sp777 Privacy Policy

sp777 ("we," "us," "our," or "the Platform") operates the online casino and sports betting platform accessible at sp777.bid. This Privacy Policy describes how sp777 collects, uses, stores, and protects personal data in connection with the provision of its services to players in Pakistan and other jurisdictions where sp777 operates.

By registering an account on sp777, accessing the platform, or using any of the services we provide — including casino games, PSL cricket betting, live dealer tables, slot games, and account management features — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

sp777 is committed to protecting the privacy of its Members. We process personal data only to the extent necessary to deliver our services, comply with our legal and regulatory obligations, and maintain the security and integrity of the platform. We do not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers or data brokers under any circumstances.

sp777 collects personal data through several distinct channels. The categories of data we collect, and the circumstances in which each category is collected, are set out below.

sp777 does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and fraud prevention purposes. Where verification documents containing sensitive information (such as biometric data embedded in a CNIC) are collected, they are processed solely for the purpose of confirming Member identity and are not retained beyond the period required by applicable regulations.

sp777 uses the personal data it collects for the following specific purposes:

• Account Management: To create, administer, and maintain your sp777 Member account, process your sp777 login requests, and enable access to all platform features including casino games, sports betting, and payment services.
• Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast, as well as USDT TRC20 deposits; and to process withdrawal requests to verified payment methods.
• Identity & Age Verification: To confirm that you meet the sp777 minimum age requirement of 21 years and to verify your identity in compliance with our anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other security incidents, including through the use of device fingerprinting and login location monitoring.
• Regulatory Compliance: To fulfil sp777's obligations under its international gaming licence, including record-keeping, transaction reporting, and cooperation with lawful regulatory enquiries.
• Responsible Gaming: To monitor account activity for patterns consistent with problem gambling behaviour and to administer responsible gaming tools including deposit limits, session caps, and self-exclusion requests.
• Customer Support: To respond to account queries, payment issues, technical support requests, and formal complaints submitted by Pakistani players.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the sp777 platform, optimising the Pakistani player experience, and developing new features.
• Marketing Communications: To send promotional communications — including bonus offers, PSL cricket betting updates, and new game announcements — to Members who have not opted out of such communications. Members may opt out at any time by contacting support.

sp777 processes personal data on the following legal bases, which vary depending on the specific processing activity in question:

• Contractual Necessity: The majority of data processing by sp777 is necessary for the performance of the contract between sp777 and the Member (i.e. the Terms & Conditions). This includes account creation, payment processing, game access, and withdrawal management.
• Legal Obligation: sp777 is required to process certain categories of data — including identity verification records and transaction histories — to comply with its obligations under international gaming licensing requirements and applicable AML regulations.
• Legitimate Interests: sp777 processes certain data on the basis of its legitimate interests in operating a secure and commercially viable gaming platform. This includes fraud detection, platform security monitoring, responsible gaming oversight, and anonymised analytics.
• Consent: Where sp777 sends optional marketing communications or uses non-essential cookies, it does so on the basis of your consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

sp777 does not disclose personal data to third parties except in the limited circumstances described in this section. All third parties to whom sp777 discloses personal data are contractually required to process such data only in accordance with sp777's instructions and applicable data protection requirements.

• Payment Service Providers: sp777 shares financial data with payment processors — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast — to the extent necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy and security standards.
• Identity Verification Providers: sp777 may use third-party KYC and identity verification services to confirm the identity and age of Members. These providers process identity documents under strict data security obligations.
• Game Software Providers: sp777's game library is powered by third-party software providers. Game session data is shared with these providers to the extent necessary to deliver the relevant game and to verify RNG outcomes.
• Regulatory & Law Enforcement Authorities: sp777 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory direction — including in connection with the investigation of financial crime, fraud, or licensing compliance.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of sp777's assets, personal data held by sp777 may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

sp777 does not share personal data with social media platforms, behavioural advertising networks, or any third party for the purpose of targeted advertising without your explicit prior consent.

sp777 uses cookies and similar tracking technologies to operate and improve the platform, maintain your logged-in session, prevent fraud, and collect aggregated usage analytics. The following categories of cookies are used on the sp777 platform:

• Strictly Necessary Cookies: Required for the sp777 login session to function, for authentication tokens to persist between page loads, and for basic platform security mechanisms. These cookies cannot be disabled without preventing platform access.
• Functional Cookies: Used to remember your language preferences, display settings, and responsible gaming tool configurations between sessions. Disabling these cookies will not prevent platform access but may affect your personalised experience.
• Performance & Analytics Cookies: Used to collect anonymised, aggregated data about how Pakistani players navigate the sp777 platform — which pages are visited most frequently, where users encounter difficulties, and how game lobby layouts perform. This data is used exclusively to improve the platform.
• Security Cookies: Used for device fingerprinting and session integrity verification to detect unauthorised access attempts and protect your sp777 account from takeover.

By using the sp777 platform, you consent to the use of strictly necessary and security cookies, which are required for the platform to function. You may manage functional and analytics cookies through your browser settings. Disabling all cookies may impair platform functionality, particularly the sp777 login process.

sp777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of the Member's account lifecycle and for a period of five (5) years following permanent account closure.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AML record-keeping requirements applicable under our international gaming licence.
• Identity Verification Documents: Retained for the period required by applicable AML and KYC regulations, typically a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for a period of three (3) years from the date of the most recent interaction, to facilitate reference in the event of subsequent disputes or regulatory enquiries.
• Technical & Device Data: Retained for a rolling period of twelve (12) months for fraud prevention and platform security analysis purposes.

