s777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") is published by s777 ("we", "us", "our") and applies to all personal data processed in connection with the s777 online gaming platform accessible at s777.asia, including all associated services, mobile browser access, customer support channels, and payment processing interfaces.

s777 is committed to protecting the privacy and personal data of all users, including registered Players, prospective account holders, and visitors who browse s777.asia without registering. This Policy explains what personal data we collect, on what legal grounds we process it, with whom we share it, how long we retain it, and what rights you hold in respect of your data.

This Policy must be read in conjunction with s777's Terms & Conditions, which form part of the contractual agreement between you and s777. By accepting the Terms & Conditions, you also acknowledge this Privacy Policy.

For the purposes of applicable data protection legislation, the data controller responsible for personal data processed through the s777 platform is the legal entity operating s777.asia under its international gaming license.

The data controller determines the purposes and means of processing personal data collected from s777 users. All data processing described in this Policy is conducted by or on behalf of the s777 data controller, using appropriate data processing agreements with all relevant third-party processors.

Questions, data subject access requests, and complaints relating to the processing of your personal data by s777 may be directed to the s777 Data Protection contact at [email protected]. This is a plain-text address — not a clickable link. Please copy and paste it into your email client.

s777 collects the following categories of personal data, as necessary for the purposes described in this Policy:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification details (such as CNIC number) collected during account registration and KYC verification.
• Contact Data: Pakistani mobile number (Jazz, Telenor, Zong, Ufone, or PTCL), email address, and residential address, collected at registration and updated when you notify s777 of changes.
• Financial Data: JazzCash account number, EasyPaisa mobile wallet details, HBL/UBL/Meezan Bank account details (as applicable to your chosen payment method), transaction history including deposits, withdrawals, bonus credits, and wager records. s777 does not store complete payment card numbers; card processing is handled by PCI-DSS-compliant payment processors.
• Gaming Activity Data: Wagers placed, game types played, session duration, win/loss records, bonus history, and responsible gaming settings configured on your account.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, and network connection type, collected automatically when you access s777.asia.
• Usage Data: Pages visited, features interacted with, navigation paths, time spent on each section of the platform, and click-event data used to improve the s777 user experience.
• Communication Data: Content of live chat transcripts, support email correspondence, and any documents or images submitted to s777 for KYC, verification, or dispute resolution purposes.
• Responsible Gaming Data: Deposit limits, loss limits, cooling-off periods, session timers, and self-exclusion status — maintained in compliance with s777's licensing obligations.

s777 collects personal data through the following channels:

• Direct Collection: Information you provide when completing the s777 registration form, submitting KYC documentation, contacting support, updating your account profile, or setting responsible gaming preferences.
• Automated Technical Collection: Device and network data collected automatically when you access s777.asia, including via session cookies, local storage, and server-side request logging. This data is collected regardless of whether you are logged into an s777 account.
• Payment Processing Partners: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment processors when you make a deposit or withdrawal on s777.
• Identity Verification Providers: Verification outcome data (pass/fail/refer) received from third-party KYC and age verification services used by s777 to fulfill its licensing obligations.
• Fraud Prevention Services: Risk scoring and device fingerprint data received from fraud detection partners used to protect s777 accounts from unauthorised access and financial crime.
• Game Providers: Session outcome data (win/loss amounts, game rounds played, RTP achieved) received from third-party game studios whose certified titles are accessible through the s777 platform.

s777 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases on which s777 relies are as follows:

• Contract Performance: Processing necessary to register your account, operate your PKR wallet, process deposits and withdrawals via JazzCash or EasyPaisa, and deliver the gaming services you have contracted to use on s777.
• Legal Obligation: Processing required to comply with s777's obligations under its international gaming license, including age verification, KYC/AML compliance, responsible gaming record-keeping, and mandatory reporting to regulatory authorities.
• Legitimate Interests: Processing for fraud detection and prevention, platform security, service improvement through analytics, and internal record-keeping — where such interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications (email newsletters, promotional SMS messages) where you have provided specific, informed consent. Consent may be withdrawn at any time by updating your communication preferences in the s777 account dashboard or by contacting support.

s777 uses personal data for the following specific purposes, each underpinned by the legal bases identified in Section 5:

