gs777 Privacy Policy — How We Handle Your Personal Data

gs777 is an internationally licensed online casino and sports betting platform operating at gs777.pro, serving registered players across Pakistan and other eligible jurisdictions. When this Privacy Policy refers to "gs777", "we", "us", or "our", it refers to the gs777 platform and its operating entity, which acts as the data controller in respect of all personal data collected through the gs777 website, mobile interface, and associated services.

As data controller, gs777 determines the purposes and means by which personal data is processed. We are committed to processing your data lawfully, fairly, and transparently, in accordance with internationally recognised data protection principles and the regulatory requirements applicable under our gaming licence framework.

If you have any questions about how gs777 handles your personal data, you can reach our Privacy Team at [email protected] at any time.

gs777 collects personal data from you through several channels — directly when you register and use your Account, automatically when you interact with the Platform, and from third-party sources where necessary for compliance and fraud prevention purposes. The categories of personal data we collect are set out in the table below:

gs777 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request, in which case it is processed solely for that purpose and retained only for the minimum period necessary.

gs777 uses your personal data for the following specific purposes. We will not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent or notifying you of the new purpose:

• Account Registration & Management: To create, maintain, and manage your gs777 Account, verify your identity at registration and at withdrawal, and keep your Account details accurate and up to date.
• Service Delivery: To provide access to sports betting markets (including PSL and international cricket), live casino games, slots, and all other gs777 Platform features that you use as a registered player.
• Payment Processing: To process deposits and withdrawals via your chosen Pakistani payment method — whether JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20 — and to maintain accurate PKR wallet transaction records.
• KYC & AML Compliance: To conduct CNIC-based identity verification, satisfy anti-money laundering screening obligations, and comply with the requirements of our international gaming licence framework.
• Fraud Prevention & Platform Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-Account registrations, and any other conduct prohibited under the gs777 Terms & Conditions.
• Responsible Gaming: To honour and enforce the responsible gaming tools you activate — including deposit limits, cooling-off periods, and self-exclusion — and to monitor Account activity for indicators of problem gambling behaviour.
• Customer Support: To respond to your support enquiries, resolve complaints, and maintain records of our interactions with you for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience features. Individual player data is not used for product analytics without anonymisation.
• Promotional Communications: To send you promotional offers and bonus notifications via email or SMS, but only where you have opted in to receive such communications. You may opt out at any time from Account settings.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from competent regulatory authorities, and meet our obligations under our gaming licence framework.

gs777 processes your personal data on the following legal bases under internationally recognised data protection law:

• Contractual Necessity: The majority of gs777's data processing is necessary for the performance of the contract between you and gs777 — namely, providing you with a registered Account and access to the Platform's betting and gaming services. Without this processing, gs777 cannot deliver the services you have signed up for.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, AML transaction monitoring, and responsible gaming record-keeping — are required by the regulatory and compliance obligations applicable under gs777's international gaming licence.
• Legitimate Interests: gs777 processes certain data — including Device & Technical Data and Account Activity Data — on the basis of our legitimate interests in maintaining platform security, preventing fraud, and improving our services. We have assessed that our legitimate interests are not overridden by your rights and interests in these contexts.
• Consent: Where gs777 processes data for purposes that are not strictly necessary for service delivery — such as sending you marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

gs777 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Payment Service Providers: gs777 shares the financial data necessary to process your transactions with the relevant Pakistani payment providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast — and USDT TRC20 network processors. These providers act as independent data controllers in respect of the payment data they process.
• KYC & Identity Verification Partners: gs777 uses third-party KYC service providers to assist with CNIC verification and AML screening. These providers process your identity data solely on gs777's instructions and under contractual data processing agreements.
• Game Technology Providers: The casino games available on the gs777 Platform are supplied by third-party game studios and platform providers. These providers may receive anonymised session data for game performance and certification purposes. No personally identifiable player data is shared with game studios beyond what is required for game session integrity.
• Regulatory Authorities & Law Enforcement: gs777 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a court order, or the terms of our gaming licence. We will notify affected Users where legally permitted to do so.
• Professional Advisers: gs777 may share data with legal advisers, auditors, or compliance consultants on a strictly need-to-know basis, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of gs777's business assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and the privacy terms applicable to your data under the new ownership.

gs777 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to secure your session, and to help us understand how Players navigate and use the Platform. The types of cookies gs777 uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the operation of the Platform — they enable secure login sessions, maintain your PKR wallet balance display, and ensure that the Platform loads correctly across devices. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: gs777 uses anonymised analytics cookies to understand aggregate user behaviour on the Platform — for example, which pages are visited most frequently and how Users navigate between sections. No personally identifiable data is included in these analytics datasets.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, display preferences, and responsible gaming tool configurations — so you do not need to reset them each time you log in.
• Session Security Cookies: gs777 uses session tokens to protect your Account from cross-site request forgery and session hijacking. These cookies expire automatically when you close your browser or log out of your Account.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the gs777 Platform. Blocking analytics or functional cookies will not prevent you from accessing core betting and gaming features.

