hi777 Privacy Policy —
How We Handle Your Data

hi777 is an online casino and sports betting platform accessible at hi777.vu, operated by hi777 and its affiliated entities (collectively referred to in this policy as "hi777," "we," "us," or "our"). hi777 operates under an international gaming licence and serves registered users primarily located in Pakistan.

For the purposes of data protection law, hi777 acts as the data controller in respect of all personal data collected from users of the hi777 Platform. This means that hi777 is responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about this Privacy Policy or about how hi777 handles your personal data, you may contact hi777's data protection contact via the email address displayed in the footer of every page on hi777.vu. We aim to respond to all privacy-related enquiries within 5 business days.

This Privacy Policy applies to all personal data collected by hi777 in connection with your use of the hi777 Platform, including but not limited to: the hi777.vu website, all casino games, sports betting services, the hi777 login process, payment transactions, bonus programmes, customer support interactions, and any promotional communications you receive from hi777.

This Policy applies to all registered users of hi777 and to individuals who browse hi777.vu without registering (in which case only technical/device data is collected, as described in Section 3). It applies regardless of the device you use to access hi777 — desktop, mobile phone, or tablet.

This Policy does not cover third-party websites, payment processors, or services that are linked to or from the hi777 Platform. hi777 is not responsible for the privacy practices of third-party services, and we encourage you to read the privacy policies of any third-party service you use in connection with your hi777 account (such as JazzCash or EasyPaisa).

hi777 collects the following categories of personal data from users of the Platform:

hi777 collects your personal data through the following methods:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings.
• Automatically during Platform use: Technical and device data is collected automatically when you visit hi777.vu or use any Platform feature, via server logs, cookies, and similar tracking technologies (detailed in Section 7).
• From payment processors: hi777 receives transaction confirmation data from JazzCash, EasyPaisa, and banking partners when you make deposits or withdrawals. We receive only what is necessary to reconcile transactions — hi777 does not receive or store full card numbers from payment processors.
• From identity verification services: When you complete KYC verification, hi777 may use a third-party identity verification provider to cross-check your submitted documents. The result of this check (pass/fail/additional requirements) is shared with hi777; the raw document processing occurs within the provider's secure environment.
• From fraud detection services: hi777 uses automated fraud detection tools that analyse device fingerprints, behavioural patterns, and transaction data to identify potentially fraudulent activity. This processing is conducted in accordance with hi777's AML obligations.

hi777 processes your personal data only where a valid legal basis exists. The following table sets out each processing purpose, the data used, and the legal basis on which hi777 relies:

Where hi777 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are proportionate to your privacy rights and do not override them. You may request details of this assessment by contacting hi777's privacy contact.

6.1 We Do Not Sell Your Data. hi777 does not sell, rent, trade, or otherwise transfer your personal data to any third party for that party's own commercial purposes. This is an absolute policy with no exceptions.

6.2 Categories of Third Parties. hi777 shares personal data with third parties only where it is strictly necessary for the purposes listed below:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum necessary data to process your payment transactions (typically account identifier, transaction amount, and transaction reference).
• Identity Verification Providers: Third-party KYC providers receive your submitted identity documents to perform age and identity verification checks. These providers are contractually bound to use your data solely for this purpose.
• Fraud Detection & AML Service Providers: Automated fraud screening tools process technical and transactional data to identify suspicious activity. These providers operate under strict data processing agreements.
• Regulatory Authorities: hi777 is obligated to disclose user data to gaming regulators, financial intelligence units, and law enforcement authorities where required by law. Such disclosures are made without prior notice to the user where legally required.
• IT Infrastructure Providers: hi777's hosting, cloud infrastructure, and cybersecurity providers may have limited access to system data as part of their service delivery. These providers operate under confidentiality agreements and do not access user data for their own purposes.

hi777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and gather analytical data about Platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. They maintain your login session, remember your game in progress, and store your language and region settings. These cookies cannot be disabled without breaking the Platform's core functionality.
• Functional Cookies: Remember your preferences such as display settings, notification preferences, and previously played games. These improve your experience but are not strictly necessary for Platform operation.
• Analytics Cookies: Collect anonymised data about how users navigate hi777.vu — which pages are visited most, where users drop off, and how features are used. This data helps hi777 improve the Platform. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Support fraud detection and session integrity checks. These cookies help hi777 identify unusual login patterns or suspicious activity and are part of our security infrastructure.

You can control cookie settings through your browser's settings menu. However, disabling strictly necessary or security cookies will impair your ability to use the hi777 Platform. hi777 does not use third-party advertising or tracking cookies for the purpose of serving targeted ads on other websites.

hi777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data exchanged between your device and hi777's servers is protected by 256-bit TLS encryption — the same standard used by major Pakistani banks for internet banking.
• Encryption at rest: Sensitive stored data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption on hi777's servers.
• Password security: User passwords are never stored in readable form. hi777 stores passwords as salted hashes using a strong, industry-standard hashing algorithm. Even hi777's internal team cannot read your password.
• Access controls: Internal access to user personal data is restricted on a strict need-to-know basis. Employees with access to sensitive data are subject to confidentiality obligations and undergo regular security training.
• Penetration testing: hi777's systems undergo regular third-party security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: hi777 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to users, hi777 will notify affected users and relevant authorities within the timeframes required by applicable law.

hi777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, hi777 will securely delete or irreversibly anonymise your personal data. Data that is anonymised — meaning it can no longer be linked to any individual — may be retained for statistical and analytical purposes beyond these periods.

As a user of the hi777 Platform, you have the following rights in relation to your personal data. These rights are real and hi777 commits to facilitating their exercise without undue delay (and within 30 days of a valid request):

To exercise any of these rights, contact hi777 support via live chat or by email to [email protected]. hi777 may ask you to verify your identity before actioning a rights request. Where hi777 is unable to fulfil a request — for example, because of a legal retention obligation that overrides the right to erasure — we will explain the reason clearly in writing.

The hi777 Platform is strictly restricted to individuals who are 21 years of age or older. hi777 does not knowingly collect personal data from individuals under the age of 21. Age is verified at registration and again at the first withdrawal request.

If hi777 discovers that personal data has been collected from an individual under the age of 21, the account will be immediately closed, all data will be securely deleted (except where retention is required for legal compliance purposes), and any balance will be handled in accordance with our Terms & Conditions regarding underage accounts.

hi777 is operated from a jurisdiction outside Pakistan and some of your personal data may be transferred to and stored on servers located outside Pakistan. Where such international transfers occur, hi777 ensures that appropriate safeguards are in place to protect the security and confidentiality of your data.

Safeguards for international data transfers include: use of Standard Contractual Clauses (SCCs) or equivalent data transfer agreements with recipient entities; transfers only to countries that provide an adequate level of data protection as assessed by hi777's legal team; and contractual restrictions on the recipient's ability to sub-process or further transfer the data.

Your KYC documents and financial records are processed in accordance with the data handling standards required by hi777's operating licence. hi777 does not transfer personal data to countries with materially weaker data protection standards without implementing appropriate contractual and technical safeguards.

13.1 Consent-Based Marketing. hi777 sends promotional communications — including bonus offers, PSL betting promotions, new game announcements, and loyalty programme updates — only to users who have provided explicit consent during registration or subsequently through Account Settings. Marketing communications may be delivered via SMS to your registered Pakistani mobile number, email, or in-Platform notifications.

13.2 Opt-Out. You may withdraw your marketing consent at any time by: updating your notification preferences in Account Settings; responding to any marketing SMS with "STOP"; contacting hi777 support via live chat or email. Following a valid opt-out request, hi777 will cease marketing communications within 5 business days. You may continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts) regardless of marketing consent status, as these are necessary for account operation.

13.3 Personalisation. Where you have consented to marketing, hi777 may use your gaming activity data — such as your most-played game categories and preferred betting amounts — to personalise the promotions we send you. This personalisation is designed to show you offers that are relevant to your interests on hi777. It does not involve sharing your data with third parties for advertising purposes.

As an internationally licensed gaming operator, hi777 is subject to Anti-Money Laundering (AML) and counter-terrorist financing (CTF) obligations that require us to collect, retain, and in certain circumstances disclose personal data regardless of individual consent.

Specifically, hi777 is required to: verify the identity of all users who make deposits or withdrawals above certain thresholds; maintain records of all financial transactions for a statutory period (see Section 9); monitor transaction patterns for indicators of money laundering or fraud; and report suspicious transactions to the relevant financial intelligence authority without notifying the subject of the report (a process known as "tipping off" prohibition).

hi777 may also use automated fraud detection systems that analyse your account activity, device data, and transaction patterns to identify behaviours consistent with fraud, bonus abuse, or multi-accounting. Where automated systems flag an account for review, a human member of hi777's compliance team will conduct the subsequent review and make any final determination.

hi777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the Platform's features and functionality. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Where changes are material — meaning they substantively affect how hi777 processes your personal data or your rights over that data — hi777 will notify you via a prominent notice on the Platform and/or by email to your registered address at least 14 days before the changes take effect. Non-material changes (such as clarifications of existing practices or formatting updates) may take effect immediately without specific notification.

We encourage you to review this page periodically to stay informed about how hi777 handles your personal data. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated policy.

If you have any questions, concerns, or complaints regarding hi777's privacy practices or the handling of your personal data, you are encouraged to contact hi777 in the first instance. Our support team is available 24/7 in both Urdu and English, with an average live chat response time of under 5 minutes.

For formal privacy-related requests — including data access requests, erasure requests, marketing opt-outs, or complaints about how hi777 has handled your data — please contact hi777 by email at the address displayed in the footer of this page. Please include your registered mobile number, a clear description of your request or concern, and your preferred response method (email or live chat). hi777 commits to acknowledging all privacy requests within 48 hours and providing a substantive response within 30 calendar days.

If you are not satisfied with hi777's response to your privacy complaint, you may have the right to escalate your complaint to the relevant data protection regulatory authority in the jurisdiction that governs hi777's operating licence. hi777 will provide details of the applicable authority upon request where a formal escalation is warranted.