kp777 Privacy Policy

1.1 kp777 ("we", "our", "us", "the Company") operates the online casino and sports betting platform available at kp777.lat (the "Platform"). This Privacy Policy explains how kp777 collects, processes, stores, and shares personal data in connection with the provision of its Services to registered players ("you", "your", "the Player").

1.2 This Policy applies to all personal data collected through: (a) the registration and verification process; (b) use of the Platform's casino, sportsbook, and Loyalty Program features; (c) deposits and withdrawal transactions processed via Pakistani payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK; (d) communications with kp777 customer support; and (e) technical data generated by your use of the Platform.

1.3 kp777 operates under an international gaming licence. Data processing practices described in this Policy are conducted in accordance with the data protection obligations imposed by that licensing framework and internationally recognised privacy standards.

2.1 For the purposes of this Privacy Policy, kp777 acts as the data controller in respect of personal data collected directly through the Platform registration process, account management, and customer support interactions.

2.2 Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Hacksaw Gaming, and Play'n GO) and payment processors (including the operators of JazzCash, EasyPaisa, and banking partners) act as independent data controllers in respect of data they collect directly within their own products and services. Their data handling practices are governed by their own privacy policies.

2.3 Where kp777 engages third-party processors to process data on its behalf (for example, for identity verification or fraud detection services), those processors are bound by data processing agreements requiring them to handle your data only for the specified purpose and in accordance with kp777's instructions.

3.1 kp777 collects the following categories of personal data through the Platform:

• Full legal name as it appears on your Pakistani CNIC or passport;
• Date of birth (used to verify the 21+ age requirement);
• Pakistani mobile number (used as primary account identifier and for two-factor authentication);
• Username chosen at registration;
• Copies of identity documents provided during the KYC verification process (CNIC, passport).

• Records of all deposits, withdrawals, wagers, and bonus transactions denominated in PKR;
• Payment method identifiers (e.g. JazzCash mobile number, EasyPaisa account reference, bank account details) — kp777 does not store full payment credentials;
• Transaction timestamps, amounts, and reference numbers for reconciliation purposes.

• IP address at the time of login and throughout sessions;
• Device type, operating system, browser type and version;
• Session duration, pages visited, and features accessed within the Platform;
• Geographic location data derived from IP address (country and city level).

• Content of support communications submitted via live chat or email;
• Records of promotional communications sent to your registered mobile number or email address, if applicable;
• Records of responsible gaming requests including self-exclusion and cooling-off period activations.

• Game play history including games played, bet amounts, session durations, and win/loss records;
• Sportsbook betting history including markets wagered on, odds accepted, and outcomes;
• Loyalty Program point accumulation and tier progression data.

4.1 kp777 uses the personal data collected from players for the following purposes:

5.1 kp777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the kp777 Terms & Conditions — including account administration, game provision, and payment processing;
• Legal Obligation: Processing required to comply with our obligations under our international gaming licence, including anti-money laundering (AML) due diligence, KYC requirements, and responsible gaming enforcement;
• Legitimate Interests: Processing for fraud prevention, platform security, and the detection of prohibited conduct, where these interests are not overridden by your data protection rights;
• Consent: Processing of data for marketing communications, where we have obtained your explicit consent at account registration or subsequently. You may withdraw this consent at any time.

6.1 kp777 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity Verification Providers: Third-party KYC and document verification services used to fulfil age verification and anti-money laundering obligations prior to withdrawal processing;
• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and other payment method operators — solely for the purpose of processing your deposit and withdrawal transactions in PKR;
• Game Content Providers: Where interaction with a third-party game requires transmission of session or bet data to the provider's systems (e.g. live dealer game providers);
• Regulatory and Law Enforcement Authorities: Where kp777 is required by law, court order, or regulatory directive to disclose your data;
• Fraud Prevention and Security Services: Third-party providers engaged to assist with the detection and prevention of fraud, money laundering, and prohibited conduct on the Platform.

7.1 kp777 operates under an international gaming licence, and certain data processing activities may involve the transfer of personal data to, or storage of personal data in, jurisdictions outside Pakistan. These may include jurisdictions in which kp777's hosting infrastructure, identity verification providers, or game content providers are located.

7.2 Where personal data is transferred internationally, kp777 ensures that appropriate safeguards are in place, including contractual protections requiring the recipient to process the data only for the specified purpose and to maintain security standards equivalent to those applied by kp777.

7.3 By registering an account on kp777, you acknowledge and consent to the international transfer of your personal data as described in this Section, subject at all times to the protections described in this Policy.

8.1 kp777 retains personal data for as long as necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. General retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for regulatory and audit purposes;
• Communications data: Retained for a period of three (3) years from the date of the communication, unless retention is required for longer for dispute resolution purposes;
• Technical and device data: Retained for a maximum of thirteen (13) months from the date of collection, unless required for longer for security or fraud investigation purposes;
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

9.1 The kp777 Platform uses cookies and similar tracking technologies to provide core platform functionality, maintain login sessions, and improve the player experience. The following categories of cookies are used:

9.2 Most modern browsers allow you to manage cookie preferences through browser settings. Note that disabling essential cookies will prevent normal Platform access and is not recommended for registered players.

10.1 kp777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• AES-256 encryption for personal data stored at rest on kp777 servers;
• TLS 1.2 and above encryption for all data transmitted between your browser and the Platform;
• Multi-factor authentication options for player accounts, including SMS-based 2FA to registered Pakistani mobile numbers;
• Automated fraud detection and anomalous login monitoring systems;
• Regular security assessments and penetration testing of Platform infrastructure;
• Access controls ensuring that personal data is accessible only to kp777 staff and processors who require it for their specific function;
• Staff training on data protection obligations and secure data handling procedures.

11.1 Subject to applicable legal exceptions and regulatory retention obligations, you have the following rights in respect of your personal data held by kp777:

11.2 To exercise any of the above rights, please submit a written request to the kp777 support email address listed in Section 14. kp777 will respond within 30 days of receipt of a valid, identifiable request. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case kp777 will notify you within the initial 30-day period.

11.3 kp777 may be required to verify your identity before processing a data rights request, to ensure that personal data is not disclosed to an unauthorised party.

12.1 The kp777 Platform is strictly intended for adults aged 21 years and above. kp777 does not knowingly collect or process the personal data of persons under 21 years of age.

12.2 Age verification is a mandatory step in the kp777 account verification process. Identity documents confirming date of birth are required before any withdrawal is processed. Where kp777 has reason to believe that a registered player is under the age of 21, the relevant Account will be immediately suspended pending investigation, and any verified real-money balance will be handled in accordance with kp777's Terms & Conditions and applicable regulatory guidance.

12.3 If you believe that a person under the age of 21 has registered an account on kp777, please notify us immediately at the contact details in Section 14. kp777 takes underage access prevention seriously and will act promptly on any credible report.

13.1 kp777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to how we process your personal data, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice to registered players via the Platform.

13.2 We encourage players to review this Policy periodically to remain informed about how kp777 protects their personal data. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.

13.3 Where any amendment to this Policy materially affects your rights or the processing of sensitive personal data (such as identity documents), kp777 will provide more prominent notification and, where required by applicable law, seek your renewed consent before continuing to process your data on the updated basis.

14.1 For all privacy-related enquiries, data rights requests, or to report concerns about how your personal data is being handled by kp777, please contact our support team using the details below:

14.2 Where you have a concern about kp777's data handling practices that we have not resolved to your satisfaction through our internal process, you have the right to escalate your complaint to the data protection supervisory authority applicable under kp777's operating jurisdiction.