1. Home
  2. Privacy Policy
Data Protection · Encryption · Your Rights

Privacy Policy – CR777 Pakistan Online Casino Data Protection

At CR777, your personal information and PKR payment data are treated with the highest level of care. This policy explains exactly what we collect, why we collect it, how we protect it, and the full set of rights you have over your own data.

Last reviewed and updated: January 2025
cr777
256-bit SSL encryption on all data
Never sold to third parties
PKR payments processed securely
Your rights clearly explained
Questions: support@cr777.click
Contents
1Introduction

This Privacy Policy ("Policy") describes how CR777 ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects the personal information of players and visitors who access the CR777 platform at cr777.click. CR777 is an online gaming and sports betting platform serving players in Pakistan, with all transactions conducted in Pakistani Rupees (PKR).

At CR777, we understand that privacy is something Pakistani users care deeply about. When you deposit money through Easypaisa or JazzCash, share your CNIC for identity verification, or simply browse the platform on your mobile, you are trusting CR777 with information that matters. This Policy sets out — in straightforward language — exactly how that trust is honoured.

By registering an account, accessing the CR777 platform, or placing a bet, you confirm that you have read and understood this Policy. If you do not agree with how CR777 handles personal data, you should not use the platform.

Plain-language summary: CR777 collects only the personal data it genuinely needs to operate, protects it with industry-standard encryption, never sells it to advertisers or data brokers, and gives you clear control over your own information. The sections below go into the full details.

This Policy should be read alongside CR777's Terms and Conditions and Responsible Gaming Policy, which together form the complete agreement between you and CR777.

2Personal Data CR777 Collects

CR777 collects personal data from you in three ways: information you provide directly, information generated automatically by your use of the platform, and information received from third parties such as payment processors.

Data Category Specific Examples How Collected
Identity Full name, date of birth, CNIC number, nationality, gender Registration form / KYC submission
Contact Pakistani mobile number, email address, city of residence Registration form / account settings
Financial Easypaisa / JazzCash account number, bank IBFT details, card last four digits, deposit and withdrawal history, wallet balance Payment processor / platform activity
Gaming Activity Bet history, game play records, session times, wins and losses, bonus usage Platform activity logs
Technical IP address, device type and model, operating system, browser type, screen resolution, connection type (4G/WiFi) Automatically via cookies and server logs
Verification CNIC image, utility bill or bank statement for address verification, selfie for liveness check (when required) KYC document upload
Communications Support chat transcripts, emails sent to CR777, feedback and complaint submissions Direct player communication

CR777 does not collect or store full payment card numbers. Card transactions are processed by our payment provider and CR777 only retains the last four digits for reference. Easypaisa and JazzCash account numbers are stored in encrypted form.

3How CR777 Uses Your Personal Data

CR777 uses personal data only for purposes that are necessary, proportionate, and directly related to providing you with a safe and functional gaming platform. The specific uses are:

  • Account creation and management: Your name, mobile number, and contact details are used to create your CR777 account, verify your identity, and communicate important account information such as password resets and security alerts.
  • Processing deposits and withdrawals in PKR: Your payment details are used solely to process deposits and withdrawals through your chosen method — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card. CR777 cannot initiate payments without your explicit instruction.
  • Identity verification (KYC): We use CNIC data and verification documents to confirm that you meet the minimum age requirement of 18 years and to comply with anti-money laundering (AML) obligations. KYC data is handled by our secure verification system and never shared beyond what is required by law.
  • Fraud prevention and platform security: IP addresses, device data, and gaming activity logs are analysed by CR777's security systems to detect suspicious behaviour, prevent unauthorised account access, identify multi-accounting, and protect both players and the platform from fraud.
  • Responsible gaming monitoring: Gaming activity data — including session length, deposit frequency, and loss patterns — is used by CR777's responsible gaming systems to identify players who may be showing signs of problem gambling and to apply appropriate interventions, as described in the Responsible Gaming Policy.
  • Customer support: When you contact CR777 support, your account information, transaction history, and communication records are accessed by support staff to resolve your query or dispute accurately and efficiently.
  • Platform improvement: Aggregated, anonymised technical data is used to identify performance issues, optimise load times for Pakistani mobile users, and develop new platform features.
  • Marketing communications (optional): If you have opted in to receive promotional messages, CR777 may send you information about bonuses, new games, and relevant promotions via SMS or email. You can opt out at any time through your account settings or by contacting support.

CR777 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except for standard fraud detection screening which may temporarily hold an account pending manual review.

How CR777 Protects Your Privacy

Six practical measures in place every day to keep your data safe at CR777

256-Bit SSL Encryption
Every connection between your device and CR777's servers is protected by TLS/SSL encryption. This means your login credentials, CNIC data, Easypaisa details, and all personal information travel between your phone and CR777 in an encrypted form that cannot be intercepted or read by third parties.
Secure Segregated Storage
CR777 stores your personal data and your PKR funds in fully segregated systems. Player data is held on dedicated secure servers with strict access controls. Only authorised CR777 staff who need your data to perform their specific job function can access it — and all access is logged.
Never Sold to Third Parties
CR777 does not sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third party. This is not a conditional statement — it is an absolute commitment. Your mobile number will never be passed to a marketing company without your explicit, separate opt-in consent.
Minimal Data Collection
CR777 operates on a data minimisation principle — we collect only what is genuinely necessary to provide the service, verify your identity, and comply with legal obligations. If a piece of data doesn't have a clear, stated purpose, CR777 doesn't collect it.
Masked Payment Information
CR777 never stores full payment card numbers. Full Easypaisa and JazzCash account numbers are stored only in encrypted form and are never visible in plain text to any CR777 staff member. Support agents can see the last few digits for reference only — not the full account number.
Regular Security Audits
CR777's data security practices and technical infrastructure are reviewed on a regular schedule by internal compliance teams. Any identified vulnerabilities are treated as high-priority items. CR777 takes its responsibility to safeguard your data seriously and continuously works to improve its security posture.
4Legal Basis for Processing

CR777 processes your personal data on the following legal bases depending on the specific processing activity:

  • Contractual necessity: Processing required to create your account, execute deposits and withdrawals, settle bets, and provide the gaming services you have registered to use. Without this processing, CR777 cannot provide its services to you.
  • Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, identity verification obligations, and any reporting requirements imposed by applicable law. CR777 is required by law to verify the identity of players and to maintain records of financial transactions.
  • Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming monitoring, platform performance optimisation, and abuse detection. CR777 has a legitimate interest in maintaining a safe, secure, and fair platform for all users.
  • Consent: Processing for optional marketing communications, personalised promotions, and any other non-essential processing for which CR777 has obtained your explicit consent. You may withdraw consent at any time without affecting the legality of processing prior to withdrawal.
5When CR777 Shares Your Data

CR777 shares personal data with third parties only in limited, clearly defined circumstances. We do not share your data for commercial purposes, and we do not allow third parties to use your data for their own purposes.

The categories of third parties with whom CR777 may share data, and the reasons, are as follows:

  • Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, card networks): Sharing the minimum transaction data required to process your specific deposit or withdrawal instruction. Payment processors are bound by their own data protection obligations and cannot use your data beyond fulfilling the specific transaction.
  • Identity verification providers: When a formal KYC check is required, relevant identification documents and personal details may be shared with a trusted verification partner operating under strict confidentiality and data security obligations.
  • Game and technology providers: Third-party game software providers integrated into CR777 may process limited technical data (session ID, game outcome data) necessary to operate their games. These providers cannot access your name, payment details, or contact information through their game integration.
  • Legal authorities: CR777 will share personal data with law enforcement, regulatory bodies, or financial intelligence authorities when required to do so by valid legal process, court order, or applicable law. CR777 will not share data beyond what is legally required in such circumstances.
  • Professional advisors: Lawyers, auditors, and compliance consultants engaged by CR777 may access personal data on a strictly need-to-know basis under binding confidentiality obligations.

To be absolutely clear: CR777 does not share your personal data with marketing companies, social media platforms, gambling affiliate networks, or any party for the purpose of serving you targeted advertising. This is unconditional.

6Payment Data Security at CR777

Because CR777 processes real PKR transactions through Pakistani mobile money services, payment data security is treated as the highest-priority area of our privacy and security programme.

Specifically in relation to payment data, CR777 operates the following controls:

  • All payment transactions are processed over encrypted connections. No payment data is ever transmitted in unencrypted form.
  • Easypaisa and JazzCash account numbers associated with your CR777 account are stored in encrypted, hashed form. Even in the unlikely event of a data breach, raw account numbers would not be exposed.
  • CR777 enforces a strict policy that withdrawals can only be made to a payment method that has been verified as belonging to the registered account holder. This protects you against fraudulent withdrawal attempts by unauthorised parties.
  • All financial transactions at CR777 are logged with timestamps, amounts, method identifiers, and IP addresses for fraud detection and dispute resolution purposes.
  • CR777's payment processing infrastructure is subject to security review and maintains compliance with industry standards for the protection of payment data.

If you believe there has been any unauthorised transaction on your CR777 account, contact support immediately at support@cr777.click. CR777 will investigate and, where fraud is confirmed, take immediate action including suspending the account and initiating the dispute process with the relevant payment provider.

cr777
7Cookies and Tracking Technologies

CR777 uses cookies and similar technologies on its web platform to ensure the site functions correctly, to analyse how players use the platform, and to remember your preferences. Below is a summary of the types of cookies CR777 uses:

Cookie Type Purpose Can Be Disabled? Lifespan
Essential / Session Keeps you logged in, remembers your active bet slip, enables the deposit flow No — required for basic platform function Session
Functional Remembers your preferred language, display settings, and notification preferences Yes — disabling reduces personalisation 30 days
Analytics Anonymous data on which pages are visited, how long, and what features are used — to improve the platform Yes — data collected anonymously 12 months
Security Fraud detection, bot identification, unusual login pattern detection No — required for account security Session / 7 days

CR777 does not use advertising or tracking cookies that follow you across other websites. CR777 does not run cross-site tracking or share cookie data with advertising networks. You can manage or clear cookies through your browser settings, though disabling essential cookies will prevent the CR777 platform from functioning correctly.

8How Long CR777 Keeps Your Data

CR777 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The general retention schedule is as follows:

  • Active account data — Retained for the full duration of your account relationship with CR777 plus a minimum of five years following account closure, to comply with financial record-keeping and AML obligations.
  • Transaction records (deposits, withdrawals, bets) — Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations.
  • KYC and identity verification documents — Retained for five years following account closure, or longer if required by a specific legal obligation.
  • Customer support communications — Retained for three years from the date of the last communication in the relevant thread, or until any associated dispute is fully resolved.
  • Marketing preferences and consent records — Retained for three years from the date of last consent, or until withdrawn, whichever is earlier.
  • Technical and analytics logs — Retained in anonymised form for up to 24 months for platform improvement purposes. Raw IP logs are retained for 90 days for security purposes and then deleted.

When the applicable retention period ends, CR777 securely deletes or anonymises the relevant personal data in a way that makes recovery impossible.

cr777

Your Data Rights at CR777

You have clear, enforceable rights over the personal data CR777 holds about you

Right of Access
You have the right to request a copy of all personal data CR777 holds about you. CR777 will provide this within 30 days of a verified request. This includes your account data, transaction history, KYC records, and communication logs.
Right to Rectification
If any personal data CR777 holds about you is inaccurate or incomplete, you have the right to request correction. For most contact information, you can update it directly in your CR777 account settings. For identity data, contact support with the correct information.
Right to Erasure
In certain circumstances you can request that CR777 delete your personal data. This right applies where the data is no longer necessary for its original purpose, or where you withdraw consent and there is no other legal basis for retention. Note: financial transaction records are subject to mandatory retention periods that override erasure requests.
Right to Restrict Processing
You may request that CR777 temporarily stop processing your data — for example, while a dispute about its accuracy is being resolved. During a restriction period, CR777 will store the data but not actively process it for other purposes.
Right to Data Portability
For data you have provided to CR777 on the basis of consent or contract, you have the right to receive it in a structured, commonly used format. This allows you to transfer your CR777 account history to another service if you choose.
Right to Object
You have the right to object to CR777 processing your data on the basis of legitimate interests — including responsible gaming monitoring and fraud prevention. CR777 will consider your objection and cease processing unless it has compelling legitimate grounds that override your interests.

How to exercise your rights: Email your request to support@cr777.click from the email address registered on your CR777 account. Clearly state which right you are exercising and what specific data or processing activity it relates to. CR777 will acknowledge your request within 5 working days and complete it within 30 calendar days. Verification of your identity will be required before any data is disclosed or deleted.

10Children's Privacy

CR777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed at registration and may be repeated through formal KYC documentation at any point during the account lifecycle.

If CR777 becomes aware that an account has been registered by or is being used by a person under 18, the account will be immediately closed, all funds will be handled in accordance with our responsible gaming procedures, and any personal data collected will be deleted as quickly as the applicable legal retention requirements permit.

Parents and guardians who believe their child has registered a CR777 account should contact support immediately at support@cr777.click. CR777 will act on verified parental notifications immediately and without delay.

11Updates to This Privacy Policy

CR777 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, new platform features, or updates to applicable legal requirements. The "last reviewed" date at the top of this page is always the date of the most recent version.

When material changes are made to this Policy — changes that affect your rights, how your data is used, or who it is shared with — CR777 will:

  • Update the last reviewed date prominently on this page.
  • Display a notification to logged-in CR777 players upon their next login.
  • Send an email notification to all active accounts for significant changes.

Continued use of CR777 after a notified policy update constitutes your acceptance of the revised terms. If you do not accept the updated Policy, please stop using CR777 and contact support to close your account and request data deletion.

12Contact CR777 About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to make a complaint about how CR777 has handled your personal data, please get in touch through the following channel:

CR777 Privacy & Data Team
Email: support@cr777.click
Available: 24 hours a day, 7 days a week
Subject line: "Privacy Request – [your registered mobile number]"

For data access or deletion requests: please include your registered mobile number, account username, and a clear description of your request. Identity verification will be required before action is taken.

CR777 will acknowledge all privacy-related requests within 5 working days and aim to resolve them fully within 30 calendar days. Complex requests — such as full data exports or cross-system erasure — may take up to 45 days, in which case you will be informed of the expected timeline at the point of acknowledgement.

If you are not satisfied with CR777's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Your Privacy is Protected — Play at CR777 with Confidence

CR777 is built on trust. Your personal data, your PKR, and your gaming activity are all handled with the security and transparency you deserve. Register now and experience the difference.

Create Free Account Deposit in PKR

18+ only · See Terms & Conditions · Responsible Gaming