gt777 Privacy Policy — How We Handle Your Personal Data

For the purposes of this Privacy Policy, the data controller responsible for the personal data of gt777 platform users is the licensed operator of the gt777 platform ("gt777," "we," "us," "our"). gt777 operates the online casino and sports betting platform accessible at gt777.vu and through the official gt777 mobile application.

As data controller, gt777 determines the purposes and means by which your personal data is processed. All data processing activities carried out by gt777 are governed by this Privacy Policy and by the applicable data protection obligations arising from gt777's international gaming licence.

For all data protection and privacy-related enquiries, including requests to exercise your data rights, please contact the gt777 data protection team using the contact details provided in Section 14 of this Policy.

gt777 collects the following categories of personal data from Pakistani players who register for and use the gt777 platform. The specific data collected depends on the stage of your relationship with gt777 and the features of the platform you use:

gt777 automatically records comprehensive gaming activity data for every account, including: games played, bet amounts, game outcomes, session start and end times, bonus usage, wagering activity, sportsbook bet history, and in-play betting activity. This data is necessary for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

When you access gt777 via browser or mobile application, we automatically collect: IP address, device type and model, operating system and version, browser type and version, screen resolution, device identifiers, geolocation data (country and city level), and session logs including pages visited and time spent on each page.

gt777 collects personal data through the following means:

• Direct provision: Information you enter during account registration, KYC verification, deposit and withdrawal requests, support communications, and any forms completed on the gt777 platform.
• Automatic collection: Technical and device data collected automatically when you access and use the gt777 platform, including via cookies and similar tracking technologies (see Section 9).
• Third-party sources: Identity verification and KYC data provided by third-party identity verification service providers who validate your CNIC details against official databases. Payment transaction data received from JazzCash, EasyPaisa, and banking partners. Fraud and risk screening data from third-party risk management service providers.
• Publicly available sources: In limited circumstances for AML screening purposes, gt777 may consult publicly available sources including sanctions lists, politically exposed persons (PEP) databases, and adverse media databases.

gt777 uses your personal data strictly for the following defined purposes. We do not use your data for any purpose not listed here without first obtaining your consent or establishing a fresh legal basis:

• Account creation and management: Setting up your gt777 account, maintaining account records, managing your login credentials, and processing account closure requests.
• Identity verification and KYC compliance: Verifying your age (21+), verifying your identity against your CNIC, and satisfying the KYC requirements of gt777's international gaming licence.
• Payment processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other supported payment channels. Maintaining transaction records as required by financial regulations.
• Delivery of gaming services: Providing access to casino games, live dealer tables, sportsbook markets, and all other platform features. Recording game results and maintaining an accurate account balance.
• Anti-money laundering and fraud prevention: Monitoring transactions and gaming activity for signs of money laundering, fraud, bonus abuse, match-fixing or other financial crimes. Reporting suspicious activity to the relevant authorities where required by law.
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling. Enforcing deposit limits, loss limits and self-exclusion decisions made by players. Conducting affordability checks where required.
• Customer support: Responding to player queries, complaints and disputes. Maintaining records of support communications for quality assurance purposes.
• Platform improvement and analytics: Analysing anonymised and aggregated platform usage data to improve the gt777 user experience, optimise game performance, and inform product development decisions.
• Marketing and promotions: Where you have expressly consented to receive marketing communications, sending you information about gt777 promotions, bonuses and new features via email or SMS. You may withdraw consent at any time.
• Legal and regulatory compliance: Retaining records as required by applicable law and gt777's gaming licence obligations. Responding to lawful requests from regulatory bodies, licensing authorities and law enforcement agencies.

gt777 relies on the following legal bases for processing your personal data, as applicable to each processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the gt777 Terms & Conditions — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with legal and regulatory obligations, including KYC verification, AML screening, age verification, and record-keeping requirements imposed by gt777's licensing authority.
• Legitimate interests: Processing carried out in gt777's legitimate interests or those of the wider player community — including fraud prevention, platform security, responsible gaming monitoring, and analytics for service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained. Consent is voluntary and may be withdrawn at any time without affecting any other aspect of your gt777 account.

gt777 does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. This is an absolute commitment. gt777 shares your data only in the following limited, defined circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other payment partners receive transaction data necessary to process your deposits and withdrawals. These providers act as independent data processors under their own privacy policies.
• Identity verification providers: Third-party KYC and identity verification service providers receive your identity documents and personal details for the purpose of completing mandatory verification checks. These providers are contractually bound to process your data only for verification purposes.
• Fraud and risk management providers: gt777 shares relevant transaction and activity data with specialist fraud prevention and risk management service providers to protect the platform and its players from financial crime.
• Game providers: Game studios and software providers (such as Evolution Gaming, Pragmatic Play and others) may receive pseudonymised session and game data to facilitate game delivery and resolve technical disputes. No directly identifiable personal data is shared with game providers without necessity.
• Licensing and regulatory authorities: gt777 is obligated to provide player data and transaction records to its licensing authority and to relevant regulatory bodies upon lawful request. gt777 cooperates fully with all legitimate regulatory enquiries.
• Law enforcement: Where required by a valid court order, law enforcement request or other legally binding demand, gt777 will disclose relevant personal data. gt777 will endeavour to notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of gt777's assets, player data may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer and of any material change to data processing arrangements resulting therefrom.

