Privacy Policy
— Duel7 Platform

This Privacy Policy ("Policy") describes how Duel7 ("Duel7", "we", "us", "our") collects, uses, stores, shares and protects personal information relating to users ("you", "your", "the User") of the website located at https://duel7.cam and all associated services, features and content (collectively, "the Platform").

This Policy is incorporated by reference into the Duel7 Terms & Conditions. By registering an account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

Duel7 is an English-language online gaming information and platform hub serving users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other cities. This Policy applies to all users regardless of their location within Pakistan or elsewhere.

The following terms have the meanings assigned to them throughout this Policy:

The Data Controller responsible for personal data processed through the Duel7 Platform is the operator of the duel7.cam website. The Operator's registered details, licensing jurisdiction and formal legal name are available on request by contacting [email protected].

Duel7 does not hold a gambling license issued by the Government of Pakistan, the Pakistan Telecommunication Authority, the State Bank of Pakistan or any provincial authority. Users are solely responsible for determining whether their participation in online gaming is lawful under applicable local law.

Duel7 collects personal data in the following categories, depending on how you interact with the Platform:

4.1 Registration Data

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (including city — for example Karachi, Lahore, Islamabad)
• Username and password (stored in hashed form only)

4.2 KYC and Verification Data

• Pakistani CNIC number and copy
• Passport copy (where provided as an alternative)
• Utility bill or other address verification document dated within three months
• Selfie photograph for live identity verification (where required by the operator)

4.3 Financial Data

• Deposit and withdrawal transaction records (amounts, timestamps, method used)
• Payment method identifiers (e.g., mobile wallet numbers for Easypaisa or JazzCash — referenced as contextual identifiers only, not as an endorsement by those providers)
• Bank account or IBAN details submitted for withdrawal processing

4.4 Gaming and Betting Activity Data

• Bet history, game session logs, sports markets wagered on (including cricket, PSL T20, ICC matches, football, UFC)
• Bonus claims and wagering progress
• Win and loss records
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status)

4.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session duration, page views and navigation paths
• Cookie identifiers and similar tracking data (see Section 10)

4.6 Communications Data

• Customer support interactions (chat transcripts, email correspondence)
• Complaint and dispute records
• Survey or feedback responses where submitted voluntarily

We process your personal data only where we have a lawful basis to do so. The following table maps each processing purpose to its legal basis:

Duel7 does not sell, rent or trade your personal data to third-party advertisers, data brokers or unaffiliated organizations. We share personal data only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers — which may include processors facilitating transactions via Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and other channels — strictly to the extent necessary to process your deposit or withdrawal. These providers are listed as contextual references; their mention does not imply endorsement.
• KYC and Identity Verification Providers: KYC documents may be processed by third-party identity verification services under contractual data protection obligations.
• Game Software Providers: Gaming session data may be shared with the software studios supplying games on the Platform for the purpose of game delivery, fairness auditing and technical support.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or lawful regulatory demand, we may disclose personal data to competent authorities.
• Anti-Fraud and AML Services: Transaction and behavioral data may be processed by third-party fraud-detection or anti-money laundering screening services.
• Professional Advisers: Legal, financial and audit advisers may have access to personal data under binding confidentiality obligations where necessary for their professional services.

All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was shared.

The Duel7 Platform may store and process personal data on servers located outside Pakistan. Where personal data is transferred to countries or jurisdictions that may not have equivalent data protection laws, we take appropriate measures to ensure that your data remains protected to the standard described in this Policy.

Such measures may include contractual safeguards with data processors (such as standard contractual clauses or data processing agreements), requiring processors to maintain security standards aligned with internationally recognized frameworks, and restricting onward transfers to third parties without appropriate protection in place.

We retain your personal data for as long as your account remains active and for a reasonable period thereafter as required by our legal and regulatory obligations. Specific retention periods are guided by the following principles:

• Active Account Data: Retained for the duration of your account and for a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC Documents: Retained for a minimum of five years from the date of submission, in accordance with applicable AML and financial regulatory requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Customer Support Records: Retained for three years from the date of the final interaction in a given support case.
• Technical and Device Data: Typically retained for up to 12 months from the date of collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the period of consent and for up to two years following withdrawal of consent, as evidence of compliance.

Following the applicable retention period, personal data is securely deleted, destroyed or anonymised so that it can no longer be associated with any individual.

Subject to applicable law and certain limitations, you hold the following rights with respect to your personal data held by Duel7. To exercise any of these rights, contact us at [email protected] — plaintext only, not a clickable link.

We will respond to verified rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly. Requests that are manifestly unfounded or excessive may be declined or subject to a reasonable administrative fee.

The Duel7 Platform uses cookies and similar technologies (including local storage and session identifiers) to operate, analyze and improve the Platform. The following categories of cookies may be deployed:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies and load-balancing identifiers. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated data about how users interact with the Platform — including pages visited, session duration and navigation paths. This data helps us identify and resolve usability issues.
• Functionality Cookies: Store your preferences such as language settings, responsible gambling limit configurations and display options between sessions.
• Marketing and Targeting Cookies: Where you have provided consent, these cookies may be used to tailor promotional content based on your gaming and browsing activity. You may withdraw this consent at any time.

You may manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the Platform. Most modern browsers allow you to view, delete and block cookies on a per-site basis through the browser's privacy settings.

The Duel7 Platform is strictly for users aged 18 years or older — or the higher minimum age required by the Operator's license jurisdiction. We do not knowingly collect personal data from persons under the minimum eligible age.

Where we discover that personal data has been submitted by an individual who does not meet the minimum age requirement, that data will be deleted promptly and the associated account will be closed without compensation. Parents and guardians who believe a minor has registered an account should contact us immediately at [email protected].

Duel7 implements a range of technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform
• Hashed and salted storage of account passwords — plaintext passwords are never stored
• Two-factor authentication (2FA) options for account login where supported
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular internal and third-party security audits of data processing systems
• Incident response procedures for identification, containment and notification in the event of a data security breach

While we apply rigorous security standards, no method of electronic transmission or storage is entirely risk-free. Users are strongly encouraged to use strong, unique passwords and to enable two-factor authentication where available. Never share your account credentials with third parties.

Full payment card numbers, CVV codes and similar sensitive authentication data are never stored on Duel7 servers. Payment processing is handled by contracted payment service providers that are subject to applicable financial security standards.

References to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and others are made as familiar local payment references for users across Pakistan. Their mention in this Policy is limited to describing data flows associated with transactions facilitated through these channels — it does not imply endorsement of gambling by any of these providers or their institutions, nor any formal affiliation with the Duel7 Operator.

Transaction data — including amounts, timestamps and method identifiers — is retained as described in Section 8 to meet anti-money laundering record-keeping requirements. You may request a summary of your transaction history through the cashier section of your account or by contacting support.

Duel7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements or applicable law. When material changes are made, the updated Policy will be published on this page with a revised "Last Updated" date.

Where changes are significant, we may provide additional notice through your registered email address or through an in-platform notification. Your continued use of the Platform following publication of the updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how we protect your data. If you disagree with any changes, you should cease using the Platform and may close your account by contacting our support team.

For any privacy-related query, data rights request, complaint or concern, please contact our Data Protection team using the details below. All communications must be in writing. Email addresses and contact details are provided as plain text and are not clickable links.

• Privacy / Data Requests Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Rights Request" in your subject line for faster routing.
• Response Target: We aim to acknowledge all privacy requests within 5 working days and to respond substantively within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, as provided by the Operator
• Language: English (primary) — Urdu assistance available on request

For general account support, platform questions or responsible gambling tools, please also visit our FAQ page or our Responsible Gambling page.