77xk Privacy Policy — How We Protect & Handle Your Personal Data

77xk ("we", "us", "our", "the Company") is committed to protecting the personal data of all users who access the 77xk online casino and sports betting platform at 77xk.org ("the Platform"). This Privacy Policy ("Policy") describes our data processing practices in connection with the operation of the Platform and all services provided through it.

This Policy is intended to be read alongside 77xk's Terms & Conditions, which govern the overall use of the Platform, and our Responsible Gaming Policy. Together, these three documents form the complete framework governing a player's relationship with 77xk. By creating a 77xk account or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

We recognise that Pakistani players, like all users, have a legitimate expectation that the personal information they share with us will be handled with care, stored securely, and used only for purposes that are reasonable, disclosed, and legally grounded. That expectation is one we take seriously and work to uphold through our technical infrastructure, internal policies, and staff training.

For the purposes of this Privacy Policy, the data controller responsible for the personal data collected through the 77xk Platform is the 77xk operating entity holding the applicable international gaming license. As the data controller, 77xk determines the purposes and means of processing personal data and bears accountability for ensuring that processing is conducted lawfully, fairly, and transparently.

All data protection queries, subject access requests, and formal privacy complaints should be directed to the 77xk Data Protection team at [email protected] with the subject line "Privacy / Data Protection – [your username]". We aim to acknowledge all privacy-related communications within 48 hours and to provide substantive responses within the timeframes specified in applicable data protection law.

77xk collects personal data across several categories depending on how you interact with the Platform. The categories of data we collect, and typical examples within each category, are as follows:

77xk collects personal data through the following channels and mechanisms:

• Direct provision by you: Information you enter during registration, account profile updates, payment method additions, KYC document uploads, live chat conversations, and email correspondence with the support team.
• Automated technical collection: When you access and use the Platform, our systems automatically record technical data including IP addresses, device identifiers, session timestamps, pages visited, and game interactions. This data is collected via server logs, session cookies, and device fingerprinting technology.
• Payment processor data: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or a bank transfer, our payment processing partners share transaction reference data and basic account identifiers with 77xk to enable transaction matching and fraud prevention.
• Third-party identity verification: Where 77xk uses third-party KYC and identity verification service providers, those providers may share verification outcomes (pass/fail), risk scores, and document authentication results with 77xk.
• Fraud prevention and compliance tools: 77xk uses third-party anti-fraud and responsible gaming monitoring tools that may generate derived data about your account behaviour based on analysis of raw gaming and transaction data.

77xk uses the personal data we collect for the following principal purposes. Each purpose is linked to the legal basis set out in Section 6:

• Account creation and management: To register your 77xk account, maintain your player profile, authenticate your identity at login (including two-factor authentication), and provide access to Platform features.
• Transaction processing: To process PKR deposits via JazzCash, EasyPaisa, and bank transfers, and to process withdrawal requests back to your verified payment method. Financial data is used to match transactions, prevent duplicate processing, and reconcile account balances.
• KYC and age verification: To verify your identity and confirm that you are at least 21 years of age before allowing withdrawals and as required by our licensing obligations. Identity documents are reviewed by our KYC team and/or automated verification partners.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent account activity, money laundering, bonus abuse, multi-accounting, and other activities that breach our Terms & Conditions or applicable law. This includes device fingerprinting, IP analysis, and behaviour pattern monitoring.
• Regulatory compliance: To fulfil obligations arising from our international gaming license, including record-keeping, reporting to licensing authorities, and cooperation with lawful law enforcement requests.
• Customer support: To handle your queries, complaints, and disputes through our live chat and email support channels, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming monitoring: To monitor your gaming behaviour against responsible gaming indicators, enforce any limits or restrictions you have set from your account settings, and proactively reach out if our monitoring systems identify patterns associated with problem gambling.
• Marketing communications: To send promotional offers, bonus notifications, and product updates where you have provided consent or where we have a legitimate interest in marketing to existing customers within permitted limits. You may opt out at any time from account settings.
• Platform improvement: To analyse aggregate usage patterns, game popularity, feature adoption, and technical performance in order to improve the 77xk Platform for all players.

77xk processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contract performance: Processing necessary to fulfil our obligations under the Terms & Conditions you have agreed to — including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing necessary for compliance with our international gaming license requirements, anti-money laundering obligations, age verification mandates, and responses to lawful authority requests.
• Legitimate interests: Processing carried out in furtherance of 77xk's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, and aggregate analytics. We conduct a balancing test before relying on this basis.
• Consent: Processing for marketing communications and optional personalisation features where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting prior processing.
• Vital interests: In limited circumstances, where processing is necessary to protect the vital interests of a data subject — for example, where a player discloses a gambling addiction or mental health crisis that requires urgent welfare intervention.

77xk does not sell your personal data to third parties. We share personal data only in the following defined circumstances and only with parties who are bound by appropriate data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and Visa/Mastercard network processors receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• KYC verification providers: Third-party identity verification and anti-money laundering screening services receive identity document images and personal identifiers for verification processing. These services are contractually bound to use data only for verification purposes.
• Game software providers: Casino game providers (including live dealer studios) receive a pseudonymous player identifier and bet/game data to operate game rounds. They do not receive your full name, contact details, or payment information.
• Fraud prevention and security services: Third-party fraud detection platforms receive technical data (IP addresses, device fingerprints, behavioural data) for fraud scoring and analysis.
• Responsible gaming monitoring services: Where 77xk uses third-party tools to support responsible gaming monitoring, those tools may process gaming behaviour data in pseudonymised form.
• Legal and regulatory authorities: 77xk will disclose personal data to courts, law enforcement agencies, regulatory bodies, and licensing authorities where required to do so by law, court order, or valid legal process. Where legally permissible, we will endeavour to notify you of such disclosure.
• Corporate group and successors: In the event of a merger, acquisition, or reorganisation of the 77xk business, personal data may be transferred to a successor entity, subject to equivalent data protection commitments.

77xk operates under an international gaming license and our infrastructure, support teams, and service providers may be located in various countries. As a result, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in Pakistan or your jurisdiction.

Wherever personal data is transferred internationally, 77xk implements appropriate safeguards to ensure an adequate level of protection. Such safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Binding corporate rules where transfers occur within the 77xk corporate group.
• Adequacy decisions where data is transferred to countries recognised as providing adequate data protection.
• Contractual obligations requiring receiving parties to maintain data security standards equivalent to those applied by 77xk.

By using the 77xk Platform, you acknowledge that your personal data may be transferred internationally under these safeguards.

77xk retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law, licensing obligations, or legitimate business needs. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

77xk uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website that enables the site to recognise your device on subsequent visits. 77xk uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security cookies, and load-balancing cookies. They cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: Enable enhanced functionality and personalisation such as remembering your preferred language, game lobby view settings, and whether you have dismissed certain notifications. Disabling these cookies may affect Platform functionality.
• Analytics Cookies: Used to collect aggregated information about how players use the Platform — which pages are visited most, how long sessions last, and where players encounter errors. This data helps 77xk improve the Platform. Analytics data is anonymised before processing.
• Fraud Prevention Cookies: Support our fraud detection systems by identifying device characteristics and detecting unusual access patterns. These cookies are essential for platform security.

In addition to cookies, 77xk uses device fingerprinting technology to identify unique device characteristics for fraud prevention and security purposes. This technology operates at the application level and supplements cookie-based identification, particularly where cookies have been disabled or cleared.

77xk implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the 77xk Platform is encrypted using TLS 1.2 or higher (256-bit SSL encryption), equivalent to the standard used by Pakistan's leading digital banks.
• Encryption at rest: Sensitive personal data and financial information stored in our databases is encrypted at rest using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. They are hashed using bcrypt with a salt, making it computationally infeasible to reverse-engineer passwords from stored hashes even in a data breach scenario.
• Access controls: Access to personal data systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data are subject to enhanced vetting, mandatory data protection training, and contractual confidentiality obligations.
• Two-factor authentication: 77xk supports optional two-factor authentication for player accounts via SMS OTP. Staff access to administrative systems requires mandatory two-factor authentication.
• Penetration testing and security audits: 77xk engages third-party security firms to conduct periodic penetration tests and security audits of the Platform infrastructure.
• Incident response: 77xk maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, 77xk will notify you and, where required, the relevant regulatory authority, within the timeframes required by applicable law.

Depending on your jurisdiction and applicable data protection law, you may hold some or all of the following rights in relation to your personal data held by 77xk. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request – [your username]".

We will verify your identity before processing any data rights request to protect against fraudulent requests. We aim to respond substantively to all requests within 30 calendar days. In complex cases, this may be extended by a further 60 days with notice to you.

77xk processes personal data specifically in support of our responsible gaming obligations. This includes data collected through your use of responsible gaming tools such as deposit limits, session time limits, loss limits, cool-off periods, and self-exclusion. The following specific provisions apply to responsible gaming data:

• Data relating to self-exclusion requests is retained indefinitely for permanent exclusions and for a minimum of six years for time-limited self-exclusions, to prevent re-registration during an exclusion period.
• Gaming behaviour data used for responsible gaming monitoring (bet frequency, session duration, loss chasing patterns) is processed under our legitimate interest in protecting player welfare and our licensing obligation to maintain responsible gaming systems.
• Where a player contacts 77xk support to disclose concerns about their gambling behaviour, communications relating to that disclosure are treated with heightened confidentiality and are accessible only to the 77xk responsible gaming team.
• 77xk may use automated analysis of gaming data to identify patterns associated with problem gambling. Where such patterns are identified, a member of our team may reach out proactively. This processing is carried out under our legitimate interest in player welfare and our licensing obligations.

For more information about responsible gaming tools and support resources, please visit our Responsible Gaming page.

The 77xk Platform is strictly intended for individuals who are 21 years of age or older. 77xk does not knowingly collect personal data from anyone under the age of 21. We enforce age verification as part of the KYC process and require all players to confirm their age during registration.

If 77xk becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately close the associated account, delete the personal data to the extent permitted by law, and take appropriate steps to prevent further access. Any funds deposited by a minor will be returned to the originating payment method after deduction of any amounts required for regulatory reporting purposes.

77xk may use your contact details to send you promotional offers, bonus notifications, new game announcements, PSL betting specials, and other marketing content where you have consented to receive such communications or where we have a legitimate interest in communicating with existing customers in accordance with applicable law.

Marketing communications from 77xk may be delivered via SMS to your registered Pakistani mobile number, via email to your registered address, and via in-platform notifications visible when you are logged into the Platform. We do not make automated outbound telephone calls for marketing purposes.

You may opt out of marketing communications at any time by:

• Updating your marketing preferences in Account Settings after logging in to the Platform.
• Replying "STOP" to any marketing SMS received from 77xk.
• Contacting the 77xk support team at [email protected] and requesting removal from marketing lists.

Opt-out requests will be processed within 7 business days. Please note that opting out of marketing does not affect transactional and account-related communications, which will continue to be sent as necessary for the operation of your account (e.g. deposit confirmations, withdrawal notifications, and security alerts).

77xk reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. Material changes to this Policy will be communicated to registered players via the registered email address and/or by a prominent notice displayed on the 77xk Platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page and in the page header. We recommend bookmarking this page and reviewing it periodically, particularly after receiving any notification of an update. Your continued use of the 77xk Platform after the effective date of a revised Policy constitutes your acceptance of the revised terms, unless consent is required and separately obtained for specific new processing activities.

Archived versions of previous Privacy Policies are available on request by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or 77xk's data processing practices, please contact our Data Protection team through the following channels:

• Email: [email protected] — Please include "Privacy / Data Protection" in the subject line and your account username in the body of the message.
• Live Chat: Available 24/7 on the 77xk Platform. Identify your query as a privacy matter at the start of the conversation for priority routing to the appropriate team.

77xk aims to acknowledge all privacy-related communications within 48 hours. Substantive responses to data rights requests will be provided within 30 calendar days. If you are dissatisfied with our response, you have the right to escalate your complaint formally by writing to our Compliance Department at the same email address with the subject line "Formal Privacy Complaint – [your username]".