dost77 Privacy Policy — How We Protect Your Information

This Policy applies to all personal data collected by dost77 through:

• The dost77 website at dost77.games and any associated mobile web interface.
• Account registration and the ongoing management of your dost77 Account.
• Payment processing for PKR deposits and withdrawals via Easypaisa, JazzCash, bank transfers, and other accepted methods.
• Customer support interactions via live chat, email, or any other support channel.
• Promotional communications where you have consented to receive them.
• Identity verification and anti-money laundering compliance procedures.

This Policy does not apply to the data practices of third-party game providers, payment processors, or other third-party services that may be accessible from the dost77 platform. Those parties operate under their own privacy policies, which we encourage you to review.

dost77 collects personal data in the following categories:

dost77 uses your personal data for the following specific purposes:

• Account creation and management: To create, maintain, and secure your dost77 Account, including processing your login credentials and applying your account preferences.
• Identity and age verification: To confirm that you are who you say you are and that you are at least 18 years of age, in compliance with our obligations under the dost77 Terms & Conditions.
• Payment processing: To process PKR deposits from your Easypaisa, JazzCash, or bank account and to process PKR withdrawals back to your registered payment methods.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats. This includes monitoring login patterns and transaction behaviour for anomalies.
• Regulatory compliance: To comply with anti-money laundering obligations and to respond to lawful requests from regulatory authorities or law enforcement agencies.
• Customer support: To respond to your queries, resolve disputes, and provide assistance with your account via live chat and email at [email protected].
• Responsible gaming: To monitor account activity for patterns associated with problem gaming and to apply responsible gaming tools such as deposit limits and self-exclusion when requested or triggered.
• Service improvement: To analyse aggregated, anonymised usage data to improve the dost77 platform — including game loading speeds, mobile performance for Pakistani connection speeds, and navigation improvements.
• Marketing communications: To send promotional emails, SMS notifications, and bonus offers to members who have consented to receive such communications. See Section 10 for how to manage your marketing preferences.

dost77 processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing necessary to deliver the dost77 gaming services you have contracted for — including account management, game access, payment processing, and withdrawal handling.
• Legitimate interests: Processing necessary for dost77's legitimate operational interests, including fraud prevention, security monitoring, and service quality improvement, where these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering verification requirements and law enforcement disclosure obligations.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

dost77 will never sell your personal data. We share personal data only with the categories of third parties described below, and only to the extent necessary for the relevant purpose:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, and banking partners (HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah) receive the payment information necessary to process your PKR transactions. These providers operate under their own privacy policies and are bound by financial services regulations.
• Identity verification providers: Third-party services used to verify CNIC documents and confirm identity receive the specific document data needed for verification. These providers are bound by strict confidentiality obligations.
• Game providers: Licensed game software providers may receive a technical session token and your Account reference to deliver game content. They do not receive your identity documents, CNIC number, or payment information.
• Regulatory and law enforcement authorities: dost77 will disclose personal data where required to do so by applicable law, by a court order, or by a lawful request from a regulatory authority or law enforcement agency. dost77 will notify you of any such disclosure where permitted by law.
• Professional advisers: Legal, accounting, and compliance advisers who are bound by confidentiality obligations may access personal data on a strictly need-to-know basis in connection with the provision of their professional services to dost77.

The dost77 website uses cookies and similar tracking technologies to deliver and improve the platform experience. The following categories of cookies are used:

• Essential cookies: Required for the dost77 platform to function. These include session authentication cookies that keep you logged in during your visit, and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences — such as your preferred language, last-played game, and responsible gaming settings — so that you do not need to reconfigure them on every visit.
• Analytics cookies: Collect anonymised data about how Members interact with the dost77 platform — which pages are visited, how long sessions last, and where users encounter errors. This data is used purely for platform improvement and does not identify individual members.
• Marketing cookies: Where you have consented, these cookies allow dost77 to deliver relevant bonus offers and promotions based on your gaming activity and preferences. You may withdraw consent for marketing cookies at any time through your browser settings.

You can control cookie settings through your browser's privacy tools. Disabling essential cookies will affect the functionality of the dost77 platform, including your ability to remain logged in and play games.

dost77 implements the following security measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data in transit between your browser and dost77 servers.
• Encryption at rest for all stored personal data, financial records, and CNIC document images using industry-standard symmetric encryption.
• Password hashing using a one-way cryptographic algorithm — dost77 staff cannot retrieve or view your account password in plain text under any circumstances.
• Two-factor authentication tied to your Pakistani mobile number for account login, adding a layer of protection against unauthorised access even if your password is compromised.
• Access controls ensuring that dost77 staff can only access member personal data on a strict need-to-know basis, with all internal data access logged for audit purposes.
• Regular security assessments of the dost77 platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems monitoring the dost77 network perimeter for unauthorised access attempts in real time.

dost77 retains personal data for as long as is necessary for the purposes described in this Policy, taking into account applicable legal and regulatory retention obligations:

• Account data and identity verification documents: Retained for the duration of your active account plus a further five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: PKR deposit and withdrawal records are retained for seven (7) years following the transaction date, in line with financial record-keeping requirements.
• Gaming activity data: Individual bet and game play records are retained for three (3) years. Aggregated, anonymised activity data used for platform analytics is retained indefinitely.
• Support correspondence: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction.
• Marketing preferences: Records of your marketing consent and opt-out history are retained for the duration of your account and three (3) years thereafter as evidence of compliance.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

As a dost77 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact the dost77 privacy team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data dost77 holds about you. dost77 will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of any inaccurate personal data held by dost77. Minor corrections (such as an email address update) can also be made directly in Account Settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dost77's legal retention obligations. Data subject to mandatory regulatory retention periods cannot be deleted early.
• Right to restrict processing: You may request that dost77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request a copy of certain personal data you have provided to dost77 in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where dost77 relies on legitimate interests as the legal basis for processing, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

dost77 may send promotional communications including bonus offers, new game announcements, tournament invitations, and platform updates via SMS to your registered Pakistani mobile number and via email to your registered address, where you have given consent to receive such communications.

You can manage your marketing communication preferences at any time through the following channels:

• Account Settings: Log in to your dost77 Account and navigate to Communication Preferences to update your SMS and email marketing subscriptions.
• Unsubscribe link: All dost77 marketing emails contain an unsubscribe link that immediately opts you out of further email marketing.
• Support team: Contact [email protected] with the subject line "Unsubscribe" and we will action your request within 48 hours.

Please note that opting out of marketing communications does not affect transactional communications — dost77 will continue to send you important account notifications such as deposit confirmations, withdrawal status updates, and security alerts, as these are necessary for the management of your account.

dost77 processes gaming activity data specifically to support responsible gaming, including:

• Monitoring deposit frequency, session duration, and betting patterns for signs of harmful gambling behaviour.
• Applying deposit limits, cooling-off periods, and self-exclusion restrictions when requested by a Member or triggered by responsible gaming algorithms.
• Maintaining self-exclusion records to prevent excluded Members from re-registering under different credentials.
• Flagging accounts for responsible gaming review where activity patterns suggest potential harm.

The processing of gaming activity data for responsible gaming purposes is considered a legitimate interest of dost77 and a necessary component of operating an ethical online gaming platform. For more information about the responsible gaming tools available to you, visit the dost77 Responsible Gaming page.

The dost77 platform may include links to or integrations with third-party services — such as game providers, payment processors, and support tools — that have their own privacy policies independent of this Policy. dost77 does not control the data practices of these third parties and is not responsible for their privacy practices.

When you interact with a third-party service accessible from the dost77 platform — for example, when launching a game provided by a third-party developer — you may be subject to that provider's own data collection practices. dost77 recommends reviewing the privacy policies of any third-party services you interact with.

dost77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, dost77 will:

• Update the "Last Updated" date at the top of this Policy.
• Notify registered Members via email to their registered address describing the nature of the change.
• Display a prominent notice on the dost77 platform for at least 14 days following the change.

Continued use of the dost77 platform following notification of a Policy update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should stop using the platform and contact us to close your account.

For any questions, requests, or complaints related to the handling of your personal data by dost77, please contact us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Request" or "Privacy Complaint" for priority routing to the dost77 privacy team. Expect acknowledgement within 48 hours and a substantive response within 30 days.
• Live Chat: Available 24/7 in English from within your dost77 Account dashboard. For complex privacy matters, we recommend email so that you have a written record of the correspondence.

If you are not satisfied with dost77's response to a privacy complaint, you may have the right to escalate the matter to an appropriate regulatory body. dost77 will cooperate fully with any regulatory investigation into our data practices.

This Privacy Policy was last revised on 1 January 2026 and supersedes all prior versions. dost77 — Pakistan's trusted online gaming destination.