GG678 Privacy Policy — How We Protect Your Personal Data

1 Introduction

GG678 is an online entertainment platform providing slots, live casino games, sports betting and game shows to players in Pakistan. This Privacy Policy describes how GG678 collects, uses, stores and protects the personal information of users who register for and use our platform.

By creating a GG678 account, downloading the GG678 app or using any part of our platform, you agree to the data practices described in this policy. If you do not agree, please do not register or continue using GG678. This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming policy.

We take privacy seriously and are committed to handling your personal data responsibly. This policy is written in plain English so that Pakistan players can clearly understand what data is collected and why — no legal jargon that leaves you more confused than when you started.

2 Data We Collect

GG678 collects personal data only when it is necessary to provide the platform's services, verify your identity, process transactions and comply with responsible gaming obligations. The categories of data we collect are:

Data Category	Examples	Why It Is Collected
Identity Data	Full name, date of birth, CNIC number	Account registration and age verification
Contact Data	Mobile number, email address	Account access, support communication
Financial Data	PKR transaction history, payment method references	Processing deposits and withdrawals
Usage Data	Games played, bets placed, session durations	Platform improvement, responsible gaming monitoring
Device Data	IP address, device type, browser type	Security, fraud prevention, app optimisation
Verification Documents	CNIC copy, proof of address	Identity verification for withdrawals

We do not collect sensitive personal data such as biometric data, health information or religious affiliation. Data collection is limited strictly to what is required to run your GG678 account safely and in compliance with responsible gaming standards.

3 How We Use Your Data

GG678 uses the personal data collected for the following purposes:

• Account management — creating, maintaining and securing your GG678 account.
• Payment processing — facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and mobile wallets.
• Identity verification — confirming your age and identity to comply with 18+ platform requirements.
• Customer support — resolving queries, disputes and technical issues you raise through live chat or email.
• Responsible gaming — monitoring usage patterns to identify players who may need support and delivering account management tools including deposit limits and self-exclusion.
• Fraud prevention and security — detecting and preventing unauthorised account access, bonus abuse and financial fraud.
• Platform improvement — analysing aggregated, anonymised usage data to improve game selection, performance and user experience.
• Marketing communications — sending promotional offers and bonus notifications, but only to players who have opted in. You can withdraw consent at any time.

4 Payment Data & Security

GG678 processes all player transactions in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast or bank transfer, your payment details are handled with the highest level of security:

• Full payment credentials — including card numbers and mobile wallet PINs — are never stored on GG678 servers.
• Payments are processed through trusted third-party payment processors who operate their own security and compliance standards.
• GG678 retains only the transaction reference, amount, date and payment method type for accounting and dispute resolution purposes.
• All financial data transmission is encrypted using TLS 1.2 or higher.
• Withdrawal requests are verified against your registered identity before processing. This is a security measure to protect you from unauthorised withdrawals.

5 Cookies & Tracking

GG678 uses cookies — small data files stored on your device — to make the platform work properly and to improve your experience. Here is how we use them:

• Essential cookies — required for the platform to function. These maintain your login session, remember your language and currency preferences, and keep your betting slip active. These cannot be disabled without breaking core platform functionality.
• Performance cookies — collect anonymised data about how players use the platform, such as which pages load slowly or which games are most popular. This data is aggregated and cannot identify individual players.
• Security cookies — help detect suspicious login attempts and protect against cross-site request forgery.

GG678 does not use third-party advertising or retargeting cookies. We do not allow ad networks to place tracking cookies on GG678 pages. You can control cookie settings through your browser's privacy settings. Disabling essential cookies may affect your ability to log in and use the platform.

6 Data Sharing

GG678 does not sell, rent or trade your personal data to third parties for commercial purposes. We share data only in the following limited and necessary circumstances:

• Payment processors — we share the minimum necessary payment information with our PKR payment processing partners (JazzCash, Easypaisa, Raast, bank networks) solely to execute your transactions.
• Identity verification providers — we may use third-party identity verification services to confirm your CNIC and age. These providers operate under strict confidentiality obligations.
• Game suppliers — providers such as Pragmatic Play, Evolution Gaming and PG Soft receive your anonymised player ID for game session management. They do not receive your full identity or payment details.
• Legal and compliance obligations — GG678 may disclose personal data when required to do so by law, court order or to protect the platform and its users from fraud or criminal activity.
• Business operations — we use trusted third-party service providers for platform hosting, customer support tools and analytics. These providers access data only as needed to deliver their service and are bound by confidentiality agreements.

Any third party that receives data from GG678 is contractually required to handle it securely, use it only for the specified purpose, and not retain it beyond what is necessary.

7 Data Retention

GG678 retains personal data for as long as your account is active and for a reasonable period after account closure to fulfil legal, accounting and dispute resolution obligations. Specific retention periods are:

• Account and identity data — retained for the duration of your account plus a minimum of five years after closure to meet financial record-keeping requirements.
• Transaction records — PKR deposit and withdrawal records are retained for a minimum of five years in line with standard financial record obligations.
• Support communications — chat logs and email correspondence are retained for up to two years to assist with dispute resolution.
• Usage and session data — retained for up to 24 months for responsible gaming monitoring and platform improvement purposes, then anonymised or deleted.
• Verification documents — CNIC copies and address verification documents are retained for the duration of your account activity plus the applicable retention period and then securely deleted.

When data is no longer required and the retention period has passed, it is securely deleted or anonymised so it can no longer be linked to you as an individual.

8 Your Rights

As a GG678 player you have the following rights regarding your personal data. To exercise any of these rights, contact GG678 support via live chat or the email address listed in the Contact section of this policy.

• Right of access — you can request a copy of all personal data GG678 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to deletion — you can request that GG678 deletes your personal data. We will action this request subject to any legal obligations to retain certain records, particularly financial transaction data.
• Right to restrict processing — you can ask GG678 to limit how we use your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to withdraw consent — where data processing is based on your consent (such as marketing communications), you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to data portability — you can request that your account data be provided in a structured, commonly used format so it can be transferred to another service.

9 Account Security

GG678 implements technical and organisational security measures to protect your personal data against unauthorised access, loss or disclosure. These include:

• TLS encryption on all data transmission between your device and GG678 servers.
• One-way password hashing — your account password is never stored in readable form.
• Two-factor authentication (2FA) available for account login — strongly recommended for all players.
• Automated monitoring for unusual login patterns, multiple failed password attempts and access from unrecognised devices or IP addresses.
• Internal access controls ensuring only authorised GG678 staff can access player account data, and only to the extent required for their specific role.

While GG678 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. You play an important role too — use a strong and unique password for your GG678 account, enable 2FA, and never share your login credentials with anyone. If you suspect unauthorised access to your account, contact GG678 support immediately.

10 Children's Privacy

GG678 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. Age verification is carried out during the registration process and may be repeated at the point of first withdrawal or when account activity raises an age-related concern.

If GG678 discovers that an account has been registered by or on behalf of a person under 18, the account will be closed immediately, all deposits will be returned (less any losses incurred where the age misrepresentation has been confirmed), and all personal data associated with the account will be deleted in accordance with our data retention policy.

If you believe a minor has registered an account on GG678, please contact our support team immediately so we can investigate and take appropriate action.

11 Third-Party Links

The GG678 platform and app do not contain links to external third-party websites for commercial purposes. Any game content delivered through GG678 is provided by our game suppliers within the GG678 platform environment. GG678 is not responsible for the privacy practices of any third-party game suppliers' standalone platforms or websites accessed outside of GG678.

GG678 will never redirect you to an external payment site that does not display a clear association with your chosen payment method (JazzCash, Easypaisa, Raast or your bank). If you are ever redirected to an unfamiliar payment page, do not proceed and contact GG678 support immediately.

12 Policy Updates

GG678 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make material changes, we will notify registered players via the email address associated with their account and display a clear notice on the GG678 platform.

The "Last updated" date at the top of this page reflects when the most recent revision was made. We recommend reviewing this policy periodically. Continued use of the GG678 platform after a notified policy change constitutes acceptance of the updated terms.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how GG678 handles your personal information, please get in touch with us:

• Live chat — available 24/7 directly from your GG678 account dashboard. This is the fastest way to reach us.
• Email — you can also contact our privacy team at [email protected]

We aim to respond to all privacy-related queries within 48 hours. For formal data rights requests (access, deletion, portability), we will respond within 30 days of identity verification.