Sections
- 1. Introduction
- 2. Data We Collect
- 3. How We Collect It
- 4. How We Use Your Data
- 5. Who We Share Data With
- 6. Payment Data
- 7. Cookies
- 8. Data Retention
- 9. Security Measures
- 10. Your Rights
- 11. Minors
- 12. Marketing
- 13. Third-Party Links
- 14. Policy Changes
- 15. Contact Us
1Introduction — Why We Have This Policy
CD 777, operated at cd777.im, is Pakistan's dedicated online gaming platform. To run the platform, process your deposits and withdrawals in PKR, verify your identity, and protect your account from unauthorised access, we necessarily collect and process certain personal information about you. This Privacy Policy explains exactly what information we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own data.
We have written this policy in plain English because we believe every Pakistani player deserves to understand what they're agreeing to when they register. If you read a section and it isn't clear to you, contact our support team — they're available 24/7 in both Urdu and English and can explain any part of this policy in simpler terms without redirecting you to another document.
By registering an account at CD 777 and using the platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described herein. This policy should be read alongside our Terms and Conditions at /terms-conditions. If you do not agree with this policy, you should not register or continue using CD 777.
This Privacy Policy applies to all features and sections of CD 777 including the Online Casino, Live Casino, PSL Betting, Ludo Games, VIP Club, and Refer a Friend programme.
Islamabad Blue Area – CD 777 Privacy Protections Apply to Players Across All of Pakistan
2What Data CD 777 Collects About You
CD 777 collects only the information that is genuinely necessary to operate your account, process your transactions, verify your identity, and comply with applicable standards. We do not collect data speculatively or maintain records we have no operational reason to hold. The categories of personal data we collect are as follows:
| Data Category | Specific Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, photograph | Account registration, age verification, KYC |
| Contact Data | Mobile number, email address | Account access, notifications, support |
| Financial Data | Easypaisa / JazzCash wallet numbers, bank account details, transaction history in PKR | Processing deposits and withdrawals |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security, fraud detection, platform optimisation |
| Usage Data | Games played, bet history, session duration, feature interactions | Account management, responsible gaming monitoring, bonus eligibility |
| Verification Data | Copies of CNIC, utility bills, payment method screenshots | KYC compliance, withdrawal processing above thresholds |
| Communications Data | Live chat transcripts, support emails, call logs if applicable | Dispute resolution, quality assurance, audit trail |
We do not collect sensitive personal data such as biometric identifiers, religious beliefs, political views, or health information unless this is directly required to fulfil a specific regulatory obligation, in which case you will be notified separately at the time of collection.
3How CD 777 Collects Your Data
CD 777 collects your personal data through three main channels:
Direct Collection
This is the most significant source. You provide data directly to CD 777 when you register an account (name, mobile number, date of birth), when you complete KYC verification (CNIC, supporting documents), when you make a deposit or withdrawal (payment method details), when you contact support (chat transcripts, email content), and when you interact with promotions or fill in any form on the platform.
Automated Technical Collection
When you visit cd777.im or use the platform on your mobile browser, CD 777's systems automatically collect certain technical data. This includes your IP address, the type of device and browser you are using, the pages you visit and in what order, your session start and end times, and any error events that occur during your session. This data is collected through cookies and server logs — both are explained further in Section 7.
Third-Party Sources
In limited circumstances, CD 777 may receive data about you from third parties. This includes identity verification services that cross-check the documents you submit, payment processors who confirm transaction status, and fraud prevention services that flag unusual account behaviour patterns. Data received from third parties is used exclusively for the purpose for which it was obtained and is subject to the same protections as data you provide directly.
4How CD 777 Uses Your Personal Data
CD 777 uses the personal data we collect to fulfil specific operational, security, and compliance functions. We do not use your data for purposes unrelated to running the platform. Below are the primary ways your data is used:
Account Creation and Management
Your name, contact details, and date of birth are used to create and maintain your CD 777 account. This is the foundational use without which we cannot provide any service to you at all.
Processing PKR Transactions
Your payment method details and transaction history are used to process deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, and to process your withdrawal requests within the timelines committed to in our Terms.
Identity Verification (KYC)
CNIC and supporting documents are used to verify that you are who you say you are, that you meet the 18+ age requirement, and that your payment method belongs to you. This protects both you and other CD 777 players from fraud.
Fraud and Security Monitoring
Technical data including IP addresses, device identifiers, and behavioural patterns are analysed by CD 777's security systems to detect suspicious activity, multiple account registrations from the same device, and unusual wagering patterns that may indicate bonus abuse or money laundering.
Responsible Gaming
Your gameplay and betting history is monitored internally to identify patterns that may indicate problem gambling behaviour. This analysis allows CD 777 to trigger responsible gaming interventions, such as proactive contact from the support team, where appropriate.