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

sp777 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are regularly reviewed and updated in line with evolving security standards.

• 256-bit SSL Encryption: All data transmitted between your device and the sp777 platform is encrypted using 256-bit TLS/SSL — the same standard employed by major Pakistani banks including HBL and Meezan Bank for their internet banking services.
• Two-Factor Authentication: sp777 offers optional two-factor authentication (2FA) for all Member accounts. When enabled, 2FA requires an OTP delivered to your registered Pakistani mobile number for each new login session.
• Access Controls: Access to personal data within sp777's systems is restricted on a strict need-to-know basis. Staff with access to Member data are subject to confidentiality obligations and regular security training.
• Session Security: sp777 automatically terminates idle sessions after a defined inactivity period and alerts Members via SMS when a login is detected from an unrecognised device.
• Encrypted Storage: All personal data at rest within sp777's systems is stored in encrypted form. Payment credentials and identity documents are stored in isolated, access-controlled vaults.
• Security Monitoring: sp777 operates continuous security monitoring for anomalous access patterns, brute-force login attempts, and other indicators of compromise.

Subject to applicable law and our regulatory obligations, Members have the following rights in relation to their personal data held by sp777. Requests to exercise any of these rights should be submitted in writing to [email protected]. sp777 will respond to all valid data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request confirmation of whether sp777 holds personal data about you and, if so, to receive a copy of that data together with information about how it is being used.
• Right to Rectification: If you believe that personal data sp777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (e.g. changes to your registered mobile number) require identity re-verification before they can be actioned.
• Right to Erasure: Subject to our regulatory retention obligations, you may request deletion of personal data that sp777 no longer has a lawful basis to retain. Note that financial transaction records and identity verification data must be retained for the periods described in Section 7 regardless of an erasure request.
• Right to Restrict Processing: You may request that sp777 restrict the processing of your personal data where you contest its accuracy, object to its use, or require data to be preserved for legal claims.
• Right to Object: You have the right to object to sp777 processing your data on the basis of legitimate interests, including for direct marketing purposes. Such objections in respect of marketing will be honoured without question.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request that sp777 provide your personal data to you in a structured, machine-readable format.

The sp777 platform is strictly restricted to individuals aged 21 years and over. sp777 does not knowingly collect personal data from persons under the age of 21, and it is a fundamental condition of account registration that the Member is at least 21 years of age at the time of registration.

If sp777 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed, all personal data associated with the account will be deleted without delay (subject only to any mandatory regulatory retention requirements), and any funds held in the account will be returned to the registered payment source after appropriate verification.

sp777 implements age verification controls at the point of withdrawal and during routine account compliance reviews to guard against underage access. Parents and guardians who believe a minor may have registered on sp777 should contact us immediately at [email protected] for urgent account review and closure.

The sp777 platform may include integrations with third-party service providers whose privacy practices are independent of sp777. sp777 is not responsible for the privacy policies or data handling practices of these third parties. The categories of third-party services integrated into sp777 include:

• Game Software Providers: Slot, table game, and live dealer content is provided by third-party software studios. These providers may receive game session data necessary to operate the relevant game and verify its technical integrity.
• Payment Infrastructure Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and crypto wallet services are independent companies with their own privacy policies, which govern their handling of financial data relating to your deposit and withdrawal transactions.
• Anti-Fraud & KYC Services: sp777 may use third-party identity verification and anti-fraud platforms. These services process identity document data under contractual data processing agreements with sp777.

sp777 selects all third-party service providers on the basis of, among other factors, the adequacy of their data security and privacy standards. All data processing agreements include binding data protection requirements consistent with our obligations under applicable privacy law.

sp777 operates under an international gaming licence and its data infrastructure may involve the storage or processing of personal data in jurisdictions outside Pakistan. In all cases where personal data is transferred internationally, sp777 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that described in this Privacy Policy.

Such safeguards include contractual data processing agreements incorporating standard data protection clauses, and the selection of service providers operating in jurisdictions with recognised data protection frameworks. sp777 does not transfer personal data to jurisdictions that lack adequate data protection standards without implementing the supplementary safeguards required to compensate for any deficiencies.

sp777 reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they significantly affect how your personal data is collected or used — sp777 will provide reasonable advance notice to registered Members via their registered Pakistani mobile number or email address, and by posting a prominent notice on the sp777 platform.

Non-material amendments (such as typographical corrections, clarifications that do not change the substance of data processing activities, or updates to contact details) may be made at any time without prior notice. The "Last Updated" date displayed at the top of this page and in the table of contents reflects the most recent amendment date.

Your continued use of the sp777 platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to any revised Policy, you must cease using sp777 and request account closure in accordance with the Terms & Conditions.

All privacy-related queries, data rights requests, or concerns regarding sp777's handling of personal data should be submitted in writing to the sp777 Data Protection contact below. sp777 will acknowledge receipt of all privacy requests within 5 business days and provide a substantive response within 30 calendar days.

• Email: [email protected]
• Subject Line: Please mark privacy-related emails with the subject "Privacy Request – [Your Registered Mobile Number]"
• Support Hours: 08:00 AM – 02:00 AM Pakistan Standard Time (PST)
• Response Guarantee: Formal acknowledgement within 5 business days; full response within 30 calendar days
• Coverage Area: Serving registered Members across Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan