km777 Privacy Policy

This Privacy Policy applies to all personal data processed by km777 in connection with the operation of the km777 online casino and sports betting platform at km777.games, including all associated services, mobile interfaces, customer support channels, and payment processing facilities. It applies to all registered players, prospective players who browse the platform without registering, and any other individuals whose personal data km777 processes in the course of its operations.

This Privacy Policy should be read alongside the km777 Terms & Conditions, which govern the overall contractual relationship between km777 and its players. Terms not defined in this Policy carry the meaning given to them in the Terms & Conditions.

For the purposes of this Privacy Policy, km777 acts as the data controller in respect of all personal data collected from players and users of the km777 platform. As data controller, km777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws and the requirements of km777's international gaming licence.

If you have any questions, concerns, or requests regarding the processing of your personal data by km777, you may contact the km777 data protection team via the customer support live chat on the km777 platform, or by sending a written request to the email address listed in Section 16 of this Policy. km777 aims to respond to all data-related enquiries within 30 calendar days of receipt.

km777 collects the following categories of personal data from players and platform users:

km777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is required for identity verification purposes. Where identity verification involves a facial liveness check, the biometric data processed is used solely for KYC purposes and is not retained beyond the verification event.

km777 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you visit or interact with the km777 platform, including cookies, server logs, device fingerprinting tools, and session tracking technologies.
• Payment providers: Transaction confirmation and status data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and other payment service providers when you make deposits or withdrawals.
• Identity verification services: Data received from third-party KYC and age-verification providers that process your identity documents on km777's behalf.
• Fraud prevention services: Risk scores and fraud signals received from third-party fraud detection providers that help km777 protect the platform and its players.
• Publicly available sources: In limited circumstances, km777 may verify information against publicly available databases in connection with AML screening or sanctions compliance.

km777 processes your personal data for the following purposes:

• Account registration and management: To create, maintain, and administer your km777 account, verify your identity and age, and manage your PKR wallet balance.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets, bonuses, and all other km777 platform services.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, and bank transfers, and to process withdrawals to your verified payment method.
• KYC and regulatory compliance: To comply with km777's obligations under its international gaming licence, including identity verification, age verification, anti-money laundering (AML) checks, and responsible gaming requirements.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account creation, and other prohibited conduct on the km777 platform.
• Responsible gaming: To monitor player activity for signs of problem gambling, enforce deposit and loss limits, process self-exclusion requests, and refer players to responsible gaming support resources where appropriate.
• Customer support: To respond to your enquiries, process your complaints, and resolve disputes relating to your km777 account or any game result.
• Marketing communications: To send promotional offers, bonus notifications, and km777 news by email or SMS — but only where you have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyse usage data, identify technical issues, optimise game performance, and improve the overall km777 player experience.

km777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil km777's obligations under the player agreement, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with km777's obligations under its international gaming licence, applicable AML regulations, and any directions from regulatory authorities.
• Legitimate interests: Processing carried out in pursuit of km777's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by the player's privacy rights.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

km777 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. km777 shares personal data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transaction data necessary to process your PKR deposits and withdrawals. Each provider operates under its own privacy policy and data protection obligations.
• KYC and identity verification providers: Third-party identity verification services that process your CNIC and facial verification data on km777's behalf, subject to contractual data processing agreements.
• Game software providers: Casino game developers may receive anonymised game session data for the purpose of technical support, game auditing, and RNG certification. Individual player identity is not shared with game providers.
• Fraud prevention and AML services: Third-party fraud detection and AML screening providers that help km777 identify suspicious activity and comply with its anti-money laundering obligations.
• Regulatory and licensing authorities: km777's licensing authority and any relevant regulatory body may receive player data as required by the terms of km777's operating licence or by applicable law.
• Law enforcement: km777 may disclose personal data to law enforcement agencies, courts, or government bodies where required to do so by law, court order, or regulatory direction.
• Group companies and successors: In the event of a merger, acquisition, or transfer of km777's business, player data may be transferred to the acquiring entity subject to equivalent data protection commitments.

km777 operates as an internationally licensed gaming platform. Some of the third-party service providers used by km777 — including game developers, KYC providers, and fraud prevention services — may process personal data in countries outside Pakistan. Where personal data is transferred internationally, km777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, adequacy decisions by recognised data protection authorities, or equivalent binding corporate rules where applicable. If you would like further information about the specific safeguards in place for any international transfer of your data, please contact km777 via the support channel described in Section 16.

km777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce km777's agreements. The following general retention periods apply:

• Active account data: Retained for the duration of your km777 account plus a minimum of 5 years following account closure, in accordance with km777's licensing obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date to satisfy accounting, AML, and gaming licence audit requirements.
• Customer support communications: Retained for a minimum of 3 years from the date of the last interaction or the resolution of any related dispute.
• Technical and usage data: Retained for a maximum of 2 years from collection, after which it is anonymised or deleted, unless required for an ongoing investigation.
• Marketing preferences: Retained until you withdraw consent or request deletion, after which your opt-out preference is retained indefinitely to prevent accidental re-subscription.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual player.

km777 uses cookies and similar tracking technologies on its platform to enable core functionality, improve user experience, and support fraud prevention and analytics. The following types of cookies are used:

• Strictly necessary cookies: Essential for the km777 platform to function. These include session management cookies that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your language and currency preferences. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Allow km777 to remember your preferences and personalise your experience, such as your preferred game lobby view or notification settings.
• Analytics cookies: Used to collect anonymised data about how players use the km777 platform, which pages are visited most frequently, and where technical errors occur. This data helps km777 improve the platform.
• Security and fraud prevention cookies: Used to identify unusual or suspicious activity on your account and protect your km777 session from unauthorised access.

You may control cookie settings through your browser preferences. Disabling non-essential cookies will not prevent you from using the km777 platform, though some personalisation features may be affected. km777 does not use third-party advertising cookies or share cookie data with advertising networks.

km777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmissions between your device and the km777 platform.
• Encrypted storage of sensitive data including passwords, CNIC numbers, and financial account details at rest.
• Two-factor authentication available on all km777 player accounts to prevent unauthorised login.
• Role-based access controls limiting internal access to player data strictly to km777 personnel who require it for their specific job function.
• Regular security audits and penetration testing of the km777 platform infrastructure.
• Automated anomaly detection systems that identify and alert on unusual account activity in real time.

Despite these measures, no online platform can guarantee absolute security against all possible threats. Players are strongly encouraged to use a unique, strong password for their km777 account, enable two-factor authentication, and never share their account credentials with any other person. If you suspect that your account has been compromised, contact km777 support immediately via live chat.

Subject to applicable data protection law and km777's legal obligations under its international gaming licence, you have the following rights in relation to your personal data held by km777:

• Right of Access: You may request a copy of the personal data km777 holds about you. km777 will provide this within 30 calendar days of a valid request.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by km777 be corrected. You may also update many of your account details directly from your km777 account settings panel.
• Right to Erasure: You may request that km777 delete your personal data. Note that km777 may be legally required to retain certain data — particularly KYC and financial transaction records — for a minimum period under its gaming licence and AML obligations, even after account closure.
• Right to Restriction: You may request that km777 restrict the processing of your personal data in certain circumstances, for example while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You may request that km777 provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to km777 processing your personal data on the basis of legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes, which will be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact km777 via the live chat support channel or the email address in Section 16. km777 may request proof of your identity before processing certain requests to protect player data from unauthorised access.

The km777 platform is strictly intended for individuals aged 21 years and above. km777 does not knowingly collect personal data from any person under the age of 21. The km777 registration process includes mandatory age verification steps designed to identify and reject underage applicants.

If km777 becomes aware that personal data has been collected from a person under the age of 21, that data will be permanently deleted and the associated account will be immediately and permanently closed. Any Real Funds balance on such an account will be returned to the payment source after deducting any bonus amounts credited to the account.

If you believe that a minor may have registered on the km777 platform using false identity information, please contact km777 support immediately. km777 takes underage gambling extremely seriously and will investigate all such reports as a priority.

km777 may send you promotional emails and SMS messages about bonuses, new games, sports betting specials, and platform updates where you have given your explicit consent to receive such communications during the account registration process or at any subsequent point.

You may opt out of marketing communications at any time by: clicking the unsubscribe link in any km777 marketing email; replying STOP to any km777 marketing SMS; or adjusting your communication preferences directly in your km777 account settings panel. Opt-out requests are processed within 5 business days. Please note that even if you opt out of marketing communications, km777 will continue to send you transactional and service communications relating to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

km777 does not share your contact details with any third party for the purpose of that third party sending you their own independent marketing communications.

km777 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where km777 introduces a new category of data processing or changes the basis on which data is shared — km777 will notify registered players by email or in-platform notification prior to the changes taking effect.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. Your continued use of the km777 platform following any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with any amended terms, you should cease using km777 and request account closure before the amendment takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how km777 handles your personal data, please contact the km777 data protection team through the following channel:

Email: [email protected] — please include "Privacy Request" in the subject line so that your message is directed to the correct team.

Live Chat: Available 24/7 via the km777 platform. For data-related requests, please ask to speak with a member of the compliance team.

km777 aims to acknowledge all data-related enquiries within 3 business days and to provide a substantive response or resolution within 30 calendar days. If your enquiry relates to a sensitive matter such as a suspected data breach affecting your account, km777 will treat it as a priority and respond as quickly as possible.