vh777a Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy applies to all personal data processed by vh777a in connection with the platform available at vh777a.app, including account registration, player authentication, PKR deposits and withdrawals, game participation, responsible gaming tools, and customer support interactions.

vh777a is the data controller responsible for determining the purposes and means of processing personal data collected through the platform. For all privacy-related enquiries, including data access requests and deletion requests, players may contact the vh777a data team at the contact address specified in Section 13 of this Policy.

This Policy applies specifically to Pakistani players and residents who access the vh777a platform from within Pakistan. It governs the processing of personal data collected through all platform touchpoints including the web platform, mobile browser sessions, and direct communications with the vh777a support team.

vh777a collects personal data across several categories, each corresponding to a specific operational or legal requirement. The following table provides a comprehensive overview of the data categories collected, the source of that data, and the primary purpose for collection.

vh777a processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Performance of a Contract: Processing that is necessary to register your Account, verify your identity, process PKR deposits and withdrawals, and provide the gaming and betting services you have requested. Without this processing, the Platform cannot function for your Account.
• Compliance with Legal Obligations: Processing required to fulfil vh777a's obligations under applicable anti-money-laundering, responsible gaming, age verification, and financial record-keeping requirements. This includes KYC documentation review and the retention of transaction records.
• Legitimate Interests: Processing that is necessary for vh777a's legitimate interests in preventing fraud, protecting platform security, monitoring responsible gaming obligations, and improving platform performance — where those interests are not overridden by your fundamental rights and privacy interests.
• Consent: Processing based on your freely given, specific, and informed consent — such as the sending of promotional emails and bonus offer notifications. You may withdraw consent for marketing communications at any time by contacting the vh777a support team.

vh777a uses the personal data collected through the Platform for the following specific purposes. Each use is tied directly to the data categories described in Section 2 and the legal bases set out in Section 3.

• Account Registration and Authentication: Creating your Account, verifying your identity during registration, enabling secure vh777a Login sessions, and maintaining the integrity of the one-account-per-player rule.
• PKR Transaction Processing: Facilitating deposits via Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, and SadaPay — and processing PKR withdrawal requests to your registered payment method within the standard processing timelines.
• Responsible Gaming Monitoring: Using gaming activity data to identify patterns that may indicate problematic gambling behaviour, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where warranted.
• Fraud Detection and Security: Monitoring technical data including IP addresses and device identifiers to detect and prevent fraudulent account activity, multiple-account registration, unauthorised access attempts, and payment fraud.
• Customer Support: Using communications data to resolve disputes, answer queries, process responsible gaming tool activation requests, and provide 24/7 English-language support to Pakistani players.
• Platform Improvement: Using anonymised and aggregated gaming activity data and technical data to understand how Pakistani players use the Platform, identify performance issues, and guide product development decisions.
• Marketing Communications (with consent): Where you have provided explicit consent, sending you email or SMS notifications about new games, platform promotions, and bonus offers. You may opt out of these communications at any time.

When you make a PKR deposit or withdrawal on vh777a using Easypaisa, JazzCash, Raast, or a Pakistani bank, the following data is recorded in your vh777a Account and retained in our systems:

• Transaction amount in PKR and the currency denomination;
• Payment method type (e.g., Easypaisa, JazzCash, Raast, HBL);
• Masked payment identifier (e.g., last 4 digits of a mobile wallet number or account reference) — not the full number;
• Transaction timestamp, reference number, and processing status;
• Transaction type (deposit or withdrawal) and the Account balance change resulting from the transaction.

This payment activity data is used for the following purposes only: reconciling your PKR Account balance, processing withdrawal requests to the correct payment destination, verifying source of funds during KYC review where required, investigating disputed or failed transactions, and maintaining financial records for audit and regulatory compliance.

Payment transaction data is retained for a minimum of 5 years following the transaction date in order to comply with applicable financial record-keeping obligations. After this retention period, payment data is securely and irreversibly deleted from vh777a's systems.

vh777a uses cookies and similar tracking technologies on the Platform to support core functionality, security, and performance optimisation. The following categories of cookies are in use on the vh777a platform:

vh777a does not use advertising cookies, retargeting pixels, or any third-party tracking technologies that send your browsing behaviour to external advertising platforms. No cookie data from the vh777a Platform is shared with or accessible to social media networks, Google Ads, or any similar advertising infrastructure.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the vh777a Platform. Disabling other cookie categories will not prevent you from using core Platform services.

vh777a shares personal data with third parties only in the following limited circumstances, each of which is essential to the operation of the Platform or required by law:

• Payment Processors: Easypaisa, JazzCash, and participating Pakistani banks (HBL, UBL, MCB Bank) receive limited transaction data necessary to process your PKR deposits and withdrawals. Each payment partner operates under its own privacy and security framework and processes your data as an independent data controller for the payment transaction only.
• Raast Infrastructure: Raast instant transfers are processed via Pakistan's national payment infrastructure. The data shared with Raast is limited to the transaction amount, reference, and the sender/recipient account identifiers necessary to complete the transfer.
• Game Software Providers: Certified game providers (including PG Soft, Evolution Gaming, Pragmatic Play, and others) may process limited technical data including your session identifier and bet history in order to render games, calculate outcomes, and settle wins in PKR. No identity data is shared with game providers beyond the session reference required to link your game session to your vh777a Account.
• KYC Verification Services: Where identity document verification is conducted using a third-party KYC service, your submitted documents are processed by that service for the sole purpose of verifying authenticity. Documents are not retained by the KYC provider beyond the verification period.
• Law Enforcement and Regulatory Bodies: vh777a will disclose personal data to law enforcement, regulatory authorities, or courts where required by applicable law or valid legal process — for example, in response to investigations related to money laundering, fraud, or underage access. Such disclosures are made only to the extent required and subject to verification of the request's legal basis.

vh777a implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The principal security measures in operation on the Platform include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and the vh777a Platform — including login credentials, PKR transaction data, and personal account details — is encrypted using TLS 1.3. This applies to all connections regardless of whether you access the Platform from a mobile device on Telenor, Jazz, Zong, or Ufone, or from a desktop connection.
• Encryption at Rest: Sensitive personal data fields — including KYC documents, financial data, and authentication credentials — are encrypted at rest in vh777a's database systems using AES-256 encryption. Encryption keys are managed in a separate key management system with access controls restricted to authorised infrastructure personnel only.
• Access Control and Least Privilege: vh777a staff access to personal data systems is governed by a least-privilege access control policy. Support agents, for example, can view the minimum data necessary to resolve your query — they cannot view your full payment credentials, KYC document images, or unmasked financial account numbers.
• Two-Factor Authentication for Staff Systems: All internal vh777a staff accounts that have access to player data are protected by mandatory two-factor authentication. Password-only access to player data systems is not permitted.
• Anomaly Detection: vh777a employs automated monitoring systems that detect and alert on unusual data access patterns, potential breach indicators, and unusual outbound data flows. These systems operate continuously on a 24/7 basis.
• Security Incident Response: In the event of a confirmed personal data breach affecting Pakistani players, vh777a will notify affected players via the email address associated with their Account within a reasonable timeframe, providing details of the breach, the data affected, and the steps taken to address it.

vh777a retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of personal data processed by vh777a:

Upon expiry of the applicable retention period, personal data is securely deleted from vh777a's active systems. Backups containing personal data are overwritten on a rolling basis consistent with the retention periods above.

As a registered vh777a player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the vh777a data team using the contact information in Section 13. Requests will be acknowledged within 5 business days and fulfilled within 30 business days.

All Account registrations include a mandatory date-of-birth declaration. Registrants who declare an age below 18 are blocked from completing registration. Where age fraud is suspected following registration, vh777a may request KYC documentation at any point to verify age compliance. Accounts confirmed to be operated by individuals under 18 will be closed immediately, with data retained only for the period required to document the underage access incident for regulatory purposes before deletion.

vh777a reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When material changes are made, registered players will be notified via the email address associated with their Account at least 14 days before the changes take effect.

The version number and effective date shown at the top of this document are updated with each revision. The current version is always available at vh777a.app/privacy-policy. We encourage you to review the Policy periodically. Continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

Non-material changes — such as clarifications, typographic corrections, or formatting updates that do not alter the substance of our data processing practices — may be made without individual notification.

For all privacy-related queries, data access requests, rectification requests, erasure requests, or complaints relating to how vh777a handles your personal data, please contact the vh777a data and privacy team using the following contact information:

• Email (Data Requests): [email protected] — please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 on the vh777a platform — identify yourself as making a privacy or data rights enquiry at the start of the conversation
• Response Time: Acknowledgement within 5 business days; full resolution within 30 business days

vh777a is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with vh777a's response to a privacy complaint, you may raise the matter with the relevant regulatory authority in your jurisdiction.