Promotions and Bonus Eligibility
Your account history, deposit frequency, and game activity are used to determine your eligibility for specific bonuses and promotions, to prevent duplicate bonus claims, and to administer the VIP Club tier system. Marketing communications are only sent where you have opted in — see Section 12.
Platform Improvement
Aggregated, anonymised usage data — not linked to individual player identities — is used to understand how the platform is being used, which features are most popular, and where technical issues occur most frequently, helping our product team prioritise improvements.
Hunza Karimabad – CD 777 Player Data Is Protected Wherever You Play in Pakistan
6Payment Data and PKR Transaction Security
Because all CD 777 transactions are denominated in Pakistani Rupees and processed through local payment methods, your financial data has specific handling requirements that deserve dedicated explanation.
CD 777 does not store full payment card numbers or mobile wallet PINs on its own servers. When you enter card or wallet details to make a deposit, this information is transmitted directly to the payment processor via an encrypted connection. CD 777 receives only a tokenised reference — a unique code that identifies the transaction — not the raw financial credentials themselves.
Your transaction history — the amounts deposited and withdrawn, the dates and times, and the payment method type used — is stored on CD 777's secured servers as part of your account record. This history is necessary for account management, dispute resolution, and regulatory audit purposes and is retained for the period specified in Section 8.
In the event that your payment method is flagged by our fraud detection systems as potentially misused or not belonging to the registered account holder, CD 777 may temporarily suspend deposit and withdrawal functionality while the matter is investigated. You will be notified of any such suspension via your registered contact details and given an opportunity to provide clarifying information.
7Cookies and Tracking Technologies
CD 777 uses cookies and similar browser-based tracking technologies when you visit cd777.im. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow websites to remember information about your visit — such as your login status or your session preferences — so you don't have to re-enter them every time.
Types of Cookies Used by CD 777
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Maintaining your login session, remembering your language preference, keeping your account secure during your visit | No — required for the platform to function | |
| Understanding how players navigate the site, which pages load slowly, and where users encounter errors — helps us improve the platform | Yes — via browser settings or cookie banner | |
| Remembering your display preferences, game volume settings, and last-played game so your next session picks up where you left off | Yes — some features may not work without them |
CD 777 does not use third-party advertising cookies and does not share browsing data with advertising networks. The analytics data collected through cookies is aggregated and anonymised before being used to inform platform improvements — it is not used to build individual player profiles for marketing purposes without your explicit consent.
You can manage or delete cookies through your browser settings. On most mobile browsers used in Pakistan, including Chrome on Android, Safari on iOS, and Firefox, cookie settings are found under the privacy or site settings menu. Note that disabling essential cookies will prevent you from remaining logged in to CD 777.
8How Long CD 777 Keeps Your Data
CD 777 retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable standards. The following retention periods apply:
- Active account data (name, contact details, login credentials): retained for the lifetime of your account plus a minimum of 5 years after account closure, to satisfy financial record-keeping requirements.
- Transaction records (deposit and withdrawal history, amounts, payment method references): retained for 7 years from the date of each transaction in line with standard financial audit requirements.
- KYC documents (CNIC copies, proof of address, payment method verification): retained for the period of active account use plus 5 years post-closure. Documents are stored on encrypted servers with access restricted to authorised compliance staff.
- Game session records (bets placed, game outcomes, round timestamps): retained for 3 years for audit, dispute resolution, and responsible gaming monitoring purposes.
- Support communications (live chat logs, email correspondence): retained for 2 years from the date of each interaction for quality assurance and dispute resolution purposes.
- Technical logs (IP addresses, device data, session events): retained for 12 months for security monitoring purposes and then deleted.
When data reaches the end of its retention period, it is securely deleted from CD 777's systems and from the systems of any data processors who hold it on CD 777's behalf. You may request earlier deletion of certain categories of data — see Section 10 for your rights in this regard.
Murree Mall Road – CD 777 Keeps Your Data Secure Whether You Play at Home or on the Go
9How CD 777 Protects Your Data
Data security at CD 777 is taken seriously at every level of the platform — not just at the point where you enter your CNIC, but throughout every system that handles, stores, or transmits your information. The following measures are in place:
- 256-bit SSL/TLS encryption is applied to all data transmitted between your browser and CD 777's servers. You can verify this by checking for the padlock symbol and "https" prefix in your browser's address bar when using the platform.
- Encrypted storage is used for sensitive fields including identity document copies, payment method references, and authentication credentials. Stored data is encrypted at rest using AES-256.
- Access controls restrict which CD 777 staff can access player data. Only staff with a specific operational reason are granted access to personal account information, and all access is logged for audit purposes.
- Two-factor authentication (2FA) is available to all CD 777 players and is strongly recommended. Enabling 2FA ensures that even if your password is obtained by a third party, they cannot access your account without the secondary verification step.
- Regular security reviews of the platform's infrastructure are conducted to identify and remediate vulnerabilities before they can be exploited.
- Incident response procedures are in place to contain and assess any data security incident within a defined response window. In the event of a breach that affects your personal data, CD 777 will notify you promptly and provide clear information about what occurred and what steps are being taken.
