isd7 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "isd7" / "we" / "us" / "our" — the isd7 platform, accessible at isd7.net, operated under an international gaming authority licence.
• "Player" / "you" / "your" — any individual who visits, registers on, or uses the isd7 platform in any capacity.
• "Personal Data" — any information that identifies or can be used to identify a living individual, directly or indirectly, including names, mobile numbers, financial data, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; isd7 acts as Data Controller in relation to your data.
• "Sensitive Data" — Personal Data that warrants heightened protection, such as identity documents (CNIC copies), financial account details, and self-exclusion status.

2 Who We Are

isd7 is Pakistan's leading online casino and sports betting platform, designed exclusively for Pakistani players. isd7 operates under an internationally recognised gaming licence and is committed to maintaining the highest standards of data protection, player safety, and operational transparency.

The isd7 platform is accessible at isd7.net. For all data-related enquiries, you may contact isd7 at [email protected]. Our support team operates on Pakistan Standard Time (UTC+5), 24 hours a day, seven days a week.

3 Data We Collect

isd7 collects the minimum Personal Data necessary to operate the platform, process transactions, verify identity, comply with legal obligations, and deliver responsible gaming tools. The following table identifies the categories of data isd7 may collect:

4 How We Collect Your Data

isd7 collects Personal Data through the following channels:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account settings.
• Automatically during platform use: Technical data including IP addresses, device identifiers, and session logs are recorded automatically when you access isd7.net or use any function of the platform.
• From payment providers: Where you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, those providers may share transaction confirmation data with isd7 to complete and record the payment.
• From identity verification partners: Where required for KYC, isd7 may use third-party identity verification services to validate the documents you submit. These services return a verification outcome to isd7; isd7 does not receive raw biometric data.
• From cookies and tracking technologies: As described in Section 8 below.

5 Legal Basis for Processing

isd7 processes your Personal Data on one or more of the following lawful bases, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing is necessary to perform the contract between you and isd7 — specifically, to operate your Account, process transactions, settle bets, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and gaming licence conditions.
• Legitimate Interests: Processing is necessary for isd7's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights.
• Consent: Where isd7 processes data on the basis of your consent — such as for optional marketing communications — that consent is freely given, specific, and may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

6 How We Use Your Data

isd7 uses the Personal Data it collects for the following specific purposes:

• Creating, managing, and securing your isd7 Account
• Verifying your identity and age (21+ requirement) in compliance with our licence conditions
• Processing deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and processing withdrawal requests to your verified payment method
• Settling bets and resolving disputes relating to cricket, PSL, sports, casino, and slot gaming outcomes
• Applying, tracking, and settling bonuses and promotional offers on your Account
• Detecting and preventing fraud, money laundering, multi-accounting, and other prohibited conduct
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling
• Applying responsible gaming tools that you have selected, including deposit limits and self-exclusion
• Responding to your support queries and resolving complaints
• Sending transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — that are necessary to your Account operation
• Sending optional marketing communications where you have provided consent (see Section 12)
• Complying with applicable legal and regulatory obligations, including reporting to gaming authorities and anti-money laundering bodies

7 Data Sharing & Disclosure

7.1 What isd7 Does Not Do

isd7 does not sell, rent, or trade your Personal Data to any third party for marketing, commercial, or advertising purposes under any circumstances.

7.2 Permitted Sharing

isd7 may share your Personal Data with third parties in the following limited circumstances, each of which is necessary for platform operation or legal compliance:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers receive only the data required to process your specific transaction — typically your registered name and payment identifier.
• Identity Verification Providers: Third-party KYC services receive your submitted identity documents and return a verification status. These providers are contractually prohibited from using your data for any purpose beyond KYC.
• Fraud and Security Services: isd7 uses third-party fraud detection tools that analyse technical and behavioural data to identify suspicious activity. These tools operate under strict data processing agreements.
• Gaming Authorities: isd7's licensing authority may require access to certain player data as part of regulatory audits or compliance reviews. This disclosure is a legal obligation under our licence conditions.
• Law Enforcement and Government Bodies: Where isd7 receives a lawful demand from a Pakistani government authority, court, or law enforcement body, we will disclose the minimum data required to comply. Where legally permitted, isd7 will notify the affected player of such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving isd7, player Personal Data may be transferred to the acquiring entity, which will be bound by the same privacy obligations as isd7.

8 Cookies & Tracking Technologies

The isd7 platform uses cookies and similar tracking technologies to operate core site functions, remember your preferences, detect fraud, and — where you have provided consent — to deliver personalised experiences.

You may manage non-essential cookies through your browser settings. Disabling essential cookies will impair or prevent your ability to use the isd7 platform, including the isd7 login function.

9 Data Security

isd7 implements a multi-layered data security framework to protect your Personal Data from unauthorised access, accidental loss, disclosure, alteration, or destruction. This framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and isd7's servers is encrypted using industry-standard 256-bit SSL/TLS protocols, providing the same level of protection used by Pakistan's leading financial institutions.
• Password Hashing: isd7 Account passwords are stored exclusively as salted cryptographic hashes — isd7 staff cannot access your plaintext password at any point.
• OTP Authentication: isd7 supports one-time password (OTP) based authentication for account login and withdrawal requests, providing a second layer of identity verification tied to your registered Pakistani mobile number.
• Access Controls: Internal access to player Personal Data is restricted on a strict need-to-know basis. isd7 staff access logs are maintained and audited regularly.
• Infrastructure Security: isd7's platform infrastructure is hosted in secure, access-controlled data centre environments with continuous monitoring for intrusion attempts and anomalous activity.
• Penetration Testing: isd7 commissions regular independent security audits and penetration tests to identify and remediate vulnerabilities before they can be exploited.

While isd7 applies all reasonable technical and organisational security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your isd7 login credentials and for notifying isd7 immediately if you suspect unauthorised access to your Account.

10 Data Retention

isd7 retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data (active accounts): Retained for the duration of the account's active period and for a period of three (3) years following the last account activity.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with anti-money laundering regulations applicable to licensed gaming operators.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later.
• Responsible Gaming Records (self-exclusion etc.): Retained for the duration of the exclusion period plus five (5) years, to prevent re-registration during an active exclusion.
• Support Communications: Retained for three (3) years from the date of each interaction.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, isd7 will securely delete or anonymise your Personal Data in accordance with recognised data destruction standards.

11 Your Data Rights

As an isd7 player, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact isd7 at [email protected]. isd7 will respond within 30 days of receipt of a verified request.