dp777 Privacy Policy
— Your Data, Your Rights

dp777 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy sets out in full and transparent detail how dp777 ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal information you provide to us or that we collect in the course of providing our Services.

This Policy applies to all personal data processed by dp777 in connection with your use of the dp777 website, mobile interface, sports betting markets (including PSL and international cricket), live casino, slot games, promotional activities, and customer support interactions — collectively referred to as "the Services".

dp777 acts as the data controller for the personal information described in this Policy. This means dp777 determines the purposes and means by which your personal data is processed. Where dp777 engages third-party service providers who process data on our behalf, those providers act as data processors and are bound by contractual data processing agreements consistent with applicable data protection standards.

This Privacy Policy should be read together with the dp777 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with dp777.

dp777 collects the following categories of personal data, depending on how you interact with the platform:

dp777 collects personal data through the following channels:

• Direct interactions: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated technologies: Data collected automatically when you access the dp777 platform, including cookies, server logs, pixel tags, and similar tracking technologies that record your device information, IP address, and behavioural data.
• Third-party sources: Data received from identity verification providers (for KYC purposes), payment processors (for transaction authentication), fraud prevention services, and analytics partners. dp777 only accepts third-party data from providers operating under appropriate legal frameworks.
• Publicly available sources: Where relevant to fraud prevention or responsible gaming compliance, dp777 may refer to publicly available records, subject to applicable legal limitations.

dp777 processes your personal data for the following specific purposes:

• Account management: To register your account, verify your identity, maintain your account profile, and enable you to access dp777 Services.
• Transaction processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer in PKR, and to maintain accurate financial records.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the dp777 platform.
• Legal and regulatory compliance: To meet our obligations under applicable gaming regulations, anti-money laundering (AML) frameworks, and know-your-customer (KYC) requirements.
• Responsible gaming: To monitor play patterns, enforce deposit and wagering limits, respond to self-exclusion requests, and identify players who may be exhibiting signs of problem gambling.
• Customer support: To respond to your queries, complaints, and requests in a timely and informed manner.
• Platform improvement: To analyse usage patterns and improve the dp777 user experience, game offerings, and platform performance.
• Marketing (with consent): To send you promotional offers, bonus notifications, and platform updates where you have given explicit consent to receive such communications.

dp777 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and dp777 — including account registration, KYC, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable gaming regulations, AML legislation, and financial reporting obligations.
• Legitimate interests: Processing necessary for dp777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

dp777 does not sell your personal data. We share data only in the following limited, controlled circumstances:

• Payment processors: We share financial data with our payment processing partners (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrations) solely to facilitate your deposits and withdrawals. These providers are bound by their own data protection obligations and PCI-DSS compliance standards.
• Identity verification providers: We engage accredited KYC and AML service providers to verify the identity documents you submit. These providers process your data solely for verification purposes and are prohibited from using it for any other purpose.
• Technology and hosting providers: dp777 uses third-party infrastructure, cloud hosting, and security providers to operate the platform. These providers access data only to the extent necessary to deliver their services and are bound by confidentiality obligations.
• Regulatory and law enforcement authorities: dp777 will disclose personal data to regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. dp777 will notify affected users of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of dp777's business, your personal data may be transferred to the successor entity, subject to equivalent data protection standards being maintained.

dp777 processes all financial transactions in Pakistani Rupees (PKR) through locally trusted payment channels. Given the sensitivity of financial data, dp777 applies the following specific protections:

• Payment account details (JazzCash mobile wallet numbers, EasyPaisa account numbers, bank account details) are stored in encrypted form and are never transmitted in plaintext.
• dp777 applies withdrawal matching — meaning funds can only be returned to the same payment method used for deposit. This control prevents misuse of the platform for money laundering through third-party payment accounts.
• Transaction histories are maintained for a minimum of five years in compliance with international AML record-keeping standards applicable under dp777's gaming license framework.
• Where a transaction triggers an AML alert, dp777 is required to file a Suspicious Transaction Report (STR) with the relevant financial intelligence authority. dp777 is legally prohibited from informing the subject of such a report that it has been filed ("tipping off" restrictions).

dp777 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session continuity, and gather analytical data about platform usage. The following types of cookies are used:

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core dp777 platform features, including account login and game access.

dp777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods driven by regulatory requirements:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in line with AML record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the last interaction, or longer if the communication relates to an unresolved complaint or legal matter.
• Marketing preferences and consent records: Retained for the duration of the consent period plus three years to demonstrate compliance with consent obligations.
• Technical and usage data (anonymised): Aggregated, anonymised analytics data may be retained indefinitely for platform improvement purposes, as it no longer constitutes personal data once anonymisation is complete.

Upon expiry of the relevant retention period, personal data is securely deleted using industry-standard data destruction methods, or anonymised in a manner that prevents re-identification.

dp777 implements a multi-layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and dp777 servers
• AES-256 encryption at rest for all sensitive personal and financial data stored in our databases
• Role-based access controls (RBAC) ensuring that dp777 staff can only access personal data relevant to their specific job function
• Multi-factor authentication required for all administrative access to systems containing personal data
• Regular third-party penetration testing and vulnerability assessments of the dp777 platform infrastructure
• Automated intrusion detection systems (IDS) monitoring for anomalous access patterns in real time
• Incident response procedures that require dp777 to notify affected users and relevant authorities within 72 hours of discovering a data breach that poses a risk to player rights and freedoms

dp777 respects your rights over your personal data. Depending on applicable data protection regulations, you may be entitled to exercise the following rights:

To exercise any of the above rights, please contact dp777 at [email protected] with the subject line "Privacy Rights Request". dp777 will respond to all verified rights requests within 30 days of receipt. We may request proof of identity before processing your request to ensure your data is not disclosed to an unauthorised person.

dp777 is strictly an adults-only platform. Our Services are available exclusively to individuals who are 21 years of age or older. dp777 does not knowingly collect personal data from individuals under the age of 21.

As part of our KYC onboarding process, all new players are required to submit age verification documentation before being permitted to deposit funds or access real-money gaming. Any account found to belong to a person under the age of 21 will be immediately suspended and all associated funds will be handled in accordance with our regulatory obligations.

Parents and guardians in Pakistan who wish to restrict access to online gambling platforms are encouraged to use parental control software and internet filtering tools available through their internet service provider or device settings.

dp777 operates under an international gaming license framework, and some of the third-party service providers we engage — including technology infrastructure partners, cloud hosting providers, and KYC verification services — may be located in jurisdictions outside Pakistan.

Where personal data is transferred internationally, dp777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Contractual data processing agreements incorporating internationally recognised standard contractual clauses
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection
• Binding corporate rules where transfers occur within a group of companies

You may request further information about the specific safeguards applicable to any international transfers of your personal data by contacting [email protected].

dp777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page
• Post a prominent notice on the dp777 platform informing registered players of the update
• Where required by applicable law or where changes materially affect your rights, send a direct notification to your registered email address

Your continued use of dp777 Services following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of the platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or dp777's handling of your personal data, please contact our Data Protection team directly:

If you are not satisfied with dp777's response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. dp777 will cooperate fully with any regulatory investigation relating to our data protection practices.