hi777 Privacy Policy — How We Handle Your Personal Data

For the purposes of applicable data protection law, hi777 ("the Platform") is the data controller responsible for the personal data collected and processed through hi777.today. As data controller, hi777 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

hi777 operates under an internationally recognised gaming license, which imposes specific legal obligations regarding the collection, processing, and protection of player data. These obligations form part of the framework within which this Privacy Policy operates. Where our licensing obligations require us to process data in a particular way, those obligations will be clearly identified in this document.

If you have any questions about how hi777 processes your personal data, or wish to exercise any of your data rights, you may contact us using the details provided in Section 15 of this policy.

hi777 collects the following categories of personal data from players:

hi777 does not collect sensitive personal data (such as health information, religious beliefs, or biometric data) except where required by applicable regulatory obligations, in which case explicit consent will be obtained and the specific purpose clearly explained.

hi777 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to surveys, or update your account settings.
• Automatically: When you visit or use hi777.today, our systems automatically collect technical data including your IP address, device identifiers, browser information, and usage data through cookies and similar tracking technologies (see Section 11 for full cookie details).
• From third-party payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, transaction confirmation data is shared with hi777 by the relevant payment processor to verify the transaction.
• From identity verification services: During the KYC process, hi777 may use third-party identity verification services to validate the documents you provide. These services process your identity data on hi777's behalf under appropriate data processing agreements.
• From fraud prevention services: hi777 uses third-party fraud detection tools to identify potentially fraudulent activity. These tools may collect and analyse behavioural and technical data associated with your account.

hi777 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and manage your hi777 player account, including processing registration, verifying your identity, and managing account security.
• Service Delivery: To provide access to the casino, sportsbook, and all associated platform features in PKR, including processing deposits and withdrawals through Pakistani payment methods.
• Legal & Regulatory Compliance: To fulfil our obligations under our international gaming license, including KYC verification, anti-money laundering (AML) checks, age verification (21+ requirement), and regulatory reporting.
• Responsible Gaming: To monitor gameplay patterns and identify potential signs of problem gambling, apply and enforce responsible gaming tools set by the player, and comply with self-exclusion obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as defined in the hi777 Terms and Conditions.
• Customer Support: To respond to enquiries, resolve disputes, process complaints, and provide assistance through our 24/7 live chat and email support channels.
• Platform Improvement: To analyse usage patterns, identify technical issues, conduct A/B testing, and improve the hi777 platform experience for Pakistani players.
• Marketing: To send promotional communications, bonus offers, and platform updates to players who have opted in to receive such communications (see Section 13 for details and opt-out instructions).

hi777 processes personal data only where a valid legal basis exists. The legal bases relied upon for different processing activities are as follows:

• Contractual Necessity: Processing required to perform the contract between hi777 and the Player — including account creation, service delivery, and payment processing. Without this processing, hi777 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable laws and our gaming license obligations, including KYC verification, AML reporting, age verification, and the maintenance of gambling transaction records.
• Legitimate Interests: Processing carried out for hi777's legitimate business interests, including fraud prevention, platform security, technical improvement, and direct marketing to existing customers (where these interests are not overridden by your rights and interests).
• Consent: Processing carried out on the basis of your explicit consent, including the sending of promotional marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

hi777 does not sell your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency payment processors receive transactional data necessary to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and identity verification services receive the identity documents you submit during verification. These providers act as data processors under binding agreements with hi777.
• Fraud Prevention Services: Third-party fraud detection and AML screening providers receive the minimum necessary data to perform risk assessments on transactions and account activity.
• Game Providers: The third-party game studios and live dealer providers whose games are available on hi777 may receive limited technical data (such as session identifiers) necessary to deliver the game experience.
• Regulatory and Law Enforcement Authorities: hi777 will disclose personal data to regulators, law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation.
• Professional Advisers: hi777 may share data with legal advisers, auditors, and compliance consultants where necessary for the conduct of hi777's business, subject to professional confidentiality obligations.

hi777 operates internationally and some of the third-party service providers we use may process personal data outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in hi777's licensing jurisdiction, hi777 will implement appropriate safeguards to protect the data, including:

• Standard contractual clauses approved by the relevant supervisory authority
• Binding corporate rules where applicable
• Adequacy decisions recognising equivalent protection in the destination country

Players who wish to obtain more information about the safeguards in place for international data transfers may contact hi777 using the details in Section 15 of this policy.

hi777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and hi777 servers is encrypted using 256-bit SSL/TLS encryption — the same standard used by major Pakistani banks and financial institutions.
• Encryption at Rest: Sensitive personal data stored on hi777 servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to hi777 staff who have a genuine operational need for that access. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Penetration Testing: hi777 undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: hi777 maintains a documented data breach response plan. In the event of a data breach that presents a risk to Player rights and freedoms, affected Players and the relevant supervisory authority will be notified in accordance with applicable legal obligations.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication on their hi777 accounts as an additional layer of security.

While hi777 takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is 100% secure. Players are responsible for maintaining the security of their own devices and login credentials.

hi777 retains personal data for only as long as necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention periods apply:

• Active Account Data: Personal data associated with an active hi777 account is retained for the duration of the account relationship plus the legally required retention period following account closure.
• Transaction Records: Financial transaction records, including deposits, withdrawals, and gameplay history, are retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering regulations applicable to our licensing framework.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the account relationship, in accordance with applicable KYC and AML obligations.
• Support Communications: Customer support chat transcripts and email correspondence are retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Marketing Data: If you have opted out of all marketing communications, we retain a record of your opt-out preference indefinitely to ensure we do not contact you in the future.
• Technical Logs: Server logs and technical usage data are retained for twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with hi777's data destruction procedures.

Subject to applicable law and the limitations inherent in our regulatory obligations, hi777 Players hold the following rights in relation to their personal data:

To exercise any of these rights, please contact hi777 support using the details in Section 15. hi777 will respond to all data rights requests within 30 calendar days. We may request verification of your identity before processing a data rights request to ensure that data is not disclosed to unauthorised parties.

hi777 uses cookies and similar tracking technologies to enhance the functionality of the platform, analyse usage patterns, and deliver relevant content. The following categories of cookies are used on hi777.today:

• Strictly Necessary Cookies: These cookies are required for the basic operation of hi777.today, including maintaining your login session, processing transactions, and ensuring platform security. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how Players use hi777.today — such as which pages are visited most frequently and where errors occur. This data helps us improve the platform experience. You may opt out of these cookies without affecting core platform functionality.
• Functionality Cookies: These cookies remember your preferences, such as language settings and responsible gaming configurations, to personalise your experience on return visits.
• Marketing & Targeting Cookies: These cookies track your activity on hi777 to deliver relevant promotional content. They are only set with your consent, which can be withdrawn at any time through your account cookie settings.

You can manage your cookie preferences at any time through the cookie settings accessible in your hi777 account. Please note that disabling certain categories of cookies may affect the functionality of some platform features.

Parents and guardians who believe that a person under 21 has registered an account with hi777 should contact our support team immediately at [email protected] (plain text — not a clickable link). hi777 takes underage gambling extremely seriously and will act swiftly on any such report.

hi777 may send promotional communications, bonus notifications, and platform updates to Players who have opted in to receive such communications. Marketing communications from hi777 will be sent via the following channels: email, SMS to your registered Pakistani mobile number, and push notifications (if you have enabled these on your device).

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email from hi777
• Updating your communication preferences in your hi777 account settings
• Contacting hi777 support via live chat or email and requesting removal from marketing lists

Opt-out requests will be processed within five (5) business days. Please note that even if you opt out of marketing communications, hi777 will continue to send you transactional and account-related communications — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account.

hi777 reviews and updates this Privacy Policy periodically to ensure it accurately reflects our data processing practices and any changes in applicable law or regulatory requirements. Where material changes are made to this policy — meaning changes that affect your rights or the way your personal data is used — hi777 will notify you via the email address or mobile number registered to your account, with reasonable notice before the changes take effect.

Minor or non-material updates (such as typographical corrections or clarifications that do not change the substance of the policy) may be made without specific notice. The "Last Reviewed" date at the top of this document will be updated following any amendment. It is your responsibility to review this Privacy Policy periodically. Continued use of hi777 following the effective date of any update constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data security concern, please contact hi777 using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the hi777.today website
• Response Time: hi777 aims to respond to all data protection enquiries within 48 hours of receipt, and to provide a substantive response to data rights requests within 30 calendar days as required by applicable law.

When contacting hi777 regarding your personal data, please include your registered mobile number and account username to assist with identity verification. hi777 will never request your password through any support channel.

If you are not satisfied with hi777's handling of your data protection request, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction applicable to hi777's licensing framework. Details of the relevant authority can be provided upon request.