Privacy Policy – 7 Reels Pakistan Online Gaming Platform

7 Reels (operating at 7reels.xyz) is an online gaming and sports betting platform built specifically for players in Pakistan. We are the data controller responsible for the personal information you share when you register, deposit funds, or use any feature of the 7 Reels platform.

This Privacy Policy applies to all users of 7reels.xyz and any associated mobile applications or services. It covers the personal data of registered players as well as visitors who browse the site without creating an account. If you have any questions about how your data is handled at 7 Reels, the contact details at the end of this policy are where to start.

By creating an account or continuing to use the 7 Reels platform, you confirm that you have read and understood this policy. If you do not agree with how we handle your data, you should not use the platform or should contact us to discuss your concerns before proceeding.

7 Reels collects personal data in several ways — information you give us directly, data generated by your use of the platform, and in some cases information from third-party sources used to verify your identity or prevent fraud. Here is a detailed breakdown:

Every piece of data 7 Reels collects has a specific purpose. We do not collect data speculatively or store information we have no use for. Below are the primary reasons we process your personal data:

• Account creation and management: Your registration details are used to create and maintain your 7 Reels account, authenticate your login, and personalise your experience on the platform.
• Identity verification: KYC data is processed to confirm that you are who you say you are, that you meet the 18+ age requirement, and that your account is not being used for fraudulent or money laundering purposes. This is both a legal obligation and a player protection measure.
• Processing transactions: Payment details are used to process your PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard. Transaction records are maintained for financial reporting and fraud prevention.
• Delivering and improving the platform: Betting and gaming activity data is used to ensure the platform functions correctly, to settle bets accurately, and to improve our products based on how players actually use them.
• Fraud prevention and security: Device data, IP addresses, and activity patterns are analysed to detect and prevent fraudulent account activity, multi-accounting, and other prohibited conduct described in our Terms and Conditions.
• Responsible gaming: Your gaming activity data, combined with any limits or exclusions you have set, is used to monitor for patterns that may indicate problematic gaming behaviour. In appropriate circumstances this may lead to a proactive welfare check from our support team.
• Customer support: Communication data is used to understand and resolve your support queries. Chat transcripts and email records are retained to ensure consistency in how issues are handled over time.
• Marketing communications: Where you have given explicit consent to receive promotional communications, your email address and gaming preferences are used to send relevant offers. You can withdraw this consent at any time through your account preferences or by contacting support.
• Legal and regulatory compliance: Certain data is processed because we are legally required to maintain it — transaction records, identity verification documents, and compliance reports fall into this category.

Every processing activity at 7 Reels is carried out on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player — managing your account, processing transactions, settling bets. Without this processing, we cannot provide the service.
• Legal obligation: Processing required by applicable law, including anti-money laundering (AML) requirements, identity verification obligations, and financial record-keeping mandates.
• Legitimate interests: Processing necessary for our legitimate business interests — fraud prevention, platform security, service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit agreement — primarily marketing communications. Where consent is the basis, you can withdraw it at any time without affecting the lawfulness of any processing already carried out.

Your personal data is never sold to any third party. 7 Reels does not run a data brokering business or share player information for third-party marketing purposes. We do, however, share data with the following categories of recipient where necessary to deliver the platform or comply with legal obligations:

• Payment processors: Transaction data is shared with our licensed payment processing partners — including those who handle Easypaisa, JazzCash, and card payments — to process your deposits and withdrawals. These processors are contractually bound to handle your data only for the purpose of processing transactions.
• Identity verification providers: KYC document data may be shared with licensed identity verification services who assist in confirming the authenticity of your CNIC and other documents. These providers operate under strict data processing agreements.
• Fraud prevention services: Device and behavioural data may be shared with fraud detection platforms to identify suspicious activity and protect legitimate players from harm.
• Regulatory and law enforcement authorities: Where required by applicable law or in response to a lawful request from a competent authority, 7 Reels will disclose relevant data. We will notify you of such a disclosure where legally permitted to do so.
• Technology infrastructure providers: Cloud hosting, database, and content delivery providers who process data on our behalf under data processing agreements that require them to maintain confidentiality and security standards equivalent to our own.

All third parties who process personal data on behalf of 7 Reels are selected with care and are contractually required to process data only for the purpose for which it was shared, to maintain appropriate security measures, and to delete or return data when the processing relationship ends.

All financial transactions at 7 Reels are processed in Pakistani Rupees (PKR). We work exclusively with payment methods that Pakistani players use in their daily lives — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Pakistani-issued Visa and Mastercard cards.

Payment security at 7 Reels works as follows:

• Full payment card numbers are never stored on 7 Reels servers. Card transactions are processed directly by our PCI-DSS compliant payment processor, which returns only a tokenised reference and the last four digits of the card for display in your transaction history.
• Mobile wallet transactions via Easypaisa and JazzCash are processed through their respective APIs. Your wallet number is stored in encrypted form for the purpose of processing withdrawal requests to the same wallet used for deposits.
• IBFT bank transfer details — account number and bank name — are stored in encrypted form and used only for processing withdrawals to verified bank accounts.
• Transaction records are maintained for a minimum of five years to satisfy financial record-keeping requirements. These records include the amount, date, transaction type, and payment method — not full payment instrument details.

7 Reels uses cookies and similar technologies to ensure the platform works correctly, to keep you logged in during a session, and to understand how players use the site so we can improve it. Here is a breakdown of the cookie types we use:

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent the platform from functioning correctly — login, bet placement, and account management all require session cookies to work. Blocking analytics or marketing cookies does not affect core platform functionality.

7 Reels retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. General retention periods are as follows:

• Account and registration data: Retained for the duration your account is active, plus a minimum of five years following account closure to satisfy legal and regulatory obligations.
• KYC and identity verification documents: Retained for a minimum of five years after account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years for financial compliance purposes.
• Betting and gaming activity: Retained for five years following the date of the activity. Aggregated, anonymised activity data used for platform analytics may be retained indefinitely as it cannot be linked back to an individual.
• Support communications: Retained for two years after the matter is resolved, or longer if the communication relates to an ongoing dispute or compliance investigation.
• Marketing consent records: Retained for the duration of your marketing consent plus two years, to demonstrate the lawfulness of any communications sent during that period.

After the applicable retention period expires, personal data is securely deleted or anonymised. Deletion is permanent and irreversible — data deleted on request or following a retention period cannot be recovered.

Data security at 7 Reels is implemented across multiple layers — not as a single control but as a defence-in-depth approach where several independent security measures protect your information simultaneously.

• Encryption in transit: All data transmitted between your device and the 7 Reels platform is encrypted using TLS 1.2 or higher. This applies to every page load, every login request, and every transaction.
• Encryption at rest: Personal data stored on our servers — including registration details, KYC documents, and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Internal access to personal data is strictly limited to staff who need it to perform their job functions. Access is granted on a role-based, least-privilege basis and is logged for audit purposes.
• Regular security assessments: The 7 Reels platform undergoes periodic security testing, including penetration testing and vulnerability scanning, to identify and remediate risks before they can be exploited.
• Incident response: We maintain a documented security incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

While we take every reasonable precaution to protect your data, no internet-connected system can be guaranteed 100% secure. We encourage you to use a strong, unique password for your 7 Reels account and to enable two-factor authentication where available.

You have meaningful rights over the personal data 7 Reels holds about you. These rights can be exercised at any time by contacting us at support@7reels.xyz. We will respond to all data rights requests within 30 days of receipt.