gx777 Privacy Policy

gx777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy describes how gx777 collects, uses, stores, shares, and safeguards personal data in connection with the operation of the gx777 online casino and sports betting platform accessible at gx777.org.

This policy has been prepared in accordance with internationally recognised data protection principles, including the principles of purpose limitation, data minimisation, storage limitation, integrity, and confidentiality. gx777 processes personal data only where there is a lawful basis for doing so, and only to the extent necessary for the purposes described in this policy.

By registering a gx777 account, visiting gx777.org, or otherwise providing personal information to gx777, you acknowledge that you have read this Privacy Policy and understand how your personal data will be handled. If you do not agree with any part of this policy, you should not register or continue to use the gx777 platform.

For the purposes of this Privacy Policy, gx777 acts as the data controller in respect of all personal data collected through the gx777 platform. As data controller, gx777 determines the purposes and means by which personal data is processed.

Where gx777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or analytics platforms — those parties act as data processors and are required to process personal data only on gx777's documented instructions and in accordance with data protection obligations consistent with this policy.

gx777 collects personal data from you in the following ways: directly from you when you register an account or interact with our platform; automatically through your use of the gx777 website or mobile interface; and from third parties such as identity verification bureaus and payment processors where required by our compliance obligations.

The categories of personal data we collect are set out in the table below:

gx777 processes your personal data only where it has a lawful basis for doing so. The primary lawful bases we rely on are: performance of the contract between gx777 and you (i.e. operating your account); compliance with a legal obligation (e.g. anti-money laundering, age verification, and regulatory reporting requirements); our legitimate interests in operating a secure and commercially viable gaming platform; and, where applicable, your consent.

• Account Operation: We process your identity and contact data to create, maintain, and secure your gx777 account. Legal basis: contract performance.
• Payment Processing: We process your financial data to facilitate PKR deposits, withdrawals, and bonus credits. Legal basis: contract performance.
• Identity Verification (KYC): We process identity and verification data to confirm your age (21+), identity, and source of funds in compliance with our anti-money laundering and gaming licence obligations. Legal basis: legal obligation.
• Fraud Prevention & Security: We process technical and gaming activity data to detect and prevent fraud, money laundering, bot activity, and account compromise. Legal basis: legitimate interests and legal obligation.
• Responsible Gaming: We process gaming activity data and responsible gaming settings to monitor for potential problem gambling indicators and to apply your chosen account limits. Legal basis: legal obligation and legitimate interests.
• Platform Improvement: We process anonymised technical and gaming data to improve the performance, stability, and user experience of the gx777 platform. Legal basis: legitimate interests.
• Marketing Communications: Where you have opted in, we process your contact data to send you promotional offers, bonus notifications, and platform updates. Legal basis: consent.
• Legal Compliance & Regulatory Reporting: We process any category of data necessary to comply with applicable laws, court orders, and regulatory requirements. Legal basis: legal obligation.

gx777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with external parties only in the following circumstances and only to the extent strictly necessary:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and GrabPay receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy frameworks and are independently regulated.
• Identity Verification Providers: Where required by our KYC obligations, we share identity document data and related information with licensed identity verification and age verification service providers.
• Technology & Platform Partners: Our licensed software providers, hosting infrastructure partners, and cybersecurity vendors may process limited technical data in the course of providing services to gx777. All such partners are contractually bound to process data only on gx777's instructions.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or the instructions of a competent regulatory authority, gx777 will disclose personal data to the relevant body. Where legally permissible, gx777 will notify the affected account holder prior to any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of gx777's business, personal data held by gx777 may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer.

gx777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The key retention periods applied by gx777 are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial compliance obligations.
• Gaming Activity Logs: Retained for a period of three (3) years from the date of each session or transaction, and for longer where required in connection with a dispute, investigation, or regulatory enquiry.
• Support Communications: Retained for a period of three (3) years from the date of the relevant interaction.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to evidence compliance with consent-based processing obligations.
• Technical / Session Data: Anonymised and aggregated after thirteen (13) months from the date of collection. Raw IP and device logs are retained for up to twelve (12) months for fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Data that cannot be deleted immediately due to technical constraints is isolated from active processing until deletion can be completed.

gx777 takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

• All data transmitted between your device and gx777's servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Sensitive data stored within gx777's systems — including identity document images and financial account references — is encrypted at rest using industry-standard encryption algorithms.
• Access to production systems and personal data is restricted to authorised gx777 personnel and is granted on a principle of least privilege. All access is logged and audited.
• gx777's platform undergoes regular penetration testing and vulnerability assessments conducted by independent security specialists.
• gx777 maintains an incident response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gx777 will notify affected players without undue delay and in accordance with applicable regulatory requirements.

gx777 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that allow the platform to recognise your browser and remember certain information about your session and preferences.

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the gx777 platform. gx777 does not use third-party advertising or behavioural targeting cookies.

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by gx777. To exercise any of these rights, please contact the gx777 support team using the email address in the footer of this page.

gx777 will aim to respond to all rights requests within thirty (30) calendar days. Where a request is complex or numerous, we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it. There is no charge for exercising your rights under this policy.

gx777 strictly prohibits access to its platform by individuals under the age of 21. We do not knowingly collect personal data from persons under the age of 21, and we do not direct our platform, content, or marketing at minors.

If you are a parent or guardian and you believe that a minor in your care has accessed gx777 or provided personal data to our platform, please contact our support team immediately using the email address in the footer of this page. We will take prompt action to investigate and, where confirmed, to delete the relevant data and close the account.

gx777 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game releases, PSL betting markets, and other platform features — but only where you have given your consent to receive such communications at the time of registration or subsequently through your account settings.

• You may withdraw your consent to marketing communications at any time by updating your notification preferences in your gx777 account settings or by contacting our support team.
• Withdrawal of marketing consent does not affect your ability to continue using the gx777 platform or to receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent on the basis of contract performance and are not subject to a marketing opt-out.
• gx777 does not share your personal data with third parties for the purposes of those third parties sending you marketing communications.
• Players who have activated self-exclusion or deposit limits under our responsible gaming tools will not receive bonus or promotional marketing communications for the duration of the relevant restriction period.

gx777 operates under international gaming licensing standards and may engage technology and compliance service providers whose infrastructure is located outside Pakistan. Where personal data is transferred outside your country of residence, gx777 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy.

• Transfers to service providers are governed by data processing agreements that impose data protection obligations on the receiving party equivalent to those observed by gx777.
• Where legally required, gx777 relies on recognised transfer mechanisms — such as standard contractual clauses or equivalent approved frameworks — to legitimise cross-border transfers of personal data.
• gx777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the safeguards described above being in place.

gx777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address associated with their gx777 account and/or via a prominent notice on the gx777 platform, no less than seven (7) days prior to the changes taking effect.

The effective date at the top of this page will be updated whenever a new version of this policy is published. We encourage you to review this page periodically to stay informed of how gx777 protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acknowledgment of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gx777 handles your personal data, please contact our data protection team. Our support team is available 24 hours a day, seven days a week.

Our support email address is displayed as plain text in the footer of every page on gx777.org. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with our response to your privacy enquiry, you have the right to escalate your concern to the relevant data protection authority or regulatory body designated under gx777's applicable licensing framework.