77com Privacy Policy

This Privacy Policy is issued by 77com ("77com", "we", "us", "our"), the operator of the online gaming platform available at 77com.one and all associated subdomains, mobile applications, and related digital services. 77com acts as the data controller in respect of all personal data collected and processed through the platform.

This Policy applies to all individuals who register an account on the 77com platform, visit our website, contact our support team, or interact with any 77com digital service — including players across Pakistan in cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. By using the 77com platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside the 77com Terms & Conditions, which govern the contractual relationship between 77com and its players. Both documents form part of the binding agreement between you and 77com.

77com collects the following categories of personal data from players and website visitors:

77com does not collect or store full payment card numbers. Card payment processing is handled by our PCI-DSS compliant third-party payment processors. 77com receives only a tokenised reference and the card type/last four digits necessary for transaction matching.

77com collects personal data through the following channels:

• Direct registration: When you create a 77com account, you provide your name, mobile number, email address, date of birth, and city of residence directly via the registration form.
• KYC submission: When you submit identity documents to complete account verification, including CNIC copies and any supporting source-of-funds documentation.
• Financial transactions: When you make deposits or request withdrawals, our payment processing partners share transaction metadata with us for the purposes of account crediting, fraud prevention, and AML compliance.
• Platform usage: We automatically collect technical and behavioural data as you use the 77com website and app, including IP addresses, device identifiers, pages visited, games played, and session duration. This data is collected via server logs, cookies, and similar technologies.
• Customer support interactions: When you contact the 77com support team via live chat, email, or any other channel, we record those communications for quality assurance and dispute resolution purposes.
• Third-party verification providers: Where we use regulated identity verification or fraud screening services to assist with KYC, those providers may return enriched data signals to us as part of the verification result.

Under applicable data protection principles, 77com must have a documented lawful basis for every data processing activity. The table below sets out our primary processing purposes and their respective legal bases:

77com does not sell, rent, or trade your personal data to unaffiliated third parties. We share data only with the following categories of regulated recipients, and only to the extent necessary for the delivery of the services described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard network processors, and their respective technical intermediaries — for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Regulated third-party services that assist with CNIC verification, age confirmation, and source-of-funds screening.
• AML and fraud prevention platforms: Automated screening services that evaluate transaction patterns against known fraud and money laundering indicators.
• Game content providers: Third-party game studios such as Pragmatic Play, Evolution, NetEnt, and Habanero receive limited session data necessary to deliver their games within the 77com platform. These providers operate under their own regulatory frameworks and data processing agreements with 77com.
• Cloud infrastructure and hosting providers: 77com uses reputable international cloud infrastructure providers to host platform data. These providers process data only on our documented instructions and under data processing agreements.
• Regulatory and law enforcement authorities: 77com will disclose personal data to competent authorities where required to do so by applicable law, court order, or the instructions of our licensing authority.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by 77com, subject to binding confidentiality obligations.

All third-party recipients of 77com player data are required to implement appropriate technical and organisational security measures and are contractually restricted from using the data for any purpose other than the one for which it was shared.

77com operates on international infrastructure. As a result, personal data collected from Pakistani players may be transferred to, and stored or processed in, countries outside Pakistan — including within the jurisdiction where 77com holds its gaming licence and in countries where our technology partners maintain data centres.

Where such transfers occur, 77com ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements incorporating standard data protection clauses.
• Transfers only to jurisdictions or recipients that provide an adequate level of data protection as determined by the applicable regulatory framework.
• Technical security measures consistent with those applied to data processed domestically.

You may request further information about the specific safeguards applicable to any international data transfer by contacting the 77com data privacy team at [email protected].

77com retains personal data for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by law or regulation. Our standard retention periods are as follows:

• Account and identity data: Retained for the lifetime of the account, plus a minimum of five (5) years following account closure — required for AML compliance and regulatory audit purposes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction — consistent with standard AML record-keeping requirements.
• KYC documents (CNIC copies, etc.): Retained for a minimum of five (5) years following completion of the customer relationship — subject to any extended periods required by licensing authorities.
• Support communications: Retained for three (3) years following resolution of the relevant interaction or dispute.
• Gaming activity logs: Retained for three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Marketing preference records: Retained until you withdraw consent or for two (2) years following your last active engagement with a marketing communication, whichever comes first.
• Technical/server logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, data is securely deleted or permanently anonymised using methods that prevent re-identification. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

77com takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• Transport encryption: All data exchanged between your device and the 77com platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this is active at all times during your session.
• Data at rest encryption: Personal data stored on 77com servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. 77com staff members are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Two-factor authentication: 77com offers and encourages the use of two-factor authentication (2FA) for all player accounts. 2FA significantly reduces the risk of unauthorised account access even if login credentials are compromised.
• Penetration testing and security audits: The 77com platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities.
• Incident response: 77com maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, affected players will be notified without undue delay and in accordance with applicable regulatory obligations.

The 77com platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure gaming experience. Cookies are small text files stored on your device by your browser when you visit the 77com website.

77com uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate between pages, and security cookies that detect and prevent fraudulent access attempts. These cannot be disabled.
• Functional cookies: Remember your preferences — such as your preferred language, currency display (PKR), and responsible gaming limit settings — so you do not have to re-enter them each session.
• Analytics cookies: Collect anonymised data about how the platform is used — which pages are visited most, how long players stay on each page, and where they navigate from. This data helps 77com improve the platform experience. We use privacy-respecting analytics tools that do not build personal profiles.
• Marketing cookies: Used only with your consent to measure the effectiveness of marketing campaigns and, where applicable, to personalise promotional offers based on your activity patterns. You can opt out of marketing cookies at any time via your account preferences or by contacting support.

You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will prevent the 77com platform from functioning correctly. Instructions for managing cookies are available in your browser's settings menu.

77com respects your rights over your personal data. As a registered player, you have the following rights, which you may exercise at any time by contacting the 77com support team:

To exercise any of the above rights, contact the 77com data privacy team at [email protected] with the subject line "Data Privacy Request" and a description of your request. We will acknowledge your request within two (2) business days and respond fully within thirty (30) calendar days. If more time is required due to the complexity of your request, we will notify you and provide a revised timeline.

The 77com platform is strictly restricted to individuals aged 21 years and above. 77com does not knowingly collect personal data from individuals under the age of 21.

All players are required to complete mandatory KYC age verification — supported by a valid Pakistani CNIC — before any real-money activity is permitted. This process is designed to prevent minors from accessing the platform and is a non-negotiable requirement under our gaming licence obligations.

If 77com becomes aware that personal data belonging to an individual under the age of 21 has been collected — whether due to a misrepresentation or a failure of the verification process — we will take immediate steps to:

• Suspend the relevant account pending investigation.
• Delete all personal data collected from the minor without undue delay.
• Return any deposits made, less any applicable regulatory seizure obligations.
• Notify relevant authorities where required by law.

Parents and guardians who believe a minor may have registered on 77com are encouraged to contact [email protected] immediately. 77com takes all such reