hq1777 Privacy Policy

1.1 hq1777 ("we", "us", "our", or "hq1777") is committed to protecting the privacy and personal data of all users of the hq1777 platform, accessible at hq1777.net. This Privacy Policy has been prepared to inform you clearly and transparently about our data practices in relation to your personal information.

1.2 hq1777 primarily serves users based in Pakistan. This policy is written to comply with applicable data protection obligations and reflect the reasonable expectations of Pakistani users regarding the handling of their personal information. All communications in connection with this policy are conducted in English.

1.3 This Privacy Policy should be read together with hq1777's Terms & Conditions and Responsible Gaming Policy, all of which together form the complete framework governing your use of the platform and our obligations to you.

1.4 hq1777 may process personal data of users located in Pakistan or other jurisdictions. In all cases, we apply the data handling standards described in this policy regardless of where the data was collected.

2.1 For the purposes of applicable data protection law, hq1777's licensed operating entity acts as the Data Controller in respect of personal data collected through the hq1777 platform. The Data Controller determines the purposes and means of processing your personal data.

2.2 As Data Controller, hq1777 is responsible for ensuring that personal data collected through the platform is processed lawfully, fairly, and transparently, and in accordance with the data subject's rights as described in this policy.

2.3 Where hq1777 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or customer support platforms — those providers act as Data Processors operating under written data processing agreements that restrict their use of your data to the specific services they provide to hq1777.

2.4 Enquiries regarding hq1777's data controller responsibilities or this Privacy Policy may be directed to our support team at the contact details provided in Section 15 of this document.

3.1 hq1777 collects the following categories of personal data from users in the course of platform registration, account management, and use of our services:

3.2 hq1777 does not intentionally collect any sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data unrelated to responsible gaming obligations, or biometric data — beyond what is strictly necessary for identity verification or legal compliance purposes.

4.1 Directly from You. The majority of personal data held by hq1777 is provided directly by you during account registration, KYC submission, deposit or withdrawal transactions, customer support interactions, promotional claim processes, and responsible gaming tool activations.

4.2 Automatically. When you access and use the hq1777 platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser information, session duration, pages visited, and feature interactions. This data is collected via server logs, session tracking, and first-party cookies.

4.3 From Third Parties. hq1777 may receive personal data about you from the following third-party sources:

• KYC Verification Providers: Identity verification results, document authenticity checks, and biometric comparison outcomes from our contracted verification partners.
• Payment Processors: Transaction confirmation data, payment method verification status, and fraud screening results from JazzCash, EasyPaisa, Raast, and our banking partners.
• Fraud Prevention Services: Risk scores, device fingerprint analysis, and cross-platform behavioural patterns from third-party fraud detection providers used to protect all hq1777 users.
• Responsible Gaming Databases: Where applicable, self-exclusion status information from industry-shared responsible gaming registries that hq1777 participates in to prevent access by excluded individuals.

5.1 hq1777 processes your personal data for the following specific purposes, each supported by a lawful basis as indicated:

5.2 Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent can be actioned through your hq1777 account settings or by contacting support.

6.1 hq1777 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Partners: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other payment processors — data shared is limited to what is strictly necessary to complete your transaction.
• KYC Providers: Identity verification platforms that process your CNIC and biometric data solely for the purpose of verifying your eligibility to use hq1777.
• Game Providers: Third-party software studios whose games are hosted on hq1777 may receive anonymised session data for game performance monitoring and fairness certification purposes only.
• Fraud Prevention Partners: Risk analytics services that assist in detecting fraudulent accounts, payment fraud, and bot activity on the hq1777 platform.
• Legal & Regulatory Authorities: Pakistani financial intelligence authorities, law enforcement agencies, and hq1777's licensing authority — where disclosure is required by law, court order, or licensing obligation.
• Professional Advisors: Lawyers, accountants, and auditors who are subject to professional confidentiality obligations and assist hq1777 in legal and compliance matters.

6.2 All third-party Data Processors engaged by hq1777 are required to sign data processing agreements that restrict their use of your personal data to the specific purposes for which it was shared, and to maintain appropriate security standards.

7.1 In the course of operating the hq1777 platform, your personal data may be transferred to and processed in countries outside Pakistan — for example, where our server infrastructure, KYC verification partners, or game providers are located internationally.

7.2 hq1777 ensures that all international transfers of personal data are subject to appropriate safeguards, including contractual protections requiring the receiving party to maintain security and privacy standards equivalent to those applied by hq1777 within Pakistan.

7.3 Where data is transferred to jurisdictions that do not have data protection laws equivalent to international best practices, hq1777 applies additional contractual, technical, and organisational safeguards to ensure your data remains protected throughout the transfer.

7.4 You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting hq1777 support at the details provided in Section 15.

8.1 hq1777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, and dispute resolution obligations.

8.2 The following general retention periods apply to the main categories of personal data held by hq1777:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulation.
• Gaming Activity Data: Retained for five (5) years following the date of the gaming activity, or longer where required for dispute resolution or regulatory audit purposes.
• KYC Verification Documents: Retained for five (5) years from the date of account closure or KYC completion, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last relevant communication, or longer if related to an ongoing dispute or complaint.
• Marketing Consent Records: Retained indefinitely as a record of your consent or opt-out decision, until you submit a deletion request.

