sg777 Privacy Policy — How We Protect Your Personal Data as a Pakistani Player

01 Introduction & Scope

This Privacy Policy ("Policy") is published by sg777 ("sg777", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who access, register on, or otherwise interact with the sg777 online gaming platform available at sg777.lol, including all associated games, sportsbook services, payment functions, promotional features, customer support interactions, and VIP program activities.

By creating an sg777 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and storage of your personal data as described herein. If you do not agree with this Policy, you must not register an account or continue to use the sg777 platform.

This Policy should be read in conjunction with the sg777 Terms & Conditions, which govern the overall contractual relationship between you and sg777. Where a conflict exists between this Policy and any other document, this Privacy Policy shall prevail with respect to matters of data protection and privacy.

02 Personal Data We Collect

sg777 collects the following categories of personal data from Pakistani players across different stages of the account lifecycle:

03 How We Collect Your Data

3.1 Direct Collection. The majority of personal data sg777 holds is provided directly by you — during account registration, KYC document submission, payment transactions, bonus opt-ins, support interactions, and completion of any other platform feature that requires personal information.

3.2 Automatic Collection. When you access sg777.lol, our platform automatically collects certain technical data, including your IP address, device identifiers, browser characteristics, and session interaction data. This collection is necessary for platform security, fraud detection, and the delivery of a correctly rendered user experience across the wide variety of Android and iOS devices commonly used by Pakistani players.

3.3 Third-Party Sources. In limited circumstances, sg777 may receive personal data about you from third parties, including:

• Identity verification service providers used in the KYC process to cross-reference CNIC data.
• Payment processors such as JazzCash and EasyPaisa, who provide transaction confirmation data necessary to credit your account.
• Fraud prevention and anti-money laundering screening databases, which may flag whether your details appear on sanctions or watchlists.
• Analytics providers who aggregate anonymised behavioural data used to improve the platform's performance.

04 Purposes of Processing Your Data

sg777 processes your personal data for the following specific and documented purposes:

• Account Creation and Management: Creating, maintaining, and securing your sg777 player account, including identity verification, password reset, and account recovery services.
• Payment Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20. Verifying that transactions originate from payment methods registered in your name.
• KYC and AML Compliance: Verifying your identity using CNIC documentation to comply with anti-money laundering obligations and age verification requirements. Screening against sanctions and politically exposed persons (PEP) databases where required.
• Gaming Services Delivery: Delivering live casino games, sportsbook services (including PSL and cricket betting), slot games, and VIP program services, and maintaining accurate gaming and transaction records.
• Security and Fraud Prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, collusion, and money laundering. Monitoring login patterns from Pakistani cities and flagging anomalous access attempts.
• Customer Support: Responding to support queries, resolving disputes, processing responsible gaming requests including self-exclusion and deposit limit changes.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and activating responsible gaming interventions where appropriate, in accordance with our Responsible Gaming Policy.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Pakistani players who have opted in to receive such communications, subject to Section 13 of this Policy.
• Legal and Regulatory Obligations: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

05 Legal Basis for Processing

sg777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and sg777 — including account management, payment processing, and gaming services delivery. Without this processing, sg777 cannot fulfil its obligations to you as a player.
• Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting obligations.
• Legitimate Interests: Processing in pursuit of sg777's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, security monitoring, platform analytics, and responsible gaming activity monitoring.
• Consent: Processing for non-essential purposes — primarily marketing communications and non-essential cookies — where you have given clear, informed, and freely withdrawable consent. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

06 Data Sharing & Third Parties

6.1 Service Providers. sg777 shares personal data with third-party service providers who process data on our behalf and under contractual data processing agreements that impose appropriate security and confidentiality obligations. Categories of third-party processors include:

• Payment processors: JazzCash, EasyPaisa, and banking partners (data shared is limited to what is necessary to process your specific transaction).
• Identity verification providers: third-party KYC platforms used to verify CNIC authenticity.
• IT infrastructure and cloud hosting providers that host sg777 servers and databases.
• Customer support platform providers used to manage live chat and email support interactions.
• Fraud detection and AML screening service providers.
• Game software providers (Pragmatic Play, PG Soft, Jili, Habanero, and others) who may receive limited session-level data necessary to deliver their games within the sg777 platform.

6.2 Legal Disclosures. sg777 may disclose your personal data to competent legal or regulatory authorities where required by applicable law, court order, or governmental regulation — including AML reporting obligations. Such disclosures are made only to the extent required and are not made voluntarily beyond legal compulsion.

6.3 No Sale of Data. sg777 does not sell, rent, or otherwise transfer your personal data to any third party for that third party's own commercial purposes. Your data is not available to advertisers, data brokers, or marketing agencies.

07 Data Retention

7.1 Retention Periods. sg777 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by legal obligation. Key retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active sg777 account, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming Records: Retained for a minimum of three (3) years following each gaming session, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the communication.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year following withdrawal to evidence the consent lifecycle.

7.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. sg777 conducts periodic data retention reviews to ensure compliance with this Policy.

08 Data Security Measures

sg777 implements a layered security architecture to protect personal data from unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• Encryption in Transit: All data transmitted between your device and sg777 servers is encrypted using 256-bit SSL/TLS. This applies to all login sessions, payment submissions, document uploads, and support communications.
• Encryption at Rest: Sensitive personal data stored in sg777 databases — including CNIC numbers, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to production systems containing player data is restricted to authorised personnel only, governed by role-based access control with the principle of least privilege applied throughout.
• Two-Factor Authentication: All internal sg777 administrative accounts accessing player data systems are required to use two-factor authentication.
• Security Monitoring: sg777 operates continuous security monitoring systems that detect and alert on anomalous access patterns, including unusual login geography (e.g., access from outside Pakistan on an account exclusively accessed from Karachi or Lahore), brute force attempts, and credential stuffing indicators.
• Penetration Testing: sg777 conducts regular third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

09 Cookies & Similar Technologies

9.1 What Cookies We Use. sg777 uses cookies and similar local storage technologies on sg777.lol to operate and improve the platform. The categories of cookies deployed are as follows:

• Strictly Necessary Cookies: Required for the basic operation of the platform — including maintaining your login session, preserving your account preferences, and enabling the cashier to function correctly. These cookies are active whenever you use sg777 and cannot be disabled without impairing core platform functionality.
• Security Cookies: Used by sg777's fraud detection and session security systems to identify and block suspicious login attempts, bot activity, and credential abuse.
• Analytics Cookies: Used to collect anonymised data about how Pakistani players navigate sg777 — which game categories are visited, how long sessions last, and which device types are most common. This data informs platform improvements and is not linked to individual player identities.
• Preference Cookies: Store your platform display preferences — including language settings and game lobby sorting preferences — so that they persist between sessions without requiring you to set them each time you log in.

9.2 Managing Cookies. You may manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling strictly necessary cookies will impair sg777 platform functionality. Instructions for managing cookies are available in the help documentation of all major browsers used by Pakistani players, including Chrome, Firefox, and Safari.

10 Your Data Rights

sg777 recognises the following rights of Pakistani players with respect to their personal data. These rights may be exercised by submitting a written request to [email protected] with your registered mobile number and a clear description of the right you wish to exercise:

• Right of Access: You have the right to request a copy of all personal data that sg777 holds about you, along with information about how it is being processed. sg777 will respond to access requests within 30 days.
• Right to Rectification: You have the right to have inaccurate personal data corrected. Most contact and preference data can be updated directly through your account settings. For identity data, a rectification request must be submitted with supporting documentation.
• Right to Erasure: You have the right to request deletion of personal data that is no longer necessary for the purposes for which it was collected. This right is subject to sg777's legal obligations to retain certain records — including AML retention requirements — which may mean that complete erasure cannot be effected immediately or in full.
• Right to Restriction: You have the right to request that sg777 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format for the purposes of transferring it to another service provider.
• Right to Object: You have the right to object to the processing of your data on the basis of legitimate interests, including where that processing relates to direct marketing. Objections to marketing will be processed immediately.
• Right to Withdraw Consent: Where processing is based on consent — including marketing communications — you have the right to withdraw consent at any time without affecting the lawfulness of processing conducted prior to that withdrawal.

11 Minors & Age Policy

sg777 strictly enforces a minimum age requirement of 21 years for all account holders. The sg777 platform is not intended for, directed toward, or accessible to individuals under the age of 21. sg777 does not knowingly collect personal data from minors and does not direct any marketing content toward individuals under 21.

Age verification is conducted through mandatory CNIC-based KYC for all Pakistani players. Where sg777 discovers or reasonably suspects that an account holder is under 21 years of age, the account will be suspended immediately, all pending gaming activity will be voided, and the personal data of the minor will be deleted as promptly as is consistent with legal record-keeping requirements relating to the underlying AML compliance review.

Parents and guardians of minor children in Pakistan are advised to implement appropriate device-level parental controls to prevent minors from accessing online gaming platforms, including sg777. sg777 provides a dedicated reporting channel for adults who believe a minor has created an account — such reports are treated as urgent and acted upon within two hours of receipt.

12 International Data Transfers

sg777 operates on international infrastructure, which means that your personal data may be processed on servers located outside of Pakistan. Where personal data is transferred internationally, sg777 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to the standards described in this Privacy Policy.

Safeguards for international data transfers include contractual data processing clauses with all international third-party processors, requiring them to maintain security standards equivalent to those described in this Policy and to process personal data only as instructed by sg777.

By registering an sg777 account and agreeing to this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.

13 Marketing Communications

13.1 Opt-In Marketing. sg777 may send marketing communications — including bonus offers, new game notifications, VIP program updates, and seasonal promotions — to Pakistani players who have opted in to receive such communications at the time of account registration or subsequently through their account notification preferences.

13.2 Channels. Marketing communications are delivered via SMS to your registered Pakistani mobile number, email to your registered email address, and on-platform notifications visible when you are logged into sg777. sg777 does not make unsolicited marketing calls.

13.3 Opt-Out. You may opt out of marketing communications at any time by: (a) updating your notification preferences in your sg777 account settings; (b) clicking the unsubscribe link in any marketing email; (c) replying STOP to any marketing SMS; or (d) contacting sg777 support and requesting removal from all marketing lists. Opt-out requests are processed within 5 business days. Opting out of marketing does not affect the delivery of transactional communications required for your account — such as withdrawal confirmations, OTP messages, and security alerts.

13.4 Responsible Gaming in Marketing. sg777 does not send bonus or promotional marketing to players who have: (a) activated a self-exclusion, (b) reached a responsible gaming spending limit set on their account, or (c) been flagged by sg777's responsible gaming monitoring system as exhibiting indicators of problem gambling behaviour. Marketing suppression for these player categories is applied automatically and without manual intervention.

14 Policy Amendments

sg777 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material — affecting how we collect, use, or share your personal data in a way that is meaningfully different from current practices — we will provide registered Pakistani players with a minimum of 14 calendar days' advance notice via email or on-platform notification before the updated Policy takes effect.

Non-material changes — including corrections of typographical errors, clarifications that do not alter the substance of data processing practices, and updates to contact information — may be implemented without advance notice. The current version of this Policy will always be accessible at sg777.lol/privacy-policy, with the effective date and version number clearly displayed at the top of the document.

Your continued use of the sg777 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not accept the revised terms, you must cease use of the platform and may request account closure and data deletion as described in Sections 10 and 11.

15 Contact, Data Requests & Complaints

For all matters relating to this Privacy Policy — including data access requests, rectification requests, erasure requests, marketing opt-outs, data security concerns, and general privacy enquiries — Pakistani players may contact sg777 through the following channels:

• Live Chat Support: Available 24/7 through the sg777 platform. Recommended for time-sensitive data security concerns or urgent responsible gaming requests.
• Email — Data Enquiries: [email protected] — include "Privacy Request" in the subject line, along with your registered mobile number and a clear description of your request. sg777 aims to respond to all data-related enquiries within 10 business days.

sg777 is committed to resolving all data privacy concerns fairly and transparently. Where a complaint cannot be resolved through internal channels, players may seek guidance from relevant international data protection authorities or consumer protection bodies applicable under the laws of their jurisdiction.