tf777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") sets out how tf777 ("tf777," "we," "us," "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you," "your") who visit or register an account on the tf777 platform at tf777.vu ("Platform").

This Policy applies to all personal data collected through the Platform, through communications with tf777 support, through the account registration and KYC verification process, and through any other interaction you have with tf777. It applies equally to players based in Karachi, Lahore, Islamabad, Faisalabad, and all other locations from which the Platform is accessed.

This Policy is incorporated by reference into the tf777 Terms and Conditions and should be read alongside those Terms. Defined terms used but not defined in this Policy carry the meaning given to them in the Terms and Conditions.

tf777 is the data controller responsible for personal data collected through the Platform. As data controller, tf777 determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing is carried out in accordance with this Policy and applicable data protection law.

tf777 operates under an internationally recognised gaming license. The licensing framework under which tf777 operates imposes data protection and information security obligations that are reflected in and supplemented by this Policy.

For all data protection enquiries, requests to exercise data subject rights, or complaints regarding the handling of your personal data, please contact tf777 through the support channels described in Section 15 of this Policy.

tf777 collects personal data in the categories described below. We collect only the data that is necessary for the identified purposes and do not collect excessive personal data beyond what is required.

tf777 does not collect sensitive personal data categories (such as health data, racial or ethnic origin, political opinions, or biometric data) except where specifically required to fulfil a responsible gaming obligation or regulatory requirement, in which case such collection will be explicitly notified to you.

tf777 collects personal data through the following methods:

• Directly from you — when you register an account, complete the KYC verification process, make deposits or withdrawals, communicate with tf777 support, participate in promotions, or update your account settings.
• Automatically through your use of the Platform — including technical data such as IP address, device identifiers, session data, and gameplay logs collected through server logs, cookies, and similar tracking technologies during each visit to tf777.vu.
• From third-party identity and payment verification services — including licensed KYC providers, fraud prevention databases, and payment processors (JazzCash, EasyPaisa, HBL, Meezan Bank, and others) when you initiate transactions through those services.
• From publicly available sources — where tf777 is required by its international gaming license to conduct enhanced due diligence checks, which may involve reviewing publicly available information for AML or fraud prevention purposes.

tf777 processes personal data under the following legal bases, which are applied to individual processing activities as described below:

• Performance of a contract: Processing necessary to register your account, verify your identity, process deposits and withdrawals, deliver gaming services, and manage your account relationship with tf777.
• Compliance with a legal obligation: Processing required to satisfy tf777's obligations under its international gaming license, including AML (Anti-Money Laundering) and CTF (Counter-Terrorism Financing) requirements, age verification, responsible gaming monitoring, and regulatory reporting.
• Legitimate interests: Processing for the purposes of fraud detection and prevention, platform security, network integrity, and improving the technical performance of the Platform, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for the purpose of sending you marketing and promotional communications about tf777 products, bonuses, and offers — where you have expressly opted in to receive such communications. You may withdraw marketing consent at any time through your account settings or by contacting support.

tf777 uses your personal data for the following specific purposes:

• To create, verify, and manage your tf777 account, including mandatory age and identity verification under our international gaming license.
• To process financial transactions, including deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and USDT TRC20, and to process withdrawal requests to your verified payment methods.
• To comply with our AML and fraud prevention obligations, including transaction monitoring and investigation of suspicious account activity.
• To deliver, maintain, and improve the gaming services available on the Platform, including game fairness, live casino streaming, and sports betting market management.
• To monitor your gaming behaviour for responsible gaming purposes, including identifying patterns that may indicate problem gambling and implementing player protection controls where appropriate.
• To communicate with you about your account, transactions, security matters, updates to our Terms or this Policy, and support queries you have raised.
• To send you promotional and marketing communications about tf777 bonuses, new games, and special offers — only where you have given your consent to receive such communications.
• To analyse Platform usage patterns and technical performance data for the purposes of improving user experience and platform security.
• To investigate and resolve disputes between you and tf777, including maintaining records relevant to dispute resolution for the period required under our licensing obligations.

tf777 may share personal data with third parties only in the following circumstances:

• Licensed Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT network providers, and card payment processors receive only the data necessary to process the specific transaction initiated by you. These processors are subject to their own data security obligations.
• KYC and Identity Verification Providers: Licensed third-party identity verification services receive identity data (such as CNIC images and personal details) for the sole purpose of conducting the mandatory verification required under tf777's gaming license. These providers operate under strict data security and confidentiality obligations.
• Fraud Prevention and AML Services: Where required under tf777's international gaming license AML and fraud prevention obligations, relevant data may be shared with licensed fraud detection and financial crime prevention databases.
• Regulatory Authorities: tf777 will disclose personal data to relevant regulatory, licensing, or law enforcement authorities where legally required to do so under applicable law or a valid court order.
• Professional Advisors: tf777's legal advisors, auditors, and compliance consultants may access personal data on a strictly need-to-know, confidential basis for the purpose of providing professional services to tf777.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of tf777's assets, personal data may be transferred to the successor entity, which will be required to honour the commitments in this Policy.

tf777 uses cookies and similar tracking technologies on the Platform to improve your experience, maintain your authenticated session, and analyse Platform usage. The cookies tf777 uses fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your tf777 account during your gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your Platform preferences such as language settings, game lobby filters, and preferred deposit method to improve your experience on return visits.
• Analytics Cookies: Used by tf777 to understand how players interact with the Platform — which sections are most used, how long sessions last, and where technical errors occur. This data is aggregated and anonymised where possible. Analytics data is used solely to improve Platform performance and player experience.
• Fraud Prevention Cookies: Device fingerprinting and session tracking cookies used to detect and prevent multiple account fraud, bonus abuse, and other forms of Prohibited Conduct defined in the Terms and Conditions.

tf777 does not use third-party advertising or behavioural tracking cookies. Your browsing activity on tf777.vu is not shared with advertising networks or used to serve targeted advertising on external websites.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to use the Platform, including your ability to stay logged in to your tf777 account.

tf777 retains personal data only for as long as necessary for the purposes described in this Policy, subject to the following minimum retention periods that apply under our international gaming license obligations:

• Account and identity data (including CNIC verification records): Retained for a minimum of five (5) years following account closure, as required under AML regulations applicable to our gaming license.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping requirements under our licensing obligations.
• Gaming history and bet records: Retained for a minimum of three (3) years following the relevant wagering activity, for dispute resolution and regulatory compliance purposes.
• Support communications: Retained for a minimum of two (2) years following the closure of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing preference records: Retained for the duration of your account and for one (1) year following account closure, to demonstrate compliance with marketing consent obligations.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents recovery or re-identification. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

tf777 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL encryption for all data transmitted between your device and tf777 servers.
• Encryption of sensitive data fields at rest in tf777 databases, including identity documents and financial account references.
• Strict access controls — system access for tf777 employees and contractors is granted on a need-to-know basis, with access privileges reviewed regularly and revoked immediately upon employment termination.
• Regular security audits, penetration testing, and vulnerability assessments of the tf777 Platform and supporting infrastructure.
• Incident response procedures for detecting, reporting, and responding to personal data breaches, with notification to affected players and relevant regulatory authorities within the timeframes required under applicable law.
• PCI DSS compliant payment processing — tf777 does not store full payment card numbers or CVV codes on its own servers. Payment card processing is handled exclusively by certified payment processors subject to the Payment Card Industry Data Security Standard.

As a data subject, you have the following rights in relation to your personal data held by tf777. To exercise any of these rights, please contact tf777 through the channels set out in Section 15. tf777 will respond to valid data subject requests within thirty (30) calendar days.

Please note that some rights are subject to exceptions. Where tf777 is required by its international gaming license or applicable law to retain personal data for a specified minimum period, we may be unable to fulfil an erasure request until that period has expired. tf777 will explain the applicable exception in its response to your request.

If tf777 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all data associated with that account will be reviewed, and the account will be closed in accordance with the tf777 Terms and Conditions. Any deposits made by a person under 21 will be returned to the verified payment source following identity confirmation.

Parents or guardians who believe that their child under 21 has registered a tf777 account should contact tf777 support immediately via live chat. tf777 will investigate and respond to such reports as a matter of priority.

tf777 operates as an international gaming platform licensed in a jurisdiction outside Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan, including the jurisdiction in which tf777 holds its primary gaming license and the locations of tf777's licensed payment processors and KYC providers.

Where personal data is transferred internationally, tf777 ensures that appropriate safeguards are in place to protect the data to at least the standard required under this Policy. These safeguards may include:

• Contractual clauses requiring recipient organisations to protect personal data to equivalent standards.
• Transfer to jurisdictions recognised as providing adequate data protection standards under applicable international frameworks.
• Data processing agreements with service providers that impose binding data security and confidentiality obligations.

By using the tf777 Platform and registering an account, you consent to the international transfer of your personal data as described in this Policy.

tf777 reviews this Privacy Policy periodically and updates it when necessary to reflect changes in the way personal data is processed, changes to the Platform's products or services, changes to our legal or licensing obligations, or developments in data protection law and practice.

Material updates to this Policy — meaning changes that affect your rights or the basis on which your data is processed — will be communicated to you by email to the address registered to your tf777 account, and by a prominent notice on the Platform. Non-material changes (such as typographical corrections or clarifications that do not affect the substance of the Policy) may be made without advance notice.

The "Last Reviewed" date shown at the top of this page reflects the most recent date on which this Policy was reviewed or updated. The current version of this Policy is always the binding version. Your continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy.

For all privacy-related enquiries, requests to exercise data subject rights, or complaints about the handling of your personal data, please contact the tf777 data protection team through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week through the tf777 Platform. This is the fastest channel for urgent privacy concerns and is accessible from the main navigation on tf777.vu.
• Email: [email protected] — for formal written privacy requests. Please include "Privacy Request" in the subject line and clearly describe the nature of your request. tf777 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

When submitting a data subject rights request, please provide sufficient information to allow tf777 to verify your identity before disclosing or modifying any personal data. This is a security measure to ensure that personal data is not disclosed to an unauthorised party.

If you are dissatisfied with tf777's response to a privacy complaint and believe that your data protection rights have been infringed, you have the right to lodge a complaint with a relevant supervisory authority or seek judicial remedy in accordance with applicable law.