bn777 Privacy
Policy

This Privacy Policy applies to all personal data processed by bn777 ("the Company," "we," "us," "our") in connection with the bn777 online gaming platform available at bn777.one, including all associated services, mobile interfaces, and customer support channels (collectively, the "Platform").

bn777 acts as the Data Controller for personal data collected from users of the Platform. This means we are responsible for deciding what personal data is collected, the purposes for which it is used, and the means by which it is processed. We take this responsibility seriously and are committed to lawful, fair, and transparent data handling in line with applicable international data protection standards.

This Privacy Policy should be read alongside bn777's Terms & Conditions and Responsible Gaming Policy. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform immediately.

bn777 collects only the personal data necessary to deliver, operate, and improve the Platform services. The categories of personal data we collect include the following:

Identity Data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• National ID or passport number (collected during KYC verification for Pakistani users — typically your CNIC number).
• Copies of identity documents submitted during the verification process.

Contact Data:

• Email address used for account registration and communications.
• Pakistani mobile number (used for account verification and, where opted in, promotional notifications).
• Residential address, including city (Karachi, Lahore, Islamabad, Faisalabad, or other Pakistani cities as applicable).

Financial Data:

• Payment method details used for deposits and withdrawals, including JazzCash account references, EasyPaisa references, bank account numbers (HBL, UBL, Meezan Bank), and USDT wallet addresses.
• Transaction history, including deposit amounts, withdrawal amounts, and dates.
• Account balance and wagering history (used for responsible gaming monitoring and compliance).

Technical and Usage Data:

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser information.
• Session timestamps, pages visited, and game sessions accessed on the Platform.
• Login history and account activity logs.

Communications Data:

• Records of communications between you and bn777 support, including live chat transcripts and support ticket content.
• Preferences and settings data you configure in your account.

bn777 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide during account registration, identity verification, contact form submissions, and support interactions.
• Platform Activity: Data generated automatically as a result of your use of the Platform, including game activity, betting history, login events, and session data.
• Payment Providers: Transaction confirmation data received from payment processors such as JazzCash, EasyPaisa, and Pakistani bank partners when you deposit or withdraw funds.
• Cookies and Tracking Technologies: Technical data collected via cookies, web beacons, and similar technologies when you browse the Platform. See Section 9 for full details.
• Third-Party Verification: Identity and fraud screening data received from KYC and AML compliance partners used during the account verification process.
• Publicly Available Sources: In limited circumstances, bn777 may cross-reference information against publicly available sources (such as sanctions lists) as part of our legal compliance obligations.

bn777 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your bn777 account, verifying your identity, processing logins, and managing account settings.
• Platform Services: Enabling access to casino games, sports betting markets, and all other features of the bn777 Platform.
• Payment Processing: Processing deposits and withdrawals via your selected payment method; detecting and preventing payment fraud.
• Legal Compliance: Meeting obligations under anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, gaming licence conditions, and tax reporting obligations where applicable.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; enforcing self-exclusion and cooling-off periods; complying with age verification requirements (21+).
• Customer Support: Responding to queries, resolving disputes, and improving the quality of our support services.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, account takeovers, money laundering, and abuse of bonus systems.
• Platform Improvement: Analysing aggregate usage data (in anonymised or pseudonymised form) to improve the Platform's performance, design, and product offerings.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates where you have opted in to receive such communications. You may opt out at any time.

bn777 does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals, except as required for mandatory regulatory compliance checks where automated screening is applied to sanctions lists and fraud databases.

bn777 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and gaming licence conditions imposed by our licensing authority.
• Legitimate Interests: Processing conducted for purposes that are in bn777's or our users' legitimate interests and do not override your data protection rights, including fraud prevention, security monitoring, and Platform improvement.
• Consent: Processing for which you have given explicit consent, including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bn777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data in the following limited circumstances:

• Payment Processors: We share transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT payment infrastructure providers as necessary to process your deposits and withdrawals.
• KYC and AML Compliance Providers: Identity verification data may be shared with regulated third-party KYC and AML screening services to fulfil our legal compliance obligations. These providers are contractually bound to process data only for these specified purposes.
• Game Providers: Non-personally identifiable session data may be shared with game software providers for the purpose of game performance, fairness certification, and dispute resolution.
• Regulatory and Law Enforcement Authorities: bn777 will disclose personal data to regulatory bodies, gaming authorities, law enforcement agencies, or courts when required to do so by law or valid legal process.
• Fraud Prevention Networks: In cases of suspected fraud or criminal activity, we may share relevant data with fraud prevention organisations and other gaming operators through industry-standard responsible gaming and fraud-sharing networks.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bn777's business, personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

All third parties with whom bn777 shares personal data are required to implement appropriate technical and organisational security measures and to process data solely for the purposes we have specified. bn777 does not permit third parties to use your data for their own independent marketing or commercial purposes.

bn777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account with bn777 and for a minimum of 5 years following account closure, in compliance with AML and gaming licence record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of 7 years to meet standard accounting and regulatory obligations.
• KYC Documentation: Identity verification documents are retained for the period required by our gaming licence authority and applicable AML regulations — typically 5 years from the date of account closure.
• Support Communications: Customer support records are retained for up to 3 years following resolution of the relevant query or dispute.
• Marketing Data: Where you have opted in to marketing, contact details are retained until you opt out plus a short additional period to process the opt-out.
• Technical and Log Data: Server logs and session data are typically retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to you as an individual. We periodically review retained data to ensure we are not holding information beyond its necessary retention period.

bn777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes the following controls:

• Encryption in Transit: All data transmitted between your device and the bn777 Platform is encrypted using 256-bit SSL/TLS encryption. This ensures that your personal and financial data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored on bn777's systems is encrypted at rest using industry-standard algorithms. Payment credentials are tokenised and never stored in plain text on our servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bn777 staff and contractors are only granted access to the personal data necessary for their specific role. All access is logged and audited.
• Two-Factor Authentication: Privileged internal access to systems containing personal data requires multi-factor authentication. We encourage all users to enable 2FA on their bn777 accounts for additional protection.
• Regular Security Testing: bn777 conducts regular security assessments, vulnerability scans, and penetration testing of our infrastructure to identify and address potential weaknesses before they can be exploited.
• Incident Response: bn777 maintains a formal data breach response process. In the event of a confirmed personal data breach that poses a risk to individuals, we will notify affected users and relevant authorities within the timeframes required by applicable law.

bn777 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve your experience, and analyse Platform performance. A cookie is a small text file stored on your device by your browser when you visit the Platform.

The following categories of cookies are used on bn777:

You can manage non-essential cookie preferences through your browser settings or the cookie preference centre available in the Platform's footer. Note that disabling certain cookies may affect the functionality of parts of the Platform. bn777 does not use third-party advertising or retargeting cookies.

Subject to applicable law and bn777's legal obligations, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in Section 14.

bn777 will respond to all valid data rights requests within 30 calendar days. In complex cases, this may be extended by a further 60 days with notification to you. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The bn777 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 21. Age verification is conducted as part of the mandatory KYC process for all registered accounts.

If bn777 becomes aware that personal data has been collected from a person under the age of 21, we will take the following immediate actions:

• Permanently close the account in question.
• Delete all personal data associated with the underage user as promptly as technically possible, subject to any overriding legal retention obligations.
• Refund deposited funds to the source payment method where technically feasible, after deducting any bonus funds applied to the account.
• Forfeit all gaming winnings generated on the account in line with the bn777 Terms & Conditions.

If you are a parent or guardian and believe your child under 21 may have created an account on bn777, please contact our support team immediately at [email protected]. We will prioritise the investigation and closure of any such account.

As bn777 is an internationally operated online gaming platform, personal data collected from Pakistani users may be transferred to and processed in countries outside Pakistan where bn777's servers, cloud infrastructure, or third-party service providers are located.

When personal data is transferred internationally, bn777 ensures that appropriate safeguards are in place to protect your data to a standard that is equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Transfers to countries recognised as providing adequate levels of data protection by relevant international standards.
• Standard contractual clauses or data processing agreements with receiving organisations that impose equivalent data protection obligations.
• Binding corporate rules where data is transferred within the bn777 corporate group.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our Data Protection contact using the details in Section 14.

bn777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where changes to this Privacy Policy are material — meaning they significantly affect how we use your personal data or your data rights — bn777 will notify registered users via their registered email address or through a prominent notice on the Platform before the changes take effect. For minor clarifications or administrative updates, the revised policy will be published on the Platform without separate notification.

Your continued use of the bn777 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bn777, please contact us using the following details:

Email: [email protected]
Subject Line: Please mark all data protection queries with the subject line "Privacy Enquiry" or "Data Rights Request" so they can be routed correctly.

All privacy-related enquiries are handled by bn777's data protection team. We aim to respond to all privacy queries within 5 business days (or within the statutory timeframes for formal data rights requests).

If you are not satisfied with bn777's response to a data protection concern, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction in which you reside or in which the alleged breach occurred. Contact details for relevant authorities can be provided upon request.