Plain language commitment: CM777 has written this Privacy Policy in clear, everyday English. If any section is unclear to you, please reach out to our support team at support@cm777.ws — we will explain it in a way that makes complete sense.
Section 01
Introduction – Who We Are and Why This Policy Exists
CM777 operates the online betting and casino platform available at cm777.ws. "CM777", "we", "us", and "our" in this Privacy Policy refer to the CM777 platform and its operating entity. "You" and "your" refer to any person who registers an account, visits the website, or otherwise interacts with the CM777 service.
This Privacy Policy explains how CM777 handles the personal information of its players, particularly those based in Pakistan. Data privacy is not something we take lightly. Pakistani players trust CM777 with their mobile number, email address, payment details, and identity documents — and that trust comes with a genuine responsibility to protect that information and be completely transparent about how it is used.
This policy applies to all data collected through the CM777 website at cm777.ws, through any communication you have with our support team, and through the payment and identity verification processes associated with your account. It does not apply to third-party websites that may be linked from the CM777 platform — those websites operate under their own privacy policies which CM777 has no control over.
By creating an account on CM777, you acknowledge that you have read and understood this Privacy Policy. If you disagree with anything described here, please do not register or continue using the platform. Your Terms and Conditions agreement and this Privacy Policy together form the complete legal framework governing your use of CM777.
Section 02
What Personal Data CM777 Collects
CM777 collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform, and information obtained from third-party verification providers. Here is a complete breakdown of each category:
Information You Provide Directly
- Registration data: Full legal name, date of birth, gender, residential address, mobile number, and email address.
- Identity verification documents: CNIC (Computerised National Identity Card) number, CNIC scan or photograph, selfie with CNIC if required for enhanced verification.
- Payment information: Easypaisa account number, JazzCash account number, NayaPay or SadaPay account details, bank account details for IBFT transfers, or masked card details for Visa/Mastercard transactions. CM777 does not store full card numbers — these are handled by our PCI-DSS compliant payment processors.
- Support communications: Any information you share with CM777 customer support via live chat, email, or WhatsApp — including descriptions of issues, screenshots, and any additional personal details provided voluntarily.
- Responsible gaming preferences: Deposit limit settings, session time limits, self-exclusion requests, and any information provided as context for these requests.
Information Generated Automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution, and mobile network provider.
- Usage data: Pages visited, games played, bets placed, bet amounts, game session duration, login timestamps, and navigation patterns within the CM777 platform.
- Transaction data: Deposit amounts, withdrawal requests, bonus claims, bet history, win and loss records, and balance movements on your account.
- Cookie data: Session identifiers, preference cookies, and analytics cookies as described in Section 07 of this policy.
Information from Third Parties
- Identity verification services: CM777 may use third-party identity verification providers to cross-check CNIC information and confirm player identity. These providers return a verification status to CM777 — they do not hold ongoing records of your data on CM777's behalf.
- Payment processors: Transaction confirmation statuses and fraud signals from Easypaisa, JazzCash, NayaPay, bank networks, and card processors.
- Responsible gambling databases: If applicable in your jurisdiction, CM777 may check self-exclusion registries to prevent excluded players from opening new accounts.
Section 03
Why CM777 Collects Your Data
CM777 does not collect data for the sake of it. Every piece of information we hold about you has a specific purpose. Here is exactly why we collect what we collect:
| Data Type | Primary Purpose | Secondary Purpose |
|---|
| Name, DOB, Address | Account identity & age verification | Legal compliance, KYC |
| Mobile & Email | Account access, OTP verification | Support communications, security alerts |
| CNIC Data | Identity verification, single-account enforcement | Legal & regulatory compliance |
| Payment Details | Processing deposits and withdrawals in PKR | Fraud prevention, AML compliance |
| Betting & Game History | Account statement, dispute resolution | Responsible gaming monitoring, fraud detection |
| Device & IP Data | Security, fraud prevention | Platform optimisation, analytics |
| Cookie Data | Session management, preferences | Platform performance analytics |
CM777 never collects data with the intention of selling it to advertisers or data brokers. We do not build advertising profiles on our players. The data we hold exists to run your account securely, pay you correctly and promptly, comply with applicable legal obligations, and keep the platform safe for all users.
Section 04
Legal Basis for Processing Your Data
CM777 processes your personal data under the following legal grounds, depending on the nature of the data and the purpose of processing:
- Contractual necessity: Most of the data CM777 processes is necessary to fulfil the service agreement between you and CM777. Without your name, contact details, and payment information, we cannot operate your account, process deposits, or pay out winnings. This is the primary basis for the majority of data processing on CM777.
- Legal obligation: CM777 is required by applicable regulations to verify the identity of players, maintain transaction records, and conduct anti-money laundering (AML) checks. This data processing is mandatory — it is not optional for either party.
- Legitimate interests: CM777 processes certain technical and usage data to protect the platform from fraud, improve the user experience, and detect suspicious activity. This processing serves the legitimate interests of CM777 and its player community without overriding your privacy rights.
- Consent: Where CM777 sends you marketing communications or places non-essential cookies on your device, we do so on the basis of your consent. You may withdraw consent at any time — instructions for doing so are provided in Sections 07 and 12 of this policy.
Section 05
Who CM777 Shares Your Data With
CM777 does not sell your personal data to any third party under any circumstances. However, to operate the platform and fulfil our legal obligations, we do share data with certain trusted service providers. Here is a complete picture of who may receive your data and why:
| Recipient | Data Shared | Purpose | Retained by Recipient? |
|---|
Payment Processors
Easypaisa, JazzCash, NayaPay, SadaPay, banks, card networks |
Transaction amount, account reference, player ID |
Processing PKR deposits and withdrawals |
Per their policy |
| Identity Verification Providers |
Name, CNIC number, date of birth |
KYC verification, age confirmation |
Verification status only |
Game Content Providers
Pragmatic Play, Evolution, Microgaming, etc. |
Anonymous player session ID, stake amount |
Game delivery, round history for dispute resolution |
Anonymised round data |
| Fraud Prevention Services |
IP address, device fingerprint, transaction pattern |
Detecting and preventing fraudulent activity |
Risk signals only |
| Legal & Regulatory Authorities |
As required by law or valid legal order |
Compliance with legal obligations |
As required by law |
| Analytics Providers |
Aggregated, anonymised usage data |
Platform performance improvement |
No personal data |
Important: CM777 never shares your mobile number, email address, physical address, or CNIC details with marketing companies, data brokers, or any commercial third party for advertising purposes. Your personal contact details are used only to operate your CM777 account and communicate with you about that account.
Section 06
Payment Data & Financial Privacy
Given that CM777 handles real PKR transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, financial data privacy deserves its own section. Here is how CM777 handles your payment information specifically.
Card Payments
CM777 does not store full card numbers on our own servers. When you deposit via Visa or Mastercard, the card details are transmitted directly to our PCI-DSS compliant payment processor over an encrypted connection. CM777 receives only a masked card reference (e.g., ending in 4 digits) for display in your transaction history. The full card number, CVV, and expiry date are never stored by CM777.
Mobile Wallet Payments
When you deposit or withdraw using Easypaisa or JazzCash, CM777 stores the registered mobile number associated with the wallet and the transaction reference returned by the payment network. This is the minimum information required to process and verify transactions and to match incoming deposits to the correct player account. This data is retained as part of your transaction history as described in Section 08.
Anti-Money Laundering Monitoring
CM777 monitors transaction patterns on all accounts as part of our Anti-Money Laundering (AML) programme. This is a legal requirement for licensed gaming operators and is in the interests of all legitimate players. If unusual patterns are detected — such as rapid depositing and withdrawal without significant gameplay — CM777 may place a temporary hold on the account and request additional information. This process is handled sensitively and all data collected during an AML review is used only for that purpose.
Section 07
Cookies & Tracking Technologies
CM777 uses cookies and similar technologies to make the platform work properly, remember your preferences, and understand how players use the site so we can improve it. Here is a breakdown of the types of cookies used on CM777:
Essential Cookies
These cookies are strictly necessary for the CM777 platform to function. They maintain your login session, remember your language preference, and keep your game state intact if you switch between pages. Without essential cookies, the CM777 platform cannot operate. They cannot be disabled without breaking the site.
Performance & Analytics Cookies
CM777 uses anonymised analytics data to understand which pages players visit most, where they spend time, and where technical errors occur. This data is collected in aggregated, non-identifiable form — it tells us "100 players visited this page today" but not who those players were. This helps us fix problems and improve the experience for everyone.
Preference Cookies
These cookies remember choices you make on CM777 — such as your preferred display language or game lobby filter settings — so you don't have to set them again every time you visit.
Managing Cookies
You can control non-essential cookies through your browser settings. Most browsers allow you to refuse new cookies, accept specific cookies, or delete existing cookies. Please note that disabling certain cookies may affect some functionality of the CM777 platform. Instructions for managing cookies are available in your browser's help documentation.
Section 08
How Long CM777 Keeps Your Data
CM777 retains personal data only for as long as it is needed for the purpose it was collected. Once data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised. Here is our standard retention schedule:
- Account registration data (name, email, mobile, address): Retained for the duration of your active account plus 5 years after account closure, to meet legal and regulatory obligations.
- Identity verification documents (CNIC scans, selfies): Retained for the duration of your active account plus 5 years after account closure. This retention period is mandated by AML regulations.
- Transaction history (deposits, withdrawals, bet records): Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping requirements.
- Support communications: Retained for 3 years from the date of the conversation unless the conversation is relevant to an ongoing dispute or legal matter.
- Technical and usage data (IP logs, session data): Retained for 12 months from the date of collection.
- Marketing consent records: Retained for 3 years from the date of consent or until consent is withdrawn.
After the applicable retention period, data is permanently deleted from CM777's systems using industry-standard secure deletion methods. Anonymised or aggregated data — from which no individual can be identified — may be retained indefinitely for analytical purposes.
