mk777
Privacy Policy

This Privacy Policy is published by mk777, the operator of the online gaming platform accessible at mk777.bio. mk777 operates under an international gaming license and is committed to processing personal data lawfully, transparently, and in accordance with the data protection principles applicable under its regulatory framework.

This Policy governs all personal data collected from individuals who visit, register on, or use the mk777 platform in any capacity — whether as a registered account holder actively placing bets, a visitor browsing the website without an account, or a former player whose account has been closed. The Policy applies equally to all access methods, including desktop browser, mobile browser, and any app-based access.

mk777 acts as the data controller in respect of all personal data collected via the platform. Where mk777 engages third-party service providers to process data on its behalf (for example, payment processors and game software providers), those third parties act as data processors under contractual data processing agreements that impose obligations consistent with this Policy.

This Policy should be read alongside the mk777 Terms & Conditions, which are incorporated herein by reference. In the event of a conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy prevails.

mk777 collects personal data that falls into the following categories. We do not collect data beyond what is necessary for the purposes described in this Policy.

mk777 collects personal data through the following means:

3.1 Information You Provide Directly

When you register an mk777 account, you actively provide identity, contact, and financial data. Additional data is provided when you submit KYC documents, contact mk777 Support, participate in promotions, configure account settings, or communicate with us through any channel. All information you voluntarily submit to mk777 is collected and stored.

3.2 Data Collected Automatically

When you access the mk777 platform — whether you are browsing without an account or actively playing as a logged-in user — technical data is automatically collected via standard web technologies. This includes server logs that capture your IP address, request timestamps, pages visited, and error events. Session cookies and local storage mechanisms also capture technical data during your visit.

3.3 Data from Payment Providers

When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, the relevant payment provider transmits transaction confirmation data to mk777, including transaction reference numbers, timestamps, and amounts. mk777 does not receive raw banking credentials such as PINs or full banking passwords from payment providers.

3.4 Data from Third-Party Game Providers

Third-party game software providers who supply casino games and live dealer studios to the mk777 platform may transmit game session data — including bet amounts, round results, and session duration — to mk777 for account reconciliation, RTP verification, and dispute resolution purposes.

3.5 Data from Anti-Fraud & Compliance Systems

mk777 uses automated systems and third-party compliance services to screen accounts for fraud indicators, underage access attempts, and AML red flags. These systems may cross-reference submitted identity information against publicly available databases as part of the KYC and AML compliance process.

mk777 uses personal data only for lawful, specified purposes. The specific uses of each data category are set out below:

• Account management: Creating, maintaining, and administering your mk777 account, including processing login requests, applying account settings, and managing your PKR Wallet balance;
• Identity verification (KYC): Verifying that you meet the age requirement (21+) and confirming your identity in compliance with our gaming license obligations, using CNIC and other submitted documentation;
• Payment processing: Facilitating deposits to and withdrawals from your mk777 account via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT; reconciling transaction records; investigating payment disputes;
• Game operation: Running casino games and sportsbook markets, calculating and crediting winnings, applying bonus funds, and resolving gaming disputes using session and transaction logs;
• Customer support: Responding to queries submitted via live chat or email, investigating complaints, processing responsible gaming tool requests, and managing account security incidents;
• Fraud prevention and AML compliance: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct using automated monitoring systems and manual review;
• Responsible gaming: Monitoring account behaviour for indicators of problem gambling, enforcing self-imposed limits, processing self-exclusion requests, and applying mandatory account restrictions where required by licensing obligations;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, game selection, and customer service quality;
• Marketing communications: Sending promotional emails and SMS notifications to users who have not opted out, subject to the marketing preferences set in account settings (see Section 14);
• Legal and regulatory compliance: Retaining records as required by our gaming license, responding to lawful requests from regulatory authorities, and fulfilling any other legal obligations applicable to mk777.

mk777 processes personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you have contracted for by registering an mk777 account, including account management, payment processing, and game operation;
• Legal obligation: Processing required to comply with our gaming license conditions, KYC and AML regulations, and any other applicable legal requirements;
• Legitimate interests: Processing conducted in pursuit of legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and certain optional features, where you have given explicit consent. Consent may be withdrawn at any time by updating your notification preferences in account settings.

mk777 does not sell your personal data to third parties for their independent marketing or commercial purposes. Personal data is shared only in the following circumstances and with the following categories of recipient:

6.1 Service Providers (Data Processors)

mk777 engages third-party service providers who process personal data on our behalf under contractual data processing agreements. These include payment processing partners (JazzCash operator Jazz, EasyPaisa operator Telenor Pakistan, HBL, UBL, and Meezan Bank digital payment gateways), game software providers, KYC and AML compliance technology providers, live chat platform operators, and cloud infrastructure providers hosting the mk777 platform. All such providers are contractually bound to process data only as instructed by mk777 and to maintain data security standards consistent with this Policy.

6.2 Regulatory and Law Enforcement Authorities

mk777 may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. mk777 will notify affected users of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of mk777's assets, personal data held by mk777 may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

mk777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse usage patterns. The following cookie categories are used on the mk777 platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against CSRF attacks. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Store your preferences such as language settings, responsible gaming tool configurations, and display preferences. Disabling these cookies will cause your settings to reset on each visit;
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the mk777 platform — pages visited, session duration, navigation paths, and error events. This data helps mk777 identify areas for improvement. Analytics data does not identify individual users;
• Session Integrity Cookies: Support fraud prevention by associating your current session with your device fingerprint and detecting session anomalies that may indicate account compromise or bot activity.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your mk777 account. Cookies set by mk777 are first-party cookies. mk777 does not permit third-party advertising networks to set cookies on the mk777 platform for behavioural advertising purposes.

mk777 retains personal data only for as long as is necessary for the purposes for which it was collected and as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active mk777 account plus a minimum of 5 years following account closure, as required under gaming license and AML obligations;
• Transaction and financial data: Retained for a minimum of 7 years from the date of each transaction to satisfy financial record-keeping requirements;
• Gaming activity logs: Retained for 5 years to support dispute resolution, RTP verification, and regulatory audit requirements;
• Customer support communications: Retained for 3 years from the date of the interaction unless the communication relates to a dispute or regulatory matter, in which case the period is extended to match the relevant dispute resolution or regulatory timeline;
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier;
• Technical and log data: Retained for up to 12 months for fraud prevention and platform security purposes, after which it is deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to you as an individual.

mk777 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:

• 256-bit TLS/SSL encryption applied to all data transmitted between your browser and mk777's servers, preventing interception during transmission;
• Encryption at rest for sensitive data fields including CNIC numbers, payment account identifiers, and password hashes stored in mk777's databases;
• Access controls limiting internal access to personal data to mk777 staff and systems with a demonstrable operational need, enforced through role-based access management;
• Penetration testing and vulnerability assessment conducted on the mk777 platform on a regular basis to identify and remediate security weaknesses before they can be exploited;
• Two-factor authentication (2FA) available to all users, and mandatory for internal mk777 staff accessing systems that process personal data;
• Incident response procedures that define the steps mk777 will take in the event of a data breach, including user notification where required under applicable data protection obligations.

Subject to applicable data protection law and our obligations under gaming regulations, you have the following rights in relation to your personal data held by mk777:

• Right of Access: You may request a copy of all personal data mk777 holds about you. mk777 will respond to access requests within 30 days;
• Right to Rectification: If personal data we hold about you is inaccurate or incomplete, you may request correction. Corrections to identity data may require re-submission of KYC documentation;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention. Note that gaming license and AML regulations require mk777 to retain certain records for specified periods even after account closure, which limits the scope of erasure in some cases;
• Right to Restriction: You may request that mk777 temporarily restrict processing of your data while a dispute about its accuracy or use is being resolved;
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider, where technically feasible and where processing is based on consent or contractual necessity;
• Right to Object: You may object to processing based on legitimate interests, including profiling for fraud prevention, where you have compelling grounds relating to your particular situation. You may also object to marketing communications at any time (see Section 14);
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, contact mk777 Support at the email address provided in Section 16. mk777 may require you to verify your identity before processing a rights request. We aim to respond to all rights requests within 30 days; complex or high-volume requests may take up to 60 days, and we will notify you if an extension is required.

If you are a parent or guardian and believe your child has accessed mk777 and provided personal information, please contact mk777 Support immediately at the address in Section 16. mk777 will investigate promptly and take all appropriate action, including deletion of any data collected and permanent closure of any account established by a minor.

mk777 operates with cloud infrastructure and third-party service providers whose servers may be located outside Pakistan. As a result, personal data collected from Pakistani users may be transferred to and processed in countries outside Pakistan for the purposes described in this Policy.

Where such international transfers occur, mk777 ensures that appropriate safeguards are in place to protect the transferred data at a standard consistent with this Policy. These safeguards include contractual data processing agreements with third-party processors that impose data protection obligations equivalent to those applicable to mk777 under its gaming license. mk777 does not transfer personal data to countries or entities that do not provide adequate data protection safeguards.

The mk777 platform integrates services provided by third-party gaming software providers, live dealer studios, and payment processors. These third parties operate under their own privacy policies and data processing terms. While mk777 selects third-party partners carefully and requires appropriate contractual data protection commitments, mk777 is not responsible for the independent data practices of third-party service providers in respect of data collected directly by those providers outside the mk777 platform context.

The mk777 platform may display links to third-party informational resources in certain contexts. mk777 is not responsible for the privacy practices or content of any third-party website accessed via such links. This Privacy Policy applies solely to data processing conducted by mk777 on the mk777 platform.

mk777 may send promotional communications to registered users via email and SMS, including information about bonuses, promotions, new games, sportsbook events (such as PSL season offers), and platform updates. Marketing communications are sent only where you have not opted out of receiving them.

You may opt out of marketing communications at any time through any of the following methods:

• Updating your notification preferences in the mk777 Account Settings panel;
• Clicking the "unsubscribe" link included in any mk777 marketing email;
• Contacting mk777 Support and requesting removal from all marketing communications.

Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts.

mk777 reserves the right to update this Privacy Policy at any time. When material changes are made to the Policy — changes that materially affect how we collect, use, or share your personal data — mk777 will provide notice to registered users via the email address associated with their account, and will update the effective date displayed at the top of this document.

Minor editorial corrections, clarifications, or updates to reflect new data processing activities of equivalent type to those already described will be made without individual notification, though the effective date will be updated. It is your responsibility to review this Policy periodically. Your continued use of the mk777 platform following the posting of an updated Privacy Policy constitutes your acknowledgment of and agreement to the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data mk777 holds about you, please contact us through the following channels:

• Support Email: [email protected] — please include "Privacy" in the subject line for faster routing to the appropriate team;
• Live Chat: Available 24/7 from within the mk777 platform after logging in to your account;
• Response Time: mk777 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days. Where a request requires more time, we will notify you of the extended timeline.

If you have a complaint about how mk777 has handled your personal data, you are encouraged to contact mk777 Support first to seek an internal resolution. If you remain unsatisfied after mk777's response, you may escalate the complaint to the relevant gaming regulatory authority under whose jurisdiction mk777's gaming license is issued.