wold777 Privacy Policy — How We Collect, Use & Protect Your Personal Data

wold777 operates the online casino and sports betting platform accessible at wold777.com. For the purposes of this Privacy Policy, wold777 acts as the data controller in respect of personal data collected from players and visitors through the platform.

This Privacy Policy applies to all personal data collected from: (a) registered wold777 account holders; (b) individuals who browse wold777.com without registering; (c) individuals who contact wold777 customer support; and (d) individuals who participate in any wold777 promotional or communications activity. It covers data collected through the website, mobile browser interface, live chat, email correspondence, and any other channel through which wold777 interacts with users.

This Policy does not govern the privacy practices of third-party game providers, payment processors, or other external services that may be accessible through the wold777 platform. Those third parties operate under their own privacy policies, which we encourage you to review independently.

wold777 collects the following categories of personal data in connection with the operation of the platform and services offered to Pakistani players:

wold777 operates on a data minimisation principle: we collect only the personal data that is genuinely necessary for the identified purposes described in Section 4 of this Policy. We do not collect sensitive categories of personal data — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where explicitly required by applicable law or where you voluntarily provide such information in a support context.

wold777 collects personal data through the following mechanisms:

• Direct provision: Information you actively provide during account registration, KYC document submission, deposit/withdrawal requests, support communications, and feedback submissions;
• Automated technical collection: Data collected automatically when you access the wold777 platform, including IP address, device identifiers, browser characteristics, session data, and gameplay behaviour through server logs and analytics systems;
• Cookie and tracking technologies: Session cookies, persistent cookies, and similar browser-based tracking technologies as described in Section 8 of this Policy;
• Third-party sources: Identity and address verification data received from NADRA database checks or accredited KYC verification partners; transaction confirmation data from JazzCash, Easypaisa, and banking partners; fraud and risk intelligence from licensed anti-fraud service providers;
• Publicly available sources: Information available in public registries or databases where wold777 has a legitimate compliance reason to consult them.

wold777 processes your personal data for the following specific, identified purposes:

• Account creation and management: To register your wold777 account, authenticate your identity at login, manage account settings, and maintain accurate records;
• KYC and age verification: To verify that you meet the 18+ age requirement and to confirm your identity as required by anti-money laundering and compliance obligations;
• Payment processing: To process deposits in PKR via JazzCash, Easypaisa, bank transfer, and card; to process withdrawal requests; and to maintain accurate financial records;
• Game provision and technical operation: To deliver casino games, live dealer tables, sports betting markets, and all other platform features to your device;
• Customer support: To respond to your queries, resolve complaints, process account adjustments, and provide the 24/7 English-language support service;
• Responsible gaming monitoring: To apply deposit limits, session timers, loss limits, self-exclusion periods, and other responsible gaming tools to your account; to identify patterns that may indicate problem gambling behaviour;
• Fraud prevention and security: To detect and prevent fraudulent transactions, account takeover attempts, multi-accounting, money laundering, and other prohibited conduct;
• Legal and regulatory compliance: To fulfil wold777's obligations under applicable AML, KYC, and data protection laws and regulations;
• Marketing communications (with consent): To send promotional emails, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time through account Settings or by contacting support.

wold777 does not use your personal data for automated decision-making that produces significant legal effects without human review, except for automated fraud detection flags which are always reviewed by a human compliance officer before action is taken against an account.

wold777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and wold777 — including account management, game delivery, payment processing, and customer support;
• Legal obligation: Processing required to comply with AML laws, KYC regulations, responsible gaming requirements, and other applicable legal obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of wold777 services, where these interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications, where your explicit opt-in consent has been obtained. You may withdraw this consent at any time without affecting the legality of prior processing.

wold777 does not sell, rent, or trade your personal data. We share your data with third parties only in the following specific circumstances and only to the extent necessary for the identified purpose:

• Payment processors: JazzCash, Easypaisa, and Pakistani banking partners receive the minimum financial data required to process your transactions. These partners are bound by their own data protection obligations under financial services regulation;
• KYC and identity verification providers: Accredited third-party KYC providers who assist with CNIC verification and address confirmation, operating under strict data processing agreements;
• Game software providers: Licensed game providers receive session and game round data necessary to deliver game content and resolve technical disputes. They do not receive unnecessary identity or financial data;
• Fraud and risk management services: Specialist anti-fraud service providers who assist with detecting suspicious transaction patterns, multi-account detection, and AML screening;
• Legal and regulatory authorities: wold777 will disclose personal data to Pakistani law enforcement, financial intelligence authorities, or other regulatory bodies when legally required to do so by valid legal process or regulatory directive;
• Professional advisers: Lawyers, auditors, and compliance consultants operating under professional confidentiality obligations where necessary for wold777's legal and regulatory affairs.

All third parties with whom wold777 shares personal data are required to maintain appropriate data security standards and to use the data solely for the specified purpose for which it was shared.

In operating the wold777 platform, certain personal data may be transferred to and processed in jurisdictions outside Pakistan — for example, in connection with cloud server infrastructure or game provider services. Where such transfers occur, wold777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that afforded within Pakistan.

Safeguards used for international data transfers include contractual data protection clauses in agreements with data processors, transfer to jurisdictions that offer adequate data protection standards, and encryption of data in transit using 256-bit SSL technology. If you have questions about specific international transfers affecting your data, you may contact wold777's data protection team at [email protected].

wold777 uses cookies and similar browser-based tracking technologies to operate the platform effectively and to improve the user experience for Pakistani players. The following categories of cookies are used:

• Strictly necessary cookies: Essential for basic platform functionality — including maintaining your login session, loading game interfaces, and processing payment flows. These cookies cannot be disabled without impairing your use of the platform;
• Performance and analytics cookies: Used to measure platform performance, track error rates, analyse player navigation patterns, and identify areas for improvement. Data collected is aggregated and anonymised where possible;
• Functional cookies: Used to remember your preferences — such as display language, game category filters, and responsible gaming settings — between sessions;
• Security cookies: Used for fraud detection and account security monitoring, including login location verification and suspicious session detection.

wold777 does not use advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent normal use of the wold777 platform.

wold777 retains personal data for the minimum period necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, to comply with AML record-keeping obligations;
• Transaction and financial records: Retained for a minimum of 7 years following the date of the transaction, in accordance with financial record-keeping requirements;
• Gaming activity records: Retained for the duration of account activity, plus a minimum of 3 years following account closure, for dispute resolution and responsible gaming monitoring purposes;
• Support communications: Retained for 2 years following the resolution of the relevant support matter, or longer if the matter relates to an unresolved legal or compliance issue;
• Technical and log data: Retained for 12 months in rolling logs, with security-relevant entries retained for up to 3 years;
• Marketing data: Retained until you withdraw consent, after which it is deleted within 30 days.

Upon expiry of applicable retention periods, personal data is securely deleted from wold777 systems or anonymised in a manner that makes re-identification permanently impossible.

wold777 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and wold777 servers;
• AES-256 encryption for sensitive data at rest in wold777 databases, including CNIC data and financial records;
• Two-factor authentication requirements for all wold777 staff accessing production systems and player data;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Continuous monitoring and intrusion detection systems operating on wold777 infrastructure;
• Regular third-party penetration testing and security audits of the wold777 platform;
• Documented incident response and data breach notification procedures.

You are also responsible for maintaining the security of your own wold777 account. wold777 strongly recommends enabling two-factor authentication on your account and never sharing your password or OTP codes with any third party. wold777 will never request your password via email, live chat, or any other communication channel.

Age verification through CNIC documentation is a mandatory part of the wold777 KYC process precisely to enforce this requirement. Parents and guardians in Pakistan are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe a minor has created a wold777 account, please contact [email protected] immediately — the matter will be treated as urgent.

As a wold777 player, you hold the following rights in relation to your personal data, exercisable at any time by contacting [email protected]:

• Right of Access: To request a copy of all personal data wold777 holds about you, along with information about how it is used and who it is shared with;
• Right to Rectification: To request correction of inaccurate or incomplete personal data in your wold777 account profile;
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wold777's legal retention obligations;
• Right to Restriction of Processing: To request that wold777 restrict processing of your data in certain circumstances, such as when the accuracy of the data is contested;
• Right to Data Portability: To request a structured, machine-readable copy of the personal data you provided to wold777, where technically feasible;
• Right to Object: To object to processing based on legitimate interests, including the right to opt out of direct marketing at any time without providing justification;
• Rights related to automated decision-making: To request human review of any automated decision that has a significant effect on your wold777 account.

wold777 will respond to all data rights requests within 30 days of receipt. Some requests may require identity verification before they can be actioned. Where a request cannot be fulfilled — for example, due to a conflicting legal retention obligation — wold777 will explain the reason in writing.

wold777 processes gaming activity data — including session lengths, wager amounts, deposit frequency, and responsible gaming tool usage — for the specific purpose of monitoring player welfare and enabling the wold777 responsible gaming programme. This processing is in the interests of players and reflects wold777's commitment to preventing gambling-related harm in the Pakistani player community.

Where wold777's responsible gaming monitoring system identifies patterns potentially consistent with problem gambling behaviour — such as prolonged session lengths, rapid sequential deposits, or repeated limit modifications — the responsible gaming team may reach out to the relevant player proactively. Any such communication is confidential and is initiated in the player's interest, not for commercial purposes.

Player-initiated responsible gaming data — such as self-exclusion periods and deposit limits — is retained for the duration of the restriction plus a reasonable period thereafter, to prevent circumvention through re-registration or account manipulation.

wold777 reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or operational requirements. The current version of the Privacy Policy is always available at wold777.com/privacy-policy and displays the effective date at the top of the document.

For material changes — defined as changes that significantly affect how your personal data is processed or the rights available to you — wold777 will provide advance notice by email to your registered address at least 7 days before the changes take effect. Continued use of the wold777 platform after the effective date of a revised Privacy Policy constitutes acceptance of the revised terms.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy-related complaint, please contact the wold777 data protection team:

• Email: [email protected] — mark your subject line "Privacy Request" or "Data Rights Request" for faster routing;
• Live Chat: Available within your logged-in wold777 account at all hours — suitable for general questions but data rights requests should be submitted in writing via email for audit trail purposes.

wold777 acknowledges all privacy-related communications within 48 hours and commits to providing a substantive response within 30 days. Complex requests — such as full data access requests requiring compilation of multiple data sources — may require up to 90 days, in which case wold777 will notify you of the extended timeline within the initial 30-day period.