st777 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") is published by st777 ("st777", "we", "us", "our") and applies to all personal data collected from users ("you", "your") who access, register on, or use the st777 website at st777.asia and all associated services (the "Services").

This Policy is intended to inform you, in clear and accessible terms, of what personal data st777 collects, the purposes for which that data is processed, the legal bases on which processing rests, how long data is retained, who it may be shared with, and what rights you have with respect to your personal data.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the data practices described herein, please do not access or use the st777 platform.

2 Data Controller

st777 is the data controller responsible for the personal data it processes in connection with the Services. For any questions, requests, or complaints relating to this Policy or the handling of your personal data, please contact our Data Protection team at: [email protected]

3 Personal Data We Collect

st777 collects personal data from you in the following categories:

3.1 Registration Data. When you create a st777 account, we collect your full name, email address, date of birth, mobile phone number, and chosen username and password. Where identity verification (KYC) is required, we may also collect a copy of your CNIC (Computerised National Identity Card) or other government-issued identity document, along with a proof of address.

3.2 Transaction Data. We collect records of all deposits and withdrawals made through your st777 account, including the payment method used (e.g. JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay, USDT TRC20, Skrill, Neteller), transaction amounts in PKR, timestamps, and payment processor reference numbers. We do not store full card numbers or mobile wallet PINs.

3.3 Activity Data. We record your betting history, game play history, session durations, login timestamps, IP addresses, device identifiers, browser type, and operating system. This data is used to personalise your experience, detect fraud, and comply with responsible gaming obligations.

3.4 Communications Data. Any communications you have with st777 support, including live chat transcripts, email correspondence, and support ticket content, are retained as part of your account record.

3.5 Cookies and Tracking Data. As described in Section 7 below, st777 collects data via cookies and similar tracking technologies when you browse the platform.

4 Purposes and Legal Bases for Processing

st777 processes your personal data for the following purposes:

• Account management and service delivery: Creating and maintaining your account, processing bets and casino game sessions, crediting bonuses, and providing customer support. Legal basis: performance of contract.
• Payment processing and fraud prevention: Verifying transaction legitimacy, detecting and preventing money laundering, chargebacks, and bonus abuse. Legal basis: legitimate interests; compliance with legal obligations.
• Identity verification (KYC/AML): Verifying your identity and age in accordance with our licensing obligations. Legal basis: compliance with legal obligations.
• Responsible gaming monitoring: Identifying patterns of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and fulfilling operator duty-of-care obligations. Legal basis: legitimate interests; compliance with legal obligations.
• Platform analytics and improvement: Analysing usage patterns to improve the platform, fix bugs, and develop new features. Legal basis: legitimate interests.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL betting tips to users who have opted in to marketing communications. Legal basis: consent. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in marketing emails.
• Legal compliance and regulatory reporting: Complying with applicable laws, regulatory requirements, court orders, and licensing conditions. Legal basis: compliance with legal obligations.

5 Data Sharing and Third-Party Disclosure

st777 does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard acquiring banks, UnionPay, USDT wallet providers, Skrill, and Neteller — solely for transaction processing and fraud prevention.
• Game software providers: Certified casino and slot game providers (e.g. Evolution Gaming, JILI, PG Soft, Pragmatic Play) receive session data required to operate games and verify RTP compliance. No personal identity data is shared with game providers beyond pseudonymous session tokens.
• Identity verification services: Third-party KYC/AML screening providers who verify identity documents against regulatory databases.
• Cloud and infrastructure providers: Hosting, database, and content delivery services who process data on st777's behalf under data processing agreements with equivalent protections.
• Regulatory authorities: Where required by our licensing obligations or applicable law, personal and transaction data may be disclosed to gaming regulators, financial intelligence units, or law enforcement agencies.

All third-party service providers engaged by st777 are contractually required to implement appropriate security measures and to process personal data only in accordance with st777's written instructions.

6 Data Retention

st777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data: retained for the lifetime of the account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: retained for a minimum of 5 years from the date of each transaction.
• KYC/identity documents: retained for a minimum of 5 years following account closure or the completion of the business relationship.
• Communications and support records: retained for 3 years from the date of the last communication.
• Activity and analytics data: retained in anonymised or pseudonymised form for platform improvement purposes indefinitely; individually identifiable activity data is deleted or anonymised after 2 years of account inactivity.

7 Cookies and Tracking Technologies

st777 uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: Required for core platform functionality including login session management, security tokens, and load balancing. These cannot be disabled without impairing the Services.
• Analytics cookies: Used to collect aggregate data on page views, session duration, and navigation patterns to help us improve the platform. Data is pseudonymised and not linked to your identity without additional steps.
• Preference cookies: Store your platform preferences such as language settings and display configuration between sessions.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect certain platform features, including the ability to stay logged in between sessions.

8 Security Measures

st777 implements the following technical and organisational measures to protect your personal data:

• TLS 1.2/1.3 encryption for all data in transit between your device and st777 servers
• AES-256 encryption for sensitive data at rest, including payment records and identity documents
• Bcrypt hashing for account passwords — plain-text passwords are never stored
• Two-factor authentication (2FA) available on all accounts
• Regular third-party security audits and penetration testing of the platform infrastructure
• Role-based access controls restricting employee access to personal data to authorised personnel only
• Documented incident response procedures in the event of a data breach

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be completely secure. st777 will notify affected users and relevant regulatory authorities of any data breach in accordance with applicable legal requirements.

9 Your Rights

Subject to applicable law and our legal retention obligations, you have the following rights with respect to your personal data held by st777:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to restriction: Request that we limit the processing of your personal data in certain circumstances.
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team at [email protected] with your full name and registered email address. We will respond to all valid requests within 30 days. For complex requests, this period may be extended by a further 60 days, of which you will be notified.

10 Children's Privacy

The st777 Services are strictly intended for individuals aged 18 and above. st777 does not knowingly collect personal data from individuals under 18. If we become aware that a user under 18 has registered an account, we will immediately suspend the account, delete the personal data, and return any deposits subject to verification. If you believe a minor has registered on st777, please contact our support team immediately.

11 Changes to This Privacy Policy

st777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. Where material changes are made, we will notify registered users via email or a prominent notice on the platform. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Services after any amendment constitutes your acceptance of the updated Policy.

12 Contact and Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by st777, please contact us at: [email protected]. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection or gaming regulatory authority in your jurisdiction.