yz777 Privacy Policy — Your Data, Our Responsibility

yz777 operates the online gaming and sports betting platform accessible at yz777.pro (the "Platform"). As part of operating that platform, yz777 processes personal data relating to registered players, prospective players, and visitors to the Platform. We take that responsibility seriously.

This Privacy Policy ("Policy") sets out in clear, plain English how yz777 collects, uses, stores, shares, and protects personal information in connection with the operation of the yz777 Platform. It also explains the rights you hold in relation to your personal data and how you can exercise those rights.

yz777 is committed to handling all personal data in accordance with applicable international data protection standards, consistent with the requirements of our international gaming license. Where Pakistani data protection principles apply to our players, we apply those principles alongside our licensing obligations.

By registering an account with yz777, you confirm that you have read, understood, and agreed to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not register an account or use the yz777 Platform.

yz777 collects personal data only to the extent necessary to provide our services, meet our regulatory obligations, and maintain a safe, fair gaming environment. The categories of personal data we collect are set out below.

2.1 Registration Data

When you register an account on yz777, we collect the following information:

• Full legal name as it appears on your CNIC
• Date of birth (used for age verification — all players must be 21 or older)
• CNIC number (Computerised National Identity Card — issued by NADRA)
• Residential address in Pakistan
• Mobile phone number (typically a Jazz, Telenor, Zong, or Ufone number)
• Email address
• Username and hashed account password

2.2 Financial Data

To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, we process the following:

• Payment account identifiers (e.g., JazzCash or EasyPaisa mobile wallet number)
• Bank account details where bank transfer is the selected payment method
• Transaction amounts, timestamps, and reference numbers
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)

2.3 KYC Verification Data

• Copy of CNIC (front and back)
• Proof of payment method ownership (e.g., screenshot of JazzCash wallet registered in your name)
• Selfie or live photo for facial verification, where required

2.4 Platform Usage Data

• Login timestamps and session durations
• Game history, bet amounts, and game outcomes
• Bonus claims, wagering activity, and promotional interactions
• Responsible gaming tool settings (deposit limits, cool-off requests, self-exclusion status)
• Customer support communications (live chat transcripts, email correspondence)

2.5 Technical Data

• IP address at registration and at each login
• Device type, operating system, and browser version
• Geolocation data (approximate, derived from IP address)
• Cookie identifiers and session tokens

yz777 collects personal data through three main channels:

3.1 Directly from You

The majority of the personal data we hold about you is information you provide to us directly — at the point of registration, during the KYC verification process, when making deposits or withdrawals, when contacting customer support, and when configuring responsible gaming settings within your account dashboard.

3.2 Automatically Through Platform Use

When you access and use the yz777 Platform, certain technical and behavioural data is collected automatically. This includes your IP address, device identifiers, session data, and in-platform activity such as game play, bets placed, and pages visited. This data is collected via server logs, session tracking, and cookies (see Section 10 for our full Cookie Policy).

3.3 From Third-Party Sources

In limited circumstances, yz777 may receive personal data about you from third-party sources, including:

• Payment processors — JazzCash, EasyPaisa, and banking partners may confirm transaction status, account ownership, and identity verification flags.
• Identity verification services — where yz777 uses a third-party identity verification provider to cross-reference CNIC data for KYC purposes.
• Fraud prevention databases — industry-standard databases used to screen for known fraudulent account activity or self-excluded players.
• Regulatory or law enforcement bodies — where required by a lawful request under applicable jurisdiction.

yz777 uses the personal data we collect for the following purposes:

yz777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human oversight. Where our fraud detection systems flag an account for review, a member of our security team manually reviews the case before any account action is taken.

yz777 processes personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and delivery of gaming services — is carried out on the basis that it is necessary to perform the contract between yz777 and you.
• Legal obligation: Processing carried out to comply with our obligations under our international gaming license, anti-money laundering (AML) regulations, and Know Your Customer (KYC) requirements is carried out on the basis of legal obligation. This includes the collection and retention of CNIC information and financial transaction records.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement is carried out on the basis of yz777's legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Where yz777 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

yz777 does not sell, rent, or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay receive transaction data necessary to process your deposits and withdrawals. Each payment processor operates under its own privacy policy and data protection obligations.
• Game providers: Third-party game studios and live dealer providers that supply games to the yz777 Platform receive session and game data necessary to deliver their games and calculate outcomes. These providers are contractually bound to handle that data securely and confidentially.
• Identity verification providers: Where yz777 uses a third-party KYC service to verify your identity against CNIC records, that provider receives only the data necessary for verification and is prohibited from using it for any other purpose.
• Fraud prevention services: yz777 participates in industry fraud-prevention schemes. Where an account is suspected of fraudulent activity, relevant data may be shared with these schemes to protect the platform and other players.
• Regulatory and law enforcement authorities: yz777 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by a lawful request, court order, or regulatory direction under the jurisdiction of our gaming license.
• Professional advisors: Lawyers, auditors, and compliance consultants who assist yz777 in meeting its legal and regulatory obligations may have access to personal data under strict confidentiality obligations.

yz777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming license obligations. The following retention periods apply as a general guide:

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is applied, the resulting data set may be retained for statistical and analytical purposes indefinitely, as it no longer constitutes personal data.

yz777 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. Our security practices include:

• Encryption in transit: All data transmitted between your device and the yz777 Platform is encrypted using TLS (Transport Layer Security) protocols. You will always see a padlock icon and HTTPS in your browser address bar when accessing yz777.pro.
• Encryption at rest: Personal data stored in yz777's databases — including CNIC records, financial data, and account credentials — is encrypted at rest using industry-standard symmetric encryption.
• Password hashing: Account passwords are never stored in plaintext. yz777 uses a strong cryptographic hashing algorithm with salting to protect stored password representations.
• Two-factor authentication: yz777 offers optional two-factor authentication (2FA) to all registered players. Enabling 2FA significantly reduces the risk of unauthorised account access and is strongly recommended.
• Access controls: Access to personal data within yz777's internal systems is restricted to employees and contractors who require it to perform their specific role. Access is governed by role-based permissions and is regularly audited.
• Penetration testing: yz777's platform and infrastructure undergoes regular security assessments, including penetration testing by qualified external parties, to identify and remediate potential vulnerabilities.
• Incident response: yz777 maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in a high risk to affected individuals, yz777 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

As a data subject whose personal data is processed by yz777, you hold a number of rights in relation to that data. These rights are described below. To exercise any of these rights, contact the yz777 privacy team via the support email address provided in Section 13 of this Policy.

yz777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse platform usage. The following categories of cookies are in use on yz777.pro:

yz777 does not use third-party advertising cookies or cross-site tracking cookies for retargeting purposes. When you first visit yz777.pro, you will be presented with a cookie consent notice that allows you to manage your cookie preferences for non-essential categories. You may update your cookie preferences at any time via the cookie settings link in the Platform footer.

Most web browsers allow you to manage cookies via browser settings. Disabling strictly necessary cookies will prevent you from logging in to your yz777 account.

yz777 strictly prohibits access to the Platform by individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. Our registration process requires entry of a date of birth, and KYC verification confirms age via CNIC.

If yz777 discovers that personal data has been collected from a player who is under 21 years of age, we will:

• Immediately close the account without appeal.
• Permanently delete all personal data associated with that account from our systems, subject only to any retention obligations arising under AML or licensing law that cannot be avoided.
• Return any real-money balance to the payment method from which it was deposited.
• Where appropriate, refer the matter to the relevant authority under our licensing jurisdiction.

If you believe a person under the age of 21 is using or attempting to use the yz777 Platform, please report this to our support team immediately. yz777 takes underage gambling extremely seriously and treats all such reports as a priority.

yz777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to our services, or requirements imposed by changes in applicable law or our gaming license conditions.

When material changes are made to this Policy, yz777 will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a reasonable period following the update. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent change.

Your continued use of the yz777 Platform following notification of an update to this Policy constitutes your acknowledgement of the revised Policy. If you do not agree with a material change to this Policy, you may close your account in accordance with the account closure process described in the yz777 Terms & Conditions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how yz777 handles your personal data, you may contact our privacy team using the details below.

All privacy-related enquiries are handled by our dedicated compliance team. We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days of receipt.

When submitting a data rights request, please include your registered username and the email address associated with your yz777 account so that we can locate your records efficiently. We may ask for additional verification to confirm your identity before processing the request.

If you are not satisfied with yz777's response to a privacy concern, you may escalate your complaint to the regulatory authority under whose jurisdiction yz777's gaming license is issued. Details of the applicable regulatory body are available upon request from our compliance team.