SP777 Privacy Policy – How We Protect Your Data in Pakistan

SP777 ("we", "us", "our") operates the online gaming and sports betting platform available at sp777.im. We understand that sharing personal information online requires trust, and we take that trust seriously. This Privacy Policy sets out our commitment to protecting the personal information of every player who registers and plays on sp777.

This policy applies to all personal data collected by sp777 in connection with your account registration, use of the platform, deposits and withdrawals, communications with our support team, and any other interaction you have with sp777. It should be read together with the sp777 Terms and Conditions and Responsible Gaming policy.

By registering on sp777 and using the platform, you acknowledge that you have read this Privacy Policy and that you understand how and why sp777 processes your personal data. If you disagree with any part of this policy, please do not use sp777 and contact us to close your account if one has been created.

SP777 collects only the personal data that is genuinely necessary to provide you with a secure and functional gaming experience. The categories of data we collect are described in the table below.

SP777 does not intentionally collect sensitive personal data such as religious or political beliefs, racial or ethnic origin, or health information unless this is strictly necessary for a specific compliance purpose, in which case you will be notified separately before that data is collected.

SP777 collects your personal data through the following channels:

• Account registration: When you create an sp777 account, you provide your name, mobile number, date of birth and contact details directly through the registration form.
• Identity verification: When sp777 requires KYC (Know Your Customer) verification, you submit copies of identity documents such as your CNIC and a selfie photograph through the secure verification upload function.
• Deposits and withdrawals: Financial data is captured when you make a deposit or submit a withdrawal request. SP777 receives transaction confirmation data from your payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank or card issuer).
• Platform use: Technical data — including your IP address, device identifiers and session information — is collected automatically when you access the sp777 website or mobile platform.
• Customer support: When you contact the sp777 support team via email or live chat, the content of those communications is recorded for quality assurance and compliance purposes.
• Cookies and tracking technologies: SP777 uses cookies and similar tools on its website. Details are provided in Section 7 of this policy.
• Third-party sources: In some cases, sp777 may receive identity or fraud-check data from third-party verification service providers to validate information you have already submitted. These providers are bound by confidentiality obligations and data protection requirements.

SP777 processes your personal data on the following legal grounds and for the following purposes:

• To operate your account: Your registration data enables sp777 to create and maintain your player account, authenticate your login, and provide access to all games and betting markets on the platform.
• To process payments: Financial data is used to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card payment. SP777 cannot process payments without this data.
• To verify your identity: Identity data is used to comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations. SP777 is required by its licence to verify the identity of players before processing significant withdrawals and to maintain records of that verification.
• To provide customer support: When you contact sp777, your account and communication data is used by the support team to resolve your query accurately and efficiently.
• To ensure platform security: Technical data including IP addresses, login timestamps and device information is used to detect unauthorised access, fraud, duplicate accounts and other security threats to the sp777 platform and to individual player accounts.
• To comply with legal obligations: SP777 is subject to various legal and regulatory obligations including AML requirements, responsible gaming regulations and financial record-keeping requirements. These obligations require sp777 to collect and retain certain categories of personal data for defined periods.
• To personalise your experience: Gameplay and preference data helps sp777 display relevant games and offers within your account. SP777 does not use this data for any purpose outside the platform.
• To support responsible gaming: Your deposit history, session data and gameplay patterns are used by sp777's responsible gaming systems to identify players who may benefit from intervention tools such as deposit limits or a cooling-off period.

SP777 does not sell, rent or trade your personal data to any third party. Data is shared only with the categories of third parties described below, and only to the extent necessary for the stated purpose:

• Payment processors: Your payment details are shared with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank or card issuer) to the extent required to process your deposit or withdrawal. These providers have their own privacy policies and data security standards.
• Identity verification services: SP777 uses licensed KYC/AML service providers to verify the identity documents you submit. These providers process your data under strict contractual confidentiality terms and are not permitted to use it for any purpose other than the verification task.
• Game software providers: The game studios whose titles appear on sp777 receive anonymised session and RNG audit data. They do not receive your personal identification information unless you are playing a live dealer game, where the live studio handles the game stream. Game providers cannot link gameplay data to your sp777 account identity.
• Legal and regulatory authorities: SP777 is required to disclose certain player information to licensing authorities, financial intelligence units or law enforcement agencies when required by applicable law. SP777 will comply with such requests to the extent legally required and will endeavour to notify you if disclosure is made, unless legally prohibited from doing so.
• Internal technical service providers: Hosting, server, cybersecurity and analytics service providers who operate the technical infrastructure of sp777 may access certain data as part of their service. All such providers are bound by confidentiality agreements and data security requirements.

SP777 handles all transactions in Pakistani Rupees (PKR). When you make a deposit or withdrawal, sp777 collects and processes the minimum financial data necessary to complete that transaction and maintain the required transaction records.

