support team using the contact details below. We aim to respond to all privacy-related enquiries within 24 hours.

When submitting a data rights request, please include your registered email address and a description of your request so we can identify your Account and respond efficiently. We may request additional verification before processing requests that involve access to, or deletion of, personal data.