Privacy Policy — GGR678 Platform
This Privacy Policy explains how GGR678 collects, uses, stores and protects your personal data when you access or use the platform at ggr678.cam. We encourage you to read it carefully alongside our Terms & Conditions before registering an account.
Introduction
GGR678 ("we", "us", "our", "the Operator", "the Platform") is committed to protecting the privacy and personal data of all individuals who use the GGR678 online gaming and sports betting platform accessible at ggr678.cam ("the Platform"). This Privacy Policy ("Policy") sets out how we collect, process, store, share and protect your personal data in connection with your use of the Platform.
This Policy applies to all users of the Platform, including registered account holders and visitors who access the Platform without creating an account. It should be read in conjunction with the GGR678 Terms & Conditions, which are available at /terms-conditions.
By accessing the Platform, registering an account, making a deposit or placing a wager, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described herein. If you do not agree with this Policy, please do not use the Platform.
GGR678 does not claim to be subject to, regulated under, or compliant with any specific Pakistani data protection legislation unless expressly confirmed by the Operator. This Policy reflects the Operator's general privacy practices. Pakistani players are encouraged to review this Policy carefully and to understand how their data is handled. GGR678 does not share personal data with the Government of Pakistan, PTA, State Bank of Pakistan or any Pakistani regulatory authority unless compelled to do so by a valid legal requirement from the Operator's applicable governing jurisdiction.
Definitions
The following terms are used throughout this Policy with the meanings set out below:
Any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, IP address and account activity records.
Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction, whether by automated or manual means.
The entity that determines the purposes and means of processing personal data — in this context, the GGR678 platform Operator.
A third party that processes personal data on behalf of the Data Controller under a contractual arrangement, such as a payment service provider or KYC verification partner.
Small text files placed on your device by the Platform to enable certain functionality, analyse usage and improve the user experience.
Know Your Customer — the identity and document verification process used to confirm a Player's identity, age and the source of funds used on the Platform.
Data Controller
3.1 The Data Controller for the purposes of this Policy is the operator of the GGR678 platform. The Operator's official details, including registered name and jurisdiction, are available through official operator communications. The Platform is accessible at ggr678.cam.
3.2 For all privacy-related enquiries, requests or complaints, please contact the Data Controller using the details set out in Section 15 (Contact Us) of this Policy.
GGR678 does not fabricate licensing or registration details. Operator identity and governing jurisdiction information will be confirmed through official operator channels. This Policy reflects the Operator's privacy practices as applied to the ggr678.cam platform.
Data We Collect
GGR678 collects personal data in the categories set out below. The specific data collected will depend on how you interact with the Platform.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, CNIC / passport number | Account registration; KYC verification |
| Contact Data | Email address, phone number, city of residence (e.g., Karachi, Lahore, Islamabad) | Account registration; support contacts |
| Financial Data | Payment method details, transaction history, PKR deposit and withdrawal amounts | Deposits; withdrawals; account activity |
| Technical Data | IP address, device type, browser type, operating system, session duration | Platform access; login events |
| Usage Data | Pages visited, games played, bets placed, betting history, PSL / cricket market activity | Ongoing platform use |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Support interactions |
| Responsible Gambling Data | Deposit limits set, self-exclusion status, session timer settings | Responsible gambling tool activation |
| Document Data | Copies of identity documents submitted for KYC (CNIC, passport, proof of address) | KYC verification process |
4.2 We do not collect special category personal data (such as health data, racial or ethnic origin, or political opinions) except where strictly required for responsible gambling purposes, such as recording a self-exclusion request or a gambling-harm support referral. Such data is processed solely for that specific purpose and stored securely with restricted access.
How We Collect Data
Personal data is collected through the following channels:
- Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit, contacting support or using any interactive feature of the Platform.
- Automated Technologies: Technical and usage data collected automatically through cookies, server logs and similar tracking technologies when you access the Platform. See Section 10 for full details on cookies.
- Payment Processors: Transaction confirmation data received from payment service providers when you make a deposit or withdrawal, including references to payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These providers are independent of GGR678 and process your financial data under their own privacy policies.
- Third-Party Verification Services: Identity and document verification data received from KYC processing partners acting as Data Processors under contract with the Operator.
- Fraud & AML Screening: Data received from third-party fraud detection and anti-money laundering screening services used to protect the integrity of the Platform.
Purposes & Legal Basis for Processing
We process your personal data only for specified, legitimate purposes and rely on an appropriate legal basis for each processing activity. The principal purposes are as follows:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Contract performance |
| Processing deposits and withdrawals in PKR and other currencies | Contract performance |
| Identity verification (KYC) and age verification | Legal obligation; contract performance |
| Anti-money laundering (AML) screening and fraud prevention | Legal obligation; legitimate interests |
| Responsible gambling monitoring, limit enforcement and self-exclusion management | Legal obligation; legitimate interests; explicit consent |
| Customer support and complaints handling | Contract performance; legitimate interests |
| Platform security, abuse prevention and technical maintenance | Legitimate interests |
| Personalisation of the platform experience and bonus eligibility assessment | Legitimate interests; consent where required |
| Sending promotional communications (where opted in) | Consent |
| Compliance with applicable legal and regulatory obligations | Legal obligation |
6.2 Where we rely on legitimate interests as our legal basis, those interests include maintaining the security and integrity of the Platform, preventing fraud, and providing a high-quality gaming experience. We do not rely on legitimate interests where these would be overridden by your rights and interests.
6.3 Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Data Sharing & Disclosure
7.1 GGR678 does not sell your personal data to third parties for marketing purposes. We disclose personal data to third parties only in the circumstances described below:
- Payment Service Providers: We share transaction data with payment processors to facilitate deposits and withdrawals. Payment providers referenced for the Pakistan market — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are independent entities with their own privacy policies. GGR678 does not claim any partnership or endorsement from these providers.
- KYC Verification Partners: Identity document data is shared with specialist KYC and age verification service providers acting as Data Processors under contract.
- Fraud & AML Services: Technical and transactional data is shared with third-party fraud detection and anti-money laundering screening providers for Platform integrity purposes.
- Game & Technology Providers: Certain usage data may be shared with generic-category game studios and sports data providers to facilitate the provision of games and live sports odds.
- Legal Disclosures: We may disclose personal data to law enforcement, regulatory bodies or courts where required by a valid legal obligation under the laws of the Operator's applicable governing jurisdiction.
- Business Transfers: In the event of a merger, acquisition or sale of all or part of the Operator's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections.
7.2 All Data Processors are required to process personal data only on the Operator's documented instructions and to implement appropriate technical and organisational security measures.
GGR678 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. Payment-provider names referenced on this Platform are contextual references only and do not indicate data-sharing arrangements for marketing purposes.
Data Retention
8.1 We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or operational obligations, whichever is longer.
- Account Data: Retained for the duration of your active account relationship plus a minimum period thereafter as required for legal compliance, audit and dispute resolution purposes.
- Transaction and Financial Records: Retained for the period required under applicable anti-money laundering and financial record-keeping obligations — typically a minimum of five years from the date of the relevant transaction.
- KYC Documents: Retained for the period required under applicable identity verification regulations, typically a minimum of five years from account closure or the last transaction date.
- Support Communications: Retained for a reasonable period sufficient to resolve any ongoing disputes or complaints, and for quality assurance and staff training purposes.
- Responsible Gambling Records: Self-exclusion and limit records are retained for the duration of the exclusion or limit period and for a reasonable period thereafter to ensure compliance.
- Marketing Preferences: Retained until you withdraw consent or request erasure, subject to legal minimum retention requirements.
8.2 Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.
Data Security
9.1 GGR678 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:
- SSL/TLS encryption for data transmitted between your device and the Platform.
- Secure, access-controlled storage systems for personal and financial data.
- Restricted internal access to personal data on a need-to-know basis.
- Regular security assessments and vulnerability monitoring.
- Contractual security obligations imposed on all Data Processors.
9.2 Notwithstanding the above, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security and cannot accept liability for unauthorised access that is beyond our reasonable control.
9.3 You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with any third party. If you believe your account has been accessed without authorisation, contact support immediately at the address in Section 15.
Cookies & Tracking Technologies
10.1 The GGR678 Platform uses cookies and similar tracking technologies to enable essential functionality, analyse usage patterns and improve platform performance. The following categories of cookies may be used:
- Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing cookies and security tokens. These cookies cannot be disabled without impairing Platform functionality.
- Functional Cookies: Used to remember your preferences and settings, such as language, currency (PKR) and display options, so that you do not need to reconfigure the Platform on each visit.
- Analytics Cookies: Used to collect aggregated information about how users interact with the Platform — including pages visited, features used and session duration. This data helps us improve the Platform experience. Analytics data is anonymised where possible.
- Marketing Cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications from GGR678. Marketing cookies are only set with your prior consent.
