This Privacy Policy explains how GB777 — the online gaming and sports betting platform operated at gb777.cash ("GB777", "we", "us", "our") — collects, uses, stores, and protects personal data relating to players and visitors ("you", "your") in Pakistan. GB777 is committed to handling your personal information responsibly and transparently.
When you register an account, make a deposit in PKR, place a bet on PSL cricket, play Andar Bahar, or simply browse GB777, certain data is processed. This policy tells you what that data is, why we need it, and how long we keep it. It is written to be read and understood, not to obscure information in legal language.
This Privacy Policy should be read alongside the GB777 Terms and Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your account and data. By registering with GB777 or continuing to use the Platform after updates to this Policy, you acknowledge that you have read and understood how your data is handled.
The short version: GB777 collects data to run your account, process PKR payments, verify your identity, and improve the platform. We do not sell your data to third parties. We protect it with industry-standard encryption. You can request a copy, correction, or deletion of your data at any time by emailing privacy@gb777.cash.
Data Stays with GB777
GB777 does not sell, rent, or trade your personal data to advertisers or data brokers. Your information is used only to operate your account and provide the services you signed up for.
256-bit SSL Encryption
Every page, transaction, and data transfer on GB777 is protected by 256-bit SSL encryption — the same standard used by Pakistan's major banks. Your CNIC details and PKR payment data are encrypted at rest and in transit.
You Control Your Data
Every GB777 player can request a full copy of their personal data, ask us to correct inaccuracies, or request deletion of their account and associated data — all via a simple email to privacy@gb777.cash.
GB777 collects personal data through three main channels: information you provide directly, data generated automatically by your use of the platform, and information received from third-party verification services.
2.1 Information You Provide
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, CNIC number, date of birth | Registration and verification |
| Contact Data | Mobile number, email address, city of residence | Registration and account updates |
| Payment Data | Easypaisa / JazzCash account reference, bank account details, last 4 digits of card | Deposit and withdrawal |
| Verification Documents | CNIC copy (front and back), selfie photo, proof of address | KYC/AML compliance checks |
| Communications | Support chat transcripts, emails, complaint records | When you contact GB777 |
2.2 Automatically Collected Data
| Data Type | Examples | Purpose |
|---|---|---|
| Technical Data | IP address, device type, browser, operating system | Security, fraud detection |
| Usage Data | Pages visited, bet history, game sessions, login timestamps | Platform improvement, responsible gaming |
| Location Data | Approximate location from IP (city/region level) | Geo-compliance, service availability |
| Cookie Data | Session cookies, preference cookies, analytics identifiers | See Section 7 – Cookies |
2.3 Data from Third Parties
GB777 may receive identity verification data from licensed KYC (Know Your Customer) service providers who cross-reference the information you submit against official Pakistani databases. We also receive fraud signal data from payment processors when transactions raise automated risk flags. This data is used solely for account security and regulatory compliance purposes.
GB777 uses personal data for specific, legitimate purposes only. We do not use your data for purposes beyond those listed below without obtaining your consent or being required to do so by law.
- Account Management: Creating, maintaining, and verifying your GB777 account; processing login and authentication; applying responsible gaming tools you set.
- Payment Processing: Accepting PKR deposits, processing withdrawals to Easypaisa, JazzCash, bank accounts, and cards; maintaining transaction records for your account statement.
- Identity Verification (KYC/AML): Verifying your identity to comply with anti-money laundering requirements; confirming you are 18 or older; confirming you are a legitimate account holder before processing withdrawals.
- Fraud and Security: Detecting and preventing fraudulent accounts, suspicious betting patterns, money laundering, bonus abuse, and unauthorised access attempts.
- Customer Support: Responding to your queries, resolving disputes, and maintaining records of your interactions with GB777 support.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve GB777's design, performance, and the range of betting markets we offer.
- Marketing Communications: Sending you promotional offers, bonus notifications, and PSL betting alerts — but only if you have opted in to receive these. You can unsubscribe at any time.
- Responsible Gaming: Monitoring your gaming activity to identify potential signs of problem gambling behaviour and enabling intervention tools like deposit limits and self-exclusion.
- Legal Compliance: Meeting GB777's obligations under applicable laws, responding to lawful requests from authorities, and maintaining records required for regulatory review.
GB777 processes your personal data under the following legal grounds:
- Contractual Necessity: Most of GB777's data processing is necessary to perform the contract we have with you — providing the betting and gaming platform, processing your PKR transactions, and managing your account. Without this processing, the service cannot function.
- Legal Obligation: KYC/AML checks, age verification, and transaction record-keeping are required by applicable laws and regulations. GB777 must process this data to remain compliant regardless of consent.
- Legitimate Interests: Fraud prevention, platform security, and anonymised analytics are processed on the basis of GB777's legitimate interests — interests that do not override your privacy rights.
- Consent: Marketing communications, optional personalisation features, and non-essential cookies are processed only with your explicit consent. You may withdraw consent at any time without affecting your ability to use GB777.
You can withdraw consent for marketing communications at any time by clicking "Unsubscribe" in any GB777 email or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
GB777 does not sell your personal data to any third party, full stop. We share data only where necessary to operate the platform or meet legal obligations, and only with parties bound by strict data protection obligations.
5.1 Categories of Recipients
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank/card network operators receive the minimum transaction data needed to process your PKR deposits and withdrawals. They operate under their own privacy policies and security standards.
- KYC / Identity Verification Providers: Licensed third-party services that verify your identity documents and age on GB777's behalf. They access only the data required for this specific purpose and may not use it for any other reason.
- Live Casino Studio Partners: For live dealer games including Andar Bahar, GB777's studio partners receive a pseudonymised player session identifier and bet data. They do not receive your personal identity information.
- IT Infrastructure and Security: Cloud hosting providers, CDN services, and cybersecurity monitoring tools may process technical data on GB777's behalf. All are subject to contractual data processing obligations equivalent to or stronger than those in this Policy.
- Legal and Regulatory Authorities: GB777 will share data with law enforcement or regulatory bodies when legally required to do so — for example, in response to a lawful court order or as part of an AML investigation. We will notify you of any such disclosure unless prohibited by law from doing so.
5.2 What We Never Do
- GB777 never sells your data to advertisers, data brokers, or marketing platforms.
- We never share your full CNIC number or payment account credentials with any third party not strictly required for KYC or payment processing.
- We never transfer your data to a third party for their own commercial purposes without your explicit consent.
All financial transactions on GB777 are conducted in Pakistani Rupees (PKR). GB777 processes PKR payments through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfers, and Visa/Mastercard cards issued by Pakistani banks. Here is how payment data is handled specifically:
- GB777 does not store your full card number, CVV, or complete bank account number. Card transactions are processed via PCI-DSS compliant payment gateways. GB777 retains only a partial reference (last 4 digits) for your transaction records.
- Your Easypaisa or JazzCash account number is stored to verify that deposits and withdrawals originate from the same registered account. This is an AML requirement.
- Transaction records — including deposit amounts, withdrawal amounts, dates, and reference numbers — are retained for a minimum of 5 years as required for financial record-keeping.
- All PKR transaction data is encrypted at rest using AES-256 encryption and accessible only to authorised GB777 finance and compliance personnel.
Third-party payments: GB777 cannot accept deposits from payment accounts not registered in your own name. If you attempt to deposit from another person's Easypaisa or JazzCash account, the transaction will be reversed and your account may be flagged for review. This protects you from financial fraud as much as it protects GB777.
No Data Selling – Ever
GB777's business model is built on player trust. Selling user data to advertisers would destroy that trust instantly. We have never done it and our internal policies prohibit it explicitly. Your phone number is not passed to any marketing firm.
PCI-DSS Card Security
Card payments on GB777 run through PCI-DSS Level 1 certified gateways. We never see or store your full card number — only the last 4 digits and expiry month/year needed for your transaction records.
GB777 uses cookies and similar tracking technologies to keep the platform running smoothly, understand how players use the site, and personalise your experience. Here is a plain explanation of what each category does and which ones you can opt out of.
Cookie Categories
- Strictly Necessary Cookies: These cannot be disabled. They handle your login session, keep your bet slip populated between pages, and maintain security tokens. Without them, GB777 cannot function. No consent is required for these cookies.
- Analytics Cookies: Used to understand which pages and features players use most, how long sessions last, and where players encounter difficulties. Data is aggregated and anonymised. GB777 uses these to improve the platform based on real usage patterns.
- Functional Cookies: Remember your preferences — odds display format, notification settings, and responsible gaming parameters you have set in your account. These improve your experience but are not essential to core functionality.
- Marketing Cookies: Used only with your consent. These allow GB777 to show you relevant promotions on the platform based on your activity — for example, highlighting a PSL bonus to a player who regularly bets on cricket. You can opt out at any time via your account privacy settings.
GB777 does not use third-party advertising cookies or cross-site tracking pixels. Marketing cookies on GB777 are first-party only and are used solely within the GB777 platform.
GB777 applies a layered security architecture to protect your personal data. The following measures are in place across the platform at all times:
- SSL/TLS Encryption: All data transmitted between your device and GB777's servers is encrypted using TLS 1.3 with 256-bit keys. This applies to every page, not just payment pages.
- Encryption at Rest: Personal data and payment records stored on GB777's servers are encrypted at rest using AES-256 encryption.
- Two-Factor Authentication: Available for all GB777 accounts. We strongly recommend enabling 2FA. It significantly reduces the risk of unauthorised access even if your password is compromised.
- Access Controls: Only authorised GB777 personnel with a specific job-related need have access to personal data. Access is logged and audited. Former employees are removed from all systems within 24 hours of leaving.
- Vulnerability Management: GB777 conducts regular penetration testing and vulnerability scanning. Critical vulnerabilities are patched within 24 hours of discovery.
- DDoS Protection: GB777's infrastructure is protected against Distributed Denial of Service attacks to ensure platform availability during high-traffic cricket events like PSL finals.
Despite these measures, no internet platform can guarantee absolute security. If you become aware of any security vulnerability on GB777 or suspect your account has been compromised, contact GB777 support immediately at support@gb777.cash.
GB777 retains your personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Below are the standard retention periods applied to different data categories:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | AML/KYC regulatory requirement |
| Identity Verification (CNIC, selfie) | Duration of account + 5 years post-closure | AML regulatory requirement |
| Transaction Records (deposits, withdrawals) | 7 years from transaction date | Financial record-keeping obligation |
| Betting History | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming |
| Support Chat Transcripts | 3 years from date of interaction | Dispute resolution, service quality |
| Session and Usage Logs | 13 months from collection | Security monitoring, analytics |
| Marketing Consent Records | Duration of consent + 3 years | Proof of consent compliance |
When your data reaches the end of its retention period, GB777 securely destroys it using methods appropriate to the medium — electronic data is cryptographically wiped, and any physical documents are shredded by a certified destruction service.
As a GB777 player, you have the following rights regarding your personal data. To exercise any of these rights, email privacy@gb777.cash with your registered account details. GB777 will respond within 30 days.
Right to Access
Request a complete copy of all personal data GB777 holds about you, delivered in a readable format within 30 days.
Right to Rectification
Ask GB777 to correct any inaccurate or incomplete personal data — for example, an incorrectly recorded name or contact number.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention requirements.
Right to Restriction
Ask GB777 to pause processing of your data while an accuracy dispute is being resolved or while you object to processing.
Right to Portability
Receive your personal data in a structured, machine-readable format to transfer to another service, where technically feasible.
Right to Object
Object to GB777 processing your data for direct marketing or on the basis of legitimate interests. Marketing processing stops immediately upon receipt of an objection.
Some rights may be limited where GB777 has a legal obligation to retain data — for example, AML regulations require transaction records to be kept for 7 years regardless of an erasure request. In such cases, GB777 will explain the limitation clearly in our response.
GB777 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. If you are a parent or guardian and believe that a minor has registered with GB777 or provided personal data through the platform, please contact us immediately at support@gb777.cash with details of the account.
Upon verification, GB777 will immediately close the account, void any bets placed, return any deposits to the original source payment method, and securely delete all personal data associated with the minor's account. We take underage gambling extremely seriously and cooperate fully with family members and child protection authorities in relation to any confirmed case.
GB777 recommends that parents and guardians use family internet filtering tools to prevent minors from accessing gambling platforms. Resources and guidance on parental controls are available in our Responsible Gaming section.
12.1 Policy Updates
GB777 reviews and updates this Privacy Policy periodically to reflect changes in data practices, platform features, or applicable law. When material changes are made, we will notify registered players via email to their registered address and via a notice on the GB777 platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.
Your continued use of GB777 after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree with an update, you may close your account by contacting support before the effective date.
12.2 Data Protection Contact
For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how GB777 handles your personal information, contact our Data Protection Officer:
- Email: privacy@gb777.cash
- Support Chat: 24/7 via the GB777 website — request to escalate to the privacy team
- Response Time: Privacy requests acknowledged within 48 hours; substantive response within 30 days
12.3 Complaints
If you are not satisfied with GB777's response to a privacy concern, you have the right to raise the matter with the relevant data protection authority in Pakistan. GB777 will cooperate fully with any such investigation and provide all requested information within the timeframes specified by the authority.
Effective Date: This Privacy Policy is effective from 1 June 2025 and supersedes all previous versions of the GB777 Privacy Policy.