gy777 Privacy Policy
— Your Data, Your Rights,
Our Commitment to You

Section 1 Data Controller

gy777 is the data controller responsible for the personal data you provide when registering and using the gy777 platform at gy777.games. As data controller, gy777 determines the purposes and means by which your personal data is processed, and is accountable for its protection.

References to "gy777", "we", "us", or "our" throughout this Privacy Policy refer to the gy777 platform and the entity operating it. References to "you", "your", or "Player" refer to any individual who accesses gy777.games or holds a registered gy777 account.

This Privacy Policy applies to all gy777 services, including the main casino platform, the PKR Cashier, the Tournament system, the Cockfighting arena, the Jackpot Slots lobby, and all support interactions conducted via live chat or email.

Section 2 Data We Collect

gy777 collects personal data in two ways: data you provide directly, and data collected automatically through your use of the platform.

Data you provide directly:

• Registration Data: Your chosen username, password (stored in hashed form only — never in plain text), Pakistan mobile number, and email address.
• KYC Identity Data: Your full legal name, date of birth, and CNIC number as required for mandatory identity and age verification (18+) on all Pakistan accounts.
• Payment Data: Easypaisa or JazzCash account identifiers, bank account details (account title, account number, bank name), and transaction reference numbers. gy777 does not store full payment credentials — payment data is processed by regulated third-party payment processors.
• Support Communications: The content of live chat conversations and email correspondence you initiate with the gy777 support team, including any attachments or screenshots you choose to share.
• Responsible Gaming Preferences: Deposit limit settings, session limit configurations, self-exclusion requests, and any other responsible gaming tool settings you activate within your gy777 account.

Data collected automatically:

• Device & Technical Data: IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network operator (e.g., Jazz, Telenor, Zong, Ufone).
• Usage Data: Pages visited on gy777.games, games launched, session durations, betting history, deposit and withdrawal history, bonus activity, and Tournament participation records.
• Cookie Data: Session identifiers, preference cookies, and analytics identifiers as described in Section 8 of this Privacy Policy.
• Geolocation Data: Country-level location derived from IP address, used to verify that you are accessing gy777 from an eligible location. gy777 does not collect precise GPS-level location data.

Section 3 Why We Collect Your Data

gy777 processes your personal data for the following specific purposes. Each purpose is linked to a lawful basis as set out in Section 4.

gy777 does not use automated decision-making that produces legal or similarly significant effects on players without human review. Fraud flagging and responsible gaming alerts are reviewed by trained gy777 staff before any account action is taken.

Section 4 Legal Basis for Processing

gy777 processes your personal data under the following lawful bases:

• Contract Performance: Processing necessary to deliver the services you have requested by registering a gy777 account — including account management, game access, and PKR Cashier operations.
• Legal Obligation: Processing required to comply with applicable laws, including mandatory age (18+) verification, anti-money laundering (AML) obligations, and regulatory reporting requirements.
• Legitimate Interest: Processing that serves gy777's legitimate operational interests — including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Where gy777 relies on your consent — for example, to send you promotional communications about bonuses, Jackpot Slots prizes, or Tournament events — you may withdraw that consent at any time by updating your communication preferences within your gy777 account settings or by contacting support.

Section 5 Data Sharing

gy777 does not sell your personal data. We share your data only in the following circumstances and only to the minimum extent necessary for the stated purpose:

• KYC Verification Providers: Regulated third-party identity verification services used to confirm CNIC authenticity and player age. These providers are contractually bound to process data only for verification purposes and to maintain equivalent data protection standards.
• Payment Processors: Easypaisa, JazzCash, and banking payment processors used to facilitate PKR deposits and withdrawals. Payment processors receive only the data required to complete the specific transaction and are subject to their own regulatory data protection obligations.
• Game Providers: gy777's third-party game suppliers (slot developers, live casino operators) receive a session token and anonymised player identifier necessary to deliver the game. They do not receive your CNIC, mobile number, or PKR balance information.
• Regulatory & Legal Authorities: Where gy777 is required by applicable law, court order, or regulatory direction to disclose player data, gy777 will comply and will notify the affected player where legally permitted to do so.
• Fraud Prevention Services: Industry-standard fraud detection services used to identify and block fraudulent account activity. Data shared with these services is used solely for fraud risk assessment purposes.

All third-party data processors used by gy777 are bound by data processing agreements requiring them to maintain appropriate technical and organisational security measures, to process player data only as directed by gy777, and to delete or return data upon termination of the service relationship.

Section 6 Data Retention

gy777 retains personal data for the periods specified below, after which data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the duration of your active gy777 account plus a minimum of 5 years following account closure, to satisfy legal and regulatory record-keeping obligations applicable to online gaming platforms.
• KYC & Identity Documents: Retained for 5 years following account closure, consistent with anti-money laundering regulatory requirements.
• Transaction Records (PKR deposits, withdrawals, wagers): Retained for 5 years following the date of the transaction.
• Support Communications: Retained for 3 years following the closure of the support interaction or account closure, whichever is later.
• Marketing Preferences & Consent Records: Retained for the duration of your account plus 2 years following opt-out, to demonstrate compliance with consent requirements.
• Anonymised Analytics Data: May be retained indefinitely as it does not constitute personal data and cannot be used to re-identify individual players.

Where you request account closure and no legal hold applies to your data, gy777 will initiate the data deletion process within 30 days of the account closure being confirmed, subject to the retention periods specified above for legally required records.

Section 7 Security Measures

gy777 implements technical and organisational security measures appropriate to the sensitivity of the data we hold and the nature of the risks involved in operating an online gaming platform serving Pakistan players. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and gy777.games is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this protection is active during your session.
• AES-256 Encryption at Rest: Sensitive data stored in gy777's systems — including KYC documents and payment identifiers — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. gy777 uses bcrypt hashing with salt for all password storage, meaning even gy777's own technical staff cannot read your password.
• Two-Factor Authentication (2FA): All gy777 Pakistan accounts support two-factor authentication via SMS to your registered Pakistan mobile number. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Access Controls: Internal access to player data is governed by strict role-based access controls. Staff can only access the categories of player data relevant to their specific operational function.
• Penetration Testing: gy777's platform infrastructure is subject to regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gy777 maintains a data breach incident response plan. In the event of a breach affecting your personal data, gy777 will notify you and relevant authorities within the timeframes required by applicable law.

While gy777 takes data security seriously and implements industry-standard protections, no online platform can guarantee absolute security. You can further protect your gy777 account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with any other person.

Section 8 Cookies & Tracking Technologies

gy777.games uses cookies and similar technologies to operate the platform, remember your preferences, and understand how Pakistan players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the gy777 platform to function. These include your session authentication cookie (keeping you logged in during a session), CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your gy777 preferences, such as your preferred game lobby view, language settings, and responsible gaming reminder intervals. Disabling these will not break the platform but may reduce convenience.
• Analytics Cookies: Used by gy777's internal analytics systems to understand aggregated, anonymised patterns in how Pakistan players navigate and use the platform — which game categories are most popular, where players drop off during registration, and how performance varies across different Pakistan mobile networks. This data is used only to improve the gy777 experience.

gy777 does not use third-party advertising cookies or cross-site tracking technologies that follow you outside the gy777.games domain. Your browsing activity on other websites is not tracked or used by gy777.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your gy777 account.

Section 9 Your Data Rights

As a gy777 Pakistan player, you hold the following rights in relation to the personal data gy777 holds about you. To exercise any of these rights, contact gy777 support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise.

• Right of Access: You may request a copy of the personal data gy777 holds about you. gy777 will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data gy777 holds about you is inaccurate or incomplete, you may request that it be corrected. Corrections to KYC data require re-submission of supporting CNIC documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to gy777's legal retention obligations. Data required by law to be retained (e.g., transaction records) cannot be deleted ahead of the mandatory retention period.
• Right to Restrict Processing: In certain circumstances, you may request that gy777 restrict processing of your personal data — for example, while the accuracy of data is being contested or a legitimate interest objection is being evaluated.
• Right to Object: You may object to processing of your personal data where that processing is based on legitimate interest. gy777 will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior lawful processing.
• Right to Data Portability: You may request a machine-readable export of personal data you have provided to gy777, where technically feasible and where processing is based on consent or contract.

Section 10 Minors & Age Verification

gy777 is strictly an 18+ platform. 18+ We do not knowingly collect personal data from individuals under 18 years of age. CNIC-based KYC verification is mandatory on all Pakistan accounts before real-money features are activated, and the age declared at registration is verified against CNIC documentation.

If gy777 becomes aware that personal data has been collected from an individual who was under 18 at the time of registration, the affected account will be immediately suspended, all personal data associated with the account will be flagged for expedited deletion, and any PKR balance will be held pending investigation and potential return of deposits to the originating payment method.

If you are a parent or guardian and believe a minor may have accessed or registered an account on gy777, contact gy777 support immediately at [email protected]. gy777 treats reports of underage access as a priority and will investigate and respond within 24 hours.

Section 11 International Data Transfers

Some of gy777's technology partners and third-party service providers operate infrastructure located outside Pakistan. Where personal data is transferred outside Pakistan to fulfil the purposes described in this Privacy Policy, gy777 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this policy.

Appropriate safeguards used by gy777 for international transfers include contractual data processing agreements incorporating standard data protection clauses, and selection of third-party processors operating under equivalent data protection regimes.

gy777 does not transfer your CNIC details or full KYC documentation to parties outside the KYC verification workflow. Payment data is processed by regulated payment processors subject to their own jurisdictional data protection obligations.

Section 12 Changes to This Privacy Policy

gy777 may update this Privacy Policy from time to time to reflect changes in platform services, applicable legal requirements, or data processing practices. The effective date at the top of this page will be updated each time a new version is published.

Where a change to this Privacy Policy is material — meaning it substantially alters how your personal data is collected, used, or shared — gy777 will notify registered Pakistan players via their registered email address at least 7 days before the updated policy takes effect.

Continued use of the gy777 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree with changes to this Privacy Policy, you should close your gy777 account and request deletion of your personal data in accordance with your rights under Section 9.

Section 13 Contact & Privacy Enquiries

If you have any questions about this Privacy Policy, about the personal data gy777 holds about you, or about how to exercise your data rights, please contact the gy777 Privacy team directly:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing.
• Live Chat: Available within your gy777 account dashboard, 24/7.
• Response Time: gy777 aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 days of a verified request.

For formal complaints about gy777's data handling practices that have not been resolved to your satisfaction through the contact channels above, you may escalate your complaint by emailing [email protected] with the subject line "Formal Privacy Complaint". Formal privacy complaints are reviewed by senior gy777 management and receive a written response within 14 business days.