gold777 Privacy Policy

1 Who We Are

gold777 (hereinafter referred to as "gold777", "we", "us", or "our") is an internationally licensed online gaming operator accessible at https://gold777.org. gold777 is the data controller responsible for the personal information collected from users who register accounts, visit the website, or otherwise interact with any product or service offered under the gold777 brand.

This Privacy Policy applies in full to all personal data processed in connection with the gold777 platform, including the sportsbook, cricket betting interface, casino games, live dealer tables, promotional programmes, customer support interactions, and any mobile or desktop interface through which gold777's services are accessed by players based in Pakistan or elsewhere.

2 Data We Collect

gold777 collects personal data through several channels, including account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of personal data we collect are as follows:

gold777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If any such information is incidentally disclosed during a customer support interaction, it will not be recorded, stored, or used for any purpose.

3 How We Use Your Data

gold777 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or having a separate legal basis to do so.

• Account Creation & Management: To register your gold777 account, verify your identity and age (21+ requirement), maintain your account settings, and ensure continued eligibility to use the platform.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT TRC20, and Retail Cash, and to maintain accurate transaction records in your account history.
• KYC & AML Compliance: To conduct identity verification, source-of-funds checks, and ongoing transaction monitoring as required by gold777's international gaming licence and applicable anti-money laundering obligations.
• Platform Delivery: To provide you with access to all gold777 products including cricket betting, PSL odds, live dealer games, slots, and the Money Wheel — and to personalise your experience based on usage patterns.
• Customer Support: To respond to your queries, process complaints, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
• Responsible Gaming: To monitor your gaming activity for signs of problematic behaviour, enforce self-exclusion requests, apply deposit or session limits you have set, and comply with responsible gaming obligations under our licence.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, duplicate account creation, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Marketing Communications: To send you promotional offers, bonus notifications, PSL betting reminders, and other marketing materials — but only where you have given explicit consent or where we have a legitimate interest and you have not opted out.
• Legal Compliance: To meet our obligations under applicable laws, respond to regulatory enquiries, satisfy court orders, and cooperate with law enforcement agencies where legally required.

4 Legal Basis for Processing

Every instance of personal data processing by gold777 is grounded in one of the following lawful bases recognised under international data protection principles:

• Contractual Necessity: Processing required to perform the contract between you and gold777 — including account creation, transaction processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, anti-money laundering regulations, age verification obligations, and any other applicable legal requirements.
• Legitimate Interests: Processing carried out to pursue gold777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional personalisation features, and any other purpose where we have explicitly sought and received your consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting customer support.

5 Cookies & Tracking Technologies

gold777 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse site performance, and deliver a consistent experience across sessions. The types of cookies used on gold777.org are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as account login sessions, session security tokens, and shopping cart functionality in the cashier. These cookies cannot be disabled without rendering the platform inoperable.
• Performance & Analytics Cookies: These collect anonymised data about how users interact with gold777 — such as which pages are visited most frequently and how long sessions last — to help us identify areas for improvement. The data collected is aggregated and does not identify individual users.
• Functionality Cookies: These remember your platform preferences, such as preferred language, odds format, and responsible gaming limits, to provide a more personalised experience across sessions.
• Fraud Prevention Cookies: These help gold777 identify and investigate suspicious activity, including duplicate account registration attempts and automated bot interactions, by storing a device fingerprint and session identifier.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use gold777. Disabling performance or functionality cookies will not prevent access but may degrade the quality of your experience.

6 Data Sharing & Disclosure

gold777 does not sell your personal data. We share your information only in the following limited and controlled circumstances:

• Payment Service Providers: We share the minimum necessary financial and identity data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay — solely for the purpose of processing your deposits and withdrawals securely.
• Identity Verification Partners: gold777 may use third-party KYC and AML service providers to verify the authenticity of identity documents and conduct politically exposed persons (PEP) and sanctions screening. These partners process your data strictly under our instruction and are bound by confidentiality obligations.
• Game Software Suppliers: Certain technical data, including session identifiers and game round data, is shared with our licensed game software providers (such as Pragmatic Play and Evolution Gaming) to the extent necessary to deliver their games within the gold777 platform.
• Regulatory & Law Enforcement Authorities: gold777 will disclose personal data to regulators, gaming authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so by court order, regulatory direction, or applicable law.
• Group Companies & Service Providers: We may share data with companies within the gold777 corporate group, and with carefully selected third-party service providers (such as cloud hosting, email delivery, and live chat platform providers) who process data on our behalf under strict data processing agreements.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gold777's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

In every case where data is shared with a third party, gold777 applies contractual safeguards requiring the recipient to protect the data in accordance with standards consistent with this Privacy Policy.

