Privacy Policy

gc777 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at gc777.cam. We respect the privacy of all individuals who interact with our Platform and are committed to handling personal data responsibly, transparently and in accordance with applicable data protection law.

This Privacy Policy ("Policy") describes the categories of personal data we collect from users ("you", "your") when you register, access or use the Platform; the purposes for which that data is processed; the parties with whom it may be shared; the security measures we apply; and the rights you hold over your personal data.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you have any concerns about how your data is handled, please contact our support team using the details in Section 15 before continuing to use the Platform.

For the purpose of this Policy, the following terms carry the meanings set out below:

• "Controller" means gc777 in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Subject" means the individual to whom personal data relates — in the context of this Policy, the registered user of the Platform.
• "Personal Data" means any information that identifies or is capable of identifying a natural person, directly or indirectly, including name, email address, CNIC number, payment details and device identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, erasure and destruction.
• "Processor" means any third party that processes personal data on behalf of gc777 under a contractual data processing agreement.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, health data, biometric data or other categories afforded heightened protection under applicable law.
• "KYC" means Know Your Customer — the identity verification process gc777 is required to conduct before processing withdrawals.

gc777 collects personal data through several channels. The categories of data we collect and the circumstances in which they arise are set out in the table below.

We do not intentionally collect sensitive personal data (as defined in Section 2) unless required by law — for example, where health information is relevant to a responsible gambling self-exclusion request. Such data is handled with heightened care and access restrictions.

gc777 processes your personal data for the following purposes:

gc777 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to fulfil the agreement with you — account operation, transaction processing, withdrawals and support.
• Legal Obligation: Processing required to comply with applicable licensing, anti-money-laundering, fraud-prevention and regulatory obligations.
• Legitimate Interests: Processing conducted for fraud prevention, security monitoring, platform analytics and responsible gambling monitoring — where these interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and non-essential cookies, where your prior consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

gc777 does not sell, rent or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Transaction data is shared with payment processing partners to execute deposits and withdrawals. These providers are bound by contractual data protection obligations and applicable financial regulations. Familiar Pakistani payment references (such as Easypaisa, JazzCash, Raast, and banks including HBL, UBL, Meezan Bank and Bank Alfalah) are referenced as familiar local context only; their inclusion does not imply that they endorse gambling operations or are data processors for gc777.
• KYC & Identity Verification Providers: Identity documents are processed by third-party verification services operating under data processing agreements with gc777.
• Fraud Detection Services: Behavioural and technical data may be shared with fraud-analysis providers to protect the Platform and its users.
• Regulatory Authorities: Where required by our operating licence or applicable law, data may be disclosed to licensing bodies, financial intelligence units, or law enforcement agencies.
• Technology & Infrastructure Providers: Data is hosted and processed on cloud infrastructure provided by reputable technology partners operating under appropriate contractual safeguards.
• Business Transfers: In the event of a merger, acquisition or sale of assets, personal data may be transferred to the acquiring entity subject to at least equivalent data protection standards.

Where personal data is transferred outside the jurisdiction in which it was collected, gc777 will implement appropriate safeguards — such as standard contractual clauses or adequacy decisions — to protect the data during transfer.

gc777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The key retention principles are as follows:

• Active Account Data: Retained for the duration of your Account and for a period thereafter as required by our licensing obligations — typically a minimum of five (5) years from account closure for anti-money-laundering purposes.
• KYC & Identity Documents: Retained in accordance with licensing requirements — typically a minimum of five (5) years from the date of last transaction or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the transaction date to satisfy financial record-keeping and AML requirements.
• Support Communications: Retained for up to three (3) years from the date of the communication, unless a longer period is required for ongoing dispute resolution or regulatory purposes.
• Analytics Data: Aggregated and pseudonymised analytics data may be retained for longer periods without posing a material privacy risk to individual users.

Where retention is no longer necessary and no legal obligation requires continued storage, personal data is securely deleted or permanently anonymised.

gc777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of stored personal data and password hashing using industry-standard cryptographic techniques.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability reviews of Platform infrastructure.
• Audit logging of access to sensitive data categories.
• Contractual security obligations imposed on all third-party processors and vendors.

Notwithstanding these measures, no system is entirely immune to breach. In the event of a personal data breach that poses a risk to your rights and freedoms, gc777 will notify affected users and relevant regulatory authorities in accordance with applicable data breach notification obligations.

gc777 uses cookies and similar tracking technologies to operate the Platform, understand usage patterns, prevent fraud and — where consent is given — serve relevant promotional content.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the Platform. Clearing cookies will log you out of any active session.

Subject to the applicable data protection law of the jurisdiction in which gc777 is licensed to operate, you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact our support team at the details in Section 15. We will respond within the timeframe required by applicable law — generally within 30 days of receipt. We may request verification of your identity before processing a data rights request.

gc777 does not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the applicable licence jurisdiction. The Platform is strictly for adults only.

Age verification is a mandatory component of the KYC process. No withdrawal will be processed before age and identity verification is complete. Where gc777 discovers that an Account has been registered by or on behalf of a minor, the Account will be immediately closed, any funds will be handled in accordance with applicable regulatory requirements, and the data will be processed only to the extent necessary to fulfil those regulatory obligations.

If you believe that a minor has registered an Account on the Platform, please contact our support team immediately.

gc777 is an English-language platform designed for Pakistani users. The following points are specific to users accessing the Platform from Pakistan or using Pakistani payment methods:

• gc777 does not claim that it is licensed, regulated or approved by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority, or any Pakistani financial institution.
• Payment provider names referenced on the Platform — including Easypaisa, JazzCash, Raast, and banks such as HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar payment references for Pakistani users only. They are not data processors, partners or endorsers of gc777 unless independently verified. Their mention in this Policy does not imply any data-sharing arrangement with those entities unless a deposit or withdrawal transaction is initiated by you through their systems.
• Transaction data associated with deposits or withdrawals processed via Pakistani payment methods will be handled by the respective payment provider under that provider's own privacy policy and terms of service. gc777 receives only the information necessary to confirm payment completion — typically a transaction reference, amount (PKR) and masked account identifier.
• gc777 does not share personal data with Pakistani government authorities except where required by applicable international legal obligations or a valid court order served on gc777's operating jurisdiction.

The Platform may contain references to or contextual mentions of third-party services (for example, payment providers or sports organisations). gc777 is not responsible for the privacy practices of any third-party service, website or application. This Policy applies solely to data processed by gc777 in connection with your use of the Platform at gc777.cam.

We encourage you to review the privacy policies of any third-party service you interact with — including payment providers you use for deposits or withdrawals — as their data practices are independent of gc777.

gc777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features or our internal data-handling practices. Where material changes are made, we will notify registered users via email or an in-Platform notification before the changes take effect.

The date of the most recent update is displayed at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

For any privacy-related queries, data rights requests or concerns about how gc777 handles your personal data, please contact us through the following channels:

We aim to acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 60 days — in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response to a data rights request or privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction that applies to your situation.