SP777 does not store full card numbers, card security codes (CVV/CVC) or bank account passwords. Card payments at sp777 are processed through PCI-DSS compliant payment gateways. The gateway processes and stores card details; sp777 retains only a tokenised reference that cannot be used to initiate an unauthorised transaction.

For mobile wallet payments via Easypaisa and JazzCash, sp777 records your wallet number and transaction reference. This data is used only for transaction processing, reconciliation and compliance record-keeping. It is never shared with any party other than the payment provider for the purpose of completing your transaction.

Transaction records — including deposit amounts, withdrawal amounts, dates and payment methods — are retained by sp777 for a minimum of five years as required by financial record-keeping regulations. These records can be accessed by you through your sp777 account transaction history at any time.

SP777 uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, maintain your login session, and understand how the platform is used. The types of cookies used by sp777 are:

• Essential cookies: These are required for sp777 to function. They maintain your login session, store your language and display preferences, and manage security tokens. The platform cannot function without these cookies.
• Functional cookies: These remember your preferences within the sp777 platform — for example, your preferred game category or responsible gaming settings — so you do not have to reconfigure them each session.
• Analytics cookies: SP777 uses anonymised analytics data to understand which areas of the platform are most used, where players encounter difficulties, and how the overall platform performance can be improved. This data is aggregated and does not identify individual players.
• Security cookies: These help sp777 detect fraud, bot activity and suspicious session behaviour. They do not contain personally identifiable information.

SP777 does not use third-party advertising cookies and does not participate in cross-site tracking networks. You can control cookies through your browser settings. Disabling essential cookies may prevent sp777 from functioning correctly.

SP777 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The general retention periods are:

• Active accounts: Your account data is retained for the full duration of your account being open at sp777, plus a post-closure period as described below.
• Closed accounts: When an sp777 account is closed — whether at your request or by sp777 — personal data associated with that account is retained for a minimum of five years after closure. This period is required by KYC, AML and financial record-keeping obligations.
• Transaction records: All deposit and withdrawal records are retained for a minimum of five years from the date of the transaction.
• Identity verification documents: Copies of identity documents submitted for KYC are retained for the legally required period applicable to sp777's operating licence, typically five years from account closure.
• Support communications: Records of customer support interactions are retained for up to three years after the interaction, unless a longer period is required for a specific legal or compliance reason.
• Self-exclusion records: Records of self-exclusion requests and related responsible gaming measures are retained for a minimum of seven years to ensure that players who have self-excluded are not re-onboarded at sp777 before the exclusion period has fully expired.

After the applicable retention period expires, sp777 securely deletes or anonymises personal data so that it can no longer be linked to you as an individual.

SP777 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and sp777 is encrypted using 256-bit SSL/TLS encryption. Look for the padlock icon in your browser address bar when using sp777 — this confirms your connection is secure.
• Encrypted data storage: Sensitive personal and financial data stored in sp777's systems is encrypted at rest. Even in the highly unlikely event of an unauthorised system access, encrypted data cannot be read without the corresponding decryption keys.
• Access controls: Access to personal data within sp777's internal systems is strictly limited to staff who have a genuine operational need for it. Access is logged and audited regularly.
• Fraud detection systems: SP777 operates automated fraud detection that monitors account activity continuously for signs of unauthorised access, suspicious transactions or identity theft.
• Penetration testing: SP777's technical infrastructure is subject to periodic independent security testing to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident, sp777 has documented procedures for containment, assessment, notification and remediation. Affected players will be notified promptly if an incident creates a risk to their personal data.

As an sp777 player, you have meaningful rights over your personal data. SP777 will respond to all data rights requests within 30 days of receipt. To exercise any of the rights below, contact us at support@sp777.im with the subject line "Privacy Rights Request".

SP777 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. Age verification is conducted on all sp777 accounts as part of the standard KYC process.

If sp777 discovers or is notified that an account has been registered by a person under 18, we will immediately suspend the account, void any transactions, return any deposited funds, and permanently delete all personal data associated with that account. No winnings will be paid to an account belonging to a minor under any circumstances.

If you are a parent or guardian and believe your child has registered on sp777, please contact us immediately at support@sp777.im. We will act on the report promptly and with full confidentiality.

SP777 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or our data handling practices. When material changes are made, we will notify registered players through the sp777 platform or by email to your registered address, and the updated policy will be published on this page with a revised "Last Updated" date.

We encourage you to check this page periodically to stay informed about how sp777 handles your personal data. Your continued use of sp777 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to the Privacy Policy, you may close your account by contacting support.

If you have any questions, concerns or requests regarding this Privacy Policy or the way sp777 handles your personal data, please contact us. We will respond to all privacy-related enquiries within 5 working days and to formal data rights requests within 30 days.

• Email: support@sp777.im — use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request" so your message is routed to the correct team.
• Availability: The sp777 support team is available 24 hours a day, 7 days a week. Privacy-specific requests are handled by a dedicated internal team during business hours (PKT).