sy777 Privacy Policy — Your Data, Your Rights, Our Responsibility

1 Who We Are — Data Controller

For the purposes of this Privacy Policy, sy777 is the data controller responsible for your personal data. sy777 operates the online gaming and sports betting platform at sy777.pro, providing services to players across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other regions of the country.

As data controller, sy777 determines the purposes and means by which your personal data is processed. If you have any questions or concerns about how your data is handled, you can contact our Data Protection team at the email address provided in Section 13 of this Policy.

2 Personal Data We Collect

sy777 collects personal data only where it is necessary for the purposes described in this Policy. The categories of data we collect include the following:

3 How We Use Your Personal Data

sy777 uses your personal data for the following purposes:

• Account Management: Creating, verifying, maintaining, and closing your sy777 membership account, including processing your identity verification (KYC) obligations.
• Service Delivery: Providing access to the platform's gaming services, processing PKR deposits and withdrawals via Easypaisa, JazzCash, HBL, and other approved channels, and maintaining your account balance.
• Regulatory Compliance: Meeting our obligations under applicable anti-money-laundering (AML) regulations, counter-terrorism financing requirements, and responsible gaming mandates — including age verification and self-exclusion enforcement.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and unauthorised account access. Monitoring for suspicious betting patterns or payment behaviour.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of communications for quality assurance and training purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game selection, platform performance, and the overall player experience for users across Pakistan.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant platform updates — but only where you have given explicit consent, and always with a clear opt-out mechanism.
• Responsible Gaming: Monitoring gaming activity to identify potential signs of problem gambling and to provide appropriate responsible gaming interventions, including enforcing deposit limits and self-exclusion periods you have set.

4 Legal Basis for Processing

sy777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between sy777 and you as a Member — including account operation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, age verification mandates, and law enforcement requests made through lawful channels.
• Legitimate Interests: Processing carried out in sy777's legitimate business interests — including fraud prevention, platform security, customer support quality assurance, and internal analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and revocable consent — primarily for marketing communications and optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

5 Sharing Your Personal Data

sy777 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection agreements:

• Payment Service Providers: Easypaisa, JazzCash, Raast, SadaPay, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and cryptocurrency processing services — to process deposits and withdrawals in PKR and other accepted currencies.
• Identity Verification Providers: Third-party KYC and AML screening services used to verify Member identities and comply with regulatory obligations. These providers process only the minimum data necessary for verification.
• Technology Service Providers: Cloud hosting, platform infrastructure, cybersecurity, and fraud detection service providers operating under strict contractual data processing agreements with sy777.
• Game Content Providers: Where technically necessary, limited session and gameplay data may be shared with the game software providers whose titles are hosted on the sy777 platform — exclusively for game functionality purposes.
• Legal & Regulatory Authorities: Where required by law, court order, or lawful regulatory request, sy777 may be required to disclose personal data to law enforcement, regulatory bodies, or other government authorities in Pakistan or other relevant jurisdictions.

6 Cookies & Tracking Technologies

sy777 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognise you between sessions, maintain your login state, and analyse how the platform is used.

• Essential Cookies: Required for core platform functionality including maintaining your logged-in session, remembering your account preferences, and ensuring secure transactions. These cannot be disabled without affecting platform functionality.
• Analytics Cookies: Used to collect anonymised data about how Members navigate and use the platform, which helps us identify performance bottlenecks and improve the user experience. Analytics data is aggregated and not linked to individual identities.
• Functional Cookies: Store your preferences such as language settings and display options, so you do not need to reset them each session.
• Marketing Cookies: Where you have consented, used to deliver relevant promotional content and measure campaign effectiveness. These can be disabled through your browser or account settings at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain features of the sy777 platform from functioning correctly.

7 Data Retention

sy777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your membership and for a period of 5 years following account closure, to meet AML record-keeping requirements.
• Transaction Records: Financial transaction data including PKR deposit and withdrawal records are retained for a minimum of 5 years to comply with financial regulation and AML obligations.
• Identity Verification Documents: Retained for the duration of membership and for up to 5 years post-closure, or longer if required by regulatory authority.
• Customer Support Communications: Retained for 2 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for as long as you remain a Member and for 1 year thereafter, to demonstrate consent compliance.
• Technical/Usage Logs: Retained for up to 12 months in identifiable form, after which they are anonymised and may be retained indefinitely for aggregate analytics.

When personal data is no longer required and retention is not mandated by law, sy777 will securely delete or anonymise it in a manner that prevents reconstruction of the individual's identity.

8 Data Security

sy777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the sy777 platform.
• Encryption of sensitive stored data including passwords (hashed using bcrypt or equivalent), payment method references, and identity document files.
• Role-based access controls ensuring that sy777 staff can only access personal data to the extent required for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Multi-factor authentication requirements for administrative platform access.
• Continuous 24/7 monitoring of platform infrastructure for suspicious activity, intrusion attempts, and anomalous traffic patterns.

While sy777 implements industry-best security practices, no system is completely impenetrable. Members are also responsible for maintaining the security of their own account credentials and devices.

9 Your Data Rights

As a sy777 Member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via the email address in Section 13. We will respond to verified requests within 30 calendar days.

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal. Where we are unable to fulfil a request — for example, due to a legal retention obligation — we will explain the reason clearly.

10 Children's Privacy

If you are a parent or guardian and believe that a person under your care has registered on the sy777 platform, please contact us immediately via the email in Section 13. We will investigate and take appropriate action without delay.

11 International Data Transfers

Some of sy777's service providers — including cloud hosting infrastructure and game content providers — may be located outside of Pakistan. Where personal data is transferred internationally, sy777 ensures that appropriate safeguards are in place to protect it to a standard at least equivalent to the protections described in this Policy.

These safeguards may include contractual clauses requiring the recipient to handle your data with the same level of care and security as sy777 does, or reliance on the recipient's participation in recognised data protection frameworks. sy777 will not transfer your data to jurisdictions that do not provide adequate data protection without first implementing appropriate contractual or technical safeguards.

12 Updates to This Privacy Policy

sy777 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will notify Members via the email address registered to their account and update the "Last Updated" date at the top of this page.

We encourage Members to review this Policy periodically. Continued use of the sy777 platform following notification of changes constitutes acceptance of the revised Policy. If you do not agree with changes to this Policy, you should cease using the platform and contact us to arrange account closure.

13 Contact Us — Data & Privacy Queries

If you wish to exercise any of your data rights, raise a concern about how sy777 handles your personal data, or report a potential privacy issue, please contact our Data Protection team. All privacy-related correspondence must be sent in writing.

For general platform support queries unrelated to data protection, please use the live chat feature within your account dashboard or contact support through the standard support channel.