Privacy Policy — tc777i Platform

1. Introduction

This Privacy Policy ("Policy") sets out how tc777i ("we", "us", "our") collects, processes, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the tc777i online betting and gaming platform available at https://tc777i.cam and any associated mobile interface or application (collectively, the "Platform").

tc777i operates as an English-language platform designed for adult users in Pakistan and other permitted markets. Our Platform covers cricket betting (including PSL T20 and ICC tournaments), sports betting, live casino, slots, esports and related gaming products, all transacted in Pakistani Rupees (PKR). In the course of providing these services, we necessarily collect and process personal data as described in this Policy.

By registering an account, accessing the Platform or submitting personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, the operator of tc777i.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC" means Know Your Customer — identity and age verification procedures required under the operator's compliance and licensing obligations.
• "Cookies" means small text files or similar tracking technologies placed on your device when you access the Platform.
• "Special Category Data" means sensitive personal data warranting heightened protection, such as health information, which tc777i processes only where strictly necessary for responsible gambling obligations.

3. Data Controller

The Data Controller for personal data collected through the Platform is the licensed operator of tc777i. Licensing and corporate registration details are disclosed within the Platform's licensing information section. As the Data Controller, we are responsible for ensuring that your Personal Data is processed lawfully, fairly and transparently in accordance with the data protection standards required under the operator's applicable license jurisdiction.

Where third-party service providers process data on our behalf, they do so as Data Processors acting under written data processing agreements that restrict their use of your data to the purposes we specify.

4. Data We Collect

4.1 Data You Provide Directly

We collect personal data that you actively submit to us, including:

• Registration details: full legal name, date of birth, email address, phone number, country and city of residence (e.g. Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar).
• KYC documents: government-issued identity card (CNIC), passport, proof of address and, where required, source-of-funds documentation.
• Payment information: deposit and withdrawal method identifiers necessary to process PKR transactions. Full payment card details are processed by PCI-DSS-compliant payment processors and are not stored on our servers.
• Account preferences: language settings, communication preferences and responsible gambling tool selections (deposit limits, loss limits, session reminders, self-exclusion).
• Support communications: messages, attachments and other content submitted via live chat or email to our support team.

4.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical data, including:

• IP address and geolocation data (country and city level) used for fraud prevention and jurisdictional access controls.
• Device information: hardware model, operating system version, browser type and version, screen resolution and device identifiers.
• Usage data: pages visited, features used, bet placement activity, session duration, click paths and error logs.
• Cookie and tracking technology data as described in Section 10 of this Policy.

4.3 Data Received from Third Parties

We may receive Personal Data about you from the following categories of third party:

• KYC and identity verification providers who confirm the authenticity of documents and check your details against watchlists and sanctions databases.
• Fraud detection and anti-money-laundering (AML) service providers who share risk signals associated with your account or payment methods.
• Payment processors who confirm transaction status and flag disputed or reversed payments.
• Responsible gambling support organisations where you have voluntarily registered on a multi-operator self-exclusion scheme and that information is shared with us as part of that scheme's operation.

5. Legal Bases for Processing

We process your Personal Data only where we have a lawful basis for doing so. The primary legal bases on which tc777i relies are:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted when registering — including account management, bet settlement, payment processing and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations, age verification, record-keeping requirements and responses to lawful data access requests from competent authorities.
• Legitimate Interests: Processing for purposes that serve our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, security monitoring, platform improvement and responsible gambling monitoring.
• Consent: Processing for optional purposes, such as marketing communications or non-essential analytics cookies, where we have obtained your freely given, specific and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

We use the Personal Data we collect for the following purposes:

• To create, maintain and administer your Account on the Platform.
• To verify your identity and age in compliance with KYC requirements before enabling real-money betting activity.
• To process deposits and withdrawals in PKR and to maintain accurate financial records.
• To settle bets and gaming results, including PSL T20 and ICC cricket markets, football, UFC and esports events.
• To detect and prevent fraud, cheating, collusion and money laundering activity on the Platform.
• To apply and monitor responsible gambling tools you have set, and to fulfil our duty-of-care obligations to users showing signs of problem gambling.
• To respond to your support enquiries, complaints and dispute resolution requests.
• To send you transactional communications (account verification, bet confirmations, withdrawal notifications, security alerts).
• To send you promotional communications where you have consented to receive them — you may opt out at any time.
• To conduct statistical analysis and platform improvement, using aggregated or anonymised data wherever possible.
• To comply with requests from regulatory authorities, law enforcement agencies and courts of competent jurisdiction.

7. Data Sharing & Disclosure

tc777i does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following circumstances:

• Service Providers: We engage third-party companies to provide services on our behalf, including KYC verification, payment processing, fraud detection, cloud hosting, analytics and customer support tools. These providers act as Data Processors and are contractually bound to process your data only on our instructions.
• Payment References: Payment references to providers familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are noted here as illustrative context only. tc777i does not represent that any of these providers endorse, permit or support gambling transactions on our Platform.
• Regulatory and Legal Authorities: We will disclose Personal Data to government agencies, regulatory bodies, law enforcement or courts where we are legally required to do so or where we reasonably believe disclosure is necessary to protect the rights, property or safety of tc777i, our users or the public.
• Responsible Gambling Schemes: Where you self-exclude through a multi-operator responsible gambling scheme, we may share necessary data with the scheme's administrator to give effect to your exclusion across participating operators.
• Business Transfers: In the event of a merger, acquisition, sale of assets or restructuring, your Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations.

8. International Data Transfers

The Platform is operated internationally and your Personal Data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place — including standard contractual clauses, data processing agreements with equivalent protections, or transfers to jurisdictions recognised as providing adequate data protection standards by the operator's licensing authority.

If you are accessing the Platform from Pakistan, please be aware that your data may be transferred to and stored in jurisdictions outside Pakistan. By using the Platform you acknowledge and consent to such international transfers as necessary for the provision of our services.

9. Data Retention

We retain Personal Data for no longer than is necessary for the purposes for which it was collected. The following general retention periods apply, subject to the specific legal obligations of the operator's license jurisdiction:

• Account and KYC Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, to satisfy anti-money-laundering and regulatory record-keeping requirements.
• Transaction and Betting Records: Retained for a minimum of five (5) years following the transaction date in accordance with financial record-keeping obligations.
• Support Communications: Retained for three (3) years following resolution of the relevant matter, or longer where required by an ongoing dispute or legal proceeding.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted unless a specific need to retain identifiable data has been identified and documented.
• Marketing Consent Records: Retained for as long as you remain an active subscriber, plus a reasonable period thereafter to evidence the lawful basis for any communications sent.

Following the expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

10. Cookies & Tracking Technologies

tc777i uses cookies and similar technologies (such as web beacons and local storage) on the Platform. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication, security tokens and load-balancing cookies. They cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Enable enhanced features such as remembering your language preference, account settings and responsible gambling tool configurations between sessions.
• Analytics Cookies: Collect aggregated data about how users interact with the Platform (pages visited, session duration, feature usage) to help us improve service quality. These are activated only with your consent.
• Security and Fraud-Detection Cookies: Help us identify suspicious behaviour patterns, bot activity and account takeover attempts. These operate in the background and are necessary for platform integrity.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Detailed cookie information, including cookie names, purposes and expiry periods, is available within the Platform's cookie management interface.

11. User Rights

Depending on the data protection laws applicable in your jurisdiction, you may have the following rights in relation to your Personal Data held by tc777i. We will respond to verified rights requests within the timeframes required by applicable law, and in any case within thirty (30) days of receipt.

To exercise any of these rights, please contact our support team via the details provided in Section 15. We may need to verify your identity before processing a rights request. We will not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.

12. Children & Minors

The Platform is strictly for adults aged 18 or older, or the higher minimum required by the applicable operator or license jurisdiction. We do not knowingly collect or process Personal Data belonging to individuals below the applicable minimum age. Registration requires confirmation that you meet the age requirement, and KYC verification is used to validate this.

If we become aware that Personal Data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 15.

13. Security Measures

tc777i implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and Platform servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting staff access to Personal Data to those with a documented need.
• Regular security assessments, vulnerability scanning and penetration testing of Platform infrastructure.
• Multi-factor authentication options for user Accounts and mandatory multi-factor authentication for internal administrative access.
• Documented incident response procedures for managing personal data breaches, including notification to affected users and relevant authorities as required by applicable law.

While we take these precautions seriously, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your Account credentials and for notifying us promptly if you suspect any unauthorised access.

14. Policy Amendments

tc777i reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or the operator's licensing requirements. The Effective Date at the top of this page will be updated whenever a material change is made.

Where changes are material, we will notify registered users via the email address associated with their Account and/or via a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the updated Policy has been published constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the tc777i privacy and support team through the following channels:

• Support Email: [email protected]
• Live Chat: Available 24/7 via the on-site chat widget (operator-provided hours)
• FAQ: Visit our FAQ page for answers to common account, payment and policy questions.

We aim to acknowledge all privacy-related enquiries within two business days and to resolve substantive requests within thirty (30) days. Where a request is complex or you have submitted multiple requests, we may extend this period by a further thirty (30) days and will notify you of the extension and the reason for it.

Where you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the data protection supervisory authority in the operator's license jurisdiction, or to seek independent legal advice regarding your rights under applicable law.