dost77 Privacy Policy — How We Protect Your Personal Data

dost77 ("we," "us," "our," or "the Platform") operates the online sports betting and casino platform accessible at dost77.pro. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by dost77. The term "personal data" refers to any information that identifies or could reasonably be used to identify you as an individual, including your name, contact details, payment information, device identifiers, and account activity records.

This Privacy Policy applies to all users of the dost77 platform, including registered players from Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions from which the platform is accessed. By creating a dost77 account, making a deposit, or continuing to use the platform after the effective date of this Policy, you confirm that you have read and understood how dost77 handles your personal data.

This Privacy Policy should be read alongside the dost77 Terms and Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

For the purposes of applicable data protection law, dost77 acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, dost77 determines the purposes for which and the means by which your personal data is processed.

If you have any questions about how dost77 processes your personal data, or if you wish to exercise any of the rights set out in Section 11 of this Policy, you may contact our data protection team directly using the contact details provided in Section 15.

dost77 collects the following categories of personal data from players and platform visitors:

dost77 does not knowingly collect sensitive personal data such as biometric data (other than where required for liveness checks during KYC), health information, religious beliefs, or political opinions. Where the KYC process requires document photography or liveness verification, that data is used solely for identity verification and is processed in accordance with the applicable legal basis described in Section 6.

dost77 collects personal data through the following means:

4.1 Direct Collection

Information you provide directly to dost77 when you register an account, complete identity verification, make a deposit or withdrawal request, contact our support team, or respond to any survey or communication from dost77.

4.2 Automated Collection

Technical and usage data collected automatically when you access the dost77 platform, including through cookies, web server logs, and similar tracking technologies. This data is collected to ensure platform performance, detect fraud, and improve the user experience. See Section 12 for full details on our use of cookies.

4.3 Third-Party Sources

dost77 may receive personal data about you from third parties in certain circumstances, including:

• Payment service providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) confirming transaction details;
• Identity verification and KYC service providers that assist in document authentication;
• Fraud prevention and AML screening databases that alert dost77 to potentially suspicious account activity;
• Analytics and attribution partners that help dost77 understand how players discover the platform.

dost77 uses the personal data it collects for the following purposes:

• Account creation and management: To register your dost77 account, verify your identity, maintain your account, and enable you to log in and access platform services;
• Transaction processing: To process PKR deposits and withdrawals through your chosen payment method and maintain accurate financial records;
• KYC and compliance: To verify your age (21+), identity, and eligibility to use the dost77 platform in accordance with applicable gaming regulations and AML obligations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and any other activity that violates dost77's Terms and Conditions;
• Platform operation and improvement: To maintain and improve platform performance, diagnose technical issues, and develop new features based on user behaviour patterns;
• Customer support: To respond to your queries, complaints, and support requests efficiently and accurately;
• Responsible gaming: To monitor account activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion;
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates — subject to your communication preferences and applicable consent requirements;
• Legal and regulatory obligations: To comply with applicable laws, regulatory requirements, court orders, and requests from authorised governmental bodies.

dost77 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under the dost77 Terms and Conditions, including account management, transaction processing, and platform access;
• Legal obligation: Processing required to comply with applicable gaming regulations, AML laws, KYC requirements, and other mandatory legal obligations;
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, business analytics, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing purposes, optional analytics, and non-essential cookies — where we have obtained your prior consent and you retain the right to withdraw consent at any time.

dost77 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing use. Your personal data may be shared in the following limited and controlled circumstances:

7.1 Service Providers

dost77 shares data with carefully selected third-party service providers who assist in operating the platform, including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK), KYC and identity verification providers, customer support platform operators, fraud detection services, and cloud infrastructure providers. All service providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to dost77.

7.2 Game and Software Providers

Certain technical data (such as session identifiers and game round references) may be shared with our casino game and sportsbook software providers solely for the purpose of enabling game operation, RNG certification, and technical support. These providers are contractually prohibited from using your data for any other purpose.

7.3 Legal and Regulatory Authorities

dost77 may be required to disclose your personal data to regulators, law enforcement agencies, financial intelligence units, or courts where required by law, court order, or regulatory mandate. dost77 will comply with such requirements and, where legally permitted, will notify affected players of any such disclosure.

7.4 Business Transfers

In the event that dost77 undergoes a merger, acquisition, or sale of all or part of its business assets, player personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and their rights in respect of their data.

As an internationally operated platform, dost77 may transfer your personal data to servers and service providers located outside Pakistan. Where such transfers occur, dost77 ensures that appropriate safeguards are in place to protect your data, including contractual data transfer agreements that impose data protection standards equivalent to those applicable under dost77's operating jurisdiction.

dost77's primary data infrastructure uses encrypted cloud services with data centres located in jurisdictions that maintain robust data protection standards. All international data transfers are conducted under strict access controls and encryption protocols. If you would like more information about the safeguards dost77 applies to international data transfers, please contact us using the details in Section 15.

dost77 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, dost77 will securely delete or anonymise your personal data such that it can no longer be associated with you as an individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

dost77 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, loss, or destruction. These measures include:

• SSL 256-bit encryption applied to all data transmitted between your device and the dost77 platform;
• Encrypted data storage for all personal data held on dost77 servers, including financial records and KYC documents;
• Access controls restricting internal access to personal data to authorised personnel with a legitimate operational need;
• Two-factor authentication options available to players for account login security;
• Regular security audits conducted by independent cybersecurity professionals to identify and remediate potential vulnerabilities;
• Automated fraud detection systems that monitor account activity in real time for unusual patterns or suspicious behaviour.

While dost77 implements industry-standard security measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. Players are responsible for maintaining the confidentiality of their dost77 login credentials and should contact us immediately if they suspect any unauthorised access to their account.

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data dost77 holds about you:

To exercise any of the above rights, please contact the dost77 data protection team using the details in Section 15. dost77 will respond to all valid data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case dost77 will notify you of the extension and the reason for it.

Please note that certain rights are subject to limitations where dost77 is required to retain your data to comply with legal obligations — for example, AML record-keeping requirements may prevent immediate erasure of financial transaction records.

The dost77 website uses cookies and similar tracking technologies to improve your experience, maintain your session, and analyse platform usage. Cookies are small text files stored on your device when you visit the dost77 website. dost77 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the dost77 platform, including session management, authentication, and security functions. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, to personalise your experience.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players navigate the dost77 platform, enabling us to identify and fix usability issues and improve the overall experience.
• Marketing and attribution cookies: Used to measure the effectiveness of marketing campaigns and understand how players discover dost77. These cookies are only placed with your prior consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookie categories may affect the functionality of the dost77 platform. Consent for non-essential cookies may also be managed through the dost77 cookie preference centre accessible on the platform.

dost77 does not knowingly collect personal data from individuals under 21 years of age. Where dost77 discovers or has reasonable grounds to suspect that personal data has been collected from an underage individual, dost77 will immediately close the associated account, delete the personal data in question (subject to any mandatory legal retention obligations), and return any deposited funds to the originating payment method.

Parents and guardians who believe their child may have registered an account on dost77 are encouraged to contact us immediately using the details in Section 15 so that we can investigate and take appropriate action without delay.

dost77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Material changes to this Policy will be communicated to registered players by notification on the dost77 platform or by message to the Player's registered mobile number, with a minimum of fourteen (14) days' notice before the revised Policy takes effect.

The effective date at the top of this Privacy Policy reflects the date on which the current version came into force. We encourage players to review this Policy periodically to remain informed about how dost77 protects their data. Continued use of the dost77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dost77 handles your personal data, you can reach our data protection and support team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for data-related enquiries
• Live Chat: Available on all pages of the dost77 platform, 24 hours a day, 7 days a week

dost77 is committed to resolving all privacy-related queries promptly and professionally. For formal data subject access requests, please provide your full registered name and mobile number so we can locate and verify your account before processing the request.