Your privacy is a core commitment at CA777, not a legal formality. We collect only what we need, use it only for the purposes described below, and never sell your personal information to third parties for marketing or advertising. By registering and using CA777, you agree to the practices described in this Privacy Policy.
1. Introduction and Scope
This Privacy Policy ("Policy") describes how CA777 ("the Platform", "we", "us", "our") collects, uses, stores, shares and protects personal information provided by members who register, access or use the CA777 betting and gaming platform at ca777.im.
This Policy applies to all Pakistani members and users of CA777, regardless of how they access the platform — whether via desktop browser, mobile browser or any application. By creating a CA777 account or using any part of the platform, you confirm that you have read and understood this Policy and that you consent to the data practices described herein.
CA777 is committed to responsible data handling. We recognise that Pakistani members place trust in us when they share their personal information, and we take that trust seriously. This Policy is written to be clear and readable — if anything is unclear, please contact us via support and we will explain it directly.
Scope: This Policy covers personal data collected through the CA777 website, registration form, payment processes, customer support interactions, live chat transcripts, and any promotional participation. It applies to all data in whatever form — digital records, account information, communication logs and technical usage data.
2. Personal Data We Collect
CA777 collects different types of information depending on how you interact with the platform. Here is a clear breakdown of what we collect and why each category is needed.
| Data Category | Specific Information | Why We Collect It |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number (for KYC) | Account registration, age and identity verification, legal compliance |
| Contact Data | Pakistani mobile number, email address | Account communication, OTP delivery, support contact, security alerts |
| Financial Data | Payment method type, wallet/account holder name, transaction reference numbers | Processing deposits and withdrawals, fraud detection, financial compliance |
| Transaction Data | Deposit amounts, withdrawal amounts, bet history, casino game history, bonus usage | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser, operating system, session data | Platform security, fraud prevention, multi-account detection, performance optimisation |
| Usage Data | Pages visited, features used, time on platform, click patterns | Platform improvement, product development, understanding user needs |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Resolving disputes, quality assurance, training, complaint handling |
| Verification Documents | CNIC copy, selfie/photo ID, proof of payment method (when required for KYC) | Identity verification, withdrawal processing, anti-money laundering compliance |
CA777 does not collect or store full payment card numbers, CVV codes or bank account passwords. Payment processing is handled by PCI-DSS compliant third-party processors who are subject to their own strict data security standards.
What We Do Not Collect: CA777 does not collect your location beyond the general region inferred from your IP address. We do not access your device contacts, camera or microphone. We do not collect information about your activity on other websites beyond what is described in the Cookies section below.
3. How CA777 Uses Your Personal Data
Every piece of data that CA777 collects is used for a specific, defined purpose. We do not use your data beyond what is described here without first updating this Policy and notifying you.
- To operate and manage your CA777 account — creating and maintaining your account, processing deposits and withdrawals in PKR, settling bets, applying bonuses and providing access to all platform features.
- To verify your identity and age — confirming that you are at least 18 years old and that your account details match a real, verifiable person in Pakistan. This is a legal and operational requirement, not a preference.
- To prevent fraud and protect account security — monitoring for unusual login patterns, detecting multi-account behaviour, identifying suspicious payment activity and protecting your account from unauthorised access.
- To communicate with you — sending account notifications, OTP codes for login and withdrawal, promotional communications (where you have opted in), support responses and important policy updates.
- To personalise your CA777 experience — displaying sports and games that are relevant to your preferences and usage history, offering promotions tailored to your activity level and VIP tier.
- To fulfil responsible gaming obligations — monitoring for patterns that may indicate problem gambling, enforcing self-imposed limits and exclusions, and responding appropriately where member wellbeing concerns arise.
- To comply with legal and regulatory obligations — maintaining required records, responding to lawful requests from appropriate authorities, anti-money laundering (AML) monitoring and record-keeping.
- To improve the CA777 platform — analysing usage patterns to identify areas for product improvement, fixing bugs, testing new features and making the platform faster and more reliable for Pakistani members.
4. Legal Basis for Processing
CA777 processes your personal data on the following legal bases, depending on the purpose of the processing.
- Contractual necessity — processing your identity, contact, financial and transaction data is necessary to provide the CA777 service under our Terms and Conditions. Without this data, we cannot operate your account or process your bets and payments.
- Legitimate interests — processing technical and usage data for fraud prevention, platform security and service improvement falls within CA777's legitimate interests as a platform operator, provided those interests do not override your privacy rights.
- Legal compliance — processing required for identity verification, age verification, AML compliance and responding to lawful authority requests is necessary to meet our legal obligations.
- Consent — processing your data for optional communications such as promotional emails or SMS marketing is based on your explicit consent, which you can withdraw at any time from your account settings.
5. Who We Share Your Data With
CA777 does not sell, rent or trade your personal information to third parties for their own marketing purposes. Full stop. We share your data only with the categories of partners listed below, and only to the extent necessary for the described purpose.
- Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT providers and card payment gateways receive only the transaction data required to process your deposit or withdrawal. They are subject to their own privacy and security standards.
- Identity verification providers — where KYC is required, your identity documents and biometric data may be passed to a regulated third-party verification service operating in Pakistan. These providers are bound by strict data processing agreements.
- Fraud prevention and security services — technical data including IP addresses and device identifiers may be shared with fraud detection services to identify and prevent account abuse, multi-accounting and payment fraud.
- Game software providers — your account identifier and stake amounts are shared with casino and sports data providers only as required to display games and settle bets. Providers do not receive your full personal profile.
- Legal and regulatory authorities — CA777 will disclose personal data to police, courts or regulatory bodies when required to do so by a valid legal order or applicable law. We will notify you of such disclosures where we are legally permitted to do so.
- CA777 group companies and technology partners — data may be shared within the CA777 group and with technology infrastructure providers (cloud hosting, data analytics) strictly under data processing agreements that require them to process data only as instructed by CA777.
No Marketing Sale of Data: CA777 categorically does not sell, lease or share your personal information with any third-party advertiser, data broker or marketing company. Your data is used to operate your CA777 account — nothing else.
7. How Long We Keep Your Data
CA777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply to different categories of data.
- Account and identity data — retained for the duration of your active CA777 membership and for a minimum of 5 years following account closure, as required for AML and financial record-keeping compliance.
- Transaction and betting records — retained for a minimum of 5 years from the date of each transaction for financial compliance, dispute resolution and AML purposes.
- KYC and verification documents — retained for the duration of the account plus 5 years following closure. Copies of identity documents are stored in encrypted form and are accessible only to authorised verification personnel.
- Communication and support records — live chat transcripts and email correspondence are retained for 2 years from the date of the interaction for dispute resolution and quality assurance purposes.
- Technical and usage data — retained for up to 12 months from collection for platform performance and security analysis. Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify individual members.
When the applicable retention period expires, CA777 securely deletes or anonymises the relevant data. Once data is anonymised, it no longer constitutes personal data and is outside the scope of this Policy.
8. How CA777 Protects Your Data
CA777 applies industry-standard technical and organisational security measures to protect all personal data held on Pakistani members. No system is entirely immune to risk, but we take the following concrete steps to minimise it.
- 256-bit SSL encryption is applied to all data transmitted between your device and the CA777 servers. Every page, every login, every payment request is encrypted in transit.
- Encrypted data storage — sensitive personal data including identity documents, financial records and authentication credentials are encrypted at rest using industry-standard encryption. Raw data is never stored in plaintext on CA777 servers.
- Access controls — CA777 staff access to personal data is restricted on a strict need-to-know basis. Customer-facing support agents can see only the account information required to resolve the query at hand. Full financial and identity records are accessible only to authorised compliance and verification personnel.
- Two-factor authentication is available and recommended for all CA777 accounts. Enabling 2FA adds a critical layer of protection against unauthorised login even if your password is compromised.
- Continuous security monitoring — CA777 runs automated systems that monitor for unusual login patterns, suspicious transaction activity and potential data breach indicators around the clock.
- Payment data security — CA777 does not store full card numbers, CVV codes or wallet MPINs. Payment processing is handled by PCI-DSS certified processors. CA777 will never ask you for your Easypaisa or JazzCash MPIN through any channel.
If You Suspect a Breach: If you believe your CA777 account has been accessed without your authorisation, contact support immediately via live chat. We will lock the account, investigate and notify you of the outcome. If we detect a data breach affecting your personal information, we will notify you as soon as practically possible.
9. Your Privacy Rights as a CA777 Member
As a CA777 member, you have meaningful rights over your personal data. CA777 respects and facilitates these rights. Here is what you can ask for and how to exercise each right.
Right of Access
You can request a copy of all personal data that CA777 holds about you. We will provide this within a reasonable timeframe, free of charge, in a clear and readable format.
Right to Rectification
If any personal data CA777 holds about you is inaccurate or incomplete, you can ask us to correct it. You can also update most contact information directly from your account settings.
Right to Erasure
You can request that CA777 delete your personal data. This right applies where the data is no longer necessary for the original purpose and where there is no legal obligation requiring us to retain it. Note that legal retention periods (Section 7) may prevent full erasure in some cases.
Right to Object
You can object to CA777 processing your data for specific purposes — in particular, direct marketing communications. Objections to marketing will always be honoured immediately with no delay.
Right to Data Portability
You can request a copy of the personal data you have provided to CA777 in a structured, machine-readable format, where technically feasible.
Right to Restrict Processing
In certain circumstances — such as while a dispute about data accuracy is being resolved — you can ask CA777 to restrict (but not delete) the processing of your personal data.
How to Exercise Your Rights: To exercise any of the rights above, contact CA777 via live chat or email at support@ca777.im. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days. We may need to verify your identity before processing any data-related request to ensure we are responding to the genuine account holder.
10. Protection of Minors
CA777 does not knowingly collect or process personal data from anyone under the age of 18. The CA777 platform is strictly for adults. If CA777 discovers or is notified that an account has been registered by a person under 18, we will immediately close the account, delete the associated personal data and return any deposited funds to the originating payment method.
If you are a parent or guardian and you believe your child has registered on CA777, please contact us immediately at support@ca777.im. We will investigate and act as quickly as possible.
11. Third-Party Links and Embedded Content
The CA777 platform may display content from or make reference to third-party game providers, payment processors or service partners. CA777 is not responsible for the privacy practices of any third-party website or service. The privacy policy of any third-party service you use applies independently of this Policy.
CA777's own platform — at ca777.im — does not contain embedded third-party advertising or tracking pixels from social media or advertising networks. The cookies described in Section 6 are CA777's own operational and analytics cookies and do not include third-party advertising trackers.
12. Changes to This Privacy Policy
CA777 may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes — particularly those that affect how your data is used or shared — we will notify registered members by account notification and, where available, by SMS to the registered Pakistani mobile number on the account.
The "Last Updated" date displayed at the top of this page is always current. We encourage you to review this Policy periodically so you remain informed about how CA777 manages your personal data. Continued use of the CA777 platform after a policy update constitutes your acceptance of the revised Privacy Policy.
If you have concerns about any change to this Policy, please contact CA777 support before continuing to use the platform.
13. Contact CA777 About Privacy
If you have any questions, concerns or requests related to this Privacy Policy or to the personal data CA777 holds about you, please get in touch. CA777 takes all privacy queries seriously and will respond promptly.
- Live Chat: Available 24/7 from the CA777 platform — average response under 2 minutes, any time of the day or night.
- Email: support@ca777.im — privacy and data-related queries are responded to within 48 hours.
- Subject line suggestion: "Privacy Query — [Your Registered Mobile Number]" to help us route your request to the right team quickly.
For data erasure, data access or portability requests, please include your full registered name, registered mobile number and a brief description of your request. We will verify your identity before processing any data-related request to protect against fraudulent or unauthorised access to account information.