pd777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") is published by pd777 ("pd777," "we," "us," "our") and applies to all personal data collected from individuals ("you," "your," "User") who access, register with, or interact with the pd777 platform at pd777.today and all associated mobile interfaces and services.

pd777 operates as an international online casino and sportsbook platform, serving users across Pakistan and other permitted jurisdictions. The platform offers live sports betting, casino games, slot titles, and related services. The collection and processing of personal data is an unavoidable part of operating a regulated gaming service — without basic account data, we cannot verify identity, process payments, or comply with our anti-money laundering obligations under our international gaming licence.

This Policy is designed to be readable and transparent. Where legal terminology is unavoidable, we have provided plain-language explanations alongside it. If you have any questions about how your data is handled that are not answered by this document, you may contact us at any time at the address in Section 14.

2 Data Controller

For the purposes of applicable data protection law, pd777 is the data controller in respect of all personal data collected through the platform. As data controller, pd777 determines the purposes for which personal data is collected and the manner in which it is processed.

Where pd777 engages third-party service providers (payment processors, identity verification services, fraud detection providers) to process data on its behalf, those providers operate as data processors under contractual obligations that restrict their use of your data to the specific services they are providing for pd777. pd777 remains accountable for the processing carried out by its processors.

3 Data We Collect

pd777 collects personal data through three primary channels: data you provide directly during registration and account use, data generated automatically by your interaction with the platform, and data received from third-party service providers. The following table summarises the categories of personal data collected:

3.1 Data You Are Not Required to Provide

At the point of account registration, pd777 does not require a physical address, email address, or government-issued document. These may be requested at a later stage as part of identity verification (KYC) checks required under pd777's international gaming licence obligations, particularly before processing withdrawals above specified thresholds.

3.2 Accuracy of Data

You are responsible for ensuring that the personal data you provide to pd777 is accurate and kept up to date. Providing false, misleading, or incomplete information — particularly in relation to age, identity, or payment details — constitutes a breach of the pd777 Terms & Conditions and may result in account suspension or closure.

4 How We Use Your Data

pd777 processes personal data for the following defined purposes. Data is not used for any purpose incompatible with those listed below:

• Account Creation and Management: To register your account, authenticate your identity at login, and maintain your account in good standing on the platform.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your identity and age in compliance with pd777's obligations under its international gaming licence, including anti-money laundering (AML) requirements.
• Platform Delivery: To deliver the sports betting, casino, and slot products that constitute the pd777 service, including live odds feeds, game loading, and account balance management.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal or prohibited conduct on the platform.
• Customer Support: To respond to your enquiries, process complaints, and resolve account or payment issues through our 24/7 support team.
• Responsible Gaming: To enforce self-exclusion decisions, apply deposit limits, send session reminders, and flag account patterns that may indicate problem gambling behaviour in accordance with pd777's responsible gaming obligations.
• Legal Compliance: To comply with applicable legal obligations, including requirements to retain transaction records, respond to regulatory or law enforcement requests, and file suspicious activity reports where required.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve platform performance, and enhance the user experience for players in Pakistan and other markets.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant platform updates — but only where you have not opted out and where you do not have an active self-exclusion on your account. You may opt out of marketing communications at any time.

5 Legal Basis for Processing

Every processing activity carried out by pd777 rests on one of the following legal bases:

• Contractual Necessity: Processing required to enter into and perform the contract between pd777 and the Player — including account creation, payment processing, and platform service delivery.
• Legal Obligation: Processing required to comply with applicable legal requirements — including identity verification under AML regulations, transaction record retention, and regulatory reporting obligations imposed by pd777's gaming licence.
• Legitimate Interests: Processing necessary for pd777's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security monitoring, abuse detection, and internal analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily marketing communications. You may withdraw consent at any time by contacting support or using the opt-out mechanism in any marketing message.

6 Data Sharing & Disclosure

pd777 does not sell personal data. Data is shared with third parties only in the following defined circumstances:

6.1 Service Providers (Data Processors)

pd777 engages the following categories of service provider to process personal data on its behalf, under contractual data processing agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — for the processing of deposits and withdrawals. These providers are subject to their own regulatory obligations and privacy policies.
• Identity Verification Providers: Third-party KYC service providers who verify identity documents and perform age verification checks on behalf of pd777.
• Fraud Detection Services: Specialist providers who analyse account and transaction patterns to identify potential fraud, AML risks, or platform abuse.
• Cloud Infrastructure Providers: Hosting and server infrastructure providers who store platform data on pd777's behalf under strict data processing agreements.
• Customer Support Platforms: Live chat and ticketing system providers through which pd777 delivers its 24/7 support service.

6.2 Regulatory and Legal Disclosure

pd777 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by court order, or in response to a lawful request from a competent authority. pd777 will notify affected users of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving pd777, personal data held about registered Players may form part of the transferred assets. In such circumstances, pd777 will take reasonable steps to ensure that your privacy rights continue to be protected under any new data controller, and will notify affected Players prior to any transfer where legally required.

7 Cookies & Tracking Technologies

pd777 uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and analyse platform usage. The following categories of cookie are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during a browsing session, security tokens, and load balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, session reminder configurations, and deposit limit display preferences — to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised data about how Users navigate the platform. This data is used to identify usability issues, measure feature adoption, and improve platform performance. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent account access, unusual login patterns, and bot activity. These cookies are a component of pd777's platform security infrastructure.

pd777 does not use third-party advertising cookies or behavioural profiling technologies for the purposes of serving targeted advertising to Users on external platforms. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform.

