gm77 Privacy Policy

1. Who We Are

gm77 ("gm77", "we", "us", "our") is an online casino and sports betting platform available at gm77.bio, operated by its licensed operating entity under an international gaming licence. gm77 acts as the data controller in respect of all personal data collected from players who register and use the platform.

This Privacy Policy applies to all personal data collected through the gm77 website, mobile interface, customer support channels, and any other touchpoints through which Pakistani players interact with the gm77 brand.

If you have any questions about how gm77 handles your personal data, you may contact our data protection team at any time. Contact details are provided in Section 14 of this Policy.

2. Categories of Personal Data We Collect

gm77 collects the following categories of personal data from players:

2.1 Identity and Verification Data

Your full legal name, date of birth, Pakistani CNIC number, passport details (where provided), and a copy of any identity documents you submit for KYC (Know Your Customer) verification purposes. This data is essential for verifying your eligibility to use the gm77 platform and for complying with our obligations under the operator's international gaming licence.

2.2 Contact and Communication Data

Your Pakistani mobile phone number, email address, and any correspondence you send to gm77 support. This data is used to communicate with you regarding your account, process security alerts, and fulfil responsible gaming obligations.

2.3 Financial and Payment Data

Transaction references associated with your JazzCash, EasyPaisa, Raast, HBL, UBL, or Meezan Bank payment methods; PKR deposit and withdrawal amounts; transaction dates and status. gm77 does not store full bank account numbers or payment card details on its own servers. All financial transactions are processed through secure, licensed payment processors.

2.4 Gaming Activity Data

Your bet history, game session data, wagering amounts, win and loss records, bonus usage, and responsible gaming tool settings (such as deposit limits or self-exclusion requests). This data is essential for delivering the gm77 service and for monitoring responsible gaming compliance.

2.5 Technical and Device Data

Your IP address, device type and model, operating system, browser type and version, and session timestamps. This data is collected automatically when you access the gm77 platform and is used for security monitoring, fraud detection, and performance optimisation.

3. How We Collect Your Data

gm77 collects personal data through the following means:

• Directly from you — when you register a gm77 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion;
• Automatically — through cookies, web beacons, and server logs when you browse or interact with the gm77 platform (see Section 7 for full cookie details);
• From third-party service providers — including identity verification agencies, payment processors (such as JazzCash and EasyPaisa), fraud prevention services, and analytics providers, where permitted by applicable law and necessary for the purposes described in this Policy;
• From publicly available sources — where required for fraud prevention, AML compliance, or responsible gaming purposes.

4. Legal Basis for Processing

gm77 processes your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to provide the gm77 service to you, including account management, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with the operator's international gaming licence conditions, anti-money laundering (AML) regulations, and age verification requirements;
• Legitimate Interests: Processing for fraud prevention, security monitoring, and responsible gaming purposes where these interests are not overridden by your privacy rights;
• Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

gm77 uses your personal data for the following purposes:

• To create and manage your gm77 player account;
• To verify your identity and age in compliance with our licence obligations (players must be 21 years of age or older);
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank;
• To deliver casino games, sports betting markets (including PSL and international cricket), and other gaming content available on gm77;
• To administer bonus offers, promotions, and loyalty rewards in accordance with applicable terms;
• To monitor gameplay for responsible gaming compliance and to apply any self-imposed limits or exclusions you have requested;
• To detect, investigate, and prevent fraud, money laundering, and other illegal or prohibited activity;
• To communicate with you regarding your account, including security alerts, transaction confirmations, and support responses;
• To send you marketing communications where you have provided consent and not subsequently withdrawn it;
• To improve the gm77 platform, analyse usage patterns, and troubleshoot technical issues.

6. Sharing Your Personal Data

gm77 does not sell or commercially trade your personal data. We share your data only in the following circumstances and only to the extent necessary:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other licensed payment service providers — to process your PKR deposits and withdrawals;
• Identity Verification Providers: Licensed KYC and age verification service providers — to verify your identity and age in accordance with our licence conditions;
• Fraud and AML Prevention Services: Third-party fraud prevention and anti-money laundering screening providers — to detect and prevent financial crime;
• Game Software Suppliers: Licensed casino game and sports betting software providers — to the minimum extent necessary to deliver the games and markets you access on gm77;
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or the conditions of our international gaming licence;
• Group Companies: Where gm77 is part of a broader group of entities, relevant personal data may be shared with group members for internal administrative and compliance purposes, subject to equivalent data protection safeguards.

All third parties who receive personal data from gm77 are required to maintain the confidentiality of that data and to process it only for the purposes for which it was shared, under contractual data protection obligations.

7. Cookies & Tracking Technologies

gm77 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. Cookies are small text files stored on your device when you visit the gm77 website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the gm77 platform to function. These include session cookies that keep you logged in and security cookies that protect your account. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limit configurations.
• Analytics Cookies: Help us understand how players use gm77 so we can improve the platform. Data collected by analytics cookies is aggregated and anonymised wherever possible.
• Security and Fraud Prevention Cookies: Used to detect suspicious behaviour and protect accounts from unauthorised access.

You can manage non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the gm77 platform.

8. Data Security

gm77 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gm77 platform;
• Encrypted storage of sensitive personal data at rest;
• Role-based access controls ensuring that gm77 staff can only access personal data relevant to their specific job functions;
• Regular internal and third-party security audits and penetration testing;
• Incident response procedures to detect and address data breaches promptly.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your gm77 account credentials. If you believe your account has been compromised, contact gm77 support immediately.

9. Data Retention

gm77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming licence and applicable legal obligations. As a general guide:

• Identity and contact data is retained for a minimum of 5 years following account closure;
• Financial transaction data is retained for a minimum of 7 years following the date of the transaction, in compliance with AML record-keeping requirements;
• Gaming activity data is retained for 5 years following account closure;
• Technical and device data is retained on a rolling 13-month basis;
• Support correspondence is retained for 3 years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained for analytical and reporting purposes without time limit.

10. International Data Transfers

As gm77 is operated under an international gaming licence, some of your personal data may be processed by service providers located outside Pakistan. Where such transfers occur, gm77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under internationally recognised data protection frameworks.

These safeguards may include contractual data processing agreements containing standard data protection clauses, or transfers to service providers operating in jurisdictions recognised as providing an adequate level of data protection. If you would like further information about the safeguards in place for any specific international transfer, please contact us at the details provided in Section 14.

11. Children's Privacy

The gm77 platform is strictly intended for adults aged 21 years and above. gm77 does not knowingly collect personal data from individuals under the age of 21. Age verification checks are applied during registration, and additional verification may be requested at any time.

12. Your Data Protection Rights

As a gm77 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact gm77 support using the contact details in Section 14:

• Right of Access: You may request a copy of the personal data gm77 holds about you;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any overriding legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, for example while a correction request is being resolved;
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to gm77, where technically feasible;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our being able to demonstrate compelling grounds;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

gm77 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

13. Updates to This Privacy Policy

gm77 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable law. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the gm77 platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the gm77 platform following notification of an update constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gm77 handles your personal data, please contact us:

• Email: [email protected]
• Data Subject Requests: Please include "Privacy Request" in your subject line and provide your registered email address and a description of your request.
• Response Time: Standard enquiries within 24 hours; formal data rights requests within 30 days.
• Support Hours: 24 hours a day, 7 days a week.

For responsible gaming concerns, self-exclusion requests, or deposit limit queries, please visit the dedicated Responsible Gaming page.