8.3 Following the expiry of applicable retention periods, hq1777 will securely delete or irreversibly anonymise personal data so that it can no longer be attributed to an identifiable individual.

9.1 hq1777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and hq1777 servers.
• Encrypted storage of sensitive personal data, including CNIC details and financial records, on isolated, access-controlled database systems.
• OTP-based two-factor authentication for account login to prevent unauthorised access.
• Role-based internal access controls ensuring that hq1777 staff access personal data only on a strict need-to-know basis.
• Regular independent security audits and penetration testing of the hq1777 platform and infrastructure.
• Real-time session monitoring and anomaly detection to identify and respond to potential security incidents promptly.
• Strict third-party vendor security assessment procedures before onboarding any new data processor.

9.2 In the event of a personal data breach that poses a risk to your rights and freedoms, hq1777 will notify affected users without undue delay following discovery of the breach, and will take all reasonable steps to contain and remediate the incident.

10.1 As an hq1777 user, you hold the following rights in respect of your personal data. hq1777 is committed to honouring these rights promptly and without unnecessary obstacles:

10.2 To exercise any of the above rights, please contact hq1777 support as detailed in Section 15. We will respond to all verifiable requests within thirty (30) calendar days. We may request proof of identity before processing your request.

10.3 Please note that certain rights are subject to limitations — for example, the right to erasure cannot override hq1777's legal obligation to retain financial transaction records for regulatory compliance purposes.

11.1 hq1777 uses first-party cookies and similar session tracking technologies to operate the platform effectively. These technologies are used for the following purposes:

• Essential Cookies: Required for platform functionality — maintaining your login session, remembering language preferences, and enabling secure navigation between pages. These cannot be disabled without breaking core platform functionality.
• Security Cookies: Used to detect and prevent fraudulent access attempts, enforce session timeout policies, and support our OTP verification mechanisms.
• Analytics Cookies: First-party analytics tracking used internally by hq1777 to understand how users navigate the platform, identify performance bottlenecks, and improve the user experience. This data is processed in aggregate and anonymised form.
• Preference Cookies: Store your display settings, responsible gaming limit preferences, and other platform configuration choices to ensure a consistent experience across sessions.

11.2 hq1777 does not use third-party advertising cookies or share cookie data with advertising networks. You can manage cookie preferences through your browser settings, noting that disabling essential cookies will impair your ability to use the hq1777 platform.

11.3 On first visit, hq1777 displays a cookie consent notice that allows you to accept or adjust non-essential cookie categories. Your preferences are stored and respected on subsequent visits.

12.1 The hq1777 platform is strictly intended for adults aged 21 years and over. hq1777 does not knowingly collect personal data from individuals under the age of 21. Registration requires confirmation of age eligibility and is subject to CNIC-based age verification.

12.2 If hq1777 discovers or has reasonable grounds to believe that personal data has been submitted by an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be handled in accordance with our Terms & Conditions and applicable regulations.

12.3 If you are a parent or guardian and believe your child has submitted personal data to hq1777, please contact us immediately using the details in Section 15. We will investigate and respond promptly.

13.1 hq1777 may send you marketing communications — including promotional offers, bonus notifications, tournament announcements, and platform news — where you have provided explicit consent to receive such communications during registration or subsequently through your account settings.

13.2 Marketing communications from hq1777 may be delivered via SMS to your registered Pakistani mobile number, or by email to your registered address. We do not use unsolicited cold calling or physical mail for marketing purposes.

13.3 You may opt out of marketing communications at any time by:

• Updating your notification preferences in your hq1777 account settings dashboard.
• Clicking the unsubscribe link included in any hq1777 marketing email.
• Contacting hq1777 customer support with a request to remove you from all marketing lists.

13.4 Opting out of marketing communications will not affect your ability to receive service communications — such as account security alerts, transaction confirmations, KYC verification requests, or important policy update notices — which are sent regardless of your marketing preferences as they are necessary for the operation of your account.

13.5 hq1777 does not share your contact information with third parties for their marketing purposes under any circumstances.

14.1 hq1777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. The most current version will always be accessible on the hq1777 Privacy Policy page, and the "Last Updated" date at the top of this document will be revised accordingly.

14.2 For material changes that significantly affect your privacy rights or how we use your personal data, hq1777 will provide advance notice via your registered email address or through an in-platform notification at least fourteen (14) days before the changes take effect.

14.3 Your continued use of the hq1777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you disagree with the revised policy, you may request account closure and withdrawal of available funds before the changes take effect.

14.4 We encourage you to review this Privacy Policy periodically to stay informed about how hq1777 protects your personal data. If you have questions about any changes, please contact us using the details in Section 15.

15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way hq1777 processes your personal data, please contact us using the following details:

15.2 hq1777 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) calendar days. Complex matters may require additional time, in which case we will communicate the expected resolution timeline.

15.3 If you are not satisfied with hq1777's response to your privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or hq1777's licensing regulator, depending on your jurisdiction and the nature of the complaint.

15.4 For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page or contact support directly — these requests are prioritised and handled with full confidentiality.