• Registering and maintaining your s777 Account, including verifying your identity and age (21+) as required by our licensing conditions;
• Processing deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer — and processing withdrawal requests to verified accounts in your name;
• Operating, monitoring, and enforcing responsible gaming controls set on your account, including deposit limits, cooling-off periods, and self-exclusion;
• Detecting and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other conduct prohibited under s777's Terms & Conditions;
• Providing customer support in English and Urdu via live chat and email, including handling disputes, technical issues, and account recovery requests;
• Complying with anti-money laundering (AML) obligations, including transaction monitoring and mandatory reporting to relevant regulatory authorities;
• Sending service communications — account notifications, security alerts, OTP messages, and important policy update notices;
• Sending marketing communications — promotional offers, bonus announcements, and product updates — only where you have provided consent and not opted out;
• Improving the s777 platform through usage analytics, A/B testing, and performance monitoring, using aggregated and/or anonymised data where possible;
• Maintaining records required under s777's international gaming license, including gaming history, financial transactions, and responsible gaming activity.

s777 does not sell, rent, or trade your personal data. Sharing of personal data is strictly limited to the following categories of recipients, each engaged under appropriate contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and affiliated payment gateway providers — for the sole purpose of processing your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and age verification services used to fulfill s777's licensing obligation to verify that all registered users are 21 years of age or older.
• Fraud Prevention Services: Risk management and fraud detection providers that assist s777 in identifying suspicious account activity, device anomalies, and financial crime indicators.
• Game Studios: Third-party game providers whose certified titles are available on s777 may receive session data necessary to operate their games and calculate outcomes. Game providers do not receive your identity or financial data.
• Regulatory Authorities: s777's licensing authority and relevant law enforcement or financial intelligence agencies, where disclosure is required by law, court order, or regulatory obligation. Such disclosures may be made without notifying you, where permitted or required by law.
• Group Companies: Where s777 operates within a corporate group structure, data may be shared with affiliated entities for internal administrative and compliance purposes under equivalent data protection standards.
• Professional Advisers: Legal, accounting, audit, and compliance advisers engaged by s777, subject to professional confidentiality obligations.

s777 uses cookies and similar client-side storage technologies to operate the platform and improve your experience. The following categories of cookies are used on s777.asia:

• Essential Cookies: Required for the s777 platform to function. These cookies maintain your login session, enforce responsible gaming controls, and preserve account settings during your browser session. They cannot be disabled without breaking core platform functionality.
• Security Cookies: Used to detect and prevent unauthorised access, bot activity, and fraud. These cookies form part of s777's active security infrastructure.
• Analytics Cookies: Used to understand how visitors interact with s777.asia — which pages are visited most, how long users stay, and where users navigate from. Analytics data is aggregated and not used to identify individual users where avoidable. You may opt out of analytics tracking by contacting s777 support.
• Preference Cookies: Store your language preferences, display settings, and other personalisation choices on s777.

s777 does not deploy third-party advertising or retargeting cookies. No cookie data collected on s777.asia is shared with advertising platforms.

s777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include, but are not limited to:

• TLS 1.3 Encryption: All data transmitted between your device and s777's servers is encrypted using TLS 1.3 protocol. Unencrypted access to s777.asia is redirected to the encrypted connection automatically.
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms with salting. Raw passwords are never stored or logged by s777 systems.
• Two-Factor Authentication: s777 offers 2FA for registered accounts, adding a second verification layer — SMS OTP or authenticator app — beyond the standard password login. s777 recommends all users enable 2FA.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. s777 staff access is logged, role-based, and subject to regular access review.
• Intrusion Detection: s777 operates network monitoring and anomaly detection infrastructure to identify and respond to potential unauthorised access attempts.
• Incident Response: In the event of a personal data breach affecting registered s777 users, we will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable law.

s777 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following retention schedules and overriding legal obligations:

• Account Data (identity, contact): Retained for 5 years from the date of account closure or the date of last player activity, whichever is later, to comply with licensing and AML record-keeping requirements.
• Financial Transaction Data: Retained for 7 years from the date of each individual transaction, consistent with anti-money laundering legislation and financial record-keeping obligations under s777's international gaming license.
• Gaming Activity Data: Retained for 5 years from account closure, for dispute resolution, regulatory compliance, and responsible gaming audit purposes.
• Responsible Gaming Data: Retained for 7 years from account closure, as required by gaming regulatory obligations — self-exclusion records in particular are retained to prevent circumvention attempts.
• Technical and Usage Data: Rolling retention of 12–24 months, after which data is aggregated and anonymised for long-term analytics purposes.
• Support Communication Records: Retained for 3 years from the date of the interaction.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless a legal hold, ongoing dispute, or active regulatory investigation requires extended retention.

Subject to applicable data protection law and certain legitimate limitations (including legal obligations that require us to retain certain data regardless of your request), you hold the following rights in respect of your personal data processed by s777:

• Right of Access: You may request a copy of all personal data s777 holds about you. We will respond within 30 days of receiving a verified request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your s777 account. Minor corrections can often be made through the account settings panel directly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to limitations — s777 may be legally required to retain certain data for AML, licensing, and dispute resolution purposes even following account closure.
• Right to Restriction of Processing: You may request that s777 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of data held or object to processing based on legitimate interests.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to s777, for transfer to another service, where technically feasible.
• Right to Object: You may object to processing based on s777's legitimate interests or for direct marketing purposes at any time. Marketing opt-out requests are actioned immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact s777 via live chat or at [email protected]. Requests will require identity verification before being processed, to protect against third-party data requests.

s777 operates a strictly adult-only platform. The minimum age to register for and use s777 is 21 years. s777 does not knowingly collect or process personal data from individuals under the age of 21.

s777 applies mandatory age verification at registration using date-of-birth data and, where required, identity documentation. If s777 discovers that an account has been created by or for a person under 21, the account will be immediately and permanently closed, all data associated with the account will be deleted (subject to mandatory legal retention obligations), and any balance will be forfeited.

s777 operates under an international gaming license, and certain data processing activities may involve the transfer of personal data to recipients located outside Pakistan. Where such transfers occur, s777 ensures that appropriate safeguards are in place to protect your personal data, including:

• Standard contractual clauses or equivalent data transfer mechanisms recognised under applicable data protection law;
• Transfer to countries determined to provide an adequate level of data protection comparable to international standards;
• Contractual data processing agreements with all third-party processors that impose equivalent data protection obligations.

Data transferred internationally under this Policy includes: KYC verification data (to identity verification providers), technical data (to infrastructure and fraud prevention providers), and game session data (to third-party game studios). In each case, the receiving party is bound by appropriate contractual data protection obligations.

s777 may send promotional communications — including bonus offers, tournament announcements, and product updates — to registered Players who have opted in to receive such messages.

• Marketing communications are sent via email and/or SMS to your registered contact details.
• You may opt out of marketing communications at any time by: (a) updating your communication preferences in the s777 account dashboard; (b) clicking the unsubscribe link in any marketing email; or (c) contacting s777 support and requesting removal from the marketing list.
• Opting out of marketing communications does not affect service communications — you will continue to receive account notifications, OTP messages, security alerts, and important policy updates even after opting out of marketing.
• s777 does not send marketing communications to Players who have activated a self-exclusion or cooling-off period on their account.

s777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. The following process applies to all policy updates:

• The updated Policy will be published at s777.asia/privacy-policy with an updated effective date at the top of the document.
• Where changes are material — affecting how we use your personal data, your rights, or our data sharing practices — s777 will notify registered Players by email or via an in-platform notice at least seven (7) days before the changes take effect.
• Your continued use of s777 following the effective date of a Policy update constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you may request account closure and withdrawal of any available balance.
• Previous versions of the Privacy Policy are available upon written request to s777 support.

For all privacy-related enquiries, data subject access requests, opt-out requests, complaints, or questions about this Privacy Policy, please contact s777 through the following channels:

• Live Chat: Available 24/7 on the s777 platform — for immediate assistance, including urgent security concerns. Response in English and Urdu.
• Email: [email protected] — plain text only; not a clickable link. Data subject requests responded to within 30 days as required by applicable law.

When submitting a data subject request by email, please include: your full registered name, your registered mobile number or email address, the specific right you wish to exercise, and any relevant details about the data concerned. Identity verification will be conducted before any data is shared or deleted.