ST777 Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ST777, operating at st777.im, collects, processes, stores and protects the personal information of its members — with a specific focus on the needs and expectations of users based in Pakistan. ST777 is committed to handling personal data with care, transparency and respect for your rights.

This Policy applies to all personal data collected through the ST777 website, mobile platform, customer support channels and any related services — including cricket betting, PSL markets, live casino games, baccarat, virtual sports, the VIP Club and the live cricket score feature. It covers all members who have registered an account at ST777, as well as visitors who browse the platform without registering.

By using the ST777 platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the ST777 Terms and Conditions and the Responsible Gaming guidelines, both of which form part of your overall agreement with ST777.

2. Information We Collect About You

ST777 collects personal data in several ways — directly from you during registration, from your ongoing activity on the platform, and from payment processing providers when you make PKR deposits or withdrawals.

2.1 Registration and Identity Data

When you create an ST777 account, we collect:

• Your full legal name as it appears on your national identity documents
• A valid Pakistani mobile number (used for account security and communication)
• A functioning email address
• Your date of birth (used for age verification — ST777 is strictly 18+)
• Your CNIC number, where verification is requested by ST777
• A password (stored in encrypted form — ST777 staff cannot see your plain-text password)

2.2 Financial and PKR Transaction Data

Each time you make a deposit or withdrawal at ST777, we collect transactional data including:

• The payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard)
• The PKR amount deposited or withdrawn
• The date, time and unique reference number of each transaction
• Partial payment account identifiers (we do not store full card numbers or full mobile wallet account numbers beyond what is necessary)

This data is necessary for processing your transactions, for anti-money-laundering (AML) compliance, and for resolving any payment disputes that may arise.

2.3 Betting and Gaming Activity Data

The ST777 platform records your in-platform activity, including:

• Bets placed — amounts, markets (PSL, cricket, football, etc.), odds accepted and outcomes
• Casino game sessions — game type, duration, stakes and results
• VIP Club tier progression and reward redemptions
• Bonus offers claimed and wagering requirement progress
• Live cricket score section visits and interaction history

2.4 Technical and Device Data

When you access ST777, our systems automatically collect certain technical information:

• IP address and approximate geographic location (city/region level)
• Device type (mobile, tablet or desktop) and operating system
• Browser type and version
• Session start and end times
• Pages visited and features used within the platform

This data is used to maintain platform security, detect suspicious activity, and improve the ST777 user experience for members in Pakistan.

3. Why ST777 Collects Your Data

ST777 only collects personal data where there is a clear and legitimate reason for doing so. The table below summarises the main categories of data, why they are collected, and the legal basis for collecting them.

4. Who We Share Your Data With

ST777 does not sell your personal data to any third party. Your information is only shared in the limited circumstances described below, and always only to the extent necessary for the stated purpose.

4.1 Payment Processing Providers

When you make a deposit or withdrawal, your transaction details are shared with the relevant PKR payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank/card issuer. These providers receive only the data necessary to process the payment. They are bound by their own privacy and security obligations and are not authorised to use your data for any other purpose.

4.2 Identity Verification Services

Where ST777 needs to verify your identity — for example, before processing a large withdrawal or where a regulatory obligation requires it — your identity documents may be reviewed using a third-party verification service. These services process your data only for the purpose of verification and operate under strict data processing agreements with ST777.

4.3 Platform Technology Partners

ST777 uses a small number of trusted technology partners to operate the platform — including cloud infrastructure providers, gaming content suppliers and platform analytics tools. These partners may process certain technical and activity data as part of delivering their services to ST777, but are prohibited by contract from using this data for any other purpose or sharing it further.

4.4 Legal and Regulatory Requirements

ST777 may be required to disclose personal data to law enforcement agencies, financial regulators or other competent authorities where required by applicable law. This includes disclosures made as part of AML compliance obligations. ST777 will only make such disclosures to the extent legally required and will seek to notify affected members where it is lawful and appropriate to do so.

4.5 What We Will Never Do

• Sell your personal data to data brokers or marketing companies
• Share your betting history with employers, insurance providers or credit agencies
• Disclose your CNIC or mobile number to third parties for advertising purposes
• Pass your PKR account details to any party not involved in processing your transaction

5. How Long We Keep Your Data

ST777 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any legal retention obligations that require us to keep it longer.

• Active account data — retained for the duration of your ST777 membership plus a minimum of five years after closure, in line with standard AML compliance requirements.
• PKR transaction records — retained for five years from the date of each transaction for regulatory compliance purposes.
• Betting and gaming activity logs — retained for five years after account closure for compliance and dispute resolution purposes.
• Customer support communications — retained for three years after the last interaction, to assist with any follow-up queries or formal complaints.
• Technical and device logs — retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.
• Marketing consent records — retained for the period you remain opted in, plus three years after opt-out, to evidence our compliance with consent-based marketing rules.

When data reaches the end of its retention period, it is deleted securely or anonymised so it can no longer be linked to you personally.

6. Cookies and Tracking Technologies

ST777 uses cookies and similar technologies to make the platform work correctly and to improve your experience. Here is a plain explanation of what we use and why.

6.1 Types of Cookies Used by ST777

• Strictly Necessary Cookies — These are essential for the ST777 platform to function. They manage your login session, maintain your bet slip while you browse, and protect against CSRF attacks. You cannot use ST777 without these cookies and no consent is required for them.
• Functional Cookies — These remember your preferences, such as your chosen odds format (decimal or fractional), your preferred language, and whether you have dismissed certain notifications. Disabling these won't break the platform but may reduce convenience.
• Analytics Cookies — ST777 uses anonymised analytics data to understand how members use the platform — which pages load slowly, which features are most used, and where members encounter problems. This data is aggregated and not linked to individual member identities. You can opt out of analytics cookies through your browser settings.

6.2 Third-Party Cookies

ST777 does not permit third-party advertising networks to place cookies on the ST777 platform. Any third-party technology embedded in the platform — such as gaming content providers — may set their own functional cookies strictly for the purpose of delivering their content. ST777 reviews all third-party integrations to ensure they comply with this restriction.

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging into your ST777 account. Instructions for managing cookies vary by browser — please refer to your browser's help section for guidance.

7. Your Data Rights

As a member of ST777, you have meaningful rights over your personal data. We take these seriously and have built processes to honour them. The following rights apply to your ST777 account and all personal data we hold about you.

To exercise any of the above rights, please email support@st777.im with the subject line "Data Rights Request" and your registered account details. We will acknowledge your request within 48 hours and provide a full response within 30 days. We may need to verify your identity before processing any data rights request.

8. Data Security at ST777

Protecting the personal data and PKR transaction information of ST777 members is a core operational priority, not an afterthought. Here is how ST777 approaches security in practice.

8.1 Encryption

All data transmitted between your device and the ST777 platform is encrypted using 256-bit SSL/TLS. This means that even if your connection were intercepted, the data would be unreadable without the decryption key. ST777 enforces HTTPS across the entire platform — there is no unencrypted access path to any authenticated section of the site.

8.2 Password Storage

ST777 stores member passwords using a one-way cryptographic hashing algorithm. This means that even ST777 staff members cannot see your plain-text password. If you forget your password, it cannot be retrieved — only reset via the verified account recovery process. This is by design and is how secure platforms handle password storage.

8.3 Access Controls

Access to member personal data within the ST777 organisation is restricted on a strict need-to-know basis. Payment data, CNIC details and full account records are accessible only to staff with a specific operational reason to view them. All internal access is logged and reviewed periodically.

8.4 Breach Notification

In the unlikely event of a data breach that poses a risk to members' personal data, ST777 will notify affected members without undue delay, and will take immediate steps to contain the breach and prevent recurrence. ST777 maintains an incident response plan specifically for data security events.

9. Privacy and Responsible Gaming

ST777's responsible gaming programme relies on monitoring certain aspects of member activity — including betting frequency, session length, deposit patterns and use of responsible gaming tools. This data is used solely to identify members who may be experiencing gambling-related harm and to provide them with appropriate support and intervention options.

Responsible gaming monitoring data is handled with the highest level of confidentiality within ST777. It is not shared with third parties, is not used for marketing purposes, and is not included in any data portability exports. Members who request their data will receive a summary of their responsible gaming tool settings but not the internal risk indicators used by the ST777 responsible gaming team.

If you have any concerns about how your data is used in the context of responsible gaming, please contact support@st777.im or visit the Responsible Gaming page for full details of the tools and support available to you.

10. Changes to This Privacy Policy

ST777 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or feedback from our members. When material changes are made, ST777 will:

• Update the "Last Updated" date at the top of this page
• Display an in-platform notification for logged-in members
• Send an email notification to the registered email address of all active accounts

We encourage all ST777 members to review this Policy periodically. Continued use of the ST777 platform after changes have been posted and notified constitutes acceptance of the updated Policy. If you do not agree with the updated Policy, please contact support@st777.im to discuss your options, including account closure and data deletion.

11. How to Contact ST777 About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data ST777 holds about you, please get in touch through any of the following channels:

• Email: support@st777.im — for all privacy-related enquiries including data rights requests
• Live Chat: Available 24/7 on the ST777 platform after login — use the subject "Privacy Query" to be directed to the right team
• Platform: st777.im/privacy-policy — the current version of this Policy is always available here

ST777 is committed to responding to all privacy-related communications within 48 hours and to resolving data rights requests within 30 days. If you are not satisfied with how ST777 has handled your personal data or a data rights request, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction.