CR777 Privacy Policy – How We Protect Your Data

1. Introduction

CR777 operates the online sports betting, casino, and live casino platform available at cr777.im. As part of running this platform for users in Pakistan, we collect and process certain personal information. This Privacy Policy explains what that information is, how we handle it, and what choices you have.

We take privacy seriously. The platform was built with Pakistani users in mind — including the payment methods you use every day, like JazzCash and Easypaisa — and the same attention to local context applies to how we approach your data.

This policy applies to all users of the CR777 platform, regardless of which device or browser you use to access it. It covers the website at cr777.im and all services accessible through that platform.

CR777 does not claim any government licensing, regulatory approval, or official endorsement in Pakistan. This Privacy Policy is published as a statement of our own data practices and commitments to our users, not as a regulatory filing.

2. Data We Collect

CR777 collects personal data in the following categories:

We only collect data that is genuinely needed to operate the platform, process your PKR transactions, keep your account secure, and comply with fraud prevention obligations. We do not collect data that has no clear purpose.

3. Why We Use Your Data

The personal data CR777 collects is used for the following purposes:

• Account management: To create and maintain your CR777 account, verify your identity, and manage your login access.
• Transaction processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers, and other supported payment methods. Your payment data is used solely to complete transactions.
• Platform operation: To enable sports betting on Cricket, PSL, T20 and international matches, Football, Esports and other events; to deliver casino and live casino services; and to ensure bet settlement, bonus crediting, and withdrawals function correctly.
• Security and fraud prevention: To detect and prevent fraudulent activity, duplicate accounts, unauthorised access, and other activity that violates the Terms and Conditions.
• Responsible Gaming: To monitor account activity and support the use of deposit limits, self-exclusion, and cooling-off tools.
• Customer support: To respond to your queries, resolve account issues, and communicate updates relevant to your account.
• Platform improvement: To understand how the platform is used in aggregate and to inform product decisions — for example, which cricket markets get the most engagement during PSL season.
• Legal compliance: To retain records as required by applicable anti-fraud and financial compliance obligations.

4. Payment Data

When you make a deposit or request a withdrawal in PKR, CR777 works with third-party payment processors to complete the transaction. The following points apply to how payment data is handled:

• CR777 does not store your full JazzCash PIN, Easypaisa wallet password, or bank account credentials on our servers. Payment authentication takes place directly through your payment provider's secure system.
• We retain transaction reference numbers, amounts in PKR, payment method type (e.g. JazzCash, Raast), and timestamps for the purpose of account reconciliation, dispute resolution, and fraud prevention.
• Deposits and withdrawals must be made using a payment method registered in your own name. Where a payment method belongs to a third party, the transaction will be reviewed and may be declined.
• Payment data is only accessible to CR777 staff who need it to process transactions or investigate disputes. Access is role-restricted and logged.

5. Sharing Your Data

CR777 does not sell personal data. We share data only where it is necessary to operate the platform or meet legal obligations. The categories of recipients are:

• Payment processors: JazzCash, Easypaisa, Raast, banks, and card networks receive the transaction data needed to process your PKR deposits and withdrawals.
• Identity verification providers: Where identity checks are required, we work with third-party verification services. These services receive only the minimum data needed to complete the check.
• Fraud prevention and security partners: Device fingerprinting and fraud detection services may receive technical data (IP address, device identifiers) to identify suspicious activity or duplicate accounts.
• Game software providers: Casino and live casino game providers receive the session data needed to run their games — for example, stake amounts and game outcomes. They do not receive your full identity data.
• Legal and regulatory requirements: Where required by applicable law or in response to a valid legal request, CR777 may disclose data to authorities. We will only do so to the extent legally required.

All third parties with whom CR777 shares data are required to handle that data in a manner consistent with this Privacy Policy and are not permitted to use it for any purpose beyond the specific service they provide.

6. Cookies & Technology

CR777 uses cookies and similar browser technologies to make the platform work properly and to understand how it is being used. The main types of cookies in use are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security tokens that protect your account. Disabling these will prevent you from using the platform.
• Functional cookies: Remember your preferences such as your preferred language, display settings, and recently viewed markets. These improve your experience but are not strictly necessary.
• Analytics cookies: Help us understand which pages are visited most, how long sessions last, and where users encounter problems. This data is used in aggregate and is not linked to your individual identity.
• Fraud prevention cookies: Used to identify and flag suspicious patterns, such as multiple accounts being created from the same device.

You can manage cookies through your browser settings. Blocking essential cookies will affect your ability to log in and use the platform. Blocking analytics and functional cookies will not prevent you from using CR777 but may reduce the quality of your experience.

7. Data Security

CR777 applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) across all platform connections.
• Encryption of sensitive data at rest, including stored personal and payment-related records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their role.
• Regular review of access logs to detect and respond to anomalous activity.
• Two-factor authentication available for account login to give you an additional layer of protection.

While CR777 takes data security seriously and implements industry-standard protections, no system connected to the internet can guarantee absolute security. You play an important role in keeping your account safe:

• Use a strong, unique password for your CR777 account — do not reuse passwords from other services.
• Do not share your login credentials with anyone.
• Log out of your account when using a shared device.
• Contact CR777 support immediately if you suspect your account has been accessed without your permission.

8. Data Retention

CR777 retains personal data for as long as your account is active and for a reasonable period after account closure. The general principles governing retention are:

• Active accounts: All personal and activity data associated with your account is retained for the duration of the account's active life.
• Closed accounts: Following account closure, we retain certain records — including transaction history and identity verification data — for a period consistent with standard fraud prevention and record-keeping obligations.
• Support communications: Records of support interactions are retained to help resolve future queries and to detect patterns of abuse.
• Deletion requests: If you request deletion of your personal data and there is no legal obligation requiring us to retain it, we will action the request within a reasonable timeframe. You will be notified of the outcome.

When data is no longer needed and no retention obligation applies, it is deleted or anonymised so that it can no longer be linked to you as an individual.

9. Your Rights

As a CR777 user, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data CR777 holds about you.
• Right to correction: If any of your personal data is inaccurate or out of date, you can ask us to correct it. You can also update basic details such as your mobile number directly in your account settings.
• Right to deletion: You can request that we delete your personal data. Where no legal obligation requires us to retain the data, we will carry out the deletion and confirm once it is done.
• Right to restrict processing: In certain circumstances, you can ask CR777 to pause the use of your data — for example, while a correction request is being reviewed.
• Right to data portability: You can request your personal data in a structured, commonly used format so that it can be transferred to another service if you choose.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact CR777 support through the platform. We will respond to data rights requests within a reasonable timeframe. Some requests may require identity verification before we can act on them, to ensure we are responding to the account holder and not a third party.

10. Minors

CR777 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Registration by a minor is a breach of our Terms and Conditions, and any account found to be held by a minor will be closed immediately.

If you believe a minor has registered an account on CR777, please contact our support team so the account can be reviewed and closed. Any data collected in connection with an underage account will be deleted once the account is confirmed as belonging to a minor.

Parents and guardians are encouraged to use parental controls and device-level restrictions to prevent underage access to online gaming and betting platforms.

11. Policy Changes

CR777 may update this Privacy Policy from time to time to reflect changes to the platform, new services, or updated data handling practices. When changes are made, the updated policy will be published on this page with a revised "last updated" date at the top.

For significant changes that affect how your personal data is used, CR777 will make reasonable efforts to notify you via the platform or through the contact details associated with your account. However, it is your responsibility to review this page periodically to stay informed of the current policy.

Continued use of CR777 after a policy update constitutes acceptance of the revised terms. If you disagree with any changes, please stop using the platform and contact support to arrange account closure and withdrawal of any remaining PKR balance.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal data has been handled, please get in touch with the CR777 support team:

• Support email: [email protected] (plain text — not a link)
• Platform support: Use the live chat or support ticket system available after logging into your account

We aim to respond to all privacy-related queries within a reasonable period. For data access or deletion requests, please include your registered mobile number and account username so we can locate your records promptly.