Privacy Policy — How Taj777 Protects Your Data

Taj777 ("Company", "we", "us", "our") is committed to protecting the personal data of all individuals who access and use the Taj777 Platform ("Platform"), available at taj777.cam. This Privacy Policy ("Policy") sets out how we collect, use, store, share and protect personal data, and describes the rights available to users in connection with their data.

This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our support team. It covers data collected through the Platform's website, mobile-optimised interface and all associated services.

This Policy is incorporated by reference into the Taj777 Terms & Conditions. By registering an account, accessing the Platform or otherwise providing personal data to Taj777, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, CNIC number, IP address, device identifiers and financial transaction data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, erasure or destruction.
• "Data Controller" — Taj777, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of Taj777, such as a payment processor or KYC verification provider.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" — identity verification documents submitted by users, including CNIC, passport, proof of address, selfies or liveness-check recordings.
• "Cookies" — small text files placed on a user's device by a website to store preference information, session state and analytics data.

Taj777 collects personal data across several categories depending on the nature of your interaction with the Platform. The categories of data collected are described below.

3.1 Registration Data

When you create a Taj777 account, we collect the following information as part of the registration process:

3.2 Identity Verification (KYC) Data

Prior to processing your first withdrawal — or at any point where the Platform's compliance team deems verification necessary — we may collect:

• A copy of a valid government-issued identity document, such as a Pakistani CNIC or passport;
• Proof of current residential address, such as a recent utility bill or bank statement;
• A selfie or liveness-check recording confirming that you are the person named on the submitted documents;
• Where applicable, evidence of the payment method used for deposits (e.g., a screenshot of a mobile wallet or bank account showing your name).

3.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect information necessary to process the transaction, including:

• Payment method type and reference details (e.g., bank account identifiers, Easypaisa/JazzCash wallet references, Raast payment IDs);
• Transaction amounts in PKR and associated timestamps;
• Deposit and withdrawal history associated with your account.

Note: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah in this context are descriptive of user-provided payment references only. They do not imply endorsement, affiliation or support of gambling activities by any of those providers.

3.4 Usage and Technical Data

When you access the Platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location;
• Device type, operating system and browser information;
• Session duration, pages visited and features used;
• Game history, bet records and wagering activity;
• Login timestamps and account activity logs.

3.5 Support Communications

When you contact Taj777 support via live chat or email, we retain records of those communications — including your name, contact details, the nature of your query and the response provided — for quality assurance, dispute resolution and regulatory audit purposes.

Taj777 collects personal data through the following means:

• Directly from you — during account registration, identity verification, deposit/withdrawal requests, support interactions and form submissions on the Platform;
• Automatically — through cookies, server logs, session tracking and other technical mechanisms when you access and use the Platform;
• From third parties — including identity verification services (to cross-reference KYC documents), fraud prevention providers (to assess transaction risk) and payment processors (to confirm transaction status);
• From public sources — where required for AML (Anti-Money Laundering) compliance checks, we may reference publicly available information to verify the accuracy of submitted data.

Taj777 processes personal data for the following defined purposes:

Account Management

To create, maintain and administer your Taj777 account, including profile management, password resets and account notifications.

Identity Verification & Age Checking

To verify your identity and confirm that you meet the minimum age requirement (18+, or the higher minimum required by the operator/license jurisdiction) before allowing deposits, withdrawals or participation in certain promotions.

Payment Processing

To process deposit and withdrawal transactions, reconcile account balances and maintain accurate financial records in PKR.

Legal & Regulatory Compliance

To comply with applicable Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention obligations and any other legal duties imposed under the operator's license jurisdiction.

Responsible Gambling

To monitor account activity for signs of problem gambling behaviour, administer self-exclusion requests, enforce deposit/loss limits set by users and fulfil duties under responsible gambling obligations.

Customer Support

To respond to queries, resolve disputes and provide assistance through live chat and email channels.

Platform Improvement & Security

To analyse usage patterns, detect and prevent fraud and abuse, improve Platform functionality and maintain system security.

Marketing Communications

Where you have provided explicit consent, to send you promotional offers, bonus notifications and relevant platform updates by email or in-platform notification. You may withdraw consent at any time through your account settings.

Where data protection law requires a legal basis for each processing activity, Taj777 relies on the following bases:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions you have accepted, including account operation, payment processing and KYC verification;
• Legal obligation — processing required to comply with AML regulations, fraud prevention requirements and obligations under the operator's license jurisdiction;
• Legitimate interests — processing necessary for fraud detection, security monitoring and platform improvement, where those interests are not overridden by your rights;
• Consent — processing for optional purposes such as marketing communications, where you have freely provided explicit opt-in consent and retain the right to withdraw it at any time.

Taj777 does not sell, rent or trade personal data. We share data with third parties only in the following defined circumstances:

7.1 Service Providers (Data Processors)

We engage third-party companies to provide services on our behalf under contractual data processing agreements. These include:

• Payment processors — to facilitate deposits and withdrawals;
• KYC and identity verification providers — to verify the authenticity of identity documents and confirm user age;
• Fraud prevention and AML screening providers — to assess transaction risk and meet compliance obligations;
• Cloud infrastructure and hosting providers — to store data securely on servers in the operator's approved jurisdiction(s);
• Customer support platform providers — to operate live chat and email support systems.

Each service provider is required to process data only as instructed, implement appropriate security measures and not use data for any purpose beyond the contracted service.

7.2 Legal and Regulatory Disclosure

Taj777 may disclose personal data to regulators, law enforcement agencies or courts where required by applicable law, regulatory order or legal process — including where disclosure is required to investigate fraud, money laundering or other criminal activity.