8 Data Retention

pd777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligations:

• Account Data: Retained for the duration of your Account's active period plus a minimum of five (5) years following account closure, as required under anti-money laundering regulations applicable to licensed gaming operators.
• Transaction Records: Retained for a minimum of seven (7) years following each transaction date, in accordance with financial record-keeping requirements.
• Identity Verification Documents: Retained for five (5) years following the date of verification or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of the most recent communication in a support thread, or longer if the communication relates to an unresolved dispute or legal matter.
• Self-Exclusion Records: Retained indefinitely to prevent re-registration by excluded Players, even following the expiry of a time-limited self-exclusion period.
• Marketing Consent Records: Retained from the date of consent until consent is withdrawn, plus one (1) year thereafter as evidence of the consent record.
• Analytics Data: Aggregated and anonymised after 13 months from collection. Raw analytics data is not retained beyond this period.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised using processes that prevent re-identification.

9 Your Rights

You hold the following rights in relation to the personal data pd777 holds about you. All requests should be directed to [email protected]. pd777 will respond to verified requests within thirty (30) calendar days at no charge:

Where pd777 is unable to fulfil a request (for example, where retention of data is required by law), we will explain the reason in writing. You also have the right to lodge a complaint with the relevant supervisory authority if you believe your data has been processed unlawfully.

10 Data Security

pd777 implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, or destruction. Security measures in place include:

• Encryption: AES-256 encryption of personal data at rest. TLS 1.3 for all data in transit between your device and pd777 servers.
• Access Controls: Strict role-based access controls ensuring that personal data is accessible only to pd777 personnel who have a legitimate operational need to access it. Access logs are maintained and audited.
• Password Security: Account passwords are hashed using bcrypt with individual salts. Passwords are never stored in plain text and cannot be recovered — only reset.
• Two-Factor Authentication: OTP-based authentication is available and recommended for all pd777 accounts to add a second layer of login security.
• Intrusion Detection: Automated monitoring systems flag and respond to unusual access patterns, brute-force attempts, and other indicators of unauthorized access in real time.
• Data Minimisation in Logs: Server and application logs are designed to capture diagnostic information without retaining sensitive personal data fields such as full payment account numbers.
• Third-Party Security Audits: pd777 engages independent security professionals to conduct periodic penetration testing and security assessments of the platform.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, pd777 will notify affected Users and relevant regulatory authorities within the timeframes required by applicable law.

11 Minors

The pd777 platform is strictly intended for use by individuals who are 21 years of age or older. pd777 does not knowingly collect personal data from individuals under the age of 21. Registration by or on behalf of a minor is a breach of the pd777 Terms & Conditions and is subject to immediate account closure.

If pd777 becomes aware that an Account has been registered by a person under 21 years of age, all personal data associated with that account will be deleted as promptly as possible, subject to any legal obligations that require retention of specific data categories. Any balance held in such an Account will be returned to the source payment method.

If you believe that a minor may have registered an account on pd777, please contact our support team at [email protected] with any available information. All such reports are treated with strict confidentiality and prioritised for investigation.

12 International Data Transfers

pd777 operates as an international platform. Your personal data may be stored on or transferred to servers located outside Pakistan. Where personal data is transferred internationally, pd777 ensures that appropriate safeguards are in place to maintain the equivalent level of protection that would apply within a jurisdiction with formal data protection legislation.

Safeguards for international data transfers include:

• Contractual data processing agreements with all third-party processors, incorporating standard data protection clauses.
• Transfer impact assessments where required, to evaluate the data protection standards in the receiving jurisdiction.
• Selection of hosting infrastructure located in jurisdictions with recognised data protection frameworks where technically and commercially feasible.

By using the pd777 platform and registering an account, you acknowledge that your personal data may be transferred to and stored in international locations as described in this section, subject to the safeguards outlined above.

13 Policy Amendments

pd777 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory obligations, platform features, or internal data practices. The date of the most recent update is shown at the top of this document.

When material changes are made to this Policy — changes that affect your rights or the way pd777 uses your data in a significant manner — pd777 will notify registered Users by email or by a prominent notice on the platform prior to the changes taking effect. We recommend reviewing this Policy periodically to stay informed about how pd777 protects your personal data.

Continued use of the pd777 platform following the effective date of any revised Policy constitutes acceptance of the changes. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting support.

14 Contact & Complaints

For any privacy-related queries, data subject requests, or complaints regarding how pd777 handles your personal data, please contact us using the details below:

Data Protection Contact:
[email protected]
Subject line: Privacy Request — [Your Account Mobile Number]

pd777 will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or where a large number of requests are being processed concurrently, this period may be extended by an additional 60 days, of which you will be notified with an explanation.

If you are dissatisfied with pd777's response to your privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction applicable under pd777's international gaming licence. pd777 will provide details of the applicable supervisory authority upon request.

For all other account-related support enquiries — including payment queries, account access issues, and responsible gaming requests — pd777's 24/7 support team is available via live chat on the platform or via email at [email protected]. Support is provided in English and Urdu.