mu777 Privacy Policy

mu777 ("we", "us", "our", or "the Platform") is committed to protecting the personal data of all registered Players and website visitors. This Privacy Policy has been prepared in accordance with the data protection obligations imposed under mu777's international gaming licence and constitutes a binding commitment by mu777 to handle your personal information responsibly, transparently, and securely.

This Policy applies to all personal data collected through the mu777 website at mu777.ws, the mu777 mobile application (where available), and any direct communications between you and the mu777 support team — including live chat, email, and telephone interactions. It applies equally to prospective Players browsing the Platform and to fully registered Account holders.

By accessing the mu777 Platform, registering an Account, or making a deposit, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the mu777 Platform immediately.

This Privacy Policy should be read alongside the mu777 Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall prevail.

mu777 collects only the personal data that is genuinely necessary for the purposes described in this Policy. The categories of personal data we collect are set out in the table below:

mu777 does not collect or store sensitive personal data such as biometric templates, political opinions, religious beliefs, or health information beyond what is strictly required under responsible gaming obligations (for example, recording a Player's self-exclusion status or problem gambling self-assessment results).

mu777 collects personal data through the following channels and mechanisms:

• Direct submission by you: Information you enter during Account registration, KYC document uploads, cashier transactions, support communications, and Account settings updates is collected directly from you at the point of submission.
• Automated technical collection: When you access the mu777 Platform, our servers and analytics infrastructure automatically record technical data including your IP address, device identifiers, browser type, and session timestamps. This happens passively in the background without requiring any action on your part.
• Payment processor data: When you deposit or withdraw using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, the relevant payment processor shares transaction confirmation data with mu777 to reconcile your Account balance. mu777 does not receive or store your full mobile wallet PIN or bank account password at any point.
• Third-party identity verification providers: For KYC verification at withdrawal milestones, mu777 may use a licensed third-party identity verification service to cross-check CNIC details against official records. The data shared with such providers is limited to what is strictly necessary for the verification task.
• Cookies and tracking technologies: As described in detail in Section 07, mu777 uses cookies and similar technologies to collect browsing and session data on the Platform.

mu777 does not purchase personal data from data brokers, marketing lists, or any other commercial data sources. All personal data held in mu777's systems originates from one of the collection channels described above.

mu777 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy with adequate advance notice.

Where mu777 relies on your consent as the legal basis for processing (for example, sending you promotional SMS messages about PSL betting offers or new slot releases), you have the right to withdraw that consent at any time via your Account notification settings or by contacting the support team. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.

mu777 processes your personal data only where a valid legal basis exists under the data protection framework applicable to our international gaming licence. The legal bases we rely on are:

• Contractual necessity: Processing required to enter into or perform the Player Account agreement — including registration, payments, and game delivery. Without this processing, mu777 cannot provide the Platform to you.
• Legal obligation: Processing required to comply with applicable law, including KYC and anti-money laundering obligations under our gaming licence, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing that serves mu777's legitimate business interests — including fraud detection, network security, responsible gaming monitoring, and internal analytics — provided those interests are not overridden by your fundamental privacy rights. mu777 has conducted legitimate interest assessments for each such purpose.
• Consent: Processing for optional purposes such as marketing communications, personalisation, and non-essential cookies, where you have given a clear, informed, and freely given consent. You may withdraw consent at any time without detriment to your Account.

mu777 does not engage in any processing of your personal data for automated decision-making that produces significant legal or similarly significant effects without providing you a means to request human review of the decision.

mu777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with carefully selected third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum transaction data required to execute deposits and withdrawals in PKR. Each payment processor operates under its own privacy policy and applicable Pakistani financial regulations.
• Identity verification providers: Licensed KYC and anti-money laundering service providers may receive your Identity Data solely for the purpose of verifying your CNIC and confirming your age (21+) at applicable thresholds.
• Game content providers: Certified third-party game studios that supply slots, live dealer tables, and other casino content to the mu777 Platform receive session and bet data necessary to deliver game outcomes and calculate winnings. These providers are contractually prohibited from using Player data for any purpose beyond game delivery.
• Regulatory and licensing authorities: mu777 may be required to disclose Player data to its licensing authority or other competent regulatory bodies in response to lawful requests, audit requirements, or investigation orders. mu777 will notify you of any such disclosure unless prohibited from doing so by law.
• Law enforcement: mu777 will disclose personal data to law enforcement agencies where required by a valid legal order, warrant, or regulatory directive. mu777 will not disclose data voluntarily to law enforcement beyond what is legally mandated.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by mu777 may access limited personal data under strict confidentiality obligations for the purpose of providing professional advice to mu777.

All third parties with whom mu777 shares personal data are required, by contract, to maintain appropriate data security standards and to use the data only for the specific purpose for which it was disclosed. mu777 conducts periodic reviews of its third-party data sharing arrangements to ensure ongoing compliance.

mu777 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your logged-in session, and analyse how Pakistani players interact with our games and content. The categories of cookies used by mu777 are as follows:

You can manage your cookie preferences at any time through the Cookie Settings panel accessible from the footer of any mu777 page, or via your browser's native cookie management tools. Disabling strictly necessary cookies will prevent mu777 from functioning correctly. Disabling all other cookie categories will not affect your ability to play games or make transactions but may reduce the personalisation of your experience.

mu777 does not use third-party advertising networks or cross-site tracking cookies that would allow external companies to build a profile of your gambling behaviour for their own commercial purposes.

mu777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our international gaming licence obligations. The following retention periods apply:

• Account and identity data (CNIC, name, date of birth): Retained for a minimum of 5 years following Account closure, as required under anti-money laundering and gaming licence compliance obligations.
• Financial transaction records (deposits, withdrawals, PKR balances): Retained for a minimum of 7 years following the date of the transaction, in line with standard financial record-keeping requirements.
• Gaming activity logs: Retained for 3 years from the date of the activity, then anonymised and retained in aggregate statistical form indefinitely for platform analytics purposes.
• Customer support communications: Retained for 3 years following the closure of the relevant support ticket or formal complaint.
• Marketing preference records: Retained while your Account is active and for 1 year following Account closure or the withdrawal of marketing consent, whichever is earlier.
• Technical logs (IP addresses, session data): Retained for 12 months from the date of collection, then automatically purged.

Where a Player has been subject to a self-exclusion order, Account closure for fraud, or an ongoing regulatory investigation, relevant data may be retained beyond the standard periods described above for as long as is necessary to manage the matter. You will be notified if extended retention applies to your data.

Upon expiry of the applicable retention period, mu777 will securely delete or irreversibly anonymise your personal data using industry-standard deletion methods that prevent reconstruction or recovery.

mu777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• TLS encryption in transit: All data transmitted between your device and mu777 servers is protected by TLS 1.2 or higher, preventing interception of your login credentials, payment details, or personal information.
• AES-256 encryption at rest: Sensitive personal data — including CNIC numbers, financial account details, and KYC documents — is stored in encrypted form using AES-256 encryption on secure, access-controlled servers.
• Two-factor authentication (2FA): mu777 strongly recommends that all Players enable SMS OTP-based 2FA on their Accounts. This provides a critical additional layer of security against unauthorised Account access even if your password is compromised.
• Role-based access controls: Internal access to Player personal data is restricted to mu777 staff whose role genuinely requires it. Access permissions are reviewed quarterly and revoked immediately upon staff departure.
• Penetration testing: The mu777 Platform undergoes independent security penetration testing on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Secure data centres: mu777's server infrastructure is hosted in certified data centres with physical access controls, redundant power, and 24/7 monitoring.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mu777 will notify affected Players within 72 hours of becoming aware of the breach, via the registered email address or mobile number on your Account. The notification will describe the nature of the breach, the data affected, the steps mu777 has taken, and the actions you can take to protect yourself.

As a mu777 Player, you hold the following rights in relation to your personal data. mu777 is committed to honouring these rights promptly and without creating unnecessary barriers to exercise:

• Right to Access: You may request a complete copy of all personal data mu777 holds about you. mu777 will respond within 30 days of receiving a verified request.
• Right to Rectification: If any personal data mu777 holds about you is inaccurate or incomplete, you have the right to request its correction. For basic Account details, you can update them directly in Account settings. For CNIC or KYC data, contact the support team.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to mu777's legal data retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction: You may request that mu777 restrict the processing of your personal data in certain circumstances — for example, while a correction request is pending or while a complaint is under review.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to mu777, suitable for transfer to another service provider.
• Right to Object: You may object to mu777's processing of your personal data where that processing is based on legitimate interests. mu777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the mu777 support team via live chat or at support [at] mu777.ws with a clear description of your request. mu777 may need to verify your identity before processing your request. There is no charge for exercising your rights, and mu777 will not penalise your Account for doing so.

mu777 takes the protection of minors extremely seriously and has implemented multiple layers of age verification to prevent underage access to the Platform. Age verification measures include:

• Mandatory date of birth entry at registration, with automated rejection of applicants under 21.
• CNIC-based age verification at KYC milestones, confirming that the date of birth declared at registration matches the official CNIC record.
• Facial match verification via selfie-with-CNIC for withdrawals exceeding the KYC threshold, providing a secondary confirmation that the Account holder is the person named on the CNIC.
• Ongoing monitoring for behavioural patterns inconsistent with adult account usage.

If mu777 discovers that personal data belonging to a person under 21 has been collected as a result of a false age declaration, mu777 will immediately close the Account, return any deposited Real Money Balance (after verification), permanently delete all personal data associated with the Account, and — where the circumstances warrant — report the matter to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor under your care has registered on mu777 using false age information, please contact the support team at support [at] mu777.ws immediately with the relevant Account details. mu777 will investigate and take action within 24 hours of receiving a verified report.

mu777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or updates to our gaming licence obligations. The effective date displayed at the top of this document will be updated each time a change is made.

Where a change is material — meaning it affects how mu777 uses your personal data in a way that could impact your rights or your decision to use the Platform — mu777 will provide at least 14 days' advance notice via your registered mobile number or email address, or via a prominent notice on the Platform, before the change takes effect.

For minor updates that do not materially affect your rights — such as typographical corrections, clarifications of existing practices, or restructuring of the document for readability — mu777 may update the Policy immediately without advance notice. Your continued use of the mu777 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

mu777 recommends that you review this Privacy Policy periodically to stay informed of how your data is being used. The current version of this Policy is always available at mu777.ws/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the way mu777 handles your personal data, you may contact the mu777 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the mu777 Platform when logged into your Account.
• Email: support [at] mu777.ws — please use the subject line "Privacy Request" for faster routing to the Data Protection team. Responses within 24 hours during standard operating days.
• Language: Requests may be submitted in English or Urdu — both are handled by the mu777 support team.

If you are not satisfied with mu777's response to a privacy request or complaint, you have the right to escalate the matter to the data protection supervisory authority under the jurisdiction of mu777's international gaming licence. Details of the relevant supervisory authority are provided in mu777's final response to any escalated complaint.

mu777 is committed to resolving all privacy-related complaints within 28 days of receipt of a complete written complaint. Complex cases involving regulatory coordination may take longer, in which case mu777 will keep you informed of progress at regular intervals.