Important: This Privacy Policy applies to all users of the k1777 platform at https://k1777.org, including visitors, registered account holders, and any person who interacts with our services in any capacity. By using k1777, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
k1777 is an online sports betting and casino platform operating at https://k1777.org, serving registered users across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities. k1777 is operated under an international gaming operator framework and acts as the data controller in respect of all personal information collected through the platform.
As data controller, k1777 is responsible for determining the purposes and means by which your personal data is processed. We are committed to processing all personal data lawfully, fairly, and transparently in accordance with applicable data protection regulations and our obligations under the international gaming licence framework under which we operate.
Our primary point of contact for all privacy-related queries is our dedicated Data Protection team, reachable through the k1777 customer support portal. Correspondence may also be directed to: [email protected]
k1777 collects personal data through several channels: directly from you during registration and account usage, automatically through your interaction with our platform, and from third-party sources where permitted by law. The categories of personal data we collect include:
Identity and Contact Data
- Full legal name as it appears on your government-issued identification document.
- Date of birth (for age verification purposes).
- Residential address, including city and postal code.
- Email address used for account communications.
- Mobile phone number for two-factor authentication and account alerts.
Identity Verification (KYC) Data
- CNIC (Computerised National Identity Card) number and scanned copy or photograph.
- Passport number and copy where CNIC is not available or additional verification is required.
- Proof of address documents such as a recent utility bill or bank statement.
- Selfie or live photograph for biometric identity confirmation where required by our KYC provider.
Financial Data
- JazzCash or EasyPaisa mobile wallet number used for deposits or withdrawals.
- Bank account details (account title, IBAN, and bank name) for bank transfer transactions via HBL, UBL, Allied Bank, Meezan Bank, or other supported institutions.
- SadaPay account details where applicable.
- USDT TRC20 wallet address for cryptocurrency transactions.
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.
Platform Activity Data
- Betting and gaming history including all wagers placed, game sessions, results, and account balance movements.
- Responsible gaming tool usage including any deposit limits, loss limits, session limits, or self-exclusion requests you have applied to your account.
- Bonus and promotion participation history.
- Customer support interaction records, including chat logs and support ticket content.
Technical and Usage Data
- IP address and approximate geolocation data derived from your IP address.
- Device type, operating system, and browser type and version.
- Session duration, pages visited, features used, and navigation path through the platform.
- Cookie identifiers and similar tracking technologies as described in Section 6.
Note on Sensitive Data: k1777 does not intentionally collect special categories of sensitive personal data (such as health data, political opinions, or religious beliefs) unless voluntarily disclosed by a user in a responsible gaming context (e.g., self-identifying a gambling problem when requesting self-exclusion). Any such information is treated with the highest level of confidentiality and used solely to facilitate the responsible gaming support requested.
k1777 uses the personal data it collects for the following specific purposes:
- Account Registration and Management: To create and maintain your k1777 account, verify your identity, and administer your account settings and preferences.
- KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with our Know Your Customer (KYC) obligations under our international gaming operator framework.
- Payment Processing: To process your deposits from and withdrawals to your registered payment instruments including JazzCash, EasyPaisa, bank accounts, SadaPay, and USDT TRC20 wallets.
- Anti-Money Laundering (AML) Compliance: To monitor account activity for indicators of money laundering, terrorist financing, or other financial crime, and to fulfil mandatory reporting obligations where triggered.
- Fraud Prevention: To detect, investigate, and prevent fraudulent activity including multi-accounting, identity fraud, payment fraud, and bonus abuse.
- Responsible Gaming: To enforce responsible gaming tools you have activated, including deposit limits, loss limits, session limits, cool-off periods, and self-exclusion. Also to proactively identify accounts that may be displaying indicators of problem gambling behaviours.
- Customer Support: To respond to your support requests, resolve disputes, and maintain records of our interactions with you.
- Platform Improvement: To analyse aggregated usage data and identify opportunities to improve the k1777 platform, user interface, and product offering.
- Marketing Communications: To send you promotional emails, SMS notifications, and in-platform offers where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
- Legal Obligations: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from government authorities.
Marketing Opt-Out: If you have previously opted in to receive k1777 marketing communications and wish to stop receiving them, you can update your preferences at any time in the Notifications section of your account settings panel, or by contacting our support team directly. Opting out of marketing communications does not affect your ability to use the k1777 platform.
k1777 processes your personal data on the following legal bases, as applicable to each processing activity:
- Contractual Necessity: Processing required to fulfil our contract with you as a registered k1777 user — including account management, payment processing, and delivering betting and gaming services.
- Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC verification, AML monitoring, age verification, and mandatory reporting to authorities.
- Legitimate Interests: Processing carried out in furtherance of k1777's legitimate business interests — such as fraud detection, platform security, and platform analytics — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where k1777 relies on legitimate interests as the legal basis for processing, a documented Legitimate Interests Assessment (LIA) is maintained by our Data Protection team to confirm that the processing is necessary, proportionate, and does not unduly override individual privacy rights.
k1777 does not sell, rent, or trade your personal data with third parties for their own commercial purposes. Personal data is shared with third parties only to the extent necessary to operate the platform, comply with legal obligations, and deliver the services you have requested. The categories of third parties with whom data may be shared include:
- KYC and Identity Verification Providers: Third-party identity verification services that assist k1777 in confirming the identity and age of account holders. These providers process identity documents and biometric data under strict contractual data processing agreements.
- Payment Processing Partners: Financial institutions and payment gateway providers (including those facilitating JazzCash, EasyPaisa, and bank transfer transactions) that are necessary to process your deposits and withdrawals.
- Gaming Software Providers: Licensed game developers and casino software providers whose products are integrated into the k1777 platform. These providers may receive limited session and transaction data necessary to deliver their games and calculate returns.
- Regulatory and Law Enforcement Authorities: Where k1777 is legally required to disclose personal data to a regulatory body, financial intelligence unit, law enforcement agency, or court of competent jurisdiction, we will do so in compliance with applicable law.
- IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data on k1777's behalf under data processing agreements that require them to maintain the same standard of data protection as k1777 itself.
- Fraud Prevention Networks: Industry-wide fraud prevention platforms that share data between operators to identify and block known fraudulent actors and multi-account operators.
International Transfers: Some of k1777's third-party service providers are located outside Pakistan. Where personal data is transferred internationally, k1777 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and transfers only to providers operating in jurisdictions with an adequate level of data protection.
k1777 uses cookies and similar tracking technologies to operate the platform, recognise returning users, maintain session security, and analyse usage patterns. The following categories of cookies are used on the k1777 platform:
- Strictly Necessary Cookies: Essential for the platform to function. These cookies enable session management, authentication, and security features. They cannot be disabled without significantly impairing your ability to use k1777.
- Functional Cookies: Remember your preferences such as your preferred language, display settings, and odds format. These cookies improve your experience but are not essential.
- Analytics Cookies: Collect anonymised information about how users navigate the platform — pages visited, session duration, feature usage, and error frequencies. This data helps k1777 improve its products.
- Responsible Gaming Cookies: Track session duration to support the operation of session time limits and reality check notifications that you have activated on your account.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse all non-essential cookies, or to receive a notification before a cookie is set. Note that disabling certain cookies may affect the functionality of the k1777 platform.
k1777 does not use third-party advertising cookies or allow external advertising networks to track user behaviour on the k1777 platform for the purpose of serving targeted advertisements on other websites.
k1777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention periods are as follows:
- Active Account Data: Retained for the duration of your active account relationship with k1777, plus a minimum of five (5) years following account closure to meet our regulatory and AML record-keeping obligations.
- KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable AML regulations.
- Transaction and Betting Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping requirements.
- Customer Support Records: Retained for three (3) years from the date of the interaction, or longer where the interaction relates to an ongoing dispute or regulatory inquiry.
- Technical and Usage Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
- Marketing Consent Records: Retained for the period during which you have opted in to receive marketing communications, plus a reasonable period following opt-out to evidence your consent history.
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where anonymisation is applied, the resulting anonymised dataset may be retained indefinitely for statistical and analytical purposes.
As a data subject whose personal information is processed by k1777, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be directed to our support team and will be responded to within thirty (30) calendar days.
| Right |
What It Means |
Status |
| Right of Access |
You may request a copy of all personal data k1777 holds about you, together with information about how it is processed. |
Available |
| Right to Rectification |
You may request correction of inaccurate or incomplete personal data. Basic profile data (name, email, address) can be updated directly in your account settings. |
Available |
| Right to Erasure |
You may request deletion of your personal data where it is no longer necessary for its original purpose, subject to k1777's overriding legal retention obligations. |
Available |
| Right to Restriction |
You may request that k1777 restricts processing of your personal data in certain defined circumstances, such as while the accuracy of data is being contested. |
Available |
| Right to Portability |
You may request that your personal data be provided to you in a structured, commonly used, machine-readable format for transfer to another service provider. |
Available |
| Right to Object |
You may object to processing based on legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time. |
Available |
Important Limitation: The right to erasure does not override k1777's mandatory legal and regulatory obligations to retain certain categories of data — particularly KYC records, transaction records, and AML documentation — for the minimum periods prescribed by applicable law. Where erasure is not possible due to these obligations, k1777 will explain the specific legal basis for continued retention in its response to your request.
k1777 implements a layered security architecture to protect the personal data of its users against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our technical and organisational security measures include:
- Encryption in Transit: All data transmitted between your device and the k1777 platform is protected by Transport Layer Security (TLS 1.2 or higher). Our SSL certificate is maintained with an A-grade configuration.
- Encryption at Rest: Personal data and financial records stored in k1777 databases are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with access restricted to authorised systems only.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Role-based access controls (RBAC) are enforced across all internal systems. All staff with access to personal data undergo mandatory data protection training.
- Two-Factor Authentication: k1777 supports and strongly recommends two-factor authentication (2FA) for all user accounts. 2FA is enforced for all administrative and internal staff accounts without exception.
- Penetration Testing: k1777 engages independent security professionals to conduct regular penetration testing and vulnerability assessments of the platform. Identified vulnerabilities are remediated according to a defined severity-based SLA.
- Incident Response: k1777 maintains a documented data breach incident response plan. In the event of a confirmed personal data breach, affected users and relevant regulatory authorities will be notified in accordance with applicable legal requirements.
Whilst k1777 takes all reasonable technical and organisational precautions to protect your personal data, no internet-based system can be guaranteed to be 100% secure. You also have a responsibility to protect your own account credentials — please refer to the Account Security guidance in our Terms and Conditions.
The k1777 platform is strictly intended for adults aged 21 years or older. k1777 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step in the k1777 account registration process, and we employ third-party identity verification tools to enforce this requirement.
If You Suspect a Minor Has Accessed k1777: If you have reason to believe that a person under the age of 21 has registered an account or accessed k1777 services, please contact our support team immediately at
[email protected]. We will investigate the matter promptly and, where confirmed, will close the account and delete all associated personal data in accordance with our data deletion procedures.
Parents and guardians are encouraged to use reputable parental control software to prevent minors from accessing online gambling platforms, including k1777. If a minor's personal data has been inadvertently collected by k1777, that data will be deleted as soon as practicable upon confirmation of the individual's age.
k1777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The effective date at the top of this document will be updated whenever a change is made.
Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — k1777 will notify registered users via the email address on file at least fourteen (14) days before the updated policy takes effect. For non-material clarifications and corrections, the policy may be updated without prior individual notification.
We encourage you to review this Privacy Policy periodically to stay informed about how k1777 protects your personal information. The most current version of the Privacy Policy is always accessible on this page. Continued use of the k1777 platform after any update constitutes your acceptance of the revised Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way k1777 processes your personal data, please contact our Data Protection team through any of the following channels:
- Email: [email protected] — use the subject line "Privacy Request" for fastest routing to the correct team.
- In-Platform Support: Log in to your k1777 account and access the Live Chat or Support Ticket system from the Help section of your account panel.
k1777 is committed to resolving all privacy-related queries and data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it within the initial thirty-day window.
Escalation: If you are not satisfied with k1777's response to your privacy query or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body overseeing the international gaming licence under which k1777 operates.