Section 09
How CM777 Secures Your Data
Protecting your personal data from unauthorised access, loss, or misuse is one of CM777's most important operational responsibilities. We implement the following technical and organisational security measures:
- 256-bit SSL/TLS encryption: All data transmitted between your device and CM777 servers is encrypted using industry-standard TLS encryption. This applies to your login credentials, payment data, and all other information passed between your browser and the CM777 platform.
- Encrypted data storage: Sensitive personal data including identity documents and financial records is encrypted at rest in CM777's databases. Even in the unlikely event of a data breach affecting our storage systems, encrypted data would be unreadable without the decryption keys.
- Access controls: CM777 employee access to personal player data is granted on a strict need-to-know basis. Only staff members with a legitimate operational reason to access specific data categories are authorised to do so. All access is logged and audited.
- Two-factor authentication: CM777 supports and encourages the use of two-factor authentication (2FA) for player accounts. When enabled, a one-time code is required at login in addition to your password, significantly reducing the risk of unauthorised account access.
- Regular security assessments: CM777's technical infrastructure undergoes regular security reviews and vulnerability assessments to identify and address potential weaknesses before they can be exploited.
Your role in security: CM777's security measures protect your data at our end. You also play an important part. Use a strong, unique password for your CM777 account. Never share your login credentials or OTP codes with anyone — including people claiming to be CM777 staff. If you suspect your account has been compromised, contact support immediately.
Section 10
Your Rights Over Your Personal Data
You have the following rights in relation to the personal data CM777 holds about you. To exercise any of these rights, contact us at support@cm777.ws with the subject line "Data Rights Request" and a description of what you are requesting. CM777 will respond within 30 days.
Right to Access
Request a copy of all personal data CM777 holds about you. We will provide a full data summary in a readable format within 30 days of a verified request.
Right to Correction
If any information CM777 holds about you is inaccurate or out of date, you have the right to request its correction. Most contact details can be updated directly in your account settings.
Right to Erasure
You may request deletion of your personal data. This right applies where data is no longer necessary for its original purpose and no legal retention obligation requires us to keep it.
Right to Restrict Processing
In certain circumstances you may ask CM777 to restrict the processing of your data — for example while a correction request or complaint is being handled.
Right to Portability
You may request your personal data in a structured, machine-readable format so you can transfer it to another service. This applies to data you provided to CM777 directly.
Right to Object
You have the right to object to CM777 processing your data for marketing purposes or on the basis of legitimate interests. Objections to marketing take effect immediately.
Please note that some of these rights are qualified — they do not apply in all circumstances. Where a legal retention obligation requires CM777 to keep certain data (for example AML transaction records), we may be unable to delete it even on request. We will always explain clearly if a request cannot be fulfilled and why.
Section 11
Children & Minors – 18+ Only
CM777 is strictly an adult platform. We do not knowingly collect or process personal data from anyone under the age of 18. If you are under 18, you must not use CM777 or attempt to register an account.
If CM777 discovers or has reasonable grounds to believe that personal data has been collected from a minor, we will delete that data as promptly as possible, close the associated account, and refund any deposited funds to the originating payment method where technically feasible.
If you are a parent or guardian and believe your child has registered on CM777 without authorisation, please contact us immediately at support@cm777.ws with the subject line "Minor Account Report". We will investigate and respond within 48 hours. Identity verification may be required before any action is taken on the account.
Section 12
Marketing Communications
CM777 may send promotional communications to players who have opted in to receive them. These communications include information about new games, upcoming PSL betting markets, bonus offers, and platform features. We send marketing messages via email and, where you have consented, via SMS or WhatsApp notifications.
Your consent to receive marketing communications is given at registration and can be withdrawn at any time through either of the following methods:
- Log in to your CM777 account, go to Account Settings, and update your communication preferences.
- Click the "Unsubscribe" link at the bottom of any CM777 marketing email.
- Contact support at support@cm777.ws with the subject line "Unsubscribe from Marketing".
Unsubscribe requests are processed within 5 business days. Withdrawing consent to marketing communications does not affect your account or your ability to continue using CM777. You will still receive transactional communications related to your account — such as deposit confirmations, withdrawal processing updates, and security alerts — as these are not marketing messages and are essential to the operation of your account.
CM777 does not share your contact details with any third-party marketer. All marketing communications you receive from CM777 are sent directly by CM777 or through our contracted email delivery service providers, none of which receive your data for their own marketing purposes.
Section 13
Changes to This Privacy Policy
CM777 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable legal requirements, or improvements to our data practices. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.
For significant changes that materially affect how your personal data is used, CM777 will notify registered players via email and via an in-platform notification before the changes take effect. For minor clarifications or non-material updates, the page will be updated without direct notification, and the change will be visible in the revision date.
Continuing to use the CM777 platform after a policy update has been posted and notified constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically — particularly at the start of major cricket seasons when platform features and data practices may evolve.