While CD 777 implements strong technical and organisational security measures, no internet-connected system can be guaranteed to be completely immune to all threats. Keeping your own login credentials confidential and enabling 2FA are the most important steps you can take to protect your own account.
10Your Rights Over Your Personal Data
As a CD 777 player, you have the following rights regarding the personal data we hold about you. All requests should be submitted via live chat or email to support@cd777.im, clearly identifying your registered account and the specific data category your request concerns.
Right to Access
You have the right to request a copy of the personal data CD 777 holds about you. We will provide this within 30 days of receiving a valid request. The data will be delivered in a readable format via your registered email address.
Right to Correction
If any personal data CD 777 holds about you is inaccurate, you have the right to request correction. Contact support with the correct information and supporting documentation where relevant.
Right to Deletion
You may request deletion of your personal data. Note that certain categories — such as transaction records and KYC documents — must be retained for the periods specified in Section 8 and cannot be deleted early. Other data, such as marketing preferences, can be deleted on request.
Right to Restrict Processing
In certain circumstances you can request that CD 777 stops processing your data while a query or complaint is being resolved, without requiring full deletion of the data.
Right to Data Portability
You may request that CD 777 provide your personal data in a commonly used, machine-readable format so that you can transfer it to another service provider if you choose to do so.
Right to Object
You have the right to object to CD 777 using your data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests where your particular situation warrants it.
11Minors and the 18+ Requirement
CD 777 does not knowingly collect personal data from individuals under the age of 18. The platform enforces a strict minimum age policy of 18 years for all registered accounts, and age verification is a required step in the KYC process. Any account found to belong to a player under 18 will be immediately closed and all personal data associated with that account will be deleted, subject only to the retention of records necessary to document the closure itself.
If you are a parent or guardian and believe that a minor in your care has registered on CD 777, please contact our support team immediately at support@cd777.im. We will investigate and act on the report within 24 hours. Please provide the mobile number or email address associated with the suspected account to help us locate and close it promptly.
12Marketing Communications
CD 777 may send you promotional communications — such as bonus offers, new game announcements, or PSL betting specials — but only where you have explicitly opted in to receive them. At the time of registration, you will be given a clear choice to opt in or out of marketing communications via SMS and email separately. Both choices are entirely voluntary and do not affect your ability to use the platform.
If you opt in and later change your mind, you can opt out of marketing communications at any time through your account settings or by contacting support. Opt-out requests are processed within 5 business days. Please note that even after opting out of marketing, CD 777 will still send you transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — that are necessary for the operation of your account.
CD 777 does not use your personal data to serve you targeted advertising through third-party advertising networks. Any promotional content you see on cd777.im is served by CD 777 directly based on your account activity, not through external advertising platforms.
13Third-Party Links on CD 777
The CD 777 platform does not include links to external third-party websites other than those necessary for payment processing (for example, redirecting to your Easypaisa or JazzCash app). Where such redirects occur as part of the payment process, you are directed to the payment provider's own environment, which is governed by that provider's privacy policy. CD 777 is not responsible for the data handling practices of any third-party service once you leave the cd777.im domain.
14Changes to This Privacy Policy
CD 777 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable law or regulation, or improvements in our data handling practices. When a material change is made — one that meaningfully affects the way we collect, use, or share your personal data — we will notify registered players via email and/or an in-platform notification before the change takes effect.
The most current version of this Privacy Policy is always available at cd777.im/privacy-policy. The "last updated" date at the top of the page indicates when the current version came into effect. We recommend reviewing this page periodically, particularly before submitting any significant personal data such as KYC documents.
Minor changes that do not affect the substance of any section — such as formatting corrections, clarifications of existing language, or updates to reflect new product names — may be made without advance notice. The effective date will be updated to reflect any such change.
Your continued use of CD 777 following the effective date of any privacy policy update constitutes acceptance of the revised policy. If you disagree with the changes, you should close your account before the update takes effect.
15How to Contact CD 777 About Your Privacy
If you have any question about this Privacy Policy, want to exercise any of your data rights described in Section 10, or have a concern about how CD 777 has handled your personal data, please get in touch with our support team as the first step. The team is available around the clock and handles privacy-related queries in both Urdu and English.
You can contact CD 777 via the live chat function on the platform or by emailing support@cd777.im. When submitting a data-related request, please include your registered mobile number, the specific data category your request concerns, and the action you are requesting (access, correction, deletion, etc.). This helps us locate the correct records and process your request as quickly as possible.
CD 777 commits to acknowledging all privacy-related requests within 48 hours of receipt and to providing a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days — we will notify you if that is the case and explain why the extension is necessary.
If you are not satisfied with CD 777's response to your privacy concern after going through our standard support process, you may request escalation to a senior review. Our written decision following a formal escalation will be provided within 10 business days and represents CD 777's final position on the matter.