fc777 Privacy Policy

1 Who We Are

fc777 ("we", "us", "our") is the operator of the online gaming platform accessible at https://fc777.bet and any associated mobile applications or software. We offer cricket betting, live casino, slot games, dice, and other gaming products to eligible players, with a primary focus on the Pakistani market — serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond.

fc777 operates under an international gaming licence. As an operator subject to that licence, we are required to maintain robust data-protection practices that meet or exceed internationally recognised standards. This Privacy Policy describes in plain English how we fulfil those obligations in relation to the personal data of our players and website visitors.

2 Data We Collect

We collect personal data about you from three primary sources: information you provide directly, information generated automatically when you use the Platform, and information received from trusted third parties.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address (street, city, province, postal code), mobile number, and email address.
• Identity verification (KYC) documents: Copies of your CNIC (Computerised National Identity Card), passport, or other government-issued identification; proof of address such as a utility bill or bank statement.
• Payment information: JazzCash or EasyPaisa mobile wallet numbers, HBL, UBL, or Meezan Bank account details, Raast IDs, or other payment identifiers used to make deposits and request withdrawals in PKR. Full card numbers are never stored on our servers — payment tokenisation is handled by our PCI-DSS compliant payment processors.
• Communications: The content of messages you send to our customer support team via live chat, email ([email protected]), or any feedback or complaint you submit.
• Responsible gaming preferences: Deposit limits, loss limits, cooling-off period settings, and self-exclusion requests you configure within your account.

2.2 Automatically Collected Data

• Device & technical data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session start/end times, clickstream patterns, and search queries entered within the Platform.
• Location data: Approximate geographic location derived from your IP address, used solely for compliance and fraud-prevention purposes.
• Cookies and similar technologies: Session cookies, preference cookies, analytics identifiers, and fraud-detection tokens. See Section 6 for full details.

2.3 Data from Third Parties

• Identity verification providers: Results of automated KYC checks, including document authenticity scores and biometric liveness scores where applicable.
• Payment processors: Transaction status confirmations and fraud risk scores from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other payment partners.
• Fraud and AML screening services: Sanctions list matches, politically exposed person (PEP) flags, and adverse media alerts from third-party compliance databases.
• Responsible gaming registers: Self-exclusion status information shared by partner operators or national responsible gaming registers where fc777 participates in cross-operator exclusion schemes.

3 How We Use Your Data

fc777 uses your personal data for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your consent or updating this Policy with appropriate notice.

4 Legal Basis for Processing

Every processing activity carried out by fc777 rests on one of the following recognised legal bases. Where we rely on legitimate interests, we have conducted a balancing test to confirm that our interests do not override your fundamental rights and freedoms.

• Contract performance: Processing necessary to deliver the gaming services you signed up for — account creation, game play, payments, and support.
• Legal obligation: Processing required to comply with anti-money-laundering laws, gaming licence conditions, tax reporting requirements, and court orders.
• Legitimate interests: Processing that serves fc777's reasonable business interests — fraud prevention, platform security, internal analytics, and responsible gaming monitoring — where those interests are not outweighed by your privacy rights.
• Consent: Processing for optional activities such as marketing emails, push notifications, and analytics cookies, which you may withdraw at any time.
• Vital interests: In exceptional circumstances, processing necessary to protect the life or safety of a player (for example, sharing contact details with emergency services if a player discloses a serious welfare concern).

5 Sharing Your Data

fc777 does not sell your personal data. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — to process deposits and withdrawals. These providers receive only the payment identifiers and transaction amounts required to complete the transaction.
• KYC and identity verification providers: Regulated third-party identity verification services that check the authenticity of your CNIC or passport and confirm your age. All such providers are bound by strict data-processing agreements.
• AML and fraud screening providers: Compliance databases used to screen for sanctions-list matches, PEP status, and adverse media. Data shared is limited to name, date of birth, and nationality.
• Licensing and regulatory authorities: fc777's gaming licence requires us to provide player data to the relevant licensing body upon request, particularly in relation to investigations or compliance audits.
• Responsible gaming organisations: Where you have self-excluded or where fc777 participates in cross-operator exclusion schemes, relevant exclusion data may be shared with partner operators or national registers to enforce your exclusion across multiple platforms.
• Law enforcement and legal proceedings: We may disclose personal data where required by a valid court order, search warrant, subpoena, or other lawful authority. Where permitted by law, we will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of fc777's business, your data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or a prominent Platform notice before your data becomes subject to a different privacy policy.

6 Cookies & Tracking Technologies

fc777 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to keep you securely logged in, to remember your preferences, and to gather aggregate analytics data that helps us improve the player experience.

You can manage your cookie preferences at any time through the cookie settings panel accessible via the footer of the Platform. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Clearing your browser cookies will reset your preferences and you will be shown the cookie consent banner again on your next visit.

7 Data Retention

fc777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with fc777.
• Post-closure account records: Following voluntary or involuntary account closure, core account data (identity documents, transaction history, betting records) is retained for a minimum of five (5) years to comply with anti-money-laundering record-keeping requirements under applicable regulations.
• Customer support communications: Retained for three (3) years from the date of the last communication, after which they are securely deleted unless they form part of an ongoing legal claim.
• Responsible gaming records (self-exclusion, limit history): Retained for the duration of the exclusion or restriction period, plus a further five (5) years to enable investigation of any subsequent re-registration attempts.
• Marketing preferences and consent records: Retained until you withdraw consent, plus one (1) year thereafter as proof of compliance.
• Anonymised analytics data: Retained indefinitely in aggregate, anonymised form that cannot be linked back to any individual.

8 Your Rights

Depending on the laws applicable in your jurisdiction and the legal basis fc777 relies upon to process your data, you may have some or all of the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data fc777 holds about you, together with information about how it is being used. We will respond within 30 calendar days.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal data. For most information (name, address, contact details), you can update it directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (see Section 7). We will clearly explain any limitations when responding to your erasure request.
• Right to restriction of processing: You may ask us to pause the use of your data while a dispute about its accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request your data in a commonly used, machine-readable format (e.g., CSV or JSON) so that you can transfer it to another provider.
• Right to object: You may object to processing based on legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Rights related to automated decision-making: Where fc777 uses automated processes to make decisions that significantly affect you (for example, automated fraud detection leading to account restriction), you have the right to request human review of that decision.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request" and a description of your request. We will verify your identity before processing any request. No fee is charged for standard requests; we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

9 International Data Transfers

fc777 operates under an international gaming licence, and some of our service providers and technology partners are located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. These countries may have data protection laws that differ from those in your country of residence.

Where such transfers occur, fc777 ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by relevant regulatory authorities, requiring the recipient to protect your data to the same standard as this Policy.
• Transfer impact assessments where required, to evaluate whether the destination country's laws undermine the effectiveness of the contractual protections.
• Selection of service providers that participate in recognised international data protection frameworks or are certified under equivalent standards.

For more information about the specific safeguards applied to any international transfer, including a copy of the relevant contractual clauses, please contact us at [email protected].

10 Children & Minors

The fc777 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from anyone under the age of 21. Age verification is a mandatory step in our registration and KYC process, and we will not activate any account until age has been confirmed.

If fc777 discovers — through KYC review, third-party verification, or any other means — that a registered player is under 21, we will immediately suspend the account, void any bets placed, and permanently delete all personal data associated with that account. Any balance remaining in the account at the time of suspension will be handled in accordance with our regulatory obligations.

11 Security Measures

fc777 implements a layered information security programme designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key technical and organisational security measures include the following:

• Encryption in transit: All data transmitted between your browser or mobile app and fc777's servers is protected using TLS 1.3 (Transport Layer Security). We enforce HTTPS across the entire Platform and use HSTS to prevent downgrade attacks.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents and payment identifiers — is encrypted using AES-256 encryption with access-controlled key management.
• Access controls: Staff access to personal data is granted on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) on all internal systems.
• Penetration testing: fc777 commissions independent third-party penetration tests on its Platform and infrastructure at least once per year, and patches critical vulnerabilities within 48 hours of discovery.
• Incident response: We maintain a documented data-breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify the relevant regulatory authority within 72 hours and affected players without undue delay.
• Vendor security assessments: All third-party service providers with access to personal data undergo a security assessment before onboarding and are subject to contractual security obligations.

While fc777 takes every reasonable precaution, no system is completely impenetrable. You play an important role in protecting your own data — please follow the account security guidance in our Terms & Conditions and enable two-factor authentication (2FA) on your account.

12 Third-Party Links

The fc777 Platform does not contain links to external third-party websites as a matter of policy. All navigation within the Platform remains within the fc777 domain. However, if you access fc777 through a third-party referral source or if you use a third-party payment application (such as the JazzCash or EasyPaisa mobile app) to complete a transaction, please be aware that those third-party platforms operate under their own privacy policies, which fc777 has no ability to control or influence.

fc777 is not responsible for the privacy practices, security standards, or content of any third-party platform. We encourage you to read the privacy notice of any third-party service you use in connection with your fc777 account — particularly your payment provider — before submitting personal data to that service.

13 Changes to This Policy

fc777 reviews this Privacy Policy regularly and may update it to reflect changes in our data processing activities, applicable law, our gaming licence conditions, or best practice guidance from relevant data protection authorities. The "Last Updated" date at the top of this page always reflects the date of the most recent revision.

Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data, or materially alters your rights — we will provide at least fourteen (14) days' advance notice by:

• Displaying a prominent notice banner on the Platform; and
• Sending an email notification to the address registered on your fc777 account.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates required immediately by law) may take effect upon publication without prior individual notice.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with a revised Policy, you must discontinue use of the Platform and may request voluntary account closure as described in our Terms & Conditions.

14 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how fc777 processes your personal data, please get in touch with our Data Protection team using the contact details below.

If you are not satisfied with fc777's response to your privacy concern, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction, or with the regulatory body responsible for overseeing fc777's gaming licence. We would, however, appreciate the opportunity to address your concerns directly before you escalate to a supervisory authority.