gz777 Privacy Policy

This Privacy Policy ("Policy") is published by gz777 ("the Platform," "we," "us," or "our") and applies to all individuals who access or use the gz777 website at gz777.asia, including all registered players, visitors, and any person interacting with gz777's services, games, betting markets, or promotional content.

gz777 is committed to protecting the privacy and personal data of every user, particularly Pakistani players whose trust in the platform is central to the gz777 operating model. This Policy sets out, in clear and accessible language, what personal data gz777 collects, the purposes for which that data is used, the legal basis on which processing occurs, how data is protected, and the full range of rights available to data subjects.

This Policy is incorporated into and should be read alongside gz777's Terms & Conditions and Responsible Gaming Policy. By registering a gz777 account or otherwise using the Platform, you confirm your acceptance of this Policy and consent to the processing of your personal data as described herein.

gz777 is the data controller responsible for the personal data of players using the gz777 platform. As data controller, gz777 determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection law and the requirements of gz777's international gaming license.

gz777 has appointed a designated data protection contact who can be reached through the contact details provided in Section 15 of this Policy. All data subject requests, privacy complaints, and data protection queries should be directed to this contact.

gz777 collects the following categories of personal data from registered players and platform visitors:

gz777 collects only data that is necessary for the purposes described above. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for CNIC-based identity verification.

gz777 collects personal data through the following channels:

• Direct submission: Data you provide during account registration, KYC verification, payment transactions, and customer support interactions.
• Automated collection: Technical and usage data collected automatically when you access the gz777 platform, through server logs, cookies, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers and fraud screening agencies used to confirm the accuracy of information you have provided directly. Payment confirmation data from JazzCash, EasyPaisa, and banking partners used to verify and reconcile transactions.
• Publicly available sources: Where permitted by applicable law, gz777 may supplement player data with information available from public records for the purpose of fraud prevention and AML compliance screening.

gz777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between gz777 and the player — including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with gz777's obligations under its international gaming license, including KYC identity verification, anti-money laundering (AML) screening, responsible gaming monitoring, and regulatory reporting.
• Legitimate interests: Processing for the purpose of fraud prevention, platform security, abuse detection, and improving gz777's services, where such interests are not overridden by the rights and interests of data subjects.
• Consent: Where gz777 relies on consent as a legal basis — for example, for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

gz777 uses the personal data described in Section 3 for the following purposes:

• Account creation and management: Creating and maintaining your gz777 player account, processing identity verification, and managing account settings and preferences.
• Payment processing: Processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, and reconciling transaction records.
• Regulatory compliance: Fulfilling gz777's obligations under its gaming license, including mandatory KYC verification, AML transaction monitoring, sanctions screening, and regulatory reporting.
• Responsible gaming: Monitoring player activity to identify potential problem gambling behaviours, applying player-requested protection tools, and enforcing age verification and self-exclusion measures.
• Platform security and fraud prevention: Detecting and investigating suspicious activity, preventing account takeover, identifying bonus abuse, and protecting the integrity of gz777's games and betting markets.
• Customer support: Responding to queries, complaints, and account assistance requests through gz777's support channels.
• Service improvement: Analysing aggregated, anonymised usage data to improve the gz777 platform, game selection, and user experience.
• Marketing communications: Sending promotional offers and platform updates to players who have opted in to marketing communications. You may unsubscribe at any time via your account settings or support contact.

gz777 does not sell, rent, or trade your personal data. We share personal data only with the following categories of recipients and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, and banking partners receive the minimum payment data required to process your specific transaction. These processors are contractually bound to use your data only for that purpose.
• Identity verification providers: Third-party KYC service providers receive identity documents and personal data for the purpose of verifying player identity and age as required by gz777's gaming license.
• Game software providers: Licensed game developers whose titles are hosted on gz777 may receive anonymised session and game history data for the purposes of technical support and game auditing. No identifiable personal data is shared with game developers.
• Regulatory authorities: gz777 may disclose player data to its licensing authority and law enforcement agencies where required by applicable law, court order, or regulatory instruction. gz777 will notify affected players of such disclosures where legally permitted to do so.
• Fraud prevention agencies: gz777 may share data with recognised fraud prevention and AML screening agencies in cases where suspicious activity is identified.
• Professional advisers: gz777's legal, accounting, and auditing advisers may access player data on a confidential basis to the extent required to provide their professional services.

gz777 uses cookies and similar tracking technologies on the gz777 platform. Cookies are small text files placed on your device that enable gz777 to recognise your browser and remember certain information about your visit.

gz777 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your gz777 account and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your platform preferences, such as language settings, display preferences, and responsible gaming reminder configurations.
• Analytics cookies: Collect anonymised data about how players navigate the gz777 platform, which pages are visited most frequently, and where users encounter difficulties. This data is used to improve the platform and is not linked to identifiable personal data.
• Performance cookies: Used to monitor platform load times and technical performance, helping gz777's engineering team identify and resolve performance issues that affect the player experience.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gz777 platform. Strictly necessary cookies cannot be disabled through the browser settings without logging out of your account.

gz777 retains personal data only for as long as necessary to fulfil the purposes described in this Policy or to comply with applicable legal and regulatory retention obligations. The following retention periods apply:

Upon expiry of the applicable retention period, gz777 will securely delete or irreversibly anonymise personal data. Deletion schedules are enforced through automated data lifecycle management systems.

gz777 implements a comprehensive information security framework to protect player personal data against unauthorised access, loss, alteration, or disclosure. The following security measures are in place:

• Encryption in transit: All data transmitted between player devices and gz777 servers is protected by TLS 1.3 / 256-bit SSL encryption.
• Encryption at rest: All stored personal data, including identity documents and financial records, is encrypted using AES-256 encryption in gz777's database infrastructure.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Access logging: All access to systems containing personal data is logged and subject to regular audit review. Anomalous access patterns trigger automated alerts.
• Penetration testing: gz777's platform and infrastructure undergo regular independent penetration testing to identify and remediate potential vulnerabilities.
• Incident response: gz777 maintains a documented data breach incident response procedure. In the event of a breach affecting player data, gz777 will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements.

Subject to applicable law, you have the following rights regarding your personal data held by gz777:

To exercise any of these rights, contact gz777 through the contact details provided in Section 15. gz777 will respond to all verified data subject requests within 30 calendar days. Where a request cannot be fulfilled — for example, due to legal retention obligations — gz777 will explain the reason for the refusal.

You also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction if you believe gz777 has processed your personal data in violation of applicable data protection law.

gz777 is strictly prohibited to individuals under 21 years of age. gz777 does not knowingly collect personal data from individuals under 21 and does not direct any marketing or promotional content to under-age individuals.

Mandatory age verification using a valid CNIC is required for all gz777 accounts before any real-money transaction is permitted. Where gz777 becomes aware that an account has been registered by an individual under 21 years of age — whether through automated verification, player self-report, or third-party notification — the account will be immediately suspended, all real-money deposits refunded, and all winnings voided.

Parents and guardians in Pakistan are encouraged to use device-level parental controls and internet filtering software to prevent under-age individuals from accessing online gambling platforms. If you believe an individual under 21 has accessed gz777 or registered an account, please report it immediately through the contact details provided in Section 15.

gz777's IT infrastructure includes servers and data processing facilities located outside of Pakistan. As a result, personal data provided by Pakistani players may be transferred to, stored in, and processed in jurisdictions outside Pakistan where gz777 or its service providers operate data centres.

Where personal data is transferred internationally, gz777 ensures that such transfers are protected by appropriate safeguards, including:

• Standard contractual clauses approved by recognised data protection authorities;
• Adequacy decisions recognising the destination jurisdiction as providing adequate data protection;
• Technical and organisational security measures equivalent to those described in Section 10 of this Policy.

gz777's service providers — including payment processors, KYC verification providers, and cloud infrastructure providers — are contractually bound to process personal data only in accordance with gz777's instructions and to implement appropriate data protection safeguards.

gz777 reserves the right to update this Privacy Policy from time to time to reflect changes in gz777's data processing practices, regulatory obligations, or applicable law. Material changes will be notified to registered players via email to their registered address and through a prominent notice on the gz777 platform prior to the changes taking effect, where practically possible.

The current version of this Policy, with the effective date shown at the top of this page, supersedes all prior versions. Continued use of the gz777 platform following the effective date of any amendment constitutes acceptance of the revised Policy.

Players who do not accept a revised Privacy Policy should cease using the gz777 platform and may request account closure in accordance with Section 3.4 of the Terms & Conditions.

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a privacy concern or complaint, please contact gz777 through the following channels:

All data subject requests must be submitted in writing (email or live chat) and must include sufficient information to verify your identity. gz777 may request additional verification documentation where necessary to prevent unauthorised disclosure of personal data.

gz777 will acknowledge all privacy enquiries within 48 hours and will provide a substantive response to data subject requests within 30 calendar days. Where an extension is required, gz777 will notify the requesting party and explain the reason for the delay.