7cx Privacy Policy

1.1 Purpose of This Policy. This Privacy Policy ("Policy") sets out how 7cx ("we", "us", "our") collects, uses, discloses, stores, and protects personal data provided by or collected from individuals ("you", "Player", "User") who access or use the 7cx online gaming platform at 7cx.biz ("Platform"). This Policy forms an integral part of the 7cx Terms and Conditions and should be read in conjunction with that document.

1.2 Scope of Application. This Policy applies to all personal data processed by 7cx in connection with the Platform, regardless of the channel through which such data is collected — including account registration, identity verification, financial transactions, gaming activity, customer support interactions, and website browsing behaviour. It applies to all current and former account holders, prospective players who begin the registration process, and visitors who browse the Platform without registering.

1.3 Our Privacy Commitment. 7cx processes personal data in accordance with the requirements of its international gaming licence and applicable data protection standards. We are committed to the following core principles in our handling of personal data:

• Lawfulness, Fairness, and Transparency — We process personal data only on lawful grounds and communicate our practices openly to data subjects
• Purpose Limitation — Personal data collected for specified purposes is not used for incompatible secondary purposes without appropriate basis
• Data Minimisation — We collect only the personal data that is genuinely necessary for the stated purpose
• Accuracy — We take reasonable steps to ensure that personal data held is accurate and kept up to date
• Storage Limitation — Personal data is retained only for as long as necessary for the purposes for which it was collected, subject to legal and regulatory retention obligations
• Integrity and Confidentiality — Personal data is protected against unauthorised access, accidental loss, destruction, or damage using appropriate technical and organisational security measures

1.4 Governing Language. This Policy is published in English. In the event of any inconsistency between this English version and any translated version, the English version shall be authoritative.

2.1 Identity of the Data Controller. For the purposes of applicable data protection law, the data controller in respect of personal data processed through the 7cx Platform is the entity holding the international online gaming licence under which 7cx operates. The Platform is operated under the brand name 7cx and is accessible at the domain 7cx.biz.

2.2 Controller Contact. All data protection queries, subject access requests, and privacy-related communications should be directed to the 7cx data protection contact via the support channel below. Contact information is provided in plain text in accordance with our platform communications policy:

2.3 Third-Party Processors. 7cx engages selected third-party service providers who process personal data on our behalf in their capacity as data processors. Such processors act strictly under 7cx's instruction and are bound by data processing agreements that require them to maintain appropriate security and confidentiality standards consistent with this Policy. A list of third-party processor categories is set out in Section 6.

3.1 Overview. The personal data collected by 7cx falls into several distinct categories, each serving specific operational, compliance, or security purposes. The table below provides a comprehensive overview of the categories of personal data we process, together with examples of the specific data points within each category.

3.2 Sensitive Data. 7cx does not intentionally collect special categories of sensitive personal data (such as health information, ethnic origin, religious beliefs, or political opinions) except where directly relevant to responsible gaming assessments, in which case such data is processed under applicable legal bases and with heightened confidentiality protections.

3.3 Mandatory vs. Optional Data. Certain personal data (identity, contact, and financial data) is mandatory for account registration, KYC compliance, and platform operation. Failure to provide mandatory data will prevent account creation or transaction processing. Other data categories (such as marketing preferences) are optional and can be modified at any time through account settings.

4.1 Data You Provide Directly. The majority of personal data processed by 7cx is data you provide to us voluntarily and deliberately through your interactions with the Platform. This includes:

• Account registration form submissions — name, email, date of birth, mobile number, chosen username and password
• Identity verification (KYC) document uploads — CNIC copies, selfie verification images, proof of address documents
• Payment method registration — JazzCash account number, EasyPaisa wallet details, bank account information, USDT wallet addresses
• Customer support interactions — support chat messages, email correspondence, complaint submissions
• Responsible gaming tool configurations — deposit limits, session limits, self-exclusion requests entered via Account Settings
• Marketing preference selections — newsletter opt-in, promotional email preferences

4.2 Data Collected Automatically. When you access or use the 7cx Platform, certain technical data is collected automatically by our systems without requiring any active input from you. This automatic collection enables us to deliver, secure, and improve the Platform. Automatically collected data includes:

• IP address and approximate geographic location derived from IP
• Device identifiers, operating system, and browser type and version
• Login timestamps, session duration, and authentication event logs
• Pages visited, games launched, betting market interactions, and click-path data within the Platform
• Error logs and performance metrics generated during your session
• Cookies and similar tracking technologies as described in Section 10

4.3 Data from Third Parties. In limited circumstances, 7cx may receive personal data about you from third-party sources as part of our compliance and fraud prevention processes. Third-party data sources may include:

• Identity verification service providers used during the KYC process
• Fraud detection and anti-money laundering (AML) screening databases
• Payment processors who confirm transaction status and flag anomalies
• Self-exclusion registries operated by responsible gaming organisations where participation is required under our licence conditions

5.1 Contractual Necessity. The primary legal basis for processing most personal data at 7cx is the performance of the contract between 7cx and the Player, as set out in the Terms and Conditions. Processing on this basis includes: account management, bet processing and settlement, payment execution, withdrawal processing, and the delivery of all Gaming Services accessed by the Player.

5.2 Legal Obligation. 7cx processes certain categories of personal data to comply with mandatory legal and regulatory obligations imposed by its international gaming licence, including:

• Anti-Money Laundering (AML) — Identity verification, transaction monitoring, suspicious activity reporting
• Know Your Customer (KYC) — Collection and verification of identity documents before withdrawal processing
• Responsible Gaming Compliance — Maintenance of self-exclusion records, age verification documentation, problem gambling intervention records
• Record-Keeping — Retention of financial and gaming records for the periods required by regulatory authorities

5.3 Legitimate Interests. Where not covered by contractual necessity or legal obligation, 7cx processes certain personal data on the basis of its legitimate interests, provided such interests are not overridden by the Player's fundamental privacy rights. Legitimate interest processing includes: fraud detection and prevention, platform security and abuse detection, technical performance optimisation, and aggregate analytics for product improvement.

5.4 Consent. For processing activities that are not required for contract performance, legal compliance, or legitimate interests — specifically marketing communications and non-essential cookies — 7cx relies on your explicit, informed, and freely given consent. You may withdraw consent for marketing communications at any time by updating your Account Settings or contacting support. Withdrawal of consent for marketing will not affect the lawfulness of processing carried out prior to withdrawal.

6.1 No Sale of Personal Data. 7cx does not sell, rent, or trade your personal data to third parties for their commercial purposes. This is an absolute commitment, not a qualified statement. Your personal information is not a commercial product at 7cx.

6.2 Authorised Third-Party Disclosures. 7cx shares personal data with third parties only in the following limited, controlled circumstances:

• Payment Processors — JazzCash, EasyPaisa, and banking partners who process your deposit and withdrawal transactions. These parties receive only the financial data necessary to execute specific transactions
• Identity Verification Providers — Third-party KYC service providers who verify the authenticity of identity documents submitted during account verification
• Fraud Prevention Services — AML screening and fraud detection service providers who analyse transaction patterns against risk indicators on 7cx's behalf
• Game Content Providers — Software providers (such as Pragmatic Play and PG Soft) who host games accessible through 7cx may receive session-level technical data required for game delivery
• Customer Support Infrastructure — Providers of the live chat and ticketing systems through which player support is delivered
• Cloud and Hosting Providers — Infrastructure providers who host Platform data under strict data processing agreements

• Licensing Authority — 7cx's gaming licence regulator may require disclosure of player data as part of licence audits, compliance reviews, or regulatory investigations
• Law Enforcement — 7cx will disclose personal data to law enforcement or governmental authorities where required to do so by applicable law, court order, or equivalent legal process
• Financial Intelligence — Suspicious transaction reports filed with relevant financial intelligence authorities under AML obligations may include personal data pertaining to the account holder

In the event of a merger, acquisition, restructuring, or sale of 7cx's business or assets, personal data held by 7cx may be transferred to the acquiring entity as part of that transaction. 7cx will notify Players of any such transfer and the identity of the new data controller by updating this Policy and communicating directly via registered email addresses.

7.1 Cross-Border Transfers. As an internationally licensed online gaming platform, 7cx operates infrastructure and engages service providers that may be located in countries outside Pakistan. Your personal data may therefore be transferred to, stored in, or processed in jurisdictions other than your country of residence in the course of normal platform operations.

7.2 Transfer Safeguards. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable in the jurisdiction of our gaming licence, 7cx ensures that appropriate safeguards are in place to protect such data. Safeguards employed by 7cx include contractual provisions in data processing agreements with third parties that impose data protection obligations equivalent to those applicable to 7cx itself.

7.3 Pakistani Player Data. Personal data collected from players in Pakistan is stored on servers located in secure data centres under 7cx's control or contracted infrastructure. We do not transfer your payment account details (JazzCash, EasyPaisa) beyond what is strictly necessary for transaction processing. Your CNIC and identity verification data is processed only by KYC service providers who have committed to appropriate confidentiality and security standards.

8.1 Retention Principles. 7cx retains personal data only for as long as is necessary for the purposes for which it was collected, subject to mandatory regulatory retention requirements imposed by our gaming licence and applicable law. When personal data is no longer required for any lawful purpose, it is securely deleted or irreversibly anonymised.

8.2 Retention Periods by Category. The following retention periods apply as standard at 7cx, subject to regulatory requirements that may mandate longer retention in specific circumstances:

• Account and Identity Data — Retained for the duration of the account and for a period of five (5) years following permanent account closure, in compliance with AML record-keeping requirements
• Financial Transaction Records — Retained for five (5) years from the date of each transaction, in compliance with financial record-keeping obligations under our licence
• Gaming Activity Logs — Retained for three (3) years from the date of the relevant gaming session, for dispute resolution and regulatory audit purposes
• Customer Support Records — Retained for three (3) years from the date of the support interaction, for quality assurance and dispute resolution
• Responsible Gaming Records — Self-exclusion, problem gambling flags, and related records are retained for the duration specified by our licensing authority's responsible gaming requirements
• Technical and Session Logs — Retained for twelve (12) months for security and fraud detection purposes
• Marketing Preference Records — Retained for the duration of the account or until consent is withdrawn, and for twelve (12) months thereafter as evidence of the consent or opt-out status

8.3 Retention Review. 7cx conducts periodic reviews of its data holdings to identify and securely delete personal data that has exceeded its applicable retention period. Automated deletion routines are implemented where technically feasible.

9.1 Technical Safeguards. 7cx implements a layered set of technical security measures designed to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Technical safeguards in operation at 7cx include:

• Transport Encryption — All data in transit between your browser and 7cx's servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to login credentials, payment data, personal information, and all other data transmitted over the Platform
• Encryption at Rest — Personal data stored in 7cx's databases is encrypted at rest, including identity documents, financial records, and sensitive account information
• Two-Factor Authentication (2FA) — All player accounts support 2FA via SMS-delivered one-time passwords. 2FA is strongly recommended and available to all Players at no additional cost through Account Settings
• Access Controls — Access to personal data within 7cx's systems is restricted on a strict need-to-know basis. Staff access to sensitive data is logged, audited, and subject to role-based access control policies
• Intrusion Detection — 7cx employs automated intrusion detection systems and continuous security monitoring to identify and respond to anomalous access patterns or attempted breaches
• Penetration Testing — Regular security penetration testing is conducted on 7cx's infrastructure to identify and remediate vulnerabilities before they can be exploited

9.2 Organisational Measures. Technical controls alone are insufficient without strong organisational practices. 7cx's organisational security measures include staff data protection training, confidentiality obligations in all employment and contractor agreements, an incident response plan for data breaches, and regular internal security audits.

9.3 Breach Notification. In the event of a personal data breach that poses a material risk to the rights and freedoms of affected individuals, 7cx will notify affected Players via their registered email address as promptly as is practicable following discovery and initial assessment of the breach. Notifications will describe the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

10.1 What Are Cookies. Cookies are small text files placed on your device by the 7cx Platform when you visit the site. They allow the Platform to recognise your device, maintain your session state, remember your preferences, and collect analytics data. 7cx also uses similar tracking technologies including local storage tokens and session tokens. All are collectively referred to as "cookies" in this section.

10.2 Categories of Cookies Used by 7cx. The following cookie categories are in use on the 7cx Platform:

10.3 Managing Cookies. You may manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling strictly necessary or security cookies will impair your ability to use the 7cx Platform, and in some cases will prevent login entirely. For guidance on cookie management in your specific browser, consult your browser's help documentation.

11.1 Overview of Your Rights. Subject to applicable data protection law and the limitations necessary for compliance with our gaming licence obligations, you have the following rights in respect of your personal data held by 7cx. These rights may be exercised by contacting 7cx via the data protection contact stated in Section 2.2.

11.2 Exercising Your Rights. To exercise any of the above rights, please submit a written request to support [at] 7cx.biz with the subject line "Privacy Rights Request" and include your registered username, the specific right you wish to exercise, and sufficient detail for us to identify and locate the relevant data. We will respond within thirty (30) calendar days. Where requests are complex or numerous, this period may be extended by a further two months, with notification and explanation provided to you.

11.3 Limitations on Rights. The right to erasure and the right to restriction are subject to override by 7cx's mandatory data retention obligations under its gaming licence and applicable AML law. Where we are legally required to retain specific personal data, we will inform you of this limitation when responding to your erasure or restriction request.

12.1 Minimum Age. The 7cx Platform is strictly restricted to individuals aged 21 years or older. 7cx does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as a standard component of the KYC process and is required before withdrawal processing is enabled on any account.

12.2 Discovery of Underage Processing. If 7cx discovers that it has inadvertently collected personal data from an individual who was under 21 at the time of account registration, we will immediately: suspend the account, void any gaming activity conducted during the period of underage access, and delete the personal data of the underage individual to the extent permitted by applicable AML and record-keeping obligations. Any funds deposited by an underage individual will be returned to the payment source.

12.3 Parental Notification. Any parent or guardian who becomes aware that a minor has registered a 7cx account should notify us immediately at support [at] 7cx.biz. 7cx will treat such notifications with priority and take immediate action to close the account and delete associated personal data.

13.1 Consent-Based Marketing. 7cx sends promotional communications — including bonus offers, new game announcements, PSL season promotions, and platform updates — only to Players who have provided explicit opt-in consent for such communications during account registration or through their Account Settings. We do not send unsolicited marketing communications.

13.2 Types of Marketing Communications. With your consent, 7cx may contact you by email and/or in-platform notifications regarding: new promotional bonus offers and seasonal campaigns, new game additions to the slots or live casino library, cricket season and PSL-specific offers, VIP programme updates and tier advancement notifications, and responsible gaming reminders.

13.3 Opting Out. You may withdraw your consent for marketing communications at any time through either of the following methods:

• Navigate to Account Settings and update your Communication Preferences to disable marketing emails
• Contact 7cx support at support [at] 7cx.biz with the subject line "Marketing Opt-Out"
• Use the unsubscribe link included in every marketing email sent by 7cx

Opt-out requests are processed within 48 hours. Withdrawal of marketing consent does not affect your ability to receive transactional and operational communications (such as deposit confirmations, withdrawal notifications, security alerts, and support responses) which are sent on the basis of contractual necessity regardless of marketing preference.

13.4 No Third-Party Marketing. 7cx does not share your personal data with third-party marketing companies or advertising networks for the purpose of sending you marketing communications from those third parties. Your contact details are not sold, rented, or leased for third-party direct marketing purposes.

14.1 Right to Update. 7cx reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform operations. All updates will be published on this page with a revised Effective Date.

14.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect how we process your personal data or your rights in relation to that data — 7cx will notify you via your registered email address at least fourteen (14) days before the amended Policy takes effect. Minor administrative changes that do not materially affect your rights or our processing activities will take effect upon publication without prior individual notification.

14.3 Continued Use as Acceptance. Your continued use of the 7cx Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and contact 7cx support to request account closure and withdrawal of any available balance.

14.4 Version Archive. Previous versions of this Privacy Policy are retained in 7cx's internal document archive. Players may request access to prior versions by contacting support, subject to document retention practices.

15.1 Privacy Queries. If you have any questions about this Privacy Policy, the personal data 7cx holds about you, or the way in which we process your information, please contact us using the details below. All privacy-related contacts should be in writing to ensure an accurate record of your query and our response.

15.2 Complaints. If you are dissatisfied with 7cx's response to a privacy query or data rights request, you have the right to escalate your complaint to the relevant supervisory authority or dispute resolution body applicable under the jurisdiction of our gaming licence. 7cx will provide information on the appropriate authority or body upon request when responding to your initial complaint.

15.3 Good Faith Resolution. 7cx is committed to resolving privacy disputes in good faith and promptly. We encourage Players to contact us directly in the first instance, as the majority of privacy concerns can be resolved effectively through our internal process without requiring escalation to external authorities.

This Privacy Policy was published and came into effect on 1 January 2026. It supersedes all prior versions of the 7cx Privacy Policy. 7cx is committed to keeping this Policy accurate, transparent, and up to date. Last reviewed: 1 January 2026.