ld777 Privacy Policy

1. Who We Are & Data Controller

ld777 (referred to in this Privacy Policy as "ld777", "we", "us", or "our") is the data controller responsible for the personal data collected and processed in connection with the ld777 platform. As data controller, ld777 determines the purposes for which your personal data is collected and the manner in which it is processed.

ld777 operates under an international gaming license, which imposes binding obligations regarding the collection, processing, and protection of player personal data. Our data protection practices are designed to meet the requirements of applicable privacy legislation in the jurisdictions in which we operate.

For any privacy-related enquiries, including requests to exercise your data subject rights, you may contact our Data Protection team by email at [email protected], marking your communication for the attention of the Data Protection Officer.

2. Data We Collect

ld777 collects and processes the following categories of personal data in connection with the provision of its services:

Category	Data Elements	Mandatory?
Identity Data	Full legal name, date of birth, CNIC/passport number, nationality, gender	Yes — KYC required
Contact Data	Email address, mobile phone number, residential address (city, province, Pakistan)	Yes — account registration
Financial Data	Payment method details (JazzCash account, EasyPaisa number, bank account details as applicable), transaction history in PKR, deposit/withdrawal records	Yes — payment processing
Account Data	Username, account ID, password (hashed), account preferences, language settings, communication preferences	Yes — account operation
Gaming Data	Bet history, game play records, wagering patterns, bonus utilisation, session durations, RNG game outcomes	Yes — service delivery & regulatory compliance
Technical Data	IP address, device type and identifiers, operating system, browser type, geolocation data (approximate), session logs	Yes — security & fraud prevention
KYC Documents	Copies of CNIC, passport, proof of address, payment method verification documents	Yes — before withdrawal
Communication Data	Support chat transcripts, emails sent to/from ld777 support, complaint records	Situational
Marketing Preferences	Opt-in/opt-out status for promotional emails, SMS, and push notifications	Optional

ld777 does not collect or process special category data (such as health information, racial or ethnic origin, or political opinions) unless you voluntarily disclose such information in a support communication, in which case it is used solely for the purpose of resolving your query and is not retained beyond what is necessary for that purpose.

3. How We Collect Data

ld777 collects personal data through the following means:

• Directly from you: when you register for an ld777 account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to a promotional communication;
• Automatically through the platform: when you access and use ld777 services, technical data including IP address, device identifiers, session logs, and gaming activity data is automatically recorded by our platform infrastructure;
• Via cookies and similar tracking technologies: as described in Section 8 of this Policy;
• From third-party payment providers: when you initiate a deposit or withdrawal via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, or other accepted payment channels, those providers may share transaction confirmation data with ld777;
• From identity verification service providers: in connection with our KYC process, ld777 may use third-party identity verification services that process the documents you submit and return a verification result to us;
• From fraud prevention and AML screening services: ld777 may receive data flags or risk signals from third-party screening services used to fulfil our anti-money laundering obligations.

4. Purposes & Legal Bases for Processing

ld777 processes your personal data only where a lawful basis exists for doing so. The following table describes the primary purposes for which we process personal data and the applicable legal basis in each case:

Purpose	Legal Basis
Account registration and management	Performance of a contract with you
Processing deposits and withdrawals in PKR	Performance of a contract; legal obligation (AML)
KYC identity and age verification (21+)	Legal obligation under gaming license conditions
Delivery of sports betting, casino, and gaming services	Performance of a contract with you
Fraud detection and prevention	Legitimate interests of ld777 and its players
Anti-money laundering screening and compliance	Legal obligation under licensing conditions
Responsible gaming monitoring and intervention	Legal obligation; legitimate interests (player protection)
Customer support and complaint handling	Performance of a contract; legitimate interests
Sending promotional communications (where opted in)	Your consent
Platform security, access logging, and IT systems management	Legitimate interests of ld777
Regulatory reporting and audit compliance	Legal obligation under gaming license conditions
Dispute resolution and legal proceedings	Legitimate interests; legal obligation

Where processing is based on consent — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing does not affect your ability to use ld777 services.

5. Data Sharing & Disclosure

ld777 does not sell your personal data to third parties. We do not share your personal data with advertisers or data brokers for commercial profiling purposes. Your data may be shared with the following categories of recipients strictly as necessary for the purposes described in this Policy:

• Payment service providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, GrabPay — to process your deposit and withdrawal transactions;
• KYC and identity verification providers: third-party services that process the documents you submit to confirm your identity, age, and address;
• Fraud prevention and AML service providers: specialist third-party services used to screen transactions and account activity for money laundering and fraud indicators;
• Game content providers: suppliers of casino games, slots, and live dealer content may receive technical session data necessary to deliver the game experience and certify fair play outcomes;
• IT infrastructure and hosting providers: cloud and hosting partners who store and process data on our behalf under data processing agreements that bind them to appropriate security and confidentiality standards;
• Regulatory authorities and law enforcement: where required by our gaming license conditions, a court order, or a lawful request from a government authority with appropriate jurisdiction;
• Legal and professional advisors: where required in connection with the conduct of legal proceedings or professional advice, subject to applicable confidentiality obligations.