7 International Data Transfers

gold777 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside Pakistan, including the country in which gold777's gaming licence is held and the locations where our technology infrastructure and service providers are based.

Whenever personal data is transferred outside the country of collection, gold777 takes appropriate steps to ensure that an equivalent level of data protection is applied, including:

• Executing data processing agreements with all third-party recipients that include binding data protection obligations.
• Using service providers that operate under internationally recognised security and privacy frameworks.
• Restricting data transfers to jurisdictions that maintain adequate data protection standards as assessed by gold777's compliance team.

8 Data Retention

gold777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure, in accordance with standard AML record-keeping requirements under our international gaming licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, to satisfy anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction to support financial audit, dispute resolution, and regulatory enquiry requirements.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute, complaint, or legal proceeding in which case it is retained for the duration of that matter plus two (2) years.
• Marketing Data: Retained until you withdraw consent or opt out of communications, at which point your marketing preferences are updated immediately and no further marketing materials are sent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual.

9 Your Rights Over Your Data

As a gold777 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. We will respond within 30 days of receiving a verified request.

• Right of Access: You may request confirmation of whether gold777 holds personal data about you and, if so, a copy of that data along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data gold777 holds about you. Certain changes (such as name or date of birth) may require supporting documentation before the update is applied.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to gold777's legal retention obligations, which may require certain data to be kept for a defined period even after account closure.
• Right to Restrict Processing: You may request that gold777 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of gold777's legitimate grounds.
• Right to Data Portability: You may request a copy of the personal data you have provided to gold777 in a structured, commonly used, machine-readable format, and request that this data be transmitted to another controller where technically feasible.
• Right to Object: You may object to processing of your personal data where gold777 relies on legitimate interests as its legal basis, including objection to direct marketing at any time without providing justification.
• Right to Withdraw Consent: Where gold777 relies on your consent to process your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10 Children & Minors

gold777 strictly prohibits use of its platform by persons under 21 years of age. Our services are not directed at, designed for, or intended to be used by minors. gold777 does not knowingly collect personal data from anyone under 21.

During the registration process, gold777 requires users to confirm that they are aged 21 or over and to provide date of birth information that is subject to automated and manual verification. Where gold777 discovers or has reasonable grounds to believe that personal data belonging to a person under 21 has been collected, the following steps will be taken immediately:

• The associated account will be suspended pending investigation.
• Any deposits made by the account holder will be returned to the originating payment method.
• Any winnings accrued will be voided and forfeited.
• All personal data associated with the account will be securely deleted as soon as the above steps have been completed.

If you are a parent or guardian and have reason to believe that a minor under your care has registered an account on gold777, please contact us immediately at [email protected] so that we can take prompt action.

11 Security Measures

gold777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your browser or app and gold777's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data, including CNIC numbers, payment account details, and verification documents, is encrypted at rest using AES-256 encryption in gold777's database infrastructure.
• Two-Factor Authentication (2FA): gold777 offers and strongly encourages the use of two-factor authentication for all account logins, providing an additional layer of protection against unauthorised account access.
• Access Controls: Access to personal data within gold777's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific job functions.
• Intrusion Detection & Monitoring: gold777's infrastructure is monitored around the clock by automated intrusion detection systems. Anomalous access patterns trigger immediate security alerts and investigation protocols.
• Regular Security Audits: gold777 conducts periodic independent security audits and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

12 Amendments to This Policy

gold777 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made — for example, changes that affect how we use your data, introduce new data sharing arrangements, or alter your rights — we will notify you by email to the address associated with your gold777 account and by publishing a prominent notice on gold777.org at least 7 days before the changes take effect.

Minor updates that do not materially affect your rights or our data processing practices — such as corrections of typographical errors or clarifications of existing language — may be made without prior notice, though the updated policy will always be accessible at https://gold777.org/privacy-policy.

The date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed about how gold777 protects your data. Your continued use of the gold777 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how gold777 handles your personal information, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through gold777.org. Average response time is 3–5 minutes.
• Email: [email protected] — for formal data rights requests, complaints, and privacy-related correspondence. We aim to respond within 1 business day for general queries and within 30 days for formal data subject access or erasure requests.

If you are not satisfied with gold777's response to a privacy concern or data rights request, you may escalate the matter to the data protection supervisory authority relevant to gold777's licensing jurisdiction, or seek independent legal advice. Details of the applicable supervisory authority are available upon request from our support team.