bba777 Privacy & Data Policy

This Policy applies to all personal data collected by bba777 through its website, mobile interface, customer support channels, and any related services. It covers all users of the bba777 platform, including registered players, prospective players who browse the site without registering, and individuals who contact us through our support channels.

bba777 is committed to handling your personal data responsibly and in accordance with applicable data protection legislation. While Pakistan is the primary market for bba777's online casino and cricket betting services, this Policy is designed to meet internationally recognised standards of data protection, including principles broadly aligned with the General Data Protection Regulation (GDPR).

This Policy should be read alongside the bba777 Terms and Conditions, which govern the overall relationship between bba777 and its players.

bba777 collects personal data through several channels, including account registration, use of platform services, payment processing, and communications with our support team. The categories of personal data we may collect include:

bba777 does not collect any special categories of sensitive personal data (such as health data, biometric data, or religious beliefs) unless specifically required by applicable anti-money laundering or responsible gaming obligations and only with appropriate safeguards in place.

bba777 uses the personal data it collects for the following specific purposes. Each purpose is supported by a valid legal basis, as described in Section 4 of this Policy:

• Account Management: To create, verify, maintain, and administer your bba777 player account, including processing changes to your account settings and preferences.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and bank transfer, and to maintain accurate financial records.
• Identity Verification (KYC): To comply with Know Your Customer obligations by verifying your identity, age, and the legitimacy of your funding sources.
• Fraud Prevention and AML Compliance: To monitor platform activity for signs of fraud, money laundering, collusion, or bonus abuse, and to report suspicious activity to relevant authorities where legally required.
• Customer Support: To respond to queries, complaints, or disputes raised through the bba777 live chat or email support channels.
• Responsible Gaming: To monitor for at-risk gambling behaviour and, where appropriate, to proactively contact players or apply account restrictions in line with our responsible gaming obligations.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about bba777 bonuses, PSL promotions, and new game releases.
• Platform Improvement: To analyse aggregated usage data in order to improve the bba777 platform, optimise game performance, and enhance the overall player experience.
• Legal Compliance: To comply with applicable laws, regulations, and orders from regulatory or law enforcement authorities.

bba777 processes your personal data only where a valid legal basis exists. The primary legal bases on which bba777 relies are as follows:

• Contractual Necessity: Processing required to fulfil the contract between bba777 and the player — this covers account management, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law — this covers KYC verification, AML monitoring, and regulatory reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of bba777's legitimate business interests — this covers fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your own data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — this covers marketing communications and the use of non-essential cookies. You may withdraw consent at any time without detriment to your account status.

bba777 does not sell your personal data to any third party. However, in order to operate the platform effectively and meet its legal obligations, bba777 may share your data with the following categories of trusted third parties, subject to strict data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other certified payment partners receive the minimum data necessary to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC service providers assist bba777 in verifying player identities and ages. These providers are bound by strict confidentiality and data security obligations.
• Game Software Providers: Licensed game providers whose titles are available on bba777 may receive anonymised or pseudonymised usage data for the purpose of game performance monitoring. They do not receive your personal identity or financial data.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or the instruction of a competent regulatory authority, bba777 will disclose personal data as legally required.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance partners may have access to personal data solely for the purpose of providing technical services to bba777 under binding data processor agreements.

All third-party data processors engaged by bba777 are carefully vetted and are contractually required to maintain the confidentiality and security of any personal data processed on bba777's behalf. They may only use your data for the specific purposes for which they were engaged.

bba777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. The following types of cookies may be placed on your device when you visit bba777:

• Strictly Necessary Cookies: These cookies are essential for the bba777 platform to function. They enable core features such as user authentication, session management, and fraud prevention. You cannot opt out of these cookies without ceasing to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming configurations — so you do not need to re-enter them each session.
• Analytics Cookies: These cookies collect anonymised data about how players interact with the bba777 platform, which pages are visited most frequently, and where users encounter issues. This data is used to improve the platform experience.
• Marketing Cookies: Where you have given explicit consent, these cookies allow bba777 to deliver targeted promotional content relevant to your interests, including PSL betting promotions and new game releases.

bba777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Personal and financial data associated with an active bba777 account is retained for the duration of the account's active status plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification or from the date of the last transaction associated with the account, whichever is later.
• Transaction Records: Records of all deposits, withdrawals, wagers, and bonus transactions are retained for a minimum of seven (7) years for regulatory compliance and audit purposes.
• Support Communications: Customer support correspondence is retained for a minimum of three (3) years from the date of the last communication.
• Marketing Data: Marketing consent records and associated preference data are retained until consent is withdrawn, at which point they are deleted or anonymised within 30 days.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

bba777 takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and bba777 servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised account access.
• Role-based access controls ensuring that only authorised bba777 personnel can access personal data, and only to the extent necessary for their specific role.
• Regular penetration testing and security audits conducted by qualified third-party cybersecurity specialists.
• Automated fraud detection and anomaly monitoring systems operating 24/7 across all platform activity.

While bba777 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bba777 will notify you promptly in accordance with applicable data breach notification requirements.

bba777 respects your rights over your personal data. Subject to applicable law and certain conditions, you have the following rights with respect to the personal data bba777 holds about you:

• Right of Access: You have the right to request a copy of the personal data bba777 holds about you, together with information about how and why it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected. You may update certain personal information directly through your bba777 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that bba777 delete your personal data. This right is subject to exceptions, including where retention is required for legal compliance, fraud prevention, or dispute resolution purposes.
• Right to Restriction: You have the right to request that bba777 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where bba777 relies on legitimate interests as the legal basis for processing. You may also object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any of the above rights, please contact the bba777 data protection team by email at [email protected] with the subject line "Data Rights Request". bba777 will respond to all valid requests within 30 days. In some cases, we may need to verify your identity before processing your request.

The bba777 platform is strictly for adults aged 21 and over. bba777 does not knowingly collect personal data from any person under the age of 21. Our registration process includes an age declaration step, and bba777 operates a rigorous KYC programme to verify the age of all registered players.

If bba777 discovers or is notified that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account, retaining only the minimum information required for legal compliance and fraud prevention records.

bba777 operates as an internationally licensed gaming platform and, as such, some of your personal data may be processed or stored in countries outside Pakistan. Where personal data is transferred internationally, bba777 ensures that appropriate safeguards are in place to maintain the same level of protection as would apply under Pakistani and internationally recognised data protection standards.

Safeguards used for international data transfers may include:

• Contractual data protection clauses incorporated into agreements with all third-party data processors located outside Pakistan.
• Transfers only to jurisdictions that maintain an adequate level of data protection as assessed by bba777's legal and compliance team.
• Binding corporate rules or equivalent frameworks where applicable.

If you would like further information about the international transfer mechanisms used by bba777, please contact us at [email protected].

bba777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made in response to updates in applicable law, new regulatory requirements, changes to our data processing activities, or improvements to our privacy practices.

When material changes are made to this Policy, bba777 will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page. We encourage all players to review this Policy periodically to stay informed about how bba777 handles their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bba777 processes your personal data, please get in touch with our dedicated data protection and support team through the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" for the fastest response.
• Live Chat: Available 24/7 via your bba777 account dashboard once you are logged in.

bba777 is committed to handling all privacy-related enquiries promptly and transparently. We aim to acknowledge all privacy requests within 48 hours and to provide a full response within 30 calendar days. Where a request is particularly complex, we will notify you if additional time is required, but will always respond within 60 days of receipt.