sa777 Privacy Policy

sa777 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Faisalabad, Islamabad, and beyond. As a platform that handles user registrations, financial transactions, and gaming activity, sa777 necessarily processes certain categories of personal data in order to deliver its services safely, fairly, and in compliance with applicable legal obligations.

This Privacy Policy has been drafted to ensure full transparency about our data practices. It sets out what personal information sa777 collects from users and visitors, the legal bases on which we rely to process that information, the purposes for which it is used, the circumstances in which it may be shared, how long we retain it, and the rights available to you as a data subject.

sa777 is committed to handling all personal data with the highest standards of care and in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) as a benchmark for best practice, even where GDPR does not directly apply by law.

For the purposes of this Privacy Policy, sa777 (operating the platform at sa777.pro) acts as the data controller in respect of all personal data collected directly from users through the Platform's registration forms, account management features, payment processing flows, and customer support interactions.

Where sa777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or customer support software vendors — those parties act as data processors under binding contractual arrangements that prohibit them from using your data for any purpose beyond the specific service they provide to sa777.

Any questions or requests relating to the processing of your personal data by sa777 should be directed to our support team using the contact details provided in Section 14 of this policy.

sa777 collects the following categories of personal data from users, depending on how you interact with the Platform:

sa777 does not collect special category data (such as racial origin, health information, or biometric data) except where identity documents necessarily contain such information for age and identity verification purposes, in which case the relevant data is processed solely for that verification purpose and not retained beyond the required period.

sa777 collects personal data through the following methods:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, through server logs and analytics tools.
• Cookie and tracking technology: Data collected via cookies, pixels, and similar tracking technologies placed on your device when you visit sa777.pro. Full details are provided in Section 9 of this policy.
• Third-party verification providers: Identity and age verification data received from third-party KYC service providers when your submitted documents are checked against external databases to confirm eligibility.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners to confirm successful deposits and facilitate withdrawals.

sa777 only processes your personal data when there is a valid legal basis to do so. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Where we rely on your consent as the legal basis for processing (for example, for promotional emails), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

sa777 may share your personal data with the following categories of recipients:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party verification services receive identity document data for the sole purpose of confirming user eligibility and age in accordance with our legal obligations.
• Game software providers: Casino game providers may receive anonymised or pseudonymised session data necessary to deliver game functionality, RNG certification, and RTP reporting.
• Customer support platforms: Authorised support software vendors process communication data on our behalf to facilitate 24/7 live chat and email support.
• Regulatory and law enforcement authorities: sa777 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of sa777, its users, or the public.
• Anti-fraud and AML services: Data may be shared with anti-fraud screening services and financial intelligence databases where required for AML compliance and to investigate suspected fraudulent activity.

All third-party data processors engaged by sa777 are subject to written data processing agreements that restrict their use of your data exclusively to the purpose for which it was shared and require them to maintain appropriate technical and organisational security measures.

sa777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction to comply with financial record-keeping requirements.
• Gaming activity logs: Retained for five (5) years following the relevant activity, or longer where required by the applicable gaming licence conditions.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless a live dispute or legal matter requires longer retention.
• Technical and log data: Typically retained for 90 days in active logs, with aggregated or anonymised analytics data retained indefinitely.
• Marketing consent records: Retained for the duration of the consent plus three (3) years to demonstrate compliance if challenged.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. sa777 conducts periodic data audits to ensure compliance with these retention schedules.

sa777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include, but are not limited to:

• TLS (Transport Layer Security) encryption for all data in transit between your device and sa777 servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial account details;
• Multi-factor authentication options for user account access;
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular independent security penetration testing and vulnerability assessments;
• 24/7 intrusion detection and monitoring systems on all production infrastructure;
• Formal data breach response procedures, including notification protocols consistent with applicable regulatory requirements.

While sa777 takes all reasonable precautions to safeguard your data, no digital system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, sa777 will notify affected users without undue delay in accordance with applicable notification obligations.

You also have an important role to play in securing your account. Please ensure you use a strong, unique password for your sa777 account, do not share your credentials with any third party, and contact sa777 support immediately if you suspect any unauthorised access to your account.

sa777.pro uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. The following categories of cookies are used on the Platform:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, display settings, and responsible gaming limits. Disabling these cookies may result in a reduced user experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — which pages are visited, how long sessions last, and where users navigate from. This helps sa777 improve Platform performance and usability.
• Security Cookies: Support fraud detection, bot identification, and account security monitoring to protect both the Platform and its users from malicious activity.

Upon your first visit to sa777.pro, you will be presented with a cookie consent notice. You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

sa777 does not use third-party advertising or retargeting cookies to serve you ads on external websites. Cookies on sa777.pro are used exclusively in connection with the operation and improvement of the Platform itself.

As a user of the sa777 platform, you have the following rights in respect of your personal data. These rights may be subject to certain legal limitations where processing is required for compliance with legal obligations or the prevention of fraud:

To exercise any of the above rights, please contact the sa777 support team via live chat or by email at [email protected]. sa777 will acknowledge your request within 72 hours and respond substantively within 30 days. Where requests are complex or numerous, sa777 may extend this period by a further 60 days with notice to you.

sa777 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

Age verification is a mandatory step in the sa777 registration and KYC process. All users are required to submit valid government-issued identification — such as a Pakistani CNIC, passport, or driving licence — confirming that they are at least 21 years of age before their account is fully activated and before any deposits or withdrawals are permitted.

If sa777 discovers or has reasonable grounds to believe that a user is under the age of 21, the relevant account will be immediately suspended, all pending transactions cancelled, and any deposited funds returned to the originating payment method. The personal data associated with the underage account will be securely deleted following resolution of the matter, except where retention is required for legal or regulatory purposes.

If you are aware that a minor has accessed or registered on the sa777 platform, please contact our support team immediately via live chat so that the account can be closed without delay.

As an internationally licensed online gaming platform, sa777 may transfer personal data to, or process personal data in, jurisdictions outside of Pakistan. This may occur, for example, where sa777's server infrastructure, game software providers, or KYC verification partners are located in other countries.

Where personal data is transferred internationally, sa777 takes appropriate steps to ensure that the transfer is subject to adequate safeguards, which may include:

• Contractual clauses between sa777 and the recipient that impose data protection obligations equivalent to those described in this policy;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by relevant international standards;
• Binding corporate rules or equivalent internal data transfer agreements where data is shared within a corporate group.

By using the sa777 platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to other jurisdictions in accordance with the safeguards described above.

sa777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The "Last Updated" date displayed at the top of this page will be revised each time a substantive change is made.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — sa777 will provide advance notice to active users via a prominent notification displayed upon login, or by email to the address registered to your account, at least 14 days before the changes take effect.

Your continued use of the sa777 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may request account closure in accordance with the sa777 Terms and Conditions before the revised policy takes effect.

Previous versions of this Privacy Policy are available on request by contacting the sa777 support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sa777, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the sa777 platform — the fastest way to reach us.
• Email: [email protected] — our team responds to privacy-related enquiries within 4 hours during business hours.

When contacting us about a data rights request or privacy concern, please include your registered username and a brief description of your request so we can assist you as efficiently as possible. You do not need to provide your password or any full financial account numbers to make a privacy enquiry.