Privacy Policy

Introduction

isp7 ("the Company", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who interacts with our platform. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by isp7.

isp7 serves players across Pakistan — from Karachi and Lahore to Faisalabad, Islamabad, and beyond. We understand the sensitivity of financial and personal data in this market and apply robust safeguards at every level of our operations. This document is written in plain, accessible English so that every player can understand their rights and our obligations without needing a legal background.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

Data Controller

isp7 is the data controller responsible for the personal data collected through the isp7.app platform and its associated services. As data controller, isp7 determines the purposes and means by which your personal data is processed and is accountable for ensuring that processing activities comply with applicable data protection standards.

For all data protection enquiries, requests, or complaints, you may contact our designated Data Protection contact directly at [email protected]. We will acknowledge your correspondence within 5 business days and aim to resolve all matters within 30 calendar days.

Data We Collect

isp7 collects only the personal data that is necessary to deliver our services safely, lawfully, and effectively. The categories of personal data we collect are outlined in the table below:

isp7 does not collect sensitive personal data such as biometric data (beyond liveness checks required for KYC), health data, religious beliefs, or political opinions unless specifically required by law and disclosed to you in advance.

How Data Is Collected

4.1 Data You Provide Directly

The majority of the personal data isp7 holds about you is data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions. You are under no obligation to provide this data, but without it isp7 cannot create or maintain your account.

4.2 Data Collected Automatically

When you access and use the isp7 platform, we automatically collect certain technical and usage data through cookies, server logs, and analytics tools. This includes your IP address, the pages you visit on isp7.app, how long you spend on each page, and the device and browser you are using. This data is collected to maintain platform security, detect fraud, and improve user experience.

4.3 Data From Third Parties

isp7 may receive personal data about you from third-party identity verification providers, payment processors such as JazzCash and EasyPaisa, fraud prevention services, and our licensed gaming software partners. All such third parties are contractually bound to handle your data in accordance with applicable data protection requirements.

Purposes of Processing

isp7 processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on isp7;
• Payment processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to process withdrawal requests;
• Regulatory compliance: To fulfil our obligations under anti-money laundering (AML), Know Your Customer (KYC), and internationally recognised gaming licence requirements;
• Responsible gaming: To monitor gameplay patterns, identify at-risk behaviour, enforce deposit limits, and action self-exclusion requests;
• Customer support: To respond to enquiries, resolve disputes, and provide assistance via live chat and email;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited activities;
• Platform improvement: To analyse usage data in aggregate to improve game offerings, user interface, and overall platform performance;
• Marketing communications: To send you promotional offers, bonus notifications, and updates about isp7 services — only where you have given your explicit consent and subject to your right to opt out at any time.

Legal Basis for Processing

isp7 processes your personal data only where a valid legal basis exists. The legal bases upon which we rely are as follows:

• Contract performance: Processing is necessary to perform the contract between you and isp7 — i.e., to operate your player account, process transactions, and deliver the gaming services you have requested;
• Legal obligation: Processing is required for isp7 to comply with applicable laws and the conditions of its international gaming licence, including KYC, AML, and age verification obligations;
• Legitimate interests: Processing is necessary for isp7's legitimate interests in preventing fraud, securing the platform, and improving its services, provided those interests are not overridden by your own rights and interests;
• Consent: Where processing is based on your consent — such as for direct marketing — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

7.1 Who We Share Data With

isp7 does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other financial institutions required to process your transactions in PKR;
• Identity verification providers: Third-party KYC services that verify your CNIC, passport, and liveness documents as required by our licensing obligations;
• Gaming software providers: Licensed game studios whose titles are available on isp7 may receive session and gameplay data required to operate their games;
• Fraud prevention services: Specialist third parties that help isp7 detect and prevent fraudulent activity, money laundering, and account takeover attempts;
• Regulatory authorities: Government bodies, licensing authorities, or law enforcement agencies where we are legally required to disclose information;
• Professional advisors: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for isp7's operations.

7.2 Contractual Safeguards

All third parties with whom isp7 shares personal data are required to enter into data processing agreements that impose obligations on them to protect your data to at least the same standard as isp7 itself. isp7 does not permit any third-party processor to use your data for their own independent purposes.

Data Retention

isp7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The key retention periods applied by isp7 are as follows:

• Active account data: Retained for the lifetime of your isp7 account and for a period of five (5) years following account closure;
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements;
• KYC verification documents: Retained for five (5) years following account closure or the end of the business relationship;
• Marketing consent records: Retained for the duration of your consent and for three (3) years after withdrawal of consent, to demonstrate compliance;
• Support communications: Retained for three (3) years from the date of the interaction.

Upon expiry of the applicable retention period, isp7 will securely delete or anonymise your personal data so that it can no longer be associated with you.

Security Measures

isp7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and isp7.app;
• Encryption at rest for stored personal data and financial records;
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis;
• Regular internal security audits and penetration testing conducted by qualified security professionals;
• Multi-factor authentication requirements for staff accessing systems that hold player data;
• Documented incident response procedures with defined timelines for notifying affected players in the event of a data breach.

Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. isp7 uses cookies and similar tracking technologies (such as pixel tags and local storage) to make the platform function correctly, remember your preferences, keep your session secure, and understand how players interact with the site.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: These remember your preferences such as language settings, game filters, and display options to personalise your isp7 experience.
• Analytics cookies: Used to collect aggregated information about how players use isp7.app, enabling us to improve site performance and identify popular features. No individual player is identified through analytics data.
• Marketing cookies: Used only where you have consented, to deliver relevant isp7 promotions and to measure the effectiveness of our communications.

10.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the isp7 platform and prevent you from accessing some features. Strictly necessary cookies cannot be turned off as they are essential for the site to operate.

Your Rights

As a player on isp7, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days of receiving your request.

• Right of access: You have the right to request a copy of the personal data isp7 holds about you;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations;
• Right to restriction: You may request that isp7 restrict the processing of your data in certain circumstances, for example while a dispute is being investigated;
• Right to data portability: You may request that isp7 provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider;
• Right to object: You have the right to object to processing based on isp7's legitimate interests and to opt out of direct marketing at any time;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

isp7 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline to act on the request.

Minors

isp7 is strictly an adults-only platform. Players must be at least 21 years of age to register and use isp7. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and accounts found to belong to underage individuals will be permanently closed and all associated data securely deleted.

If you believe that a minor has registered an account on isp7 or has provided us with personal data, please notify us immediately at [email protected] and we will take prompt action.

International Data Transfers

As an internationally licensed gaming platform serving Pakistani players, isp7 may transfer personal data to, and process it in, countries outside Pakistan. In all cases, isp7 ensures that appropriate safeguards are in place before transferring personal data internationally, including contractual clauses that require the recipient to protect your data to a standard equivalent to that applied by isp7.

Personal data processed by payment partners such as JazzCash and EasyPaisa is handled in accordance with those providers' own privacy policies and applicable Pakistani financial regulations.

Changes to This Privacy Policy

isp7 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players via email or through a prominent notice on the isp7 platform. The date of the most recent revision is displayed at the top of this page.

Your continued use of isp7 following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any revision, you should cease using the platform and request account closure.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way isp7 handles your personal data, please reach out to our team through the following channel:

For questions specifically related to responsible gaming, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page or contact us directly. All such requests are handled with strict confidentiality.