dream7 Privacy Policy

dream7 is an online cricket betting and casino platform operated at dream7.app, designed and built to serve players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, Peshawar, and every other city in between. References to "dream7," "we," "us," or "our" throughout this Privacy Policy refer to the operating entity responsible for the Platform and its associated services.

dream7 acts as the data controller in respect of personal data collected through the Platform. As data controller, dream7 determines the purposes and means of processing your personal information and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all privacy-related queries, requests, and complaints, you may contact dream7's dedicated privacy team at [email protected]. Please include "Privacy Request" in the subject line of your message.

This Privacy Policy applies to all personal data collected by dream7 in connection with your use of the Platform, including:

• The dream7 website at dream7.app and all sub-pages and features accessible through it.
• Account registration, login, and profile management processes.
• Deposit and withdrawal transactions using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved Pakistani payment methods.
• Betting and gaming activity, including cricket markets, live casino games, slot play, and e-sports betting.
• Communications between you and dream7, including live chat, email, and support ticket interactions.
• Marketing communications where you have opted in to receive them.

This Policy does not apply to third-party websites or services linked from the Platform. dream7 has no control over the privacy practices of third-party operators and encourages you to review their respective privacy policies independently.

dream7 collects personal data in the following categories:

Identity & Contact Data

• Full legal name as it appears on your CNIC or other government-issued identity document.
• Date of birth (used for 21+ age verification).
• Pakistani mobile number and email address.
• Residential address in Pakistan.
• Copies of identity documents provided during KYC verification (CNIC, passport, driving licence).

Financial Data

• JazzCash or EasyPaisa account numbers used for deposits and withdrawals.
• Bank account details for players using HBL, UBL, Meezan Bank, or other approved banking channels.
• Transaction history: deposit amounts, withdrawal requests, PKR balances, and betting/gaming activity records.

Technical & Usage Data

• IP address, device type, browser type, and operating system.
• Session duration, pages visited, features used, and in-app navigation patterns.
• Login timestamps and geographic location data derived from IP address.
• Cookies and similar tracking technologies (see Section 8).

Communications Data

• Content of live chat conversations, support emails, and feedback submitted to dream7.
• Records of any complaints or disputes you have raised with dream7.

dream7 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your dream7 Account, including processing your login credentials and enabling two-factor authentication.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to reconcile your Account balance accurately.
• Identity Verification: To verify your age (21+ requirement) and identity in compliance with our KYC obligations under applicable licensing conditions.
• Platform Delivery: To provide access to cricket betting markets, live casino tables, slot games, and e-sports betting features.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other prohibited conduct.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to apply responsible gaming tools such as deposit limits and self-exclusion where requested.
• Customer Support: To respond to your queries, complaints, and account-related requests through our live chat and email support channels.
• Legal Compliance: To comply with applicable regulations, respond to lawful requests from regulatory and law enforcement authorities, and enforce our Terms and Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify areas for improvement in the Platform's performance, design, and product offering.
• Marketing (with consent only): To send you promotional offers, bonus notifications, PSL campaign messages, and other marketing materials where you have expressly opted in.

dream7 processes your personal data on the following legal grounds:

• Performance of a Contract: Processing necessary to deliver the Platform services you have contracted for — account management, betting, casino play, and payment processing.
• Legal Obligation: Processing required to comply with KYC, anti-money laundering (AML), and other regulatory obligations imposed by dream7's licensing conditions.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your data protection rights.
• Consent: Processing of your data for marketing communications and optional analytics features — which you may withdraw at any time without affecting your access to the Platform.

dream7 does not sell your personal data. We share personal data only in the following strictly limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment partners receive the minimum transaction data necessary to process your deposits and withdrawals.
• KYC Verification Providers: Third-party identity verification services receive the identity documents and details you submit during KYC, solely for the purpose of verifying your identity and age.
• Game Technology Providers: Live casino and slot game software providers receive session data required to operate and log your gaming sessions. These providers operate under data processing agreements with dream7.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or formal request from a competent authority, dream7 will disclose relevant player data. This includes disclosures related to fraud investigations, money laundering inquiries, or match-fixing investigations.
• Fraud Prevention and AML Services: Specialist third-party services used to screen transactions and player activity for signs of financial crime may receive limited personal and transaction data.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

All third parties with whom dream7 shares personal data are contractually required to process that data only for the specified purpose, to apply appropriate security measures, and to comply with applicable data protection law.

dream7 is required by its licensing conditions to verify the identity and age of all players before processing withdrawals. The KYC process is a regulatory requirement, not optional, and is designed to protect players from identity theft and to prevent the Platform from being used for money laundering or financial crime.

During KYC, you will be asked to provide:

• A copy of a valid Pakistani government-issued identity document — your CNIC (Computerised National Identity Card) is the primary accepted document, with passport or driving licence as alternatives.
• Proof of your current residential address (a utility bill or bank statement dated within the past three months is typically acceptable).
• In some cases, a selfie or liveness check may be required to confirm that the documents belong to the person registering the account.

All KYC documents are transmitted via secure encrypted channels, stored with access controls, and retained only for as long as required by applicable regulations. KYC documents are never shared with any party outside of the authorised verification service and dream7's compliance team.

dream7 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and understand how players interact with the site. The following categories of cookies are used:

Strictly necessary cookies cannot be disabled as they are required for the Platform to function. All other cookie categories are optional and can be managed through your browser settings. Note that disabling functional cookies may affect some Platform features, such as saved preferences and session persistence.

dream7 does not use cookies to build profiles for sale to third-party advertisers or data brokers.

dream7 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable law and licensing obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active Account and for a minimum of five (5) years following Account closure, as required by anti-money laundering regulations.
• KYC Documents: Retained for a minimum of five (5) years following Account closure in compliance with AML and licensing requirements.
• Transaction Records: Deposit and withdrawal records are retained for a minimum of seven (7) years for financial regulatory compliance purposes.
• Betting & Gaming History: Your complete betting and gaming history is retained for five (5) years following Account closure.
• Support Communications: Customer service records are retained for three (3) years.
• Marketing Consent Records: Records of your marketing preferences are retained for the duration of your Account and for one (1) year following withdrawal of consent.

Where data is no longer required, dream7 securely deletes or anonymises it in accordance with applicable data security standards.

dream7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data in transit between your device and dream7's servers is encrypted using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on dream7's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within dream7's systems is restricted on a strict need-to-know basis. All staff with data access undergo background checks and are bound by confidentiality obligations.
• Two-Factor Authentication: dream7's internal systems require two-factor authentication for all staff accessing player data or administrative functions.
• Regular Security Audits: The Platform undergoes regular third-party security penetration testing and vulnerability assessments.
• Incident Response: dream7 maintains a data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players and relevant authorities in accordance with applicable law.

While dream7 takes all reasonable steps to protect your data, no internet transmission or storage system is guaranteed to be 100% secure. You play an important role in keeping your Account secure by maintaining a strong password and enabling two-factor authentication.

As a dream7 player, you have the following rights in relation to your personal data. These rights can be exercised by contacting dream7 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data dream7 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Corrections to core account data (name, date of birth) require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dream7's legal retention obligations (which may require us to retain certain data notwithstanding your request).
• Right to Restrict Processing: You have the right to request that dream7 restricts processing of your personal data in certain circumstances, for example while a dispute or accuracy query is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: You have the right to object to processing based on dream7's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (marketing, optional analytics), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The dream7 Platform is strictly intended for adults aged 21 years and above. dream7 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step in the Account registration and KYC process.

If dream7 discovers or has reason to believe that an Account has been registered by a person under 21, the Account will be immediately suspended, all associated data will be reviewed, and the matter will be handled in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that a minor has created a dream7 Account, please contact our support team immediately at [email protected]. We take such reports seriously and will act without delay.

dream7 sends marketing communications — including PSL promotional offers, bonus notifications, new game announcements, and seasonal campaigns — only to players who have expressly opted in to receive them.

Marketing messages may be delivered via:

• Email to your registered address.
• SMS to your registered Pakistani mobile number.
• In-platform notifications when you are logged in to your dream7 Account.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your Account settings under "Notifications."
• Clicking the "Unsubscribe" link included in any marketing email.
• Contacting dream7 support at [email protected] with the subject "Marketing Opt-Out."

Withdrawal of marketing consent will not affect your ability to use the Platform or receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as part of the service regardless of marketing preferences.

dream7 is a platform serving Pakistani players and operates primarily within frameworks applicable to its international licensing jurisdiction. Some of the third-party service providers used by dream7 — including game technology suppliers, KYC verification services, and cloud infrastructure providers — may process data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, dream7 ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring recipient entities to apply data protection standards equivalent to those described in this Policy.
• Use of reputable cloud infrastructure providers with internationally recognised security certifications (such as ISO 27001).
• Contractual clauses that restrict the use of transferred data to the specific purposes for which it was shared.

dream7 does not transfer your personal data to any recipient in a jurisdiction that does not offer adequate data protection safeguards without first putting in place the contractual arrangements described above.

dream7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or applicable regulations. When material changes are made, we will notify registered players by:

• Sending a notification to your registered email address at least seven (7) days before the updated Policy takes effect.
• Displaying a prominent notice on the dream7 Platform for a period following the change.

The current version of this Privacy Policy will always be available at dream7.app/privacy-policy, with the effective date of the most recent revision displayed prominently at the top of the document.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the changes, you may close your Account by contacting support.

For all privacy-related queries, data rights requests, or concerns about how dream7 handles your personal data, please contact our Privacy team:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" so your message is routed to the correct team.
• Live Chat: Available 24/7 through the dream7 Platform in both English and Urdu for general account and privacy queries.
• Response Time: dream7 aims to acknowledge all privacy requests within 5 business days and provide a full response within 30 calendar days.

If you are not satisfied with dream7's response to your privacy concern, you have the right to escalate your complaint. Please send a formal escalation to [email protected] with the subject line "Privacy Complaint Escalation — [Your Account ID]" and include the reference number of your original request. dream7's Compliance team will review escalated complaints and provide a final response within 15 business days.

Where your complaint relates to potential violations of applicable data protection law, you may also have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to your situation.