Privacy Policy

1. About This Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by f7ff in connection with the operation of the f7ff online casino and sportsbook platform, accessible at https://f7ff.net. It covers data collected from players based in Pakistan and elsewhere who access the f7ff Platform.

f7ff operates under an international gaming licence and is therefore subject to the data protection and player privacy obligations imposed by that licensing regime. This Policy is designed to reflect those obligations in plain, readable language so that every f7ff player in Pakistan — whether in Karachi, Lahore, Islamabad, or Faisalabad — fully understands how their data is handled.

This Privacy Policy should be read alongside f7ff's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and f7ff.

2. Personal Data We Collect

f7ff collects the categories of personal data set out below. We collect only what is necessary for the purposes described in this Policy and do not collect excessive or irrelevant data.

2.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC;
• Date of birth;
• Pakistani CNIC number and a copy of the CNIC document (front and back);
• Residential address (city, province);
• Pakistani mobile phone number;
• Email address used for account registration.

2.2 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number and registered name;
• Bank account details for HBL, UBL, or Meezan Bank transfers (account title and IBAN where applicable);
• Deposit and withdrawal transaction history (amounts, dates, payment method used);
• Account balance and bonus balance history.

2.3 Account & Gaming Activity Data

• Username and account settings;
• Login history (timestamps, IP addresses, device type);
• Betting and wagering history (bets placed, games played, stakes, outcomes);
• Bonus and promotional offer usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.4 Technical & Device Data

• IP address at time of login and during active sessions;
• Device type, operating system, and browser version;
• Mobile network operator (e.g., Jazz, Telenor, Zong, Ufone);
• Session duration and navigation data within the Platform;
• Cookie identifiers (see Section 8).

2.5 Communications Data

• Support queries and correspondence sent to [email protected];
• Complaint records and resolution outcomes;
• Responses to promotional emails or in-platform messages (where applicable).

3. How We Collect Your Data

f7ff collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, server logs, and analytics tools as you browse and use the f7ff Platform (see Section 8);
• From payment providers — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank may share transaction confirmation data with f7ff to verify deposits and process withdrawals;
• From identity verification services — f7ff may use third-party KYC service providers to cross-check CNIC data for age and identity verification purposes;
• From fraud prevention services — automated screening tools may process your IP address and device fingerprint to detect fraudulent or prohibited activity on the Platform.

4. How We Use Your Personal Data

The table below summarises the key purposes for which f7ff processes your personal data and the corresponding legal basis for each:

f7ff does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated tools are used for fraud screening or responsible gaming monitoring, flagged cases are reviewed by a member of the f7ff compliance team before any account action is taken.

5. Legal Basis for Processing

f7ff processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the services you signed up for — including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with f7ff's obligations under its international gaming licence, including KYC, AML, and responsible gaming requirements;
• Legitimate interest: Processing carried out to protect the security and integrity of the f7ff Platform, prevent fraud, and improve the player experience — provided this does not override your fundamental rights;
• Consent: Processing for optional purposes such as promotional email communications, where you have explicitly opted in. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences.

6. Sharing Your Personal Data

f7ff does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum data necessary to process your deposit or withdrawal transaction;
• KYC and identity verification providers: Trusted third-party services used to verify your age and identity against your CNIC data, operating under strict data processing agreements;
• Game software providers: Licensed third-party game providers receive anonymised session identifiers to facilitate game play and bet settlement — they do not receive your full identity data;
• Fraud prevention and security services: Automated screening platforms may process your IP address and device data to detect suspicious activity, operating as data processors under f7ff's instruction;
• Regulatory and licensing authorities: f7ff's international gaming licence may require disclosure of player data to the licencing authority upon request, or in connection with an audit or investigation;
• Legal and law enforcement: Where required by applicable law, court order, or lawful request from a competent authority, f7ff may disclose personal data to the relevant body.

All third parties with whom f7ff shares personal data are required to handle that data in accordance with applicable data protection standards and are permitted to use it only for the specific purpose for which it was shared.

7. Data Retention

f7ff retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by f7ff's international gaming licence or applicable law.

As a general guide:

• Active accounts: Data is retained for the lifetime of your f7ff account plus a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements under most international gaming licensing frameworks;
• KYC documents: CNIC copies and supporting identity documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Transaction records: Deposit and withdrawal history is retained for a minimum of five (5) years for AML compliance purposes;
• Support communications: Customer support correspondence is retained for a minimum of three (3) years from the date of the last interaction;
• Technical logs: IP address logs and device access records are retained for up to twelve (12) months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes it impossible to re-identify the individual concerned.

8. Cookies & Tracking Technologies

f7ff uses cookies and similar tracking technologies to operate the Platform, maintain your session state, detect fraud, and analyse how players use the site. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations across sessions;
• Analytics cookies: Help f7ff understand how players navigate the Platform — including which pages are visited most frequently and where players encounter difficulties — so we can improve the user experience;
• Fraud prevention cookies: Device fingerprinting and session integrity tools that help f7ff identify duplicate accounts, bot activity, and suspicious login patterns.

f7ff does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings, although disabling strictly necessary cookies will affect your ability to use the Platform. For full details of the cookies in use, please refer to the cookie settings panel accessible from the footer of the Platform.

9. Security of Your Personal Data

f7ff implements technical and organisational security measures appropriate to the nature of the personal data we hold and the risks associated with its processing. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the f7ff Platform;
• Encrypted storage of sensitive data at rest, including CNIC document copies and payment method details;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Multi-factor authentication available for player accounts and mandatory for f7ff administrative access;
• Incident response procedures for detecting and responding to personal data breaches in a timely manner.

10. Your Privacy Rights

As an f7ff player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". f7ff will respond within a reasonable timeframe, typically within 30 days of receiving a valid request.

Please note that certain rights are subject to limitations where f7ff has overriding legal obligations — for example, f7ff cannot delete transaction records that must be retained under AML requirements even if you request erasure of your account data.

11. Children & Minors

The f7ff Platform is strictly for adults aged 21 and above. f7ff does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account on f7ff or that personal data belonging to a minor is being held by f7ff, please contact us immediately at [email protected]. Upon confirmation, f7ff will take immediate steps to close the account and securely delete all associated personal data.

Age verification through CNIC is a mandatory step in the f7ff account registration process specifically to prevent underage access to the Platform and to the personal data collection that accompanies account registration.

12. Changes to This Privacy Policy

f7ff reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements under our international gaming licence, or improvements to the Platform. Where changes are material, f7ff will notify registered players via the email address associated with their account prior to the changes taking effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the f7ff Platform following notification of any changes constitutes acceptance of the revised Policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a data-related concern or complaint, please contact the f7ff data support team directly. We are available around the clock and aim to respond to all privacy-related queries within 30 days.