gt777 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or gt777's licensing obligations. The following retention periods apply:

Upon expiry of the applicable retention period, gt777 will securely delete or anonymise your personal data. Anonymised, aggregated data — from which you cannot be individually identified — may be retained indefinitely for analytical purposes.

gt777 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include but are not limited to:

• Encryption in transit: All data transmitted between your device and the gt777 platform is encrypted using industry-standard 256-bit TLS (Transport Layer Security) encryption. This applies to all web traffic, API communications, and mobile application data.
• Encryption at rest: Sensitive personal data stored in gt777 databases — including identity documents, payment details and CNIC information — is encrypted at rest using AES-256 encryption.
• Password security: gt777 never stores your password in plain text. Passwords are stored as salted cryptographic hashes using modern hashing algorithms. gt777 staff cannot retrieve your original password.
• Access controls: Access to personal data within gt777's systems is strictly limited to staff who require it to perform their specific job functions. Role-based access controls and multi-factor authentication are enforced for all gt777 system access.
• Regular security audits: gt777's platform undergoes regular third-party penetration testing and security audits. Any vulnerabilities identified are remediated on a priority basis.
• Data breach response: In the event of a personal data breach affecting your data, gt777 will notify you and the relevant supervisory authority within the timeframes required by applicable law and our licensing obligations, where such notification is legally required.

While gt777 takes all reasonable steps to protect your personal data, no online service can guarantee absolute security. You also have a role to play — please ensure your gt777 account password is strong and unique, enable two-factor authentication, and never share your login credentials with anyone.

gt777 uses cookies and similar tracking technologies on the gt777 website and mobile application. A cookie is a small text file placed on your device when you visit a website. Cookies allow the site to recognise your device on subsequent visits and store certain preferences and information.

gt777 uses the following categories of cookies:

You can manage your cookie preferences through the gt777 cookie settings panel, accessible via the footer of the gt777 website. Most browsers also allow you to control cookies through browser settings. Disabling strictly necessary cookies will impair your ability to use the gt777 platform.

As a gt777 player, you have the following rights with respect to your personal data held by gt777. These rights are meaningful commitments — gt777 will respond to all valid data rights requests within 30 days of receipt:

To exercise any of these rights, please contact the gt777 data protection team using the contact details in Section 14. gt777 may require verification of your identity before processing a data rights request to ensure your data is not disclosed to an unauthorised person.

The gt777 platform is strictly for adults aged 21 years and above. gt777 does not knowingly collect personal data from any individual under the age of 21. All registration data submitted to gt777 includes a declaration of age, and CNIC-based identity verification provides an additional enforcement layer.

If gt777 discovers that personal data has been collected from an individual under 21 years of age, that data will be immediately deleted, the associated account will be permanently closed, and any deposits may be returned at gt777's discretion after deducting any winnings attributed to underage play. All cases of suspected underage gambling are reported to the relevant licensing authority.

As an internationally licensed online gaming platform, gt777 may transfer certain categories of personal data to service providers and infrastructure partners located outside Pakistan. Such transfers occur only where gt777 has implemented appropriate safeguards to protect your data during and after the transfer. These safeguards include:

• Contractual data processing agreements incorporating internationally recognised data protection clauses with all third-party processors receiving your data.
• Transfers only to service providers operating under the standards required by gt777's licensing authority.
• Regular assessments of the data protection practices of third-party processors to whom personal data is transferred.

gt777 does not transfer personal data internationally where a transfer would result in a material reduction in the data protection standards applicable to your personal data under this Privacy Policy.

gt777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing activities, legal obligations, or regulatory requirements. Where a change is material — meaning it significantly affects how we use your personal data or reduces your data protection rights — gt777 will provide advance notice of at least 14 days via email to your registered address and/or via a prominent in-platform notification.

The effective date of the current Privacy Policy version is clearly stated at the top of this document. The version number displayed in the document notice panel allows you to track whether the policy has been updated since you last reviewed it. We recommend reviewing this Privacy Policy periodically.

Your continued use of the gt777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revision, you may request account closure through customer support without penalty to any real-money balance.

For all privacy and data protection enquiries — including requests to exercise your data rights, questions about this Privacy Policy, or complaints about gt777's data processing activities — please contact the gt777 data protection team through the following channels:

• Live Chat: Available 24/7 through the gt777 platform. For urgent data protection matters, live chat provides the fastest initial response.
• Email: [email protected] — please use the subject line "Data Protection Request" or "Privacy Complaint" to ensure your message reaches the correct team.

gt777 commits to acknowledging all data protection requests within 5 business days and to providing a substantive response within 30 calendar days. For complex requests, the response period may be extended by up to a further 60 days — in such cases, gt777 will inform you of the extension and the reason for it within the initial 30-day period.

If you are not satisfied with gt777's response to your privacy complaint, you have the right to escalate your complaint to the supervisory authority designated under gt777's international gaming licence, or to the relevant data protection supervisory authority applicable in your jurisdiction.