gm789 Privacy Policy — How We Collect, Use & Protect Your Personal Data

gm789, operating at the domain gm789.bid, is the data controller responsible for the personal information collected through the gm789 platform. As data controller, gm789 determines the purposes for which and the manner in which any personal data is, or is to be, processed.

gm789 operates under international gaming license oversight. Our platform is specifically designed to serve players located in Pakistan, and all data handling practices described in this Policy are applied uniformly to every account registered on the platform — whether you are accessing gm789 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, or elsewhere in Pakistan.

References to "gm789," "we," "us," or "our" throughout this Policy refer to the gm789 platform and its operators. References to "you," "your," or "player" refer to any individual who creates an account on or otherwise interacts with the gm789 platform.

gm789 collects personal data that is necessary to operate the platform, fulfil our legal obligations, and provide a safe and personalised experience. The categories of data we collect include:

gm789 collects personal data through the following channels:

• Direct Submission: Data you provide directly when registering an account, completing the KYC process, making deposits or withdrawal requests, contacting support, or filling in any forms on the platform.
• Automated Technical Collection: Data collected automatically when you access the gm789 platform, including IP addresses, session identifiers, device fingerprints, browser type, and behavioural interaction data (clicks, page views, game selections).
• Payment Processors: Transaction reference data and confirmation details received from payment partners including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you execute deposits or withdrawals.
• Identity Verification Partners: Results and flags from third-party KYC and anti-fraud services used to verify your identity documents during account verification.
• Cookies and Tracking Technologies: Data collected through browser cookies, session tokens, and similar technologies as described in Section 6 of this Policy.

gm789 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use your data are:

• Contract Performance: To create and manage your gm789 account, process deposits and withdrawals, settle bets and game outcomes, and provide the services you have signed up for.
• Legal Obligation: To comply with anti-money laundering (AML) regulations, age verification requirements, responsible gaming obligations, and any reporting requirements under applicable international gaming license conditions.
• Legitimate Interests: To detect and prevent fraud, bonus abuse, multi-account activity, and other prohibited conduct; to maintain platform security; to improve our games and services based on aggregate usage patterns.
• Consent: To send you marketing communications via SMS and email about promotions, new games, and offers — where you have explicitly opted in to receive such communications.
• Responsible Gaming: To monitor gaming patterns, flag potential problem gambling behaviours, enforce deposit limits and self-exclusion decisions, and apply age-related restrictions.

Know Your Customer (KYC) verification is a mandatory regulatory process that gm789 is required to conduct in accordance with anti-money laundering obligations under our international gaming license conditions. KYC must be completed before any withdrawal is processed and may be requested at any stage of the player relationship.

The KYC process for gm789 players in Pakistan requires submission of:

• A clear photograph of your valid CNIC (National Identity Card) — front and back;
• A selfie or liveness verification image taken at the time of submission to confirm document ownership;
• Proof of payment method — for example, a JazzCash or EasyPaisa transaction confirmation showing your name and account number — for accounts where verification of source of funds is required.

KYC documents are transmitted over encrypted connections, stored in a restricted-access environment, and processed by trained personnel and/or certified third-party verification partners. KYC documents are never shared with any party outside of those with a direct legal or regulatory need to access them.

gm789 retains KYC documents for the period required under applicable AML regulations following account closure, as detailed in Section 8 of this Policy.

The gm789 platform uses cookies and similar technologies — including session tokens, local storage, and browser fingerprinting — to operate core platform functions, enhance user experience, and analyse usage patterns. Cookie types used on gm789 include:

Strictly necessary cookies are placed without consent as they are essential to platform operation. Functional, analytical, and marketing cookies are subject to your consent, which may be managed through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent.

gm789 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared externally only in the following circumstances and with the following categories of recipient:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transaction data necessary to execute deposit and withdrawal requests.
• Identity Verification Providers: Certified KYC and AML compliance partners who assist with document verification and fraud detection. These partners are contractually bound to process your data only for the specified verification purpose.
• Game Providers: Where gm789 hosts games developed by third-party game studios, those providers may receive anonymised session data for game performance and fairness auditing purposes. Full personal identity data is not transmitted to game providers.
• Regulatory & Legal Authorities: gm789 may be required to disclose personal data to gaming regulators, financial intelligence authorities, or law enforcement agencies where required by applicable law, court order, or regulatory direction.
• IT & Infrastructure Service Providers: Cloud hosting, database management, and security service providers who process data on gm789's behalf under strict data processing agreements.

All third parties with whom gm789 shares personal data are contractually required to maintain the confidentiality of that data and to use it only for the purpose for which it was disclosed.

gm789 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your active gm789 account relationship;
• Account & Transaction Records: Retained for a minimum of five (5) years following account closure, in compliance with standard anti-money laundering record-keeping obligations;
• KYC Documents: Retained for a minimum of five (5) years following the end of the account relationship in accordance with AML regulatory requirements;
• Support Communications: Retained for three (3) years following the conclusion of the relevant support matter;
• Marketing Preference Data: Retained until you withdraw consent or update your communication preferences, plus a reasonable period thereafter for evidence of consent;
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud detection purposes.

After applicable retention periods expire, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and platform improvement purposes without privacy implications.

gm789 implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the gm789 platform is encrypted using industry-standard TLS/SSL protocols — the same security standard used by major Pakistani banks and financial institutions.
• Access Controls: Personal data and KYC documents are stored in access-restricted environments. Only personnel with a legitimate operational need are permitted to access specific categories of personal data.
• Two-Factor Authentication: gm789 accounts are protected by OTP-based authentication. Players are strongly encouraged to enable two-factor login verification on their accounts.
• Intrusion Detection & Monitoring: gm789's platform infrastructure is monitored continuously for unusual access patterns, potential intrusions, and security anomalies.
• Vendor Security Assessment: Third-party data processors and KYC partners used by gm789 are subject to security due diligence prior to onboarding and periodic review.

Subject to applicable law and our legitimate operational and regulatory obligations, gm789 recognises and supports the following individual data rights for all players:

To exercise any of the above rights, contact gm789 support via 24/7 Live Chat or email at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

Please note that certain data rights may be limited where the processing of your data is necessary for compliance with legal obligations — for example, we cannot erase KYC records before the mandatory AML retention period has expired.

The gm789 platform is strictly for persons aged 21 years or older. gm789 does not knowingly collect personal data from individuals under the age of 21. Providing false information about age during registration constitutes a breach of our Terms & Conditions.

Where gm789 discovers or has reasonable grounds to believe that personal data has been provided by a person under the age of 21, we will:

• Immediately suspend access to the relevant account;
• Delete personal data associated with the underage account, subject to any legal hold obligations;
• Retain a minimal record of the incident for regulatory reporting and anti-fraud purposes only.

With your consent, gm789 may send you marketing communications about new games, promotions, seasonal offers — including PSL-season cricket betting promotions — and platform updates via SMS to your registered Pakistani mobile number and email.

You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in your gm789 account settings panel;
• Contacting our support team via 24/7 Live Chat and requesting removal from marketing lists;
• Clicking any unsubscribe link included in gm789 marketing emails.

Withdrawal of consent to marketing communications does not affect the lawfulness of processing that occurred based on consent prior to its withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, OTPs, and account security alerts — are not marketing communications and will continue regardless of your marketing preferences.

As gm789 operates under international gaming license oversight and uses globally distributed cloud infrastructure and third-party service providers, your personal data may be transferred to and processed in countries outside of Pakistan. Such transfers may include regions where data protection laws differ from those currently in place in Pakistan.

Wherever personal data is transferred internationally by gm789, we implement appropriate safeguards to ensure that your data receives a level of protection consistent with this Privacy Policy, including:

• Data processing agreements with all international data processors that impose equivalent data protection obligations;
• Use of encryption in transit for all cross-border data transfers;
• Transfer to jurisdictions or processors that maintain adequacy-level data protection standards.

gm789 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Notify active players via account dashboard notification or registered contact details where changes materially affect how your data is processed;
• Where changes require renewed consent (for example, new marketing data uses), request explicit consent before implementing the new processing activity.

Your continued use of the gm789 platform following publication of an updated Privacy Policy constitutes your acceptance of the revised policy. We recommend reviewing this Policy periodically to stay informed of how gm789 handles your personal data.

For all privacy-related enquiries, data access requests, complaints about data handling, or to report a potential data breach, please contact gm789 through the following channels:

• 24/7 Live Chat: Available directly within your gm789 account dashboard — fastest response channel for urgent privacy matters;
• Email: [email protected] — please include "Privacy Request" in the subject line and your account ID in the body of your message;
• Priority Support Hours: 9:00 AM – 11:00 PM Pakistan Standard Time for human agent responses. After-hours requests are logged and actioned at next available opportunity.

gm789 takes all privacy complaints seriously. We will acknowledge your enquiry within 2 business days and aim to provide a full written response within 30 calendar days. Where a complaint cannot be resolved through our internal process, you retain the right to escalate to the relevant supervisory authority.