Privacy Policy

01 Introduction

isd7 ("isd7", "Platform", "we", "us", "our") operates the online gaming platform accessible at isd7.cam. We recognise that your personal data is important and that you have a right to know how it is collected, processed, stored and shared. This Privacy Policy ("Policy") sets out our practices in clear, formal terms so that you can make informed decisions about your use of the Platform.

This Policy applies to all personal data collected through the isd7 website, mobile-optimised site, communications channels (including live chat and email support), and any other services operated by isd7. It should be read alongside our Terms & Conditions and Responsible Gambling Policy.

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must not create an account or use the Platform.

02 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, date of birth, financial data and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, isd7 and/or the Operator as applicable.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller.
• "User" means any individual who accesses, registers on or uses the isd7 Platform.
• "KYC" means Know Your Customer — identity verification procedures required by the Operator or applicable law.

03 Data Controller

The Data Controller responsible for Personal Data processed through the isd7 Platform is the Operator, as disclosed in the Operator information section of the Platform. isd7 acts as the platform interface through which the Operator provides its services. Where isd 7 and the Operator are separate entities, each may act as an independent Data Controller in respect of the data they directly collect and process. If you require specific information about the Operator's identity or registered address, please contact us at [email protected].

04 Data We Collect

isd7 collects Personal Data through several channels. The categories of data we collect, and the context in which they arise, are set out in the table below:

Category	Examples	When Collected
Identity Data	Full name, date of birth, nationality, government-issued ID number	Registration; KYC verification
Contact Data	Email address, phone number, city of residence (e.g. Karachi, Lahore, Islamabad)	Registration; support requests
Financial Data	Payment method details, transaction amounts in PKR, deposit/withdrawal history	Deposits; withdrawals; KYC
Technical Data	IP address, browser type, operating system, device identifiers, session timestamps	Automatically on site visit
Usage Data	Pages visited, games played, wagers placed, bet history, session duration	Automatically during use
Communications Data	Live chat transcripts, support emails, feedback submitted	When you contact support
Verification Documents	Passport scans, CNIC copies, utility bills, bank statements	KYC; withdrawal verification

We do not collect special categories of sensitive Personal Data (such as health data, biometric data or religious affiliation) unless explicitly required for responsible gambling compliance purposes and with your prior consent.

05 Legal Basis for Processing

Where applicable data protection law requires a legal basis for Processing, isd7 relies on the following grounds:

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals, settle wagers and deliver the services you have requested under our Terms & Conditions.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements, fraud prevention obligations and any lawful orders from competent authorities.
• Legitimate Interests: Processing carried out to detect and prevent fraud, ensure platform security, conduct analytics to improve the service, and enforce our Terms & Conditions — where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Data

Personal Data collected by isd7 is used exclusively for the following purposes:

6.1 Account Management

To create, maintain and secure your account; verify your identity; process deposits and withdrawals in PKR; apply account limits; and communicate important account-related information to you.

6.2 Service Delivery

To provide access to sports betting markets (including Pakistan cricket, PSL and ICC tournaments), live casino games, slots and other gaming products available on the Platform.

6.3 Regulatory Compliance

To fulfil obligations under applicable AML, counter-terrorism financing and KYC regulations. This may include verifying the source of funds and reporting to competent authorities where legally required.

6.4 Responsible Gambling

To monitor account activity for signs of problem gambling behaviour; apply self-exclusion requests; enforce account limits; and flag accounts for responsible gambling intervention where warranted.

6.5 Fraud Prevention & Security

To detect, investigate and prevent fraudulent transactions, bonus abuse, multi-accounting, money laundering and other prohibited conduct, using automated and manual review processes.

6.6 Platform Improvement

To analyse aggregated usage data, improve the platform's functionality and user experience, test new features and conduct internal research — always using anonymised or pseudonymised data where possible.

6.7 Marketing Communications

Where you have opted in, to send you promotional offers, bonus notifications and platform updates by email or via your account dashboard. You may opt out of marketing communications at any time by updating your account preferences or contacting [email protected].

07 Data Sharing & Disclosure

isd7 does not sell, rent or trade your Personal Data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Identity Verification Providers: Third-party KYC and document verification services used to confirm your identity and age.
• Payment Processors: Entities that facilitate deposits and withdrawals. Payment provider names referenced on the Platform (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are cited for contextual familiarity only and do not imply any endorsement of isd7 or sharing of data beyond what is necessary for payment execution.
• Fraud Prevention Services: Specialist third-party services used to detect and prevent fraud and money laundering across the platform.
• Regulatory Authorities: Competent government or regulatory bodies in the Operator's licensing jurisdiction, or any other jurisdiction where we are legally required to disclose information.
• IT & Infrastructure Providers: Cloud hosting, data storage and cybersecurity service providers who process data solely on our instructions under binding data processing agreements.
• Legal Advisers: Legal professionals acting on our behalf in connection with a dispute, regulatory inquiry or enforcement matter, subject to professional confidentiality obligations.

08 International Transfers

The isd7 Platform serves users in Pakistan and other jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside your country of residence, including the jurisdiction in which the Operator is licensed. These countries may have data protection laws that differ from those in your home jurisdiction.

Where such transfers occur, isd7 implements appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure your data receives a level of protection consistent with applicable data protection standards. By using the Platform, you acknowledge and consent to such international transfers.

09 Data Retention

isd7 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention approach is as follows:

• Account Data: Retained for the duration of your account and for a minimum of five years following permanent account closure, in line with typical AML record-keeping requirements.
• Financial & Transaction Data: Retained for a minimum of five years from the date of the transaction, or longer where required by the Operator's licensing jurisdiction.
• KYC Documentation: Retained for the period required by the applicable AML regulations in the Operator's jurisdiction, typically five to seven years.
• Communications Data: Support chat transcripts and email correspondence retained for up to three years from the date of the last interaction.
• Technical & Usage Data: Retained in aggregate or pseudonymised form for up to two years for analytics purposes.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

10 Cookies & Tracking Technologies

isd7 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the site. We use the following categories:

• Essential Cookies: Required for the Platform to function. These include session management, security tokens and load-balancing cookies. They cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences — such as language settings, currency display (PKR) and previously viewed content — to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregate data on how users interact with the Platform, which pages are most visited and how users navigate through the site. This data is used solely to improve the platform and is not linked to individually identifiable users.
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional content within the isd7 platform. No data is shared with external advertising networks.

You may manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to access your account or place wagers, though some personalisation features may not function as intended.

11 Your Rights

Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by isd7:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", along with sufficient identification to enable us to locate your account. We will acknowledge your request within five business days and aim to fulfil it within 30 days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

12 Minors

The isd7 Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect Personal Data from persons under the minimum age. If we become aware that a minor has registered an account or provided Personal Data, we will immediately close the account, delete the associated data and — where applicable — report the matter in accordance with our legal obligations.

If you believe a minor has registered on the Platform, please notify us immediately at [email protected] so that we can take prompt action.

13 Third-Party Links

The isd7 Platform does not contain links to external third-party websites. Should any such links appear in future (for example, links to responsible gambling resources or licensing authority information), isd7 is not responsible for the privacy practices or content of those third-party sites. You should review the privacy policy of any third-party site you visit independently of isd7.

14 Security Measures

isd7 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration or disclosure. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring that only authorised personnel can access Personal Data;
• Regular penetration testing and vulnerability assessments;
• Strict third-party vendor due diligence and contractual data processing obligations;
• Incident response procedures to detect, contain and report data breaches in accordance with applicable law.

While we take every reasonable precaution, no data transmission over the internet or electronic storage system is completely secure. You use the Platform at your own risk and are responsible for keeping your account credentials confidential.

15 Policy Amendments

isd7 reserves the right to update or replace this Privacy Policy at any time. When material changes are made, we will update the Effective Date shown at the top of this page and, where practicable, notify registered users via the email address on file. Your continued use of the Platform after any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the Platform and may request account closure.

We encourage you to review this Policy periodically to stay informed of how we protect your data.

16 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via your account dashboard as stated by the Operator.

When submitting a data-related request, please use the subject line "Privacy Request" and include your registered username and a brief description of your query. We aim to acknowledge all privacy-related correspondence within five business days and to provide a substantive response within 30 days.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the Operator's licensing jurisdiction.