7.3 Business Transactions

In the event of a merger, acquisition, sale of assets or restructuring of the Company, personal data held by Taj777 may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.

As an international online platform, Taj777 may store and process personal data in jurisdictions outside Pakistan. Where data is transferred internationally — for example, to servers in the operator's license jurisdiction or to service providers based abroad — Taj777 takes steps to ensure that appropriate safeguards are in place to protect that data in accordance with the standards described in this Policy.

Such safeguards may include contractual clauses with data processors requiring equivalent levels of data protection, or reliance on the data protection regime applicable in the operator's jurisdiction.

By using the Taj777 Platform and submitting personal data, you acknowledge that your data may be processed in jurisdictions outside Pakistan. Taj777 does not represent that such transfers comply with any specific Pakistani legislative requirement governing cross-border data flows.

Taj777 retains personal data for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. General retention principles applied by Taj777 are as follows:

• Active account data — retained for the duration of the account relationship and for a minimum period thereafter to meet legal and regulatory requirements;
• KYC and identity documents — retained for a minimum period following account closure as required by AML obligations and the operator's license jurisdiction. The precise period is determined by applicable regulatory requirements;
• Financial transaction records — retained for a minimum period as required for financial audit, dispute resolution and regulatory compliance purposes;
• Support communication records — retained for a reasonable period to support quality assurance and dispute resolution, after which they are deleted or anonymised;
• Marketing consent records — retained for as long as necessary to demonstrate consent and to process opt-out requests.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification.

Taj777 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or destruction. These include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols across all Platform communications;
• Encryption of sensitive data at rest on storage infrastructure;
• Hashed storage of user passwords — Taj777 never stores passwords in plain text;
• Two-factor authentication (2FA) options for user accounts;
• Access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments of Platform infrastructure;
• Dedicated secure portal for KYC document submission — documents are never accepted via email or unencrypted channels.

Taj777 uses cookies and similar tracking technologies to operate essential Platform functions and improve user experience. Cookies used on the Platform fall into the following categories:

11.1 Strictly Necessary Cookies

These cookies are required for the Platform to function. They manage user sessions, maintain login state, enable the cashier to operate and support security features. These cookies cannot be disabled without affecting core Platform functionality.

11.2 Analytical & Performance Cookies

These cookies collect anonymised data about how users interact with the Platform — such as which pages are visited most frequently, how long sessions last and where errors occur — to help us improve functionality and performance.

11.3 Functional Cookies

These cookies remember your preferences such as language settings, display preferences and previously used payment options to provide a more personalised experience.

11.4 Managing Cookies

You can control and delete cookies through your browser settings. Disabling analytical or functional cookies will not prevent you from using the Platform, but may affect certain personalisation features. Disabling strictly necessary cookies may prevent core Platform functions from operating correctly.

Subject to applicable law, you have the following rights in relation to your personal data held by Taj777. To exercise any of these rights, contact us via the details in Section 16.

Taj777 will respond to data rights requests within a reasonable timeframe. Certain requests may be subject to identity verification before they are actioned. Where a request cannot be fulfilled due to a legal obligation — such as AML record-keeping requirements — we will explain the reason.

The Taj777 Platform is strictly for adults aged 18 years or over — or the higher minimum required by the operator's license jurisdiction. Taj777 does not knowingly collect or process personal data from individuals under the applicable minimum age.

If we become aware that personal data has been collected from a person under the applicable age minimum, that account will be immediately closed, associated funds will be returned to the depositing payment method and all related data will be deleted or anonymised. If you believe that a minor has registered on the Platform, please contact us immediately via the details in Section 16.

Taj777 serves a significant proportion of its users from cities across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We recognise that Pakistani users engage with payment services including Easypaisa, JazzCash and Raast-linked bank transfers, and may reference accounts at HBL, UBL, Meezan Bank and Bank Alfalah.

Personal data associated with these payment references — such as wallet identifiers, account names and transaction references — is collected and stored solely for the purpose of processing your transactions and complying with financial verification requirements. Taj777 does not use this information for any purpose beyond operating your account.

Pakistan does not currently have a comprehensive standalone data protection law equivalent to the EU's General Data Protection Regulation (GDPR). Taj777 does not represent that this Policy conforms to any specific Pakistani statute. Users in Pakistan should be aware that their data may be processed and stored outside Pakistan in the operator's license jurisdiction.

Taj777 does not claim affiliation with, or approval from, the Government of Pakistan, PTA, the State Bank of Pakistan or any provincial authority in connection with the collection or processing of personal data. Users are responsible for understanding applicable local privacy and data protection obligations.

Taj777 reserves the right to update, amend or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform functionality. Where material changes are made, users will be notified through one or more of the following: a notification on login, a Platform banner announcement, or an email to the registered address.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend that you review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

If you do not agree to a revised Privacy Policy, you should discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.

To exercise your data rights, raise a privacy concern, report a suspected data breach or ask any question about this Privacy Policy, please contact the Taj777 data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the Platform interface. Live chat is the recommended channel for urgent privacy or account-related queries.
• Email: [email protected] — for written privacy requests and data rights submissions. Please include your registered account email and a clear description of your request. Do not attach CNIC, passport copies or banking documents to emails — use the secure in-platform KYC portal for all document submissions.

We aim to acknowledge privacy requests promptly and to resolve them within a reasonable timeframe. Where a request requires identity verification before it can be actioned, we will request appropriate confirmation. Complex requests — such as data portability or erasure — may take longer to fulfil due to legal review requirements.