Privacy Policy — How sd777 Protects Your Personal Data

This Privacy Policy ("Policy") is published by sd777 ("we", "us", "our", "sd777") and applies to all users ("you", "your", "player") who access or use the sd777 website at sd777.ws and all associated platform services, mobile experiences, and customer support channels.

This Policy describes how sd777 collects, uses, stores, protects, and shares personal data in the course of operating Pakistan's premier online casino and sports betting platform. It covers all product areas of sd777, including cricket betting, live casino, slot games, fishing games, and the Vivo Live dealer section.

This Policy should be read together with the sd777 Terms & Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on privacy-related matters, this Policy shall take precedence.

If you do not agree with any part of this Privacy Policy, you should immediately discontinue use of the sd777 platform and contact our support team to close your account and arrange deletion of your personal data where permissible.

sd777 collects personal data through several channels: directly from you when you register or interact with the platform, automatically when you use the sd777 website, and from third-party verification and payment service providers. The categories of personal data we collect are as follows:

Identity & Registration Data:

• Full legal name as it appears on your government-issued identification document;
• Date of birth (used for mandatory age verification — sd777 enforces a strict 21+ age restriction);
• Username chosen at registration;
• Gender (where voluntarily provided);
• Copies of identity documents submitted during KYC verification, including national identity card (CNIC), passport, or driving licence.

Contact & Location Data:

• Email address registered to your sd777 account;
• Mobile phone number;
• Residential address, including city (Karachi, Lahore, Islamabad, Faisalabad, etc.) and postal code;
• Proof of address documents where submitted for verification purposes.

Financial & Transaction Data:

• JazzCash and EasyPaisa mobile wallet account details used for deposits and withdrawals;
• Bank account details for HBL, UBL, Meezan Bank, or other registered banking institutions where used for transactions;
• Full transaction history on your sd777 account, including deposit amounts, withdrawal requests, bonus credits, and wagering activity;
• Payment verification documents submitted during KYC.

Technical & Usage Data:

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser version;
• Session duration, pages visited, game categories accessed, and clickstream data;
• Login timestamps and frequency of platform access.

sd777 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond what is listed here without first obtaining your explicit consent or notifying you of the new purpose:

• Account Registration & Management: To create and maintain your sd777 player account, verify your identity, manage your account settings, and enforce the one-account-per-player rule;
• Age Verification: To confirm that you meet the mandatory 21+ age requirement before allowing access to real-money gaming services on sd777;
• Payment Processing: To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and to maintain accurate financial records of all transactions;
• KYC & AML Compliance: To fulfil our anti-money laundering and know-your-customer obligations, which require us to verify the identity and source of funds of players on the sd777 platform;
• Platform Delivery & Improvement: To provide access to sd777's full suite of gaming products including cricket betting, live casino, slots, fishing games, and Vivo Live, and to analyse usage patterns to continuously improve the platform experience;
• Customer Support: To respond to your queries, resolve disputes, and deliver ongoing support via live chat and email;
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where requested;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Marketing Communications: Where you have opted in to receive promotional communications, to send you details of relevant sd777 bonuses, deposit match offers, PSL cricket betting promotions, and platform updates. You may opt out at any time.

sd777 processes your personal data on one or more of the following lawful bases, depending on the specific purpose for which the data is being processed:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the sd777 Terms & Conditions — for example, processing your deposits, settling your bets, and maintaining your account;
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML legislation, KYC standards, and gaming compliance obligations under the international gaming standards framework under which sd777 operates;
• Legitimate Interests: Processing is necessary for sd777's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the quality of our service — provided those interests are not overridden by your own fundamental rights and freedoms;
• Consent: Where none of the above bases apply — for example, in relation to sending you optional marketing communications — sd777 will only process your data where you have given us your explicit, freely given, informed consent. You may withdraw this consent at any time.

sd777 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share your personal data only in the following limited circumstances:

• Payment Processors: We share the financial data necessary to process your transactions with our approved payment service providers, including JazzCash, EasyPaisa, and the banking institutions supporting HBL, UBL, and Meezan Bank integrations. These providers are contractually obligated to handle your data securely and only for payment processing purposes;
• Identity Verification Services: We share identity and address data with regulated third-party KYC and AML verification service providers as required to fulfil our compliance obligations. These providers operate under strict data processing agreements with sd777;
• Fraud Prevention & Security: We may share data with fraud prevention agencies and security service providers where necessary to protect sd777 and its players from fraudulent or criminal activity;
• Game Content Providers: Certain technical data — including your account ID and session information — may be shared with third-party game providers (for example, live casino and slot game studios) as necessary to deliver their game content within the sd777 platform. These providers do not receive your full personal profile;
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of sd777, our players, or the public;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the sd777 business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

sd777 uses cookies and similar tracking technologies on our website to enhance your experience, maintain your session, analyse platform usage, and support fraud prevention systems. A cookie is a small text file placed on your device by your browser when you visit the sd777 website.

sd777 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the sd777 platform to function correctly. These include session cookies that keep you logged in, security tokens that protect your account, and cookies that enable the cashier and game loading functions. These cookies cannot be disabled without breaking core platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the sd777 platform — for example, which game categories are most visited and how long sessions typically last. This data helps us identify areas for improvement;
• Functional Cookies: Used to remember your preferences and personalise your sd777 experience, such as your preferred language setting and responsible gaming tool configurations;
• Security Cookies: Used to support our fraud detection and account security systems, including device fingerprinting and anomalous login detection.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the sd777 platform. For details on how to manage cookies in your specific browser, refer to your browser's help documentation.

sd777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the sd777 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data held in our databases is encrypted at rest;
• Access Controls: Access to personal data held by sd777 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training;
• Intrusion Detection: sd777's infrastructure is monitored 24/7 by automated security systems designed to detect and respond to potential intrusions, unusual access patterns, or attempted data breaches in real time;
• Two-Factor Authentication: sd777 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security beyond username and password;
• Regular Security Audits: sd777 conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and remediate potential security weaknesses proactively.

Despite the comprehensive security measures sd777 maintains, no data transmission over the internet and no storage system can be guaranteed to be completely secure. In the event of a data breach that affects your personal data, sd777 will notify you and any applicable regulatory authority in accordance with our obligations and within a reasonable timeframe of becoming aware of the breach.

sd777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention principles apply:

• Active Account Data: Personal data associated with your active sd777 account is retained for the full duration of your account's existence and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements;
• Transaction & Financial Records: Detailed records of all financial transactions on your sd777 account — including deposits, withdrawals, and bonus activity — are retained for a minimum of five (5) years following the date of each transaction, as required under AML compliance standards;
• KYC Verification Documents: Identity and address verification documents submitted for KYC are retained for a minimum of five (5) years following account closure or the completion of the transaction to which they relate;
• Customer Support Communications: Records of support interactions, including live chat transcripts and email correspondence, are retained for a period of two (2) years following the closure of the relevant support case;
• Marketing Consent Records: Where you have given consent to receive marketing communications, sd777 retains a record of that consent for the duration of your account and for three (3) years following account closure or opt-out, whichever comes first.

Following the expiry of the applicable retention period, sd777 will securely delete or irreversibly anonymise your personal data so that it can no longer be linked back to you. Anonymised, aggregated data may be retained indefinitely for statistical and platform analysis purposes.

sd777 respects your rights in relation to the personal data we hold about you. You may exercise the following rights at any time by contacting the sd777 support team via live chat or email:

• Right of Access: You have the right to request a copy of the personal data sd777 holds about you, along with information about how it is being used. sd777 will respond to access requests within 30 days of receipt;
• Right to Rectification: If any personal data sd777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action correction requests promptly upon verification of your identity;
• Right to Erasure: In certain circumstances — for example where data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent — you may request that sd777 delete your personal data. Please note that this right is subject to any overriding legal, regulatory, or AML retention obligations that require us to retain certain data;
• Right to Restrict Processing: You may request that sd777 restrict the processing of your data in certain circumstances — for example while the accuracy of data is being contested, or where you object to processing based on legitimate interests;
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to processing of your personal data where sd777 relies on legitimate interests as the lawful basis. You also have an unconditional right to object to processing for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

The sd777 platform integrates with a number of third-party service providers to deliver its full range of features. These third parties process certain categories of your personal data strictly as necessary to deliver their respective services within the sd777 ecosystem. All third-party providers engaged by sd777 are subject to formal data processing agreements requiring them to maintain standards of data protection consistent with this Policy.

The third-party service categories involved in sd777's operations include:

• Payment Gateway Providers: JazzCash, EasyPaisa, and banking integrations for HBL, UBL, and Meezan Bank process transaction data as payment processors;
• KYC & AML Verification Providers: Regulated identity verification platforms process identity and address documents to fulfil compliance requirements;
• Game Content Studios: Live casino, slot, and fishing game providers receive session identifiers and game outcome data as required to deliver real-time game content;
• Platform Security & Fraud Detection: Security service providers access technical and usage data to support real-time fraud detection and account security systems.

sd777 is not responsible for the privacy practices of third-party websites or services that are not part of the sd777 platform. Any links to external resources within the sd777 platform are provided for information only, and sd777 does not endorse or accept responsibility for the privacy practices of any external site.

sd777 operates exclusively as an adult gaming platform and enforces a strict minimum age requirement of 21 years for all registered players. sd777 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

During registration, all applicants are required to confirm their date of birth and consent to the processing of their personal data as described in this Policy. This confirmation, combined with mandatory KYC age verification, forms sd777's primary mechanism for preventing underage access to the platform.

Parents and guardians in Pakistan who are concerned that a minor in their care may have accessed or attempted to access online gaming platforms are strongly encouraged to use device-level parental controls and filtering software to restrict access to gambling websites. If you believe a minor has created an account on sd777, please contact our support team immediately via live chat or email.

sd777 reserves the right to update, amend, or replace this Privacy Policy at any time. Updates may be made for reasons including, but not limited to:

• Changes in applicable data protection laws, regulations, or gaming compliance requirements;
• Introduction of new platform features, game categories, or payment methods that involve new categories of data processing;
• Changes to the third-party service providers used by sd777 that affect how your data is shared or processed;
• Feedback from players, regulators, or data protection advisors that identifies areas where the Policy can be made clearer or more comprehensive;
• Corrections of typographical errors or clarifications of existing provisions that do not materially change the substance of the Policy.

Where changes are material — meaning they meaningfully affect how your personal data is used or your rights in relation to it — sd777 will notify registered players via the email address held on their account at least seven (7) days before the revised Policy takes effect. For non-material amendments, changes will take effect upon publication on the sd777 website.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way sd777 handles your personal data, please do not hesitate to get in touch with our support team through the following channels:

• Live Chat: Available 24/7 directly within the sd777 platform. This is the fastest way to raise a privacy concern or submit a data rights request;
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered username and a clear description of your query or request.

sd777 aims to acknowledge all privacy-related email enquiries within 24 hours and to provide a substantive response within 30 days of receiving a formal data rights request. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.