gs777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. The key retention periods applicable to each data category are as follows:

• Identity & KYC Data: Retained for a minimum of five years following Account closure, in compliance with AML regulatory requirements applicable under our gaming licence framework. CNIC documents and verification records are held securely for this period and then securely destroyed.
• Financial Transaction Data: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years following the date of each transaction, for AML and audit purposes.
• Account Activity Data: Login records and game session logs are retained for three years following the last activity on the Account, or for the AML minimum retention period where applicable — whichever is longer.
• Communications Data: Live chat transcripts and support ticket records are retained for two years from the date of each interaction, unless the interaction relates to an unresolved dispute, in which case the record is retained until the dispute is fully resolved.
• Responsible Gaming Data: Self-exclusion records, deposit limit histories, and cooling-off period logs are retained for five years following Account closure, to enable gs777 to honour re-registration restrictions applicable to self-excluded Users.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your Account and for two years following opt-out or Account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, gs777 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an identifiable individual.

gs777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our core security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the gs777 Platform is encrypted using industry-standard 256-bit TLS/SSL protocols. This applies to all pages of the Platform — not just login and deposit screens.
• Encrypted Data Storage: Sensitive personal data stored on gs777 servers — including KYC documents, financial transaction records, and Account credentials — is stored in encrypted form using AES-256 encryption at rest.
• Access Controls: Access to personal data held by gs777 is restricted to authorised personnel on a strict need-to-know basis. All internal access to personal data is logged and subject to periodic access rights review.
• Intrusion Detection & Monitoring: gs777's infrastructure is monitored around the clock for unusual access patterns, intrusion attempts, and anomalous data egress events. Automated alerting is in place for suspicious activity thresholds.
• Vulnerability Management: gs777 conducts regular security assessments and penetration testing on the Platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gs777 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, gs777 will notify you and the relevant regulatory authority within the timeframe required by applicable law.

As a registered gs777 player, you hold the following rights in respect of the personal data we hold about you. You may exercise any of these rights by contacting our Privacy Team at [email protected]. gs777 will respond to all valid rights requests within 30 days of receipt:

• Right of Access: You have the right to request a copy of all personal data that gs777 holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data gs777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. You may update basic Account details directly from your Account settings page.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Note that gs777's AML and regulatory retention obligations may require us to retain certain data for the minimum periods set out in Section 7 notwithstanding an erasure request.
• Right to Restrict Processing: You have the right to request that gs777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data on the basis of gs777's legitimate interests, including profiling based on legitimate interests. gs777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — including consent to receive marketing communications — you may withdraw your consent at any time from Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The gs777 Platform is strictly for individuals aged 21 years and above. gs777 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the gs777 KYC process, and Accounts found to belong to individuals under 21 are immediately suspended.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the gs777 Platform, please contact our support team immediately at [email protected]. gs777 will promptly investigate the matter, suspend the relevant Account, and delete all personal data associated with the underage user to the extent permitted by our regulatory retention obligations.

gs777 operates under an international gaming licence framework, and some of our data processing infrastructure and third-party service providers are located outside Pakistan. Where personal data is transferred outside Pakistan for processing, gs777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary operating jurisdiction.

These safeguards include contractual data processing agreements with all third-party processors that mandate compliance with internationally recognised data protection standards, and data transfer mechanisms appropriate to the jurisdiction involved. gs777 does not transfer personal data to countries or territories that do not offer an adequate level of data protection without implementing these contractual safeguards.

If you would like more information about the specific safeguards applicable to any international data transfer that affects your personal data, please contact our Privacy Team at [email protected].

The gs777 Platform does not contain links to external third-party websites for commercial or affiliate purposes. However, where references to external resources appear — for example, in the context of responsible gaming support information — please be aware that gs777 has no control over the privacy practices of external websites and accepts no responsibility for the data processing activities of third-party sites.

This Privacy Policy applies exclusively to personal data collected and processed by gs777 through the gs777.pro website and associated Platform services. If you navigate to any third-party website, you should review the privacy policy of that website independently before providing any personal data.

gs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, gs777 will notify registered Users via the email address or contact number associated with their Account, or via a prominent notice on the Platform, no less than seven days before the amended Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the gs777 Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

Where a proposed amendment requires your fresh consent under applicable data protection law — for example, a material change to the purposes for which we process your data — gs777 will seek that consent separately before the amended processing begins.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data gs777 holds about you, please contact our Privacy Team through the following channels:

• Email: [email protected] — plain text, not a clickable link. Response time: within 24 hours for general privacy queries; within 30 days for formal data subject rights requests.
• Live Chat: Available 24/7 directly from the gs777 Platform. Our bilingual support team includes Urdu-speaking agents available around the clock. For formal data rights requests, please follow up in writing via email to ensure a documented response.

When submitting a data subject rights request, please include your Account username, your registered contact details, and a clear description of the right you wish to exercise or the data query you have. This helps our Privacy Team locate your records and respond to you as efficiently as possible.