6. International Data Transfers

As a platform operating under an international gaming license, some of ld777's data processing infrastructure, game content providers, and compliance service providers may be located in countries outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that which applies in the relevant jurisdiction, ld777 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by the relevant supervisory authority;
• Binding corporate rules or equivalent data transfer mechanisms;
• Where applicable, transfers to countries recognised as providing adequate protection.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our Data Protection team at [email protected].

7. Data Retention

ld777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming license conditions. The following general retention periods apply:

Data Category	Retention Period	Basis
Account & Identity Data	Duration of account plus 5 years post-closure	AML & licensing obligation
KYC Documents	Duration of account plus 5 years post-closure	Regulatory requirement
Financial Transaction Records	5 years from date of transaction	AML legal obligation
Gaming / Bet History	5 years from date of activity	Licensing & dispute resolution
Support Communications	3 years from last contact	Legitimate interests (dispute resolution)
Marketing Preference Records	Duration of account plus 1 year	Consent management compliance
Technical / Log Data	12 months from date of generation	Security & fraud prevention

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Where deletion is not immediately possible due to backup or archival systems, data is isolated from active processing until permanent deletion is completed.

8. Cookies & Tracking Technologies

ld777 uses cookies and similar tracking technologies on the ld777 platform. A cookie is a small data file placed on your device when you access our website. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use ld777 services;
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations to provide a more personalised experience;
• Analytics Cookies: Collect anonymised or aggregated data about how players use the ld777 platform — which pages are visited, how long sessions last, and which features are used most. This data helps us improve the platform;
• Fraud Prevention and Security Cookies: Used by our fraud detection systems to identify and prevent suspicious account activity and unauthorised access attempts.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use ld777. Details of the specific cookies used and how to manage them are available on request from our support team.

9. Security Measures

ld777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ld777 platform;
• Password hashing using industry-standard one-way cryptographic algorithms — ld777 staff cannot view your account password;
• Two-factor authentication (2FA) available to all account holders and required for high-value withdrawal requests;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent third-party security professionals;
• Segregated network architecture separating player-facing systems from internal administrative infrastructure;
• Incident response procedures including data breach notification protocols aligned with applicable regulatory requirements.

While ld777 takes all reasonable steps to protect your data, no data transmission over the internet is entirely without risk. You play an important role in protecting your own account by maintaining strong, unique passwords and not sharing your login credentials with any third party.

10. Your Rights as a Data Subject

As an ld777 player, you have the following rights with respect to your personal data. These rights may be subject to limitations where data processing is required to fulfil a legal obligation or to protect the legitimate interests of ld777 or third parties.

To exercise any of the above rights, please contact ld777's Data Protection team at [email protected]. We will acknowledge your request within 72 hours and provide a substantive response within 30 days. Where requests are complex or numerous, the response period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

We may need to verify your identity before processing a data subject request. This is to ensure your personal data is not disclosed to an unauthorised party.

11. Children & Minors

If ld777 becomes aware that personal data has been collected from an individual under 21 years of age — whether through registration fraud or any other means — the account will be closed immediately and all associated personal data will be deleted. Any deposits made by the underage individual will be refunded to the payment method used.

If you believe that a minor may have registered for an ld777 account, please contact our support team immediately at [email protected] so that appropriate action can be taken promptly.

12. Marketing Communications

ld777 may send you promotional communications — including bonus offers, free bet credits, event-specific promotions, and platform updates — by email, SMS, or push notification, where you have given your consent to receive such communications.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any ld777 marketing email;
• Updating your communication preferences within your ld777 account settings; or
• Contacting ld777 support at [email protected] and requesting removal from marketing lists.

Withdrawal of consent for marketing communications takes effect within 7 business days. Please note that you may continue to receive transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — regardless of your marketing preferences, as these are necessary for the operation of your account.

13. Third-Party Links

The ld777 platform may contain references to third-party services — such as payment providers' own portals or responsible gaming support organisations — which are governed by their own privacy policies. ld777 has no control over and accepts no responsibility for the privacy practices of third-party websites or services. We encourage you to review the privacy policy of any third-party service before providing your personal data to them.

The inclusion of a reference to a third-party service on the ld777 platform does not constitute an endorsement of that party's data handling practices by ld777.

14. Changes to this Policy

ld777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming license conditions. When material changes are made, we will notify active account holders by posting a prominent notice on the ld777 platform and, where reasonably practicable, by sending a communication to your registered email address.

The version number and last-updated date displayed at the top of this Policy indicate the currently operative version. Your continued use of the ld777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. We recommend reviewing this Policy periodically to stay informed of how ld777 protects your personal data.

Previous versions of this Privacy Policy are available on request from our Data Protection team.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which ld777 processes your personal data, please contact our Data Protection team using the details below:

If you are not satisfied with ld777's response to your privacy concern, you have the right to escalate your complaint to the supervisory authority responsible for data protection in the jurisdiction under which ld777 holds its gaming license. Details of the relevant supervisory authority are available on our About Us page.

ld777 takes all privacy complaints seriously. Every complaint received is logged, reviewed by our Data Protection team, and responded to in writing within the timeframes specified above.