deraja777 Privacy
Policy — Your Data,
Protected

deraja777 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at deraja777.app. For the purposes of this Privacy Policy, deraja777 acts as the data controller in respect of the personal data collected from Pakistani players and visitors to the platform.

This Privacy Policy applies to all personal data collected through the deraja777.app website, through any account registration process, through PKR deposit and withdrawal transactions, through gameplay activity, and through any communications between you and the deraja777 support team.

If you have any questions about this Privacy Policy or about how your personal data is handled by deraja777, please contact our support team via the contact details provided on this website. We will respond to all data-related enquiries within a reasonable timeframe.

deraja777 collects personal data in three ways: data you provide directly during registration and verification, data collected automatically when you use the platform, and data received from third-party payment providers as part of transaction processing. The following table summarises the categories of data we collect:

deraja777 does not intentionally collect sensitive personal data beyond what is strictly required for identity verification, age verification (to confirm 18+ status), and anti-money laundering compliance. We do not collect biometric data, health data, or religious or political affiliation information.

deraja777 processes personal data only where we have a valid legal basis for doing so. The following legal bases apply to our data processing activities:

1. Performance of a Contract: Processing your identity, contact, and financial data to create and manage your account, process PKR deposits and withdrawals, and provide access to games and betting services.
2. Legal Obligation: Processing identity data, financial data, and transaction history to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and age verification legal requirements.
3. Legitimate Interests: Processing technical data and gameplay data to detect fraud, prevent bonus abuse, maintain platform security, improve service quality, and manage responsible gaming obligations.
4. Consent: Processing contact data for optional marketing communications (where you have explicitly opted in). You may withdraw this consent at any time by contacting the support team.

deraja777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data in limited circumstances with the following categories of recipients, and only to the extent necessary:

• Payment Processors: Easypaisa, JazzCash, SadaPay, Raast, and Pakistani banking institutions receive the payment account reference and transaction amount data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Identity Verification Services: Where additional KYC verification is required, identity data may be shared with a certified verification service provider. These providers are bound by strict confidentiality and data protection obligations.
• Game Software Providers: Technical session identifiers (not your personal identity data) may be passed to third-party game software providers to enable gameplay and record game outcomes. Your name, CNIC, and financial data are never passed to game software providers.
• Legal and Regulatory Authorities: Where required by law, court order, or regulatory direction, deraja777 may disclose personal data to relevant Pakistani or international authorities. We will notify affected users of such disclosures to the extent permitted by law.
• Fraud Prevention Services: Transaction data may be shared with fraud detection services to identify and prevent potentially fraudulent activity on the platform. This is processed under our legitimate interests in maintaining platform integrity.

All third parties with whom deraja777 shares personal data are required, by contract, to handle that data securely and only for the specific purpose for which it was shared.

deraja777 takes data security seriously and implements technical and organisational measures appropriate to the risk of the processing activity. These measures include:

• 256-bit SSL encryption on all data transmitted between your browser and deraja777.app.
• Encryption of sensitive data fields (including password hashes and payment account references) at rest in the platform database.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Audit logging of all internal access to personal data records.
• Regular security reviews and penetration testing of the deraja777 platform.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in significant risk to affected individuals, deraja777 will notify relevant parties in accordance with applicable legal obligations and without undue delay.

deraja777.app uses cookies and similar technical tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to understand aggregate patterns of platform usage. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in to your deraja777 account across page loads. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as language setting, display preferences, and last-visited game category to personalise your deraja777 experience.
• Analytics Cookies: Collect anonymised data about how players navigate and use the platform — such as which game categories are visited most frequently — to help deraja777 improve the user experience. Individual player identity is not associated with analytics data.

Most browsers allow you to manage cookie settings through the browser's settings or preferences menu. Blocking strictly necessary cookies will prevent you from logging in to your deraja777 account. Blocking functional and analytics cookies will not affect access to games or your PKR wallet.

deraja777 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the active account relationship and for a period of 5 years following account closure, to comply with AML and financial record-keeping legal obligations.
• Transaction Records (PKR deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of each transaction, in accordance with financial regulatory requirements.
• Identity Verification Documents: Retained for the duration of the account relationship and for 5 years post-account closure, consistent with KYC legal requirements.
• Support Communications: Retained for 2 years from the date of each communication, or longer if related to an open dispute or legal matter.
• Technical and Analytics Data: Anonymised after 12 months and retained in anonymised form for analytical purposes only.

On the expiry of applicable retention periods, personal data is securely deleted or permanently anonymised in accordance with our data disposal procedures.

As a deraja777 player, you have the following rights in relation to the personal data we hold about you. These rights may be subject to limited exceptions in certain circumstances (for example, where retention is required by law):

• Right of Access: You may request a copy of the personal data deraja777 holds about you at any time. We will respond within a reasonable period and provide the data in a structured, readable format.
• Right to Rectification: If any personal data deraja777 holds about you is inaccurate or incomplete, you may request that it be corrected. This is particularly relevant to contact details and address information.
• Right to Erasure: You may request that deraja777 delete the personal data it holds about you. This right is subject to legal retention obligations — we cannot delete transaction records that we are legally required to retain, but we can delete data held beyond legal necessity.
• Right to Restrict Processing: You may request that deraja777 restrict the processing of your personal data in certain circumstances, for example while a data accuracy dispute is under investigation.
• Right to Data Portability: You may request a copy of your personal data in a portable, machine-readable format where processing is based on consent or contract performance.
• Right to Withdraw Consent: Where processing is based on your consent (such as optional marketing communications), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact the deraja777 support team. We will acknowledge your request within 48 hours and complete the relevant action within a reasonable timeframe. We may need to verify your identity before processing data rights requests.

deraja777 reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or platform features. When material changes are made to this policy, we will:

• Update the "Last updated" date at the top of this policy.
• Notify registered players via their registered Pakistan mobile number or email address (where held) prior to the changes taking effect.
• Where changes require renewed consent (for example, a new type of data processing activity based on consent), we will request your explicit agreement before proceeding with the new processing.

Your continued use of the deraja777 platform after notification of material policy changes constitutes acceptance of the updated policy. If you do not agree with any material change to this policy, you should close your account and cease using the platform prior to the change taking effect. Account closure procedures are set out in the deraja777 Terms & Conditions.

The current version of this Privacy Policy is always available at deraja777.app/privacy-policy and supersedes all prior versions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data deraja777 holds about you, please contact our support team. We are available during Pakistan Standard Time business hours via WhatsApp and Telegram. For written privacy enquiries, please use the contact email displayed in the footer of this website.

deraja777 takes all privacy enquiries seriously and commits to acknowledging every privacy-related contact within 48 hours and providing a substantive response within a reasonable timeframe appropriate to the complexity of the request.

For information about your data rights, responsible gaming tools, or account management options, you may also find useful information in our Frequently Asked Questions page.