QR777 Privacy Policy – How We Handle Your Personal Data in Pakistan

01Who We Are

This Privacy Policy applies to the qr777 online casino platform, accessible at qr777.online and all associated mobile interfaces. When this document refers to "qr777," "we," "us," or "our," it means the operator of the qr777 platform. When it refers to "you" or "your," it means any person who registers an account, accesses the platform, or interacts with qr777 in any capacity.

qr777 operates as the data controller for the personal information collected through this platform. This means we determine how and why your personal data is collected and processed. We are responsible for ensuring that this processing is lawful, fair, and transparent — and that your rights as a data subject are respected at all times.

If you have any questions about this Privacy Policy or wish to exercise any of your data rights, you can contact us at any time at support@qr777.online or via the 24/7 live chat available on the qr777 platform.

02What Personal Data qr777 Collects

qr777 collects personal data through three channels: information you provide directly when registering or using the platform, information generated automatically as you use qr777, and information received from third-party service providers involved in processing your transactions.

qr777 does not collect sensitive personal data such as religious beliefs, ethnicity, health information, or political opinions. The only exception is data collected for responsible gaming purposes — for example, if you voluntarily disclose a gambling problem when setting up self-exclusion, that information is treated with the highest level of care and used solely to protect your wellbeing.

03How qr777 Uses Your Personal Data

Every piece of data qr777 collects has a specific, legitimate purpose. We do not collect data that we do not use, and we do not use data for purposes beyond what is described in this policy without your explicit consent.

• Account creation and management: Your registration data is used to create and maintain your qr777 account, verify your identity, and enable access to all platform features.
• Payment processing: Transaction data is used to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. This data is shared with your chosen payment processor as necessary to complete each transaction.
• Security and fraud prevention: Device data, IP addresses, and login patterns are used to identify and prevent fraudulent activity, including duplicate accounts, bonus abuse, and unauthorised access.
• Legal compliance: Identity and transaction data may be retained and used to comply with anti-money laundering (AML) obligations, respond to lawful requests from authorities, and fulfil our obligations under our operating licence.
• Customer support: Communication data is used to resolve your queries, investigate complaints, and improve the qr777 support experience.
• Platform improvement: Anonymised and aggregated gaming activity data is used to understand how players use qr777, identify technical issues, and guide product development decisions.
• Responsible gaming: Gaming activity and session data are used to monitor for signs of problem gambling behaviour and to activate responsible gaming alerts or restrictions where appropriate.
• Marketing communications: With your consent, your contact information may be used to send you relevant promotional offers from qr777. You can opt out of marketing at any time via the unsubscribe option in any communication or by updating your account preferences.

04Legal Basis for Processing

qr777 processes your personal data based on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between you and qr777 — including account management, game operation, and payment processing. Without this processing, qr777 cannot provide the service you've registered for.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements under our gaming licence, and data retention obligations.
• Legitimate interests: Processing carried out to protect qr777's legitimate business interests — such as fraud prevention, security monitoring, and platform analytics — where these interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your specific consent — primarily for marketing communications. You can withdraw consent at any time and it will take immediate effect for future communications.

05Third-Party Data Sharing

qr777 shares your personal data with third parties only in the following specific circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Your transaction information is shared with the payment processor handling each specific transaction — Easypaisa, JazzCash, NayaPay, SadaPay, banking institutions for IBFT, or Visa/Mastercard networks for card transactions. Each processor handles your payment data under their own privacy policies and security standards.
• Identity verification services: Where identity verification is required — for example, for withdrawals above Rs 50,000 — we may use a third-party identity verification service to authenticate your CNIC details. These services operate under strict data processing agreements with qr777.
• Fraud prevention services: Device fingerprinting, IP analysis, and account behaviour data may be shared with specialist fraud prevention service providers to detect and prevent fraudulent activity on the platform.
• Game content providers: Licensed game providers whose content appears on qr777 may receive anonymised session data for technical purposes — they do not receive personally identifiable information.
• Legal authorities: qr777 will disclose personal data to Pakistani law enforcement, regulatory authorities, or courts where required by valid legal process or where we have a good-faith belief that such disclosure is necessary to prevent fraud, protect safety, or comply with applicable law.

qr777 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Any third party that receives your data under the circumstances described above is contractually bound to process it only for the stated purpose and to maintain appropriate security standards.

06Payment Data & PKR Transactions

qr777 takes a specific approach to payment data that is worth understanding clearly. When you make a deposit or request a withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card payment, the actual payment processing occurs within the infrastructure of your chosen payment provider — not within qr777's own systems.

qr777 stores a record of each transaction — the amount, date, time, payment method type, and outcome — for account management and legal compliance purposes. We do not store your full payment account credentials, card numbers, or banking PINs on our own servers. This data lives with your payment provider.

All transaction records are encrypted at rest and access is strictly limited to qr777 staff with a legitimate operational need. Transaction records are retained for a minimum of five years following account closure to meet anti-money laundering regulatory requirements.

07Data Security at QR777

qr777 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Transport encryption: All data exchanged between your device and qr777 is encrypted using TLS 1.3 with 256-bit AES cipher suites — the strongest commercially available standard.
• Storage encryption: Personal data stored in qr777's databases is encrypted at rest using AES-256. Encryption keys are managed separately from the data they protect.
• Access controls: qr777 staff access to personal data is governed by a strict least-privilege model — employees can access only the data necessary for their specific role. All access is logged and audited.
• Two-factor authentication: Internal qr777 systems that hold player data require two-factor authentication for all staff access, including remote access.
• Regular security audits: qr777 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Breach response procedures: qr777 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify affected players within 72 hours of becoming aware of the breach and take immediate remedial action.

Despite these measures, no online platform can guarantee absolute security. You also play a role in keeping your qr777 account secure: use a strong, unique password, do not share your login credentials with anyone, and contact us immediately if you suspect your account has been accessed without your authorisation.

08How Long We Keep Your Data

qr777 retains personal data for different periods depending on the type of data and the reason it was collected. We do not keep data for longer than necessary.

After the relevant retention period ends, personal data is securely and irreversibly deleted from qr777 systems. Where data must be retained for longer due to an ongoing legal dispute or regulatory investigation, it will be retained only for the duration of that matter and deleted promptly once it concludes.

09Cookies & Tracking Technologies

qr777 uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a clear breakdown of what we use and why:

• Essential cookies: Required for the qr777 platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that remember your language and currency preferences. You cannot opt out of essential cookies without breaking core platform functionality.
• Performance & analytics cookies: Used to measure how players navigate qr777 — which pages are visited, how long sessions last, which features are used most. This data is aggregated and anonymised. It helps us make the platform better. You can opt out of analytics cookies through your browser settings.
• Functional cookies: Remember your preferences and settings to personalise your qr777 experience — for example, which game categories you browse most. These are not essential but improve your experience.
• Fraud detection cookies: Used to identify devices and detect patterns consistent with fraudulent activity or bonus abuse. These run silently and cannot be individually opted out of, as they are integral to platform security.

qr777 does not use third-party advertising or retargeting cookies. We do not serve targeted advertisements on the qr777 platform based on your browsing behaviour across other websites.

Most browsers allow you to manage cookies through your settings. You can typically view, delete, and block cookies. Note that blocking essential cookies will affect your ability to log in and use the qr777 platform.

10Your Data Rights

As a registered player on qr777, you have specific rights over your personal data. These rights are genuine and exercisable — not theoretical. To exercise any of them, contact support@qr777.online or live chat with the subject line "Data Rights Request." We will respond within 30 days, and in most cases significantly faster.

11Children's Privacy

qr777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in the registration process and may be reinforced by document verification at any time.

If we become aware that an account has been registered by someone under 18, we will immediately suspend the account, delete all personal data associated with it (except the minimum required to prevent re-registration), and — where the account involved real money deposits — take steps to return any real deposited funds to the source payment method.

If you are a parent or guardian and believe your child has registered on qr777, please contact us at support@qr777.online immediately with the relevant mobile number. We will investigate and take action within 24 hours.

12International Data Transfers

qr777's primary server infrastructure is located within data centres that maintain strong data protection standards. In the ordinary course of operations, some personal data — particularly data related to game content provision and fraud prevention — may be processed by service providers located outside Pakistan.

Where such transfers occur, qr777 ensures that appropriate safeguards are in place to protect your data to the same standard as if it were processed domestically. These safeguards include contractual data processing agreements with all third-party processors, and we select only processors who operate under recognised international data protection frameworks.

Your payment data — Easypaisa, JazzCash, NayaPay, SadaPay, and IBFT transaction data — is processed entirely within Pakistani payment infrastructure and does not leave Pakistan's financial network.

13Responsible Gaming & Your Data

qr777 uses gaming activity data to actively support responsible gaming — this is one of the most important uses of your data on the platform. Specifically:

• Your gaming session patterns, bet frequencies, and deposit/withdrawal behaviour are monitored for indicators of potential problem gambling. Where concerning patterns are detected, qr777 may reach out proactively to check in or suggest the use of responsible gaming tools.
• If you set a deposit limit, loss limit, or self-exclusion on your qr777 account, that restriction is implemented immediately and the corresponding data flag on your account is treated as a protected record — it cannot be removed by any standard account modification process.
• Players under active self-exclusion are flagged in our marketing system so that all promotional communications are suppressed for the full duration of the exclusion period, with no exceptions.
• Responsible gaming data — including details of any self-exclusion periods, voluntary restriction settings, and any disclosures you've made about gambling concerns — is treated with the highest level of data sensitivity and is accessible only to qr777's responsible gaming team.

For full details on the tools available and how to use them, please visit our Responsible Gaming page.

14Changes to This Privacy Policy

qr777 will update this Privacy Policy from time to time as the platform evolves, as legal requirements change, or as we introduce new features that affect how personal data is handled.

When we make material changes — meaning changes that meaningfully affect your privacy rights or how your data is used — we will notify you via the email address associated with your qr777 account at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Minor updates — such as clarifications, corrections, or changes that do not affect your rights — may be made without advance notice. We recommend reviewing this page periodically. Continued use of the qr777 platform after a policy update constitutes acceptance of the revised terms.

15How to Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise a data right, want to make a complaint about how qr777 has handled your personal data, or need to report a suspected data breach, please reach out through any of the following channels:

• Email: support@qr777.online — for all formal data requests, complaints, and documentation. We aim to respond within 4 hours during business hours and within 24 hours at all other times.
• Live Chat: Available 24/7 on the qr777 platform — fastest route for general privacy queries and initial data requests.
• Subject line: For data-related emails, please include "Privacy Request" or "Data Rights" in the subject line so your message is routed directly to the appropriate team.

qr777 takes all privacy queries and complaints seriously. If you raise a complaint and are not satisfied with our response, you have the right to escalate it to the relevant data protection authority or to our licencing regulator — details of which are available upon request from our support team.