Dream7 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by Dream7 ("we", "us", "our"), the operator of the online sports betting and live casino information platform accessible at dream7.cam. This Policy applies to all Users ("you", "your") who access, register on or interact with the Dream7 Platform, including users located in Pakistan and internationally.

Dream7 is committed to handling your personal data with transparency, care and in accordance with applicable data protection principles. This Policy describes the categories of personal data we collect, the legal bases upon which we process it, how it is used, with whom it may be shared, how long it is retained, and the rights available to you as a data subject.

By accessing the Dream7 Platform and registering an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform and contact our support team to request account closure.

2. Definitions

For the purposes of this Policy, the following terms are defined as follows:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details and account activity records.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, deletion and destruction.
• "Data Controller" — Dream7, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — Any third-party service provider that processes Personal Data on behalf of Dream7 in accordance with our instructions and applicable data protection obligations.
• "KYC Data" — Identity and address verification documentation, including CNIC copies, passport scans and proof-of-address documents, collected as part of the Know Your Customer verification process.
• "Cookies" — Small data files placed on your device by the Platform to facilitate session management, preference storage and analytics.
• "Sensitive Data" — Categories of Personal Data warranting enhanced protection, including payment card data, identity document images and financial transaction records.
• "Platform" — The Dream7 website, mobile-optimised interface and all associated services accessible at dream7.cam.

3. Personal Data We Collect

Dream7 collects the following categories of Personal Data, limited to what is necessary for the stated purposes:

3.1 Registration & Identity Data

Collected at the point of account registration. Required to create and maintain your account and to comply with age-verification and anti-money laundering obligations.

3.2 KYC & Verification Data

Collected during KYC verification. Required to confirm your identity, verify your age, satisfy regulatory compliance and prevent fraud and money laundering.

3.3 Financial & Transaction Data

Collected through your account activity. Required for payment processing, AML monitoring, dispute resolution and regulatory reporting. Dream7 does not store full payment card numbers.

3.4 Betting & Gaming Activity Data

Generated through your use of the Platform. Used for account management, responsible gambling monitoring, fraud detection and personalised communications.

3.5 Technical & Device Data

Collected automatically when you access the Platform. Used for security monitoring, fraud prevention and platform performance optimisation.

4. How We Collect Your Data

Dream7 collects Personal Data through the following channels:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC verification, contacting support or filling in any on-Platform form.
• Automated collection: Technical data collected automatically by our servers when you access the Platform, including IP address, device identifiers, browser fingerprint and session data.
• Transactional records: Data generated through your use of the Platform, including deposits, withdrawals, wager placements and account setting changes.
• Cookies and similar technologies: Data collected via cookies, pixel tags and local storage mechanisms as described in Section 8 of this Policy.
• Third-party verification services: Identity and fraud-screening data received from third-party KYC and AML service providers as part of our verification process.

5. Data Processing & Legal Basis

Dream7 processes Personal Data only where a lawful basis exists. The primary legal bases upon which we rely are as follows:

6. How We Use Your Personal Data

Dream7 uses your Personal Data for the following purposes:

• To create, verify and administer your Dream7 account and ensure its ongoing security;
• To process your deposits and withdrawals, including verification of payment methods;
• To monitor betting and gaming activity for responsible gambling compliance, including the application of deposit limits, session time reminders and self-exclusion flags;
• To detect, investigate and prevent fraud, collusion, money laundering, bonus abuse and other prohibited conduct;
• To comply with applicable legal, regulatory and law-enforcement obligations, including responding to lawful requests from competent authorities;
• To provide customer support services in English and Urdu (during peak Pakistan Standard Time hours);
• To send you transactional communications relating to your account, including security alerts, balance notifications and support responses;
• To send you promotional communications where you have explicitly opted in — you may withdraw consent at any time via your account settings;
• To maintain and improve the security, performance and functionality of the Platform;
• To conduct analytics on aggregate, anonymised Platform usage data to inform product development.

7. Data Sharing & Disclosure

Dream7 does not sell, rent or trade your Personal Data to any third party for commercial purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection obligations:

7.1 Service Providers (Data Processors)

Third-party service providers who process data on our behalf under binding data processing agreements, including KYC and identity verification providers, payment processing infrastructure providers, fraud detection and AML screening vendors, and customer support platform operators. These processors are contractually prohibited from using your data for any purpose beyond the services they provide to Dream7.

7.2 Regulatory and Law-Enforcement Authorities

Dream7 may disclose Personal Data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, including in connection with anti-money laundering investigations, fraud proceedings or lawful court orders. We will notify you of such disclosure where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of Dream7's business or assets, your Personal Data may be transferred to the acquiring entity, subject to the acquiring entity's commitment to honour the terms of this Privacy Policy or provide equivalent protections.

8. Cookies & Tracking Technologies

Dream7 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, login persistence and security token validation. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Store your preferences, such as language settings, odds format preferences and responsible gambling limit reminders.
• Analytics Cookies: Collect aggregated, anonymised data on how users navigate the Platform. Used internally to identify usability issues and improve the Platform. No individual user is identifiable from this data.
• Security Cookies: Support fraud-detection and bot-prevention systems, helping to identify unusual access patterns that may indicate account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the Platform. Dream7 does not use third-party advertising cookies or tracking pixels for external ad networks.

9. Data Retention

Dream7 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory and operational obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of account activity and for a minimum of five (5) years following account closure, in accordance with applicable AML and record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the business relationship, or longer where required by applicable law.
• Transaction and betting records: Retained for a minimum of five (5) years following the relevant transaction date.
• Customer support records: Retained for three (3) years from the date of the interaction, unless the matter relates to an ongoing investigation or dispute.
• Technical and device data: Retained for twelve (12) months in active logs; may be retained in anonymised form for longer analytics purposes.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent status.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our data-deletion procedures.

10. Data Security

Dream7 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction and disclosure. These measures include:

• TLS/SSL encryption of all data transmitted between your device and the Dream7 Platform;
• Encryption of sensitive data fields at rest, including passwords (stored as salted hashes) and payment method identifiers;
• Two-factor authentication (2FA) available on all user accounts;
• Role-based access controls restricting internal data access to authorised personnel on a need-to-know basis;
• Routine security assessments and penetration testing of Platform infrastructure;
• Incident response procedures to detect, contain and notify affected users of any data breaches in accordance with applicable law.

11. International Data Transfers

Dream7 operates with infrastructure and service providers that may be located in jurisdictions outside of Pakistan. Where your Personal Data is transferred to or processed in a jurisdiction outside your home country, Dream7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or higher than, the protections described in this Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions that maintain adequate data protection frameworks. If you have questions about the specific safeguards applied to international data transfers affecting your account, you may contact our support team.

12. Your Rights as a Data Subject

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights in respect of your Personal Data processed by Dream7:

Dream7 will respond to all valid data rights requests within a reasonable timeframe, and in any event within 30 days of receipt. We reserve the right to verify your identity before processing any request. Where a request cannot be fulfilled — for example, because the data must be retained for legal compliance — we will explain the reasons in writing.

13. Minors & Age Restriction

The Dream7 Platform is strictly for use by adults aged 18 and over, or the higher minimum age required by the applicable operator/license jurisdiction. Dream7 does not knowingly collect Personal Data from minors. Age verification is a mandatory component of our KYC process for all registered accounts.

If Dream7 becomes aware that a minor has provided Personal Data or accessed the Platform in violation of our age restrictions, we will immediately close the account, forfeiture applicable funds in accordance with our Terms & Conditions, and securely delete any Personal Data collected, to the extent permitted by legal obligations.

If you believe a minor in your household has accessed the Dream7 Platform, please contact us immediately at [email protected].

14. Amendments to This Policy

Dream7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. Material changes will be communicated to registered Users via the email address on record and/or a prominent notice on the Platform, not less than fourteen (14) days prior to the changes taking effect, except where immediate amendment is required by law.

The "Last updated" date at the top of this Policy will be revised upon any amendment. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms.

15. Contact & Data Requests

For all privacy-related enquiries, data subject access requests, or complaints relating to the processing of your Personal Data by Dream7, please contact us through the following channels: