st777 Privacy Policy —
Your Data, Handled Right
At st777, we understand that trust is earned, not assumed. When you register a player account, make a deposit, or simply browse the platform, you share personal information with us. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own information as a Pakistani player on our platform. We encourage you to read it fully — it matters.
Encrypted Data Storage
All personal data held by st777 — including your CNIC copy, mobile number, transaction history, and IP logs — is stored in encrypted form on access-controlled servers. We do not store full payment card numbers on our infrastructure.
No Sale of Personal Data
st777 does not sell, rent, or commercially license your personal data to any third party under any circumstances. Your information is used solely for the purposes described in this Privacy Policy and for no other commercial purpose.
Your Data Rights
You hold meaningful rights over the personal data st777 holds about you — including the right to access, correct, and in certain circumstances delete your data. Section 10 of this Policy details every right available to you and how to exercise them.
Transparent Cookie Use
st777 uses cookies and similar tracking technologies exclusively for platform functionality, session security, and aggregate analytics. We do not deploy third-party advertising cookies that track you across unrelated websites.
KYC Document Security
CNIC scans and passport copies submitted for identity verification are processed by our compliance team and stored in an isolated, access-controlled document vault. They are never accessible to general platform staff or shared with non-essential third parties.
Breach Notification
In the unlikely event of a data security incident affecting your personal information, st777 will notify affected players and the relevant supervisory authority within the timeframes required by applicable law and our licensing obligations.
Introduction & Scope
This Privacy Policy ("Policy") is issued by st777 ("we", "us", "our") and applies to all personal data collected, processed, and stored in connection with the operation of the st777 online gaming platform, accessible at st777.biz and all associated subdomains and mobile interfaces ("the Platform").
This Policy applies to all individuals who interact with the Platform, including registered players, visitors who browse without registering, individuals who contact st777 support, and any other person whose personal data we process in connection with our services. It applies regardless of the device, browser, or network used to access the Platform, and applies to Pakistani players accessing the Platform from Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and all other locations within Pakistan.
This Policy should be read in conjunction with the st777 Terms and Conditions and Responsible Gaming Policy, which form part of the overall framework governing your use of the Platform. In the event of any inconsistency between this Policy and the Terms and Conditions on a data protection matter, this Policy shall prevail.
Plain Language Summary: This document explains exactly what personal information st777 holds about you, why we hold it, how long we keep it, who else might see it, and what you can do if you want to access or change it. We have written it as clearly as possible — but if anything is unclear, please contact our support team.
Data Controller
For the purposes of this Privacy Policy, st777 acts as the data controller in respect of all personal data collected from players and visitors through the Platform. As the data controller, st777 determines the purposes for which your personal data is processed and the means by which it is processed.
st777 operates under an internationally recognized gaming license. Our data processing obligations are governed by the data protection framework applicable under that licensing jurisdiction, as well as any applicable provisions of Pakistani data protection law to the extent that they apply to our operations.
Enquiries relating to the processing of personal data by st777 may be directed to our Data Protection contact point at: [email protected] — please include "Privacy Enquiry" in the subject line of your communication.
Personal Data We Collect
st777 collects personal data that is necessary for the operation of a licensed online gaming platform. The categories of personal data we collect, and the context in which they are collected, are set out in the table below:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, CNIC number, passport number, photograph (from KYC documents) | Account registration; KYC verification |
| Contact Data | Pakistani mobile number (primary identifier), email address (if provided) | Account registration; OTP delivery |
| Financial Data | JazzCash wallet number, EasyPaisa account number, bank account name and number (HBL/UBL/Meezan), transaction amounts, deposit/withdrawal history | Payment processing; AML compliance |
| Technical Data | IP address, device type and model, browser type and version, operating system, screen resolution, session timestamps | Automatic collection on Platform access |
| Gaming Activity Data | Game history, bet amounts, session durations, win/loss records, bonus usage, sports betting selections | Platform use; responsible gaming monitoring |
| Communication Data | Live chat transcripts, support ticket content, OTP delivery logs, promotional communication preferences | Customer support; compliance records |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, session time limit configuration, reality check preferences | Responsible gaming tool usage |
st777 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond CNIC photographs, or health data) except where strictly necessary for regulatory compliance — for example, where responsible gaming assessment procedures indicate a potential vulnerability requiring enhanced safeguards.
How We Collect Your Data
st777 collects personal data through the following methods:
4.1 Data You Provide Directly
You provide personal data to us directly when you: register a player account on the st777 Platform; complete the KYC identity verification process by uploading a CNIC or passport document; make a deposit or withdrawal request; contact the st777 customer support team via live chat or email; opt in to promotional communications; or configure responsible gaming tools from your account settings.
4.2 Data Collected Automatically
When you access the st777 Platform — whether from a mobile device on a Jazz, Zong, Ufone, or Telenor connection in Karachi, from a broadband connection in Lahore, or from any other network — certain technical data is collected automatically through our server logs, analytics systems, and cookie mechanisms. This includes your IP address, the pages or game titles you access, the duration of your sessions, and the device and browser configuration used. This data is used for platform security, fraud detection, and aggregate performance analytics — it is not used for targeted third-party advertising.
4.3 Data from Payment Partners
When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, or a Pakistani bank, our payment processing partners transmit transaction confirmation data to st777. This includes transaction reference numbers, the amount processed, and confirmation of the payment method used. We do not receive your full mobile wallet PIN or bank internet banking password — these remain between you and your payment provider.
4.4 Data from Third-Party Game Providers
Where you play games hosted by third-party providers integrated into the st777 Platform — such as slots from certified studios or live dealer tables from WM Live — those providers may process game session data on their own infrastructure. The personal data shared with these providers is limited to what is necessary for game delivery: a pseudonymous session token, bet amounts, and game outcome records. Full identity data is not transmitted to game providers.
Legal Basis for Processing
st777 processes personal data only where there is a valid legal basis for doing so. The legal bases on which we rely are as follows:
- Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for st777 to perform its contractual obligations to you as a registered player — including operating your account, processing your deposits and withdrawals, and delivering the gaming services you have requested.
- Legal Obligation: Processing your identity documents, transaction records, and responsible gaming data is required by st777's obligations under its international gaming license, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming compliance obligations.
- Legitimate Interests: Processing technical data (including IP addresses and session logs) for platform security, fraud prevention, and system integrity monitoring is carried out on the basis of st777's legitimate interest in maintaining a safe and fair gaming environment for all players.
- Consent: Where st777 sends you promotional communications (such as SMS notifications about bonus offers or PSL betting promotions), we do so on the basis of your consent, which you may withdraw at any time by updating your communication preferences in your account settings or by contacting support.
How We Use Your Personal Data
st777 uses the personal data we hold about you for the following specific purposes:
- Account creation and management: To establish, verify, maintain, and close your st777 player account;
- Payment processing: To process your deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to process your withdrawal requests to those same methods;
- Identity and age verification: To verify that you meet the 21+ age requirement and that your identity matches the payment method used, in compliance with KYC obligations;
- Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and money laundering;
- Responsible gaming: To monitor gaming activity patterns for indicators of potential problem gambling, to administer the responsible gaming tools you have set, and to enforce any self-exclusion you have activated;
- Customer support: To respond to your support queries, investigate complaints, and maintain records of support interactions for quality and compliance purposes;
- Platform improvement: To analyse aggregate, anonymised usage data for the purpose of improving Platform features, game selection, and payment integration — no individually identifiable data is used for this purpose;
- Regulatory compliance: To fulfil our obligations under the terms of our gaming license, including reporting obligations and cooperation with regulatory enquiries;
- Marketing communications: To send you promotional information about bonuses, PSL cricket betting markets, new game releases, and tournaments — only where you have consented to receive such communications.
We do not use your personal data to build profiles for sale to third-party data brokers, to target you with advertising on other websites, or for any purpose not described in this Section.
Data Sharing & Disclosure
st777 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data only in the following limited and controlled circumstances:
7.1 Payment Service Providers
To process your deposits and withdrawals, st777 shares necessary transaction data with Pakistani payment service providers — including JazzCash (Jazz), EasyPaisa (Telenor), and the banking partners facilitating HBL, UBL, Meezan Bank, Raast, and 1LINK transactions. These providers act as data processors on our behalf and are contractually obligated to process personal data only as necessary for payment settlement and fraud prevention.
7.2 Game Technology Providers
st777 integrates games from certified third-party software studios. These providers receive pseudonymous session data (not full identity data) necessary to deliver the game experience. All integrated game providers are contractually bound to data processing standards consistent with our licensing requirements.
7.3 Regulatory and Licensing Authorities
st777 may be required to disclose player account data, transaction records, or identity verification documents to its gaming licensing authority as part of routine regulatory compliance, audit procedures, or in response to a specific regulatory enquiry. Such disclosures are made only to the extent required by law or regulation.
7.4 Law Enforcement and Legal Process
st777 will disclose personal data to law enforcement agencies, courts, or government bodies where required to do so by a valid legal obligation — including court orders, regulatory demands, or anti-money laundering reporting obligations. We will not disclose data beyond what is legally required.
7.5 Fraud Prevention and Security Partners
st777 uses specialist third-party fraud detection and cybersecurity services to protect the Platform and its players. These services may process technical data (such as IP addresses, device fingerprints, and session patterns) on our behalf under data processing agreements that restrict use to fraud prevention purposes only.
Important: st777 will never share your personal data with other gambling operators, marketing agencies, data brokers, or any commercial third party for their own independent use. Any request claiming to originate from st777 and asking you to share personal data through an unofficial channel should be treated as a potential phishing attempt — contact official support immediately.
International Data Transfers
st777 operates under an international gaming license, which means that some of the personal data we hold may be processed or stored on infrastructure located outside Pakistan. This includes data processed by our hosting providers, game technology partners, and fraud prevention service providers.
Where personal data is transferred outside Pakistan, st777 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections it receives within Pakistan. Safeguards include contractual data processing agreements incorporating standard protective clauses, and the selection of service providers who operate in jurisdictions with recognised data protection frameworks.
If you wish to obtain information about the specific safeguards applied to any particular international data transfer, please contact st777's data protection team at [email protected] with the subject line "Data Transfer Enquiry".
Data Retention
st777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods applied by st777 are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of active account + 5 years after closure | Licensing obligation; AML compliance |
| KYC Documents (CNIC / Passport) | 5 years from date of last transaction | AML regulatory requirement |
| Financial Transaction Records | 5 years from date of transaction | AML / tax / licensing obligation |
| Gaming Activity Logs | 5 years from session date | Licensing audit requirements |
| Support Communication Records | 2 years from last interaction | Dispute resolution; compliance |
| Technical & Session Logs | 12 months on active systems; up to 3 years in archive | Security; fraud investigation |
| Self-Exclusion Records | Indefinite (permanent record) | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Data that has been anonymised and aggregated for statistical purposes (such as aggregate session duration or total deposits per month across all players) does not constitute personal data and is retained indefinitely for platform performance analysis.
Your Rights Over Your Personal Data
As a player on the st777 Platform, you hold the following rights in respect of your personal data. These rights can be exercised by contacting st777 support via live chat or by emailing [email protected] with the subject line "Data Rights Request":
You may request a copy of all personal data that st777 holds about you. We will provide this in a commonly used electronic format within 30 days of your request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Account profile data can also be updated directly from your account settings.
In certain circumstances, you may request the deletion of your personal data. Note that this right is subject to our legal retention obligations — data required for AML compliance or licensing audit cannot be erased on request.
You may request that we restrict the processing of your data in specified circumstances — for example, while a dispute about data accuracy is being resolved. Restriction does not mean deletion.
You may request a structured, machine-readable export of personal data you have provided to st777 — such as your account profile data and deposit history — for transfer to another service provider.
You may object to the processing of your personal data where that processing is based on st777's legitimate interests — for example, certain uses of technical data for analytics. We will consider and respond to all objections.
st777 will respond to all data rights requests within 30 calendar days of receipt. In cases of particular complexity or volume, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.
Identity Verification for Rights Requests: To protect against unauthorised requests by third parties purporting to be you, st777 will verify your identity before processing any data rights request. This typically involves confirming ownership of the registered mobile number associated with your account.
Cookies & Tracking Technologies
The st777 Platform uses cookies and similar browser-based storage mechanisms to ensure the Platform functions correctly and to maintain the security of your session. The categories of cookies deployed by st777 are as follows:
- Strictly Necessary Cookies: These are required for the Platform to function at all — they maintain your login session, remember your language preference, preserve items in your account workflow, and protect against Cross-Site Request Forgery (CSRF) attacks. These cookies cannot be disabled without preventing core Platform functionality.
- Performance & Analytics Cookies: st777 uses first-party analytics cookies to collect aggregate data about how players interact with the Platform — which pages are visited most frequently, where in the deposit journey players exit, and how game lobby navigation is used. This data is anonymised and used only for Platform improvement. No individual-level tracking is conducted for commercial purposes.
- Functional Cookies: These cookies remember your preferences and settings — such as your preferred game lobby view, your most recently played games, and your notification preferences — so that the Platform can deliver a more personalised experience on return visits.
st777 does not deploy third-party advertising cookies, remarketing pixels, or social media tracking scripts on the Platform. Your browsing activity on st777 is not shared with advertising networks for the purpose of showing you targeted advertisements on other websites.
You may manage cookie settings through your browser's privacy controls. However, disabling strictly necessary cookies will prevent the Platform from functioning correctly and may make it impossible to maintain a logged-in session.
Children's Privacy — Strict 21+ Policy
STRICT AGE REQUIREMENT: The st777 Platform is strictly prohibited for use by any person under the age of 21. st777 does not knowingly collect personal data from individuals under 21 years of age. The collection of personal data from a minor constitutes a violation of these Terms and our licensing obligations.
If st777 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data, close the associated account, and ensure that no funds deposited by a minor are retained. Parents and guardians who have reason to believe that a minor in their household has registered an account on the st777 Platform should contact our support team immediately at [email protected].
st777 recommends that parents and guardians make use of third-party parental control software and internet filtering services to prevent minors from accessing online gaming platforms. We support responsible access to the internet by young people in Pakistani households.
Security Measures
st777 implements a multi-layered set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the st777 Platform — the same standard used by major banks;
- Encrypted data storage for all personal data, including KYC documents, payment details, and account profile data — encryption keys are managed separately from the encrypted data;
- Access controls — personal data is accessible only to st777 staff members who require it to perform their specific role, enforced through role-based access management and multi-factor authentication for internal systems;
- Isolated KYC document vault — CNIC and passport documents are stored in an access-controlled system segregated from the general Platform database, accessible only to the compliance team;
- Real-time intrusion detection — the Platform's infrastructure is monitored around the clock for signs of unauthorised access, with automated alerts and incident response procedures;
- Penetration testing — st777 commissions regular independent security assessments of the Platform infrastructure to identify and address potential vulnerabilities before they can be exploited.
Despite these measures, no system connected to the internet can be guaranteed to be completely immune to security incidents. In the event of a breach affecting your personal data, st777 will notify you and the relevant regulatory authority within the timeframes required under applicable law.
Third-Party Services
The st777 Platform integrates various third-party services to deliver a complete gaming experience to Pakistani players. These include payment processors (JazzCash, EasyPaisa, and Pakistani banking partners), game software providers, live dealer streaming services, customer support platform software, and fraud prevention tools. Each of these services may process limited personal data on st777's behalf as data processors.
All third-party service providers engaged by st777 are subject to due diligence assessments prior to engagement and are bound by contractual data processing agreements that restrict their use of personal data to the specific purpose for which it was shared. st777 does not permit any third-party processor to use player data for their own independent commercial purposes.
Links within the st777 Platform that navigate to third-party websites or services (including payment provider portals) are subject to the privacy policies of those third parties, which st777 does not control. We recommend reviewing the privacy policies of JazzCash, EasyPaisa, and your banking provider to understand how they handle your financial data during payment transactions.
Updates to This Privacy Policy
st777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or changes to the Platform's functionality. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the Platform, or by sending a notification to the mobile number registered with your account, with a minimum of 7 days' advance notice where reasonably practicable.
The "Last Reviewed" date displayed in the Table of Contents sidebar will be updated whenever revisions are published. We encourage all players to review this Policy periodically. Your continued use of the st777 Platform after any update to this Policy constitutes your acceptance of the updated terms. If you do not agree to any update, you should stop using the Platform and contact us to close your account before the revised Policy takes effect.
Contact Us — Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that st777 holds about you, please contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week, directly from the st777 Platform. Our support agents can handle general privacy enquiries and escalate formal data rights requests to the compliance team. Urdu-speaking agents are available at all times.
- Email: [email protected] — for formal data rights requests, please use the subject line "Data Rights Request". For general privacy questions, use "Privacy Enquiry". For data breach reports, use "Security Report".
st777 aims to acknowledge all formal privacy enquiries and data rights requests within 24 hours and to provide a substantive response within 30 calendar days. Complex requests involving data subject access or erasure may take longer, in which case we will keep you informed of progress.
Responsible Gaming Data Concerns: If your privacy enquiry relates to responsible gaming data — including self-exclusion records, deposit limit history, or gaming activity logs held in connection with problem gambling safeguards — please flag this clearly in your communication so that our responsible gaming team can handle it with appropriate priority and sensitivity.
Ready to Play at st777?
Your data is protected. Your session is encrypted. Explore 1,200+ games, PSL cricket betting, and instant JazzCash deposits from Rs 100 — backed by international licensing and 24/7 Urdu support. 21+ only.
Other st777 Policy Pages
Terms & Conditions
The full legal agreement governing your use of the st777 Platform — including account rules, bonus terms, withdrawal conditions, and prohibited conduct.
Responsible Gaming
Self-exclusion tools, deposit limits, session timers, and support resources for Pakistani players. Includes the st777 21+ commitment and problem gambling guidance.
FAQ
Quick answers to the most common questions from Pakistani players about accounts, privacy, deposits, withdrawals, and platform security at st777.