Your Privacy Matters at 77td

77td is committed to protecting the personal data of every user — from Karachi to Lahore, Islamabad to Faisalabad — who chooses to trust us with their information. We take that trust seriously. This Policy explains, in plain and honest English, exactly what data we handle, why we handle it, and what controls you have over it.

This Policy applies to all personal data processed through the 77td website at 77td.pro, any associated mobile experiences, customer support communications, and all promotional activities conducted under the 77td brand. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of our platform.

77td operates under an international gaming licence. Our data handling practices are aligned with globally recognised data protection principles including those set out under the General Data Protection Regulation (GDPR) framework and applicable AML legislation. Where Pakistani law imposes additional or specific obligations, we observe those as well.

77td collects personal data in two broad categories: data you provide directly, and data we collect automatically through your use of the platform.

2.1 Data You Provide Directly

When you register a 77td account, complete KYC verification, make a deposit or withdrawal, or contact our support team, you provide us with the following categories of personal data:

2.2 Data Collected Automatically

When you browse or use the 77td platform, we automatically collect certain technical and behavioural data to operate the platform effectively and protect against fraud:

• Device & Technical Data: IP address, device type, operating system, browser type, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths through the platform.
• Transaction Data: Full records of deposits, withdrawals, bets placed, bonus claims, and account balance history.
• Location Data: Country and city-level location data derived from your IP address, used for geographic eligibility verification and fraud detection.
• Cookie & Tracking Data: Session identifiers, analytics cookies, and where you have consented, preference and marketing cookies. See Section 8 for full cookie details.

77td collects personal data through the following primary channels:

• Direct interactions: Data you input when registering your account, completing KYC, submitting a deposit or withdrawal request, contacting support, or updating your account settings.
• Automated technologies: Cookies, server logs, and analytics tools embedded in the 77td platform that capture your device and usage data as described in Section 2.2.
• Third-party KYC providers: 77td works with accredited identity verification partners to authenticate government-issued ID documents. These providers process identity data on our behalf under strict data processing agreements.
• Payment processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or crypto networks, the relevant processor confirms transaction status to 77td. We receive only the information necessary to reconcile your account balance.
• Fraud prevention services: 77td uses specialist fraud detection providers that cross-reference certain data points — such as IP address and device fingerprint — against known fraud indicators.
• Publicly available sources: In limited circumstances, and strictly for AML compliance purposes, 77td may consult publicly available sanctions lists, politically exposed persons (PEP) databases, or adverse media sources.

77td uses your personal data only for legitimate purposes directly connected to the operation of the platform and fulfilment of our legal obligations. The table below maps each purpose to the type of data used:

77td processes your personal data on one or more of the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to perform the contract between you and 77td — including account management, deposit processing, withdrawal fulfilment, and game operation. Without this processing, 77td cannot provide its services to you.
• Legal obligation: Processing required for 77td to comply with applicable law — including AML regulations, KYC mandates, and data retention requirements under our international gaming licence conditions.
• Legitimate interests: Processing for purposes where 77td has a genuine legitimate interest that is not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics used to improve the platform.
• Consent: Processing for which 77td has sought and obtained your specific, informed consent — principally the sending of marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

Where 77td relies on legitimate interests as its legal basis, we have conducted a balancing assessment to confirm that our interests do not unduly override your fundamental privacy rights. You may request a copy of this assessment by contacting our support team.

77td does not sell your personal data to any third party, full stop. We share data only where it is genuinely necessary and always under appropriate safeguards. The categories of recipients with whom we share data are:

6.1 Service Providers

77td engages trusted third-party service providers who process data on our behalf under written data processing agreements. These include: KYC and identity verification vendors, payment gateway operators (JazzCash, EasyPaisa, and banking partners), cloud infrastructure providers, anti-fraud and security monitoring services, and customer support software providers. All such providers are contractually prohibited from using your data for any purpose other than delivering the specific service for which they are engaged.

6.2 Legal & Regulatory Authorities

77td is legally obligated to disclose certain data to financial intelligence units, law enforcement agencies, gaming regulators, and tax authorities when required by applicable law or a valid legal order. Such disclosures are made only to the extent required and never more broadly than the law demands.

6.3 Game Software Providers

Certain technical data — such as your session token and game result records — is shared with our licensed game software providers (including Evolution Gaming, Pragmatic Play, and others) solely for the purpose of delivering and auditing game outcomes. These providers do not receive your identity or financial data.

77td retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes. The following retention periods apply:

• Account and identity data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure, as required under AML regulations.
• Financial and transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with anti-money laundering and gaming licence compliance requirements.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC process, or 5 years following account closure — whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, or for the duration of any open dispute.
• Marketing preference data: Retained until you withdraw your consent, after which it is deleted within 30 days.
• Analytics and usage data: Aggregated and anonymised after 24 months; individual session data deleted after 12 months.

Once the applicable retention period expires and no legal obligation requires continued retention, 77td securely deletes or anonymises your personal data in a manner that prevents reconstruction.

77td uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us keep your session active, remember your preferences, and understand how the platform is used.

8.1 Types of Cookies We Use

77td does not use third-party advertising cookies or retargeting pixels. You can manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary or fraud prevention cookies may prevent you from accessing certain features of the 77td platform.

Depending on your jurisdiction and the legal basis on which 77td processes your data, you may have the following rights regarding your personal information. 77td is committed to honouring these rights promptly and without unnecessary friction.

To exercise any of the above rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

77td takes the security of your personal data extremely seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

10.1 Technical Measures

• 256-bit SSL/TLS encryption across all data transmitted between your device and 77td's servers.
• End-to-end encryption for all financial data, including PKR deposit and withdrawal details processed via JazzCash, EasyPaisa, and banking partners.
• Bcrypt password hashing — your password is never stored in plain text and cannot be recovered even by 77td staff.
• Two-factor authentication (2FA) available and strongly encouraged for all 77td accounts.
• Automated intrusion detection systems that monitor for unusual access patterns in real time, 24 hours a day.
• Regular third-party penetration testing conducted by certified security professionals to identify and remediate vulnerabilities before they can be exploited.

10.2 Organisational Measures

• Access to user personal data is restricted on a strict need-to-know basis. Only authorised personnel whose job function requires access can view your data.
• All 77td staff who handle personal data undergo mandatory data protection training on joining and annually thereafter.
• Third-party service providers are vetted for their security practices and contractually bound to maintain standards equivalent to our own.
• 77td maintains a documented incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

77td's platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or retain personal data relating to any individual under the age of 21. The minimum age restriction is enforced through our KYC verification process, which requires all users to provide valid government-issued photo identification confirming their date of birth before their account is activated.

If 77td becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration, a false age declaration, or any other means — we will immediately suspend the relevant account, delete all associated data to the extent permitted by law, and refund any deposits made (less any applicable withholdings required under our licence conditions).

77td's primary user base is in Pakistan, but as an internationally licensed gaming operator, certain data processing activities may involve transferring personal data to servers or service providers located outside Pakistan. Such transfers may occur in connection with cloud infrastructure, KYC verification services, fraud detection systems, or game software delivery.

Where personal data is transferred internationally, 77td ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under our licence conditions. These safeguards include:

• Contractual clauses in agreements with data processors that impose data protection standards consistent with GDPR and applicable international standards.
• Transfer only to jurisdictions or service providers that maintain certified data protection frameworks or equivalent protections.
• Encryption of all data in transit across international networks.

By using the 77td platform, you acknowledge that your personal data may be processed in countries outside Pakistan. If you have questions about the specific safeguards applied to any particular international transfer, please contact us at [email protected].

77td reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. When we make material changes to this Policy, we will take the following steps to ensure you are informed:

• We will update the "Last updated" date at the top of this Policy.
• For material changes that significantly affect how we process your data, we will send a notification to the email address registered with your 77td account at least 14 days before the changes take effect.
• An in-platform notification will be displayed when you next log in to your account following a material policy update.
• The previous version of the Policy will remain accessible on request for a period of 12 months following any update.

Your continued use of the 77td platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using the platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 77td handles your personal data, our dedicated privacy support team is available to assist you. We are committed to responding to all privacy-related queries promptly and transparently.

You can reach us through the following channels:

• Email: [email protected] — use the subject line "Privacy Policy Query" or "Data Rights Request" for fastest routing.
• Live Chat: Available in-platform 24 hours a day, 7 days a week — including PSL match days and public holidays.
• Response time: We aim to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 10 business days.