10.2 You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without preventing you from using the Platform.
10.3 GGR678 does not use cookies or tracking technologies to collect data for sale to third-party advertisers.
Your Rights
Depending on the applicable data protection framework governing the Operator's processing activities, you may have some or all of the following rights in relation to your personal data:
Request a copy of the personal data we hold about you, including the categories of data processed and the purposes of processing.
Request correction of inaccurate or incomplete personal data held in your account record.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Request that we limit the processing of your personal data while a dispute is being investigated or a request is being resolved.
Request a copy of your personal data in a structured, machine-readable format where technically feasible and applicable.
Object to processing based on legitimate interests or direct marketing purposes at any time.
11.2 To exercise any of these rights, please contact us using the details in Section 15. We will respond to verified requests within a reasonable timeframe in accordance with applicable requirements. We may need to verify your identity before acting on a request.
11.3 Certain rights may be subject to exceptions — for example, where erasure of your data would conflict with our legal obligation to retain transaction records under applicable anti-money laundering legislation.
If you have opted in to receive marketing communications from GGR678, you may withdraw that consent at any time by contacting support or adjusting your notification preferences within your account settings. Withdrawing marketing consent will not affect the processing of your data for account management or legal compliance purposes.
Minors
12.1 The GGR678 platform is strictly for adults aged 18 or above, or the higher minimum age required by the Operator's applicable license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.
12.2 If we become aware that personal data has been collected from a person under the minimum required age, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be returned to the deposit source where technically possible, net of any applicable deductions under the Terms & Conditions.
12.3 If you believe that a person under the minimum required age has registered an account on the Platform, please contact us immediately at the details in Section 15.
International Data Transfers
13.1 As an online platform serving an international user base, personal data collected from Pakistani players and users in other jurisdictions may be transferred to and processed in countries outside of Pakistan. These may include countries in which the Operator's servers, Data Processors or service providers are located.
13.2 Where personal data is transferred internationally, the Operator takes reasonable steps to ensure that appropriate safeguards are in place, such as contractual protections imposed on Data Processors. The specific safeguards will depend on the Operator's applicable governing framework.
13.3 By using the Platform, you acknowledge and consent to the transfer of your personal data to locations outside Pakistan for the purposes described in this Policy.
Changes to This Policy
14.1 GGR678 reserves the right to update or amend this Privacy Policy at any time. Updated versions will be published on this page with a revised "Last Updated" date. Where changes are material, we will make reasonable efforts to notify registered account holders via email or in-platform notification.
14.2 Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the Platform and may request account closure.
14.3 The current version of this Policy is always accessible at ggr678.cam/privacy-policy. We recommend reviewing this page periodically to remain informed of any updates.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact the GGR678 Data Controller team:
Support & Privacy Email:
[email protected]
This is a plain-text email address and is not a clickable link. Copy and paste it into your email client. Please include your registered account username and a brief description of your request to help us respond efficiently.
We aim to acknowledge privacy-related requests within a reasonable timeframe and to provide a substantive response without undue delay. Complex requests — such as data access or erasure requests that require identity verification and system review — may take longer. We will keep you informed of progress.
If you remain dissatisfied with our handling of a privacy complaint after raising it with us, you may have the right to refer the matter to the supervisory authority in the Operator's applicable governing jurisdiction.
Six Ways GGR678 Protects Your Data
These are the core data protection principles that underpin how GGR678 handles the personal information of every player on the platform.
All data transmitted between your device and the GGR678 platform is protected by SSL/TLS encryption. Your login credentials, payment details and personal information travel securely over the network.
GGR678 does not sell or rent your personal data to third-party advertisers or data brokers. Payment provider names referenced on the platform are contextual references only — not data-sharing arrangements.
Access, rectification, erasure, restriction and portability rights are documented clearly. Contact support to exercise any of these rights and we will respond within a reasonable timeframe after identity verification.
Data is not kept indefinitely. Retention periods for account data, transaction records and KYC documents are defined by legal obligation and operational need. Data is securely deleted when retention periods expire.
All third-party Data Processors — including KYC partners, payment processors and fraud detection providers — are contractually bound to process your data only on documented instructions and to maintain appropriate security standards.
Cookie categories — strictly necessary, functional, analytics and marketing — are documented clearly. Marketing cookies are only set with your prior consent. You can manage preferences through browser settings.
Questions About Your Privacy?
If anything in this Privacy Policy is unclear, or if you want to exercise a data right, our support team is ready to help. You can also explore the rest of our policy pages for a complete picture of how GGR678 operates.
Adults 18+ only — or the higher minimum required by the operator/license jurisdiction. GGR678 does not claim Pakistani government authorisation. Understanding applicable local law is your responsibility. This page does not constitute legal advice.