st777 Privacy Policy — How We Collect, Use & Protect Your Data

st777 is an online casino and sports betting platform operating at https://st777.lat, targeting English-speaking users in Pakistan. The Platform is operated under an international gaming licence, the details of which are available on request through the st777 support channels.

For the purposes of applicable data protection law, st777 is the data controller in respect of all personal data collected from users of the Platform. As data controller, st777 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

st777 collects the following categories of personal data from users of the Platform:

st777 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including through cookies, server logs, and session tracking technologies;
• Third-party sources: Identity and fraud-risk data from licensed identity verification providers; transaction confirmation data from payment processors including JazzCash, EasyPaisa, and banking partners; and responsible gaming data from self-exclusion registers linked to our gaming licence framework;
• Publicly available sources: Where necessary for fraud prevention or KYC supplementation, st777 may reference publicly available information such as sanctions lists and politically exposed persons (PEP) databases.

st777 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are:

1. Contractual necessity: Processing required to fulfil our obligations to you under the st777 Terms & Conditions — including account management, payment processing, and game provision;
2. Legal obligation: Processing required to comply with our obligations under the gaming licence, anti-money laundering (AML) regulations, and related financial crime prevention requirements — including KYC, transaction monitoring, and record retention;
3. Legitimate interests: Processing carried out in pursuit of st777's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming risk assessment, and service improvement;
4. Consent: Processing for marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

st777 uses your personal data for the following purposes:

• Creating, verifying, and managing your st777 account;
• Processing deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and bank transfer in PKR;
• Verifying your identity and age in compliance with our gaming licence KYC requirements;
• Detecting, preventing, and investigating fraud, money laundering, and other financial crimes;
• Delivering the casino games, sports betting markets, live dealer tables, and all other Platform features you use;
• Administering and crediting bonuses, promotions, and loyalty programme benefits;
• Managing responsible gaming obligations — including enforcing deposit limits, session controls, and self-exclusion orders you have activated;
• Providing customer support and resolving account, payment, or game disputes;
• Generating aggregated, anonymised reporting for our gaming licence regulatory submissions;
• Sending you account-related notifications, security alerts, and — where you have opted in — marketing communications about st777 promotions.

st777 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with the following categories of third party solely to the extent necessary to operate the Platform and meet our legal obligations:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and other banking partners — for the processing of deposits and withdrawals;
• Identity verification providers: Licensed KYC and AML screening services used to verify identity documents and screen against sanctions and PEP lists;
• Gaming software providers: Third-party game studios and live dealer platform providers who supply the games available on st777 — data shared is limited to what is technically necessary to authenticate your session and record game outcomes;
• Regulatory authorities: Our gaming licence regulator, and any law enforcement or financial intelligence authority with lawful authority to request data disclosures under applicable regulations;
• IT infrastructure providers: Hosting, security, and content delivery providers who process data on st777's behalf under data processing agreements that require equivalent data protection standards;
• Responsible gaming registries: Self-exclusion databases linked to our gaming licence framework — where a self-exclusion order must be communicated to or received from such a registry.

All third parties with whom st777 shares personal data are required to handle that data in accordance with applicable data protection requirements and, where they act as processors on st777's behalf, under written data processing agreements.

The st777 Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, protect your account from unauthorised access, and analyse how the Platform is used so that we can improve it.

The categories of cookies used on st777 include:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and display preferences;
• Analytics cookies: Collect anonymised data about how users navigate the Platform — which pages are visited, session durations, and error occurrences — to help us improve the service;
• Security cookies: Detect and prevent fraudulent activity, unusual login patterns, and bot traffic.

st777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by our gaming licence and applicable AML regulations:

Upon expiry of applicable retention periods, data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

st777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and the st777 Platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting staff access to personal data to those with a documented business need;
• Multi-factor authentication requirements for internal systems containing personal data;
• Regular penetration testing and vulnerability assessments of the Platform infrastructure;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

st777 operates under an international gaming licence and uses service providers located in various jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, st777 ensures that appropriate safeguards are in place — including contractual data transfer agreements with service providers — to ensure that your data receives a level of protection equivalent to that described in this Policy.

st777 does not transfer personal data to jurisdictions that present an unacceptable risk to data subject rights, and reviews international data transfer arrangements periodically as part of its compliance programme.

Subject to applicable law and the limitations imposed by our gaming licence obligations, you have the following rights in respect of your personal data held by st777:

• Right of access: You may request a copy of the personal data st777 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations — data required to be retained under our gaming licence or AML regulations cannot be deleted on request;
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, for example while a data accuracy dispute is being resolved;
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service, where technically feasible;
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud prevention, where you have grounds relating to your particular situation;
• Right to withdraw consent: Where processing is based on consent — principally marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the st777 support team via live chat or at [email protected] (plain text). We will acknowledge your request within five business days and respond substantively within 30 days, or inform you of any extension where the complexity or volume of requests requires it.

Parents and guardians who believe their child may have accessed or attempted to use st777 are urged to contact support immediately. st777 takes underage access seriously and will investigate and act on all such reports promptly.

st777 may send you promotional communications — including information about bonuses, promotions, new game launches, PSL cricket betting opportunities, and platform updates — via SMS to your registered Pakistani mobile number or by email, where you have given explicit opt-in consent to receive such communications during account registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your st777 account settings;
• Replying STOP to any marketing SMS;
• Contacting st777 support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional account communications — such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages — which are sent as a necessary part of operating your account.

st777 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to our gaming licence conditions. Material changes will be notified to users via the Platform or by message to your registered contact details, with reasonable advance notice where practicable.

The effective date at the top of this Policy reflects the date of the most recent revision. Your continued use of the st777 Platform following notification of a material change constitutes acceptance of the updated Policy. If you do not accept the updated Privacy Policy, you must cease using the Platform.

For all privacy-related enquiries, data subject rights requests, or complaints regarding st777's handling of your personal data, please contact the st777 data team through the following channels:

• Live Chat: Available 24/7 directly on the st777 Platform — fastest response for general privacy queries and opt-out requests;
• Email: [email protected] — for formal data subject rights requests, please use the subject line "Privacy Request – [Your Registered Mobile Number]" to ensure prompt routing to the compliance team.

All privacy requests are handled confidentially. st777 will verify your identity before processing any data access, correction, or deletion request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party.

If you are not satisfied with st777's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority or dispute resolution body associated with our gaming licence jurisdiction.