How crazy777 Collects,
Uses, and Protects
Your Personal Data

1 About This Policy

This Privacy Policy ("Policy") describes how crazy777 ("we", "us", "our", "the Company") collects, processes, stores, shares, and protects the personal data of individuals ("you", "the Player", "data subject") who access or use the crazy777 Casino platform ("the Platform") at crazy777.casino.

This Policy applies to all Pakistan-based users of the Platform and covers all personal data processing activities associated with account registration, identity verification (KYC), PKR deposits and withdrawals, gameplay, bonuses and promotions, customer support interactions, and any other service delivered through the crazy777 Platform.

By registering an account on crazy777 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not register for or use the crazy777 Platform.

2 Data We Collect

crazy777 collects the following categories of personal data from Pakistan players:

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data crazy777 holds about you is provided directly by you at defined points during your interaction with the Platform:

• During Registration: Mobile number, username, password, date of birth, and email address;
• During KYC: CNIC documents (front and back photographs), selfie verification image;
• During Payment Transactions: Easypaisa account details, JazzCash account details, or bank account information submitted during deposit and withdrawal requests;
• During Support Interactions: Any personal information you choose to share when communicating with the crazy777 support team via WhatsApp, Telegram, or email;
• During Responsible Gaming Settings: Deposit limits, session time limits, self-exclusion requests, and related preferences you configure in your account settings.

3.2 Automatically During Platform Use

When you access and use the crazy777 Platform, certain technical data is collected automatically through standard web and application technologies, including: IP address and approximate geolocation; device identifiers and browser characteristics; session activity logs including login times, game rounds played, and navigation patterns; cookies and similar tracking technologies as described in Section 7.

3.3 From Third-Party Service Providers

crazy777 may receive limited data from third-party service providers in the course of operating the Platform, including: identity verification services that assist in CNIC validation; payment processing partners (Easypaisa, JazzCash, and banking providers) who confirm transaction completion; fraud detection and anti-money laundering screening services; and game software providers who transmit game round data necessary for wagering and cashback calculations.

4 Why We Use Your Data

crazy777 processes your personal data only for defined, legitimate purposes. The following table describes each processing purpose and the data categories involved:

• Account Administration: Creating, managing, and maintaining your crazy777 account; processing PKR deposits and withdrawals; enabling access to games and Platform features;
• Identity Verification (KYC): Confirming your identity and age (18+) as required by our operational obligations; preventing underage gambling; fulfilling anti-money laundering screening requirements;
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, bonus abuse, money laundering, and unauthorised access; protecting the financial integrity of the Platform and other players;
• Bonus and Cashback Administration: Calculating your weekly PKR cashback under the crazy777 Weekly Rewards programme; tracking wagering activity for bonus fulfilment; crediting promotions correctly;
• Customer Support: Responding to enquiries, complaints, and support requests; maintaining records of support interactions for quality assurance;
• Responsible Gaming Monitoring: Monitoring for indicators of problem gambling behaviour; enforcing player-set limits and self-exclusion requests; conducting responsible gaming outreach where appropriate;
• Legal and Regulatory Compliance: Maintaining records required by applicable law; responding to lawful requests from regulatory or law enforcement authorities; defending legal claims;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the crazy777 Platform, user interface, and game library curation for Pakistan players.

5 Legal Basis for Processing

crazy777 processes your personal data on the following legal bases, depending on the processing purpose:

• Contract Performance: Processing necessary to deliver the crazy777 Platform services you have contracted for — including account management, PKR transactions, and game access;
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, age verification, anti-money laundering record-keeping, and regulatory reporting;
• Legitimate Interests: Processing necessary for the legitimate interests of crazy777 or third parties, including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — provided those interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where we rely on your consent at the point of opt-in. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6.1 Third-Party Service Providers

crazy777 shares personal data with carefully selected third-party service providers who assist in operating the Platform, under contractual obligations that require them to protect your data and use it only for defined purposes. These include: KYC and identity verification providers; payment processors (Easypaisa, JazzCash, banking partners); game software studios (limited to game transaction data necessary for their services); fraud detection and anti-money laundering screening services; customer support infrastructure providers.

6.2 Legal and Regulatory Disclosure

crazy777 will disclose personal data to regulatory authorities, law enforcement agencies, or judicial bodies when required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where legally permissible to do so.

6.3 What We Will Never Do

• Never sell your data to third-party marketers, data aggregators, or advertising platforms;
• Never share your CNIC data except with identity verification providers under strict contractual protections;
• Never share your financial data beyond what is necessary for transaction processing and fraud prevention;
• Never disclose your data to other crazy777 players or the general public.

7 Cookies and Tracking Technologies

7.1 Cookies We Use

The crazy777 Platform uses cookies and similar browser-based technologies to operate correctly and to improve the experience for Pakistan players. The categories of cookies used are:

• Essential Cookies: Required for the Platform to function — including session management, login authentication, and account security. These cannot be disabled without preventing Platform access;
• Functional Cookies: Remember your preferences, language settings, and account configurations to provide a consistent experience across sessions;
• Analytics Cookies: Collect aggregated, anonymised data about how Pakistan players use the crazy777 Platform — including which games are most popular and how players navigate the interface — to inform Platform improvements. No individual player is identifiable from analytics data;
• Fraud Prevention Cookies: Support our fraud detection systems by enabling device fingerprinting and session consistency checks to protect your account from unauthorised access.

7.2 Managing Cookies

You can manage non-essential cookie preferences through your browser settings. Note that disabling essential or functional cookies may affect your ability to log in or use certain Platform features. crazy777 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites.

8 Data Security

crazy777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and crazy777's servers is encrypted using 256-bit SSL/TLS — the highest commercially available standard;
• Encrypted Data Storage: Sensitive data including CNIC information and financial records is stored in encrypted form on access-controlled servers;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Access logs are maintained and regularly reviewed;
• Two-Factor Authentication: Available to all crazy777 account holders via SMS to your registered Pakistan mobile number — strongly recommended for all accounts;
• Regular Security Audits: crazy777's technical infrastructure undergoes regular security reviews to identify and remediate vulnerabilities before they can be exploited.

9 Data Retention

crazy777 retains personal data for as long as required to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data (Active Accounts): Retained for the duration of your active account relationship with crazy777;
• Account Data (Closed Accounts): Retained for 5 years following account closure to satisfy legal, regulatory, and dispute resolution obligations;
• KYC and Identity Documents (CNIC): Retained for 5 years following the last transaction or account closure, whichever is later, in accordance with anti-money laundering obligations;
• Financial Transaction Records: Retained for 7 years following the transaction date in accordance with applicable financial record-keeping requirements;
• Support Communication Logs: Retained for 2 years from the date of the last interaction;
• Marketing Consent Records: Retained until consent is withdrawn, plus 1 year as evidence of prior consent;
• Technical/Analytics Data: Anonymised and aggregated after 90 days; individual session logs retained for 12 months for security purposes.

Upon expiry of the applicable retention period, your personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with your identity.

10 Your Rights as a Data Subject

As a Pakistan player whose personal data is processed by crazy777, you hold the following rights with respect to your personal information. These rights can be exercised by contacting our support team at [email protected]:

• Right of Access: Request a copy of the personal data crazy777 holds about you, along with information about how it is being used;
• Right to Rectification: Request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: Request deletion of your personal data where there is no longer a lawful basis for its retention — subject to our legal and regulatory retention obligations;
• Right to Restriction: Request that we restrict processing of your personal data in defined circumstances, for example while a correction request is being resolved;
• Right to Object: Object to the processing of your personal data where we rely on legitimate interests as the legal basis — we will comply unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Data Portability: Request a copy of the personal data you provided to us in a structured, machine-readable format, where technically feasible;
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

crazy777 will respond to data subject rights requests within 30 calendar days of receipt. Complex requests may require up to 60 days, in which case we will notify you of the extended timeline and the reason for it.

11 Children's Privacy

The crazy777 Platform is strictly prohibited for individuals under 18 years of age. crazy777 does not knowingly collect, process, or retain personal data from any person under 18. Age verification is conducted through CNIC verification for all accounts prior to activation of real-money features.

If crazy777 becomes aware that personal data has been collected from a person under 18, that account will be immediately terminated, all data associated with the account will be deleted, and any balance will be forfeited. If you believe your child has created a crazy777 account, contact us immediately at [email protected] and we will investigate and act promptly.

12 International Data Transfers

crazy777 operates using server infrastructure and service providers that may be located outside Pakistan. Where personal data is transferred to a jurisdiction outside Pakistan, crazy777 ensures that appropriate data protection safeguards are in place, including contractual data processing agreements with all third-party recipients that include data protection obligations materially equivalent to those described in this Policy.

Specifically, CNIC document images and financial data are stored on encrypted servers subject to the same security standards described in Section 8, regardless of the geographic location of the server infrastructure. crazy777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

13 Amendments to This Policy

crazy777 reserves the right to update this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes for which data is used, or data sharing arrangements — will be communicated to registered Pakistan players via the email address or mobile number on file, with a minimum of 14 days' notice prior to the changes taking effect.

Non-material amendments, including clarifications, formatting updates, and corrections that do not affect your rights or our processing practices, may be made without direct notification. The "Effective Date" at the top of this Policy will be updated to reflect any amendment. Your continued use of the crazy777 Platform following notification of material changes constitutes acceptance of the amended Policy.

14 Contact Our Data Team

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by crazy777, please contact our Data Privacy team using the following channel:

[email protected] — Subject: Privacy / Data Request

Please include your registered crazy777 username and a description of your request. crazy777 will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days. If you are not satisfied with our response, you may escalate your concern to the applicable data protection authority in your jurisdiction.