az777 Privacy Policy –
Your Data, Protected

az777 ("az777," "we," "us," or "the Platform") operates an online casino and sports betting platform accessible at az777.bid, serving registered players in Pakistan. az777 is operated by a legal entity incorporated under the laws of its jurisdiction of registration and licensed under an international gaming authority.

For all privacy-related enquiries, requests to exercise your data rights, or questions about the handling of your personal information, you may contact az777 through the live chat support facility available on the platform or by writing to us. Our support team responds in both Urdu and English, and operates on Pakistan Standard Time (PST). Email addresses are displayed as plain text on our Contact and About Us pages and must not be used for spam or unsolicited commercial communications.

This Privacy Policy should be read alongside az777's Terms & Conditions and Responsible Gaming Policy, all of which are available on the az777 platform and collectively govern your relationship with us.

This Privacy Policy applies to all personal data collected, processed, or stored by az777 in connection with the operation of the az777 platform. It covers data obtained through:

• Account registration and identity verification processes;
• Deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard;
• Use of casino games, sports betting markets, and other platform features;
• Communications between players and az777 support;
• Cookies and technical data collected during browsing sessions.

This Policy applies to all individuals who register an az777 account or otherwise interact with the platform. By using az777, you acknowledge that you have read and understood the provisions of this Policy.

az777 collects only the personal data that is necessary to operate the platform, fulfil regulatory obligations, and provide the services you have requested. The categories of personal data we collect include:

az777 does not intentionally collect sensitive personal data such as biometric information, political opinions, religious beliefs, or health data. If any such data is inadvertently provided (for example in free-text support messages), it will not be processed for any purpose other than resolving the relevant query.

az777 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your az777 account, including authenticating your identity at login and processing password recovery requests.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks. Financial data is passed to the relevant payment processor for this purpose only.
• Regulatory Compliance: To fulfil Know Your Customer (KYC) obligations, anti-money laundering screening, and age verification (21+ requirement) as mandated by az777's operating license.
• Platform Delivery: To operate the casino lobby, sportsbook, live dealer tables, and slot library, and to personalise the interface based on your platform history.
• Security & Fraud Prevention: To detect and prevent fraudulent account activity, multi-account abuse, bonus exploitation, and unauthorised access.
• Customer Support: To respond to your queries, manage complaints, and provide account assistance through the az777 live chat and support channels.
• Responsible Gaming: To monitor gaming behaviour and, where indicators of problem gambling are identified, to trigger relevant responsible gaming interventions as required under licensing obligations.
• Service Improvement: To analyse aggregated, anonymised usage data to improve az777's platform performance, game selection, and user experience for Pakistani players.

az777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to deliver the services you have contracted for by agreeing to az777's Terms & Conditions — including account creation, game provision, and payment processing.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, age verification mandates, and other obligations imposed by az777's licensing authority and applicable law.
• Legitimate Interests: Processing for fraud detection, security monitoring, platform analytics, and responsible gaming interventions, where these interests do not override your fundamental rights.
• Consent: Processing of non-essential cookies and, where applicable, marketing communications — where your explicit consent has been obtained and may be withdrawn at any time.

az777 handles PKR transactions processed through JazzCash, EasyPaisa, HBL Bank Transfer, UBL Bank Transfer, Meezan Bank, and Visa/Mastercard. Payment data is transmitted to the relevant payment processor via encrypted connections only and is used solely for the purpose of completing the requested transaction.

az777 does not store full card numbers, JazzCash PINs, EasyPaisa mobile wallet credentials, or full banking account numbers on its own systems. Where partial identifiers are retained (such as the last four digits of a card or account number), this is for transaction matching and audit purposes only. All stored financial reference data is encrypted at rest.

All withdrawal requests are subject to verification that the receiving account is in the same name as the registered az777 account, in accordance with anti-money laundering best practice. Withdrawals will not be processed to accounts not matching the verified account holder's identity.

az777 does not sell or rent personal data to any third party. Data is shared externally only in the following limited and purposeful circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard network operators receive only the data required to process the specific financial transaction. Each processor operates under its own privacy and security frameworks.
• Identity Verification Providers: Third-party KYC services may receive identity documents to perform age and identity verification. These providers are contractually bound to use the data only for the specified verification purpose.
• Game Software Providers: Game providers such as Pragmatic Play, NetEnt, and Microgaming receive a session token and bet data to operate the relevant game. No unnecessary personal data is transmitted to game providers.
• Regulatory & Legal Authorities: az777 will disclose personal data to licensing authorities, law enforcement agencies, or financial regulators where legally required to do so, or where disclosure is necessary to prevent, investigate, or report suspected criminal activity including money laundering or fraud.
• Platform Security Services: Fraud detection and cybersecurity service providers may receive technical data (such as IP addresses and device fingerprints) to identify and block malicious account activity.

All third-party processors and partners with whom az777 shares personal data are subject to contractual data processing agreements that require them to maintain appropriate security standards and restrict their use of the data to the agreed purpose.

az777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following general retention periods:

• Active Account Data: Retained for the duration of the account relationship and for a minimum period following account closure as required by the applicable anti-money laundering and gaming licensing regulations.
• Transaction Records: Financial transaction records including PKR deposit and withdrawal history are retained for a minimum of five (5) years following the relevant transaction, in accordance with standard AML record-keeping requirements.
• Support Communications: Live chat and support records are retained for a period of two (2) years from the date of the relevant interaction.
• Technical & Log Data: Server logs and session data are typically retained for ninety (90) days for security and debugging purposes, after which they are deleted or aggregated into anonymised form.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for analytical purposes.

az777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all connections between your device and az777 servers;
• AES-256 encryption for data stored at rest on az777 infrastructure;
• Two-factor authentication (2FA) available to all account holders;
• Strict role-based access control limiting internal access to personal data on a need-to-know basis;
• Regular penetration testing and security audits by independent third-party security firms;
• Automated monitoring systems that detect and alert on anomalous access patterns.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data security incident that affects your personal data and carries a material risk of harm, az777 will notify affected players through the contact details registered on their account within a reasonable timeframe consistent with applicable regulatory obligations.

Subject to applicable law and the limitations required by our regulatory obligations, az777 respects the following data subject rights for all registered players:

• Right of Access: You may request a copy of the personal data az777 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your az777 account.
• Right to Erasure: You may request deletion of your personal data where we are not required by law or regulatory obligation to retain it. Note that AML record-keeping obligations mean that financial transaction history cannot be deleted on request.
• Right to Restrict Processing: You may request that we limit the way we use your data in certain circumstances — for example while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that your data be provided in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests. az777 will assess each objection on its merits and respond within a reasonable timeframe.
• Right to Withdraw Consent: Where processing is based on your consent (for example, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact az777 through the in-platform live chat support or via the support email address displayed on the platform. Requests will be addressed within thirty (30) days. Verification of your identity will be required before processing any data subject request.

az777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory environment, or platform features. Any material changes will be communicated to registered players via notification on the platform or through the mobile number registered to the relevant account.

The "Effective Date" displayed at the top of this document and in the page metadata above indicates when the current version of this Policy came into force. Continued use of az777 following notification of a Privacy Policy update constitutes acceptance of the revised document.

If you have any questions about this Privacy Policy or the way az777 handles your personal data, please contact our support team. We are committed to addressing all privacy queries promptly and transparently.