sk777 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how sk777 ("we", "us", "our", or "the Platform") collects, receives, uses, stores, discloses, transfers, and otherwise processes personal data relating to individuals ("you", "your", or "the Player") who access or use the sk777 platform at sk777.lat, including all associated services, games, betting markets, and customer support facilities available to registered players across Pakistan.

sk777 is committed to handling personal data responsibly, transparently, and in accordance with internationally recognized data protection principles, including purpose limitation, data minimization, storage limitation, integrity, confidentiality, and accountability. This Policy is designed to give you a complete and honest picture of our data practices — written in terms that are comprehensible to Pakistani players rather than obscured behind unnecessarily complex legal language.

This Policy should be read alongside the sk777 Terms & Conditions and Responsible Gaming Policy, both of which form part of the complete agreement governing your use of the sk777 platform. By accessing the sk777 platform or creating an account, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of applicable data protection legislation, sk777 acts as the data controller in respect of all personal data collected from players using the sk777 platform. As data controller, sk777 determines the purposes for which personal data is processed and the means by which such processing takes place.

Where sk777 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, and cloud infrastructure providers — those third parties act as data processors operating under written data processing agreements that impose data protection obligations consistent with this Policy. sk777 remains responsible for ensuring that such processors handle player data appropriately.

Players wishing to exercise their data rights, submit a privacy-related query, or raise a concern regarding sk777's data handling practices may contact the sk777 data privacy team through the contact details provided in Section 17 of this Policy.

sk777 collects personal data across several categories depending on the nature of your interaction with the platform. The following table provides a structured overview of the categories of personal data collected and the context in which each category arises:

sk777 does not intentionally collect sensitive personal data — such as biometric identifiers, health information, political opinions, or religious beliefs — unless directly relevant to a specific legal obligation, such as processing a self-exclusion related to a medical condition.

sk777 collects personal data through the following mechanisms:

• Direct provision by you. Data you actively submit when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or interacting with any form or input field on the sk777 platform.
• Automated technical collection. Data collected automatically through your use of the sk777 platform, including log data (IP addresses, access timestamps, error logs), device fingerprinting data, and session analytics generated by the platform's underlying infrastructure.
• Cookies and tracking technologies. Data collected via first-party cookies, session storage, and similar technologies deployed on the sk777 website for purposes of session management, platform analytics, and fraud prevention. See Section 10 for full details on cookie use.
• Third-party verification services. Where sk777 engages a third-party KYC or identity verification provider to validate documents submitted by a player, that provider may return data points to sk777 (such as verification status, risk scoring, or document authenticity indicators) as part of the verification result.
• Payment processors. Transaction reference data, status confirmations, and risk indicators received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors in the course of processing deposits and withdrawals.

sk777 processes personal data only for the specific, defined purposes listed below. Personal data is not used for any purpose that is incompatible with those stated herein without your prior consent or a legitimate legal basis for doing so:

• Account creation and management. Registering your sk777 account, maintaining account records, enabling secure login, and administering all aspects of your player account across the platform's lifecycle.
• Identity and age verification (KYC). Verifying that you meet the minimum age requirement (21+), confirming your identity as required by anti-money laundering and gaming oversight obligations, and maintaining KYC records as required by applicable regulatory frameworks.
• Payment processing. Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, as well as processing withdrawal requests, maintaining transaction records, and investigating payment disputes.
• Game delivery and platform operation. Delivering casino games, live dealer streams, sports betting markets, and all other sk777 services to your device; maintaining game history and transaction records associated with your account.
• Fraud prevention and security. Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse, unauthorized account access, and any other prohibited conduct as defined in the sk777 Terms & Conditions.
• Responsible gaming compliance. Monitoring gaming activity patterns for indicators of problem gambling; enforcing deposit limits, loss limits, session limits, and self-exclusion status; and fulfilling the platform's responsible gaming obligations under applicable gaming oversight standards.
• Customer support. Responding to your support queries, resolving complaints, maintaining records of communications for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance. Fulfilling sk777's obligations under applicable anti-money laundering legislation, gaming regulation, tax reporting requirements, and any lawful order or directive from a competent authority.
• Platform improvement. Analysing aggregated, anonymized usage data to identify opportunities to improve platform performance, game selection, user experience, and payment flow efficiency.
• Marketing communications (with your consent). Sending promotional offers, bonus announcements, game launch notifications, and other marketing communications to players who have opted in to receive such communications. See Section 14 for opt-out procedures.

sk777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity. Processing required to perform the contract between you and sk777 as set out in the sk777 Terms & Conditions — including account operation, payment processing, game delivery, and support provision.
• Legal obligation. Processing required for sk777 to comply with applicable legal and regulatory obligations — including KYC verification, anti-money laundering record-keeping, age verification, and responses to lawful authority requests.
• Legitimate interests. Processing carried out in pursuit of sk777's legitimate operational interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your own data protection rights.
• Consent. Processing based on your freely given, specific, and informed consent — most significantly in the context of receiving marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sk777 does not sell, rent, or commercially exploit your personal data to or with any third party. sk777 shares personal data only in the following defined circumstances, each of which is governed by appropriate contractual and technical data protection safeguards:

• Payment processors. JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers used to facilitate deposits and withdrawals receive the minimum data necessary to authenticate and process each transaction.
• KYC and identity verification providers. Third-party identity verification services engaged to validate CNIC documents, verify ages, and perform anti-money laundering screening receive identity document data as required to complete the verification process.
• Game software suppliers. Third-party game providers and live dealer studio operators receive a pseudonymized player identifier and wager data as technically necessary to deliver games and maintain game history records. These providers do not receive your full identity profile.
• Cloud and infrastructure providers. Hosting, data storage, and technical infrastructure providers who process sk777 data on sk777's behalf under contractual data processing agreements that impose equivalent data protection obligations to those described in this Policy.
• Regulatory and law enforcement authorities. Where sk777 is required by law, court order, or regulatory directive to disclose player data to a competent authority, sk777 will do so in compliance with applicable legal obligations. Where permitted by law, sk777 will notify the relevant player that such a disclosure has been made or is anticipated.
• Anti-fraud and responsible gaming networks. In circumstances where a player has been identified as a risk or has applied for self-exclusion, sk777 may share minimum necessary data with recognized industry responsible gaming or anti-fraud databases in order to fulfil its player protection obligations.

The sk777 platform serves players across Pakistan, and some of the third-party service providers engaged by sk777 — particularly cloud infrastructure providers and game software suppliers — may operate data processing infrastructure located outside Pakistan. Where personal data is transferred to a jurisdiction outside Pakistan, sk777 takes the following measures to ensure appropriate protection:

• Contractual data processing agreements containing data protection clauses consistent with internationally recognized privacy standards are in place with all third-party processors who handle sk777 player data.
• Data minimization principles are applied to all cross-border transfers — only the minimum data necessary for the stated processing purpose is shared.
• Transfers are made only to processors who can demonstrate adequate technical and organizational security measures equivalent to those described in this Policy.

Players who wish to obtain more specific information about the countries to which their data may be transferred and the safeguards applied to such transfers may submit a data inquiry to the sk777 privacy team using the contact details in Section 17.

sk777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any extended retention obligations imposed by applicable legal, regulatory, or anti-money laundering requirements. The following general retention periods apply:

• Active account data. Retained for the duration of your active account relationship with sk777 plus a minimum of five (5) years following account closure, as required by anti-money laundering record-keeping obligations.
• Transaction records. Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC verification documents. Identity documents and verification records are retained for a minimum of five (5) years following account closure or the completion of the relevant business relationship.
• Support communications. Live chat transcripts and support email records are retained for three (3) years from the date of each interaction for quality assurance and dispute resolution purposes.
• Technical log data. Server logs, IP address records, and login activity data are retained for a maximum of twelve (12) months, unless required to be retained longer in connection with an active investigation or legal proceeding.
• Marketing consent records. Records of marketing consent (including consent withdrawal) are retained for five (5) years from the date of consent or withdrawal, as required for regulatory compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted using cryptographic erasure or physical destruction methods, or is anonymized such that it can no longer be associated with any identifiable individual and may then be retained indefinitely for aggregate analytical purposes.

The sk777 platform uses cookies and similar client-side storage technologies to provide a functional, secure, and personalized gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies. Session management cookies that are essential for the sk777 platform to function — including authentication tokens that keep you logged in during a session, CSRF protection tokens, and load balancing identifiers. These cookies cannot be disabled without rendering the platform inoperable.
• Functional Cookies. Cookies that remember your preferences — such as your preferred language setting, interface configuration choices, and game lobby filters — to provide a more consistent experience across visits.
• Analytics Cookies. First-party analytics cookies that collect pseudonymized data about how players use the sk777 platform — including page visit counts, session durations, and navigation paths — to help sk777 understand and improve platform performance. This data is never used to identify individual players.
• Security Cookies. Cookies that support fraud prevention, bot detection, and account security systems — including device fingerprinting components used to identify unusual login patterns that may indicate unauthorized account access.

sk777 does not deploy third-party advertising cookies or cross-site tracking technologies of any kind. The cookies used on sk777 are operated exclusively by sk777 or by technical service providers directly supporting sk777 platform operations.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or entirely prevent your ability to use the sk777 platform. Disabling functional or analytics cookies may result in a reduced platform experience but will not prevent access to games or account features.

sk777 implements a comprehensive set of technical and organizational security measures designed to protect player personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Transport Layer Security. All data transmitted between player devices and the sk777 platform is encrypted using TLS 1.2 or higher with 256-bit AES cipher suites. HTTP connections are automatically redirected to HTTPS.
• Data Encryption at Rest. Sensitive data stored on sk777 database servers — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption with access-controlled key management.
• Two-Factor Authentication. OTP-based two-factor authentication is available to all sk777 players and is used internally for all administrative access to systems containing player personal data.
• Access Control. Access to systems containing player personal data is restricted to sk777 personnel and authorized processors with a legitimate operational need. Access permissions are reviewed regularly and revoked immediately upon change of role or departure.
• Penetration Testing. The sk777 platform undergoes regular security assessments and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Monitoring and Anomaly Detection. Real-time monitoring systems are in place to detect unusual access patterns, brute force attempts, and other indicators of unauthorized activity on systems holding player data.
• Staff Training. All sk777 personnel with access to player data receive regular data protection and information security training.

As a player whose personal data is processed by sk777, you hold the following data protection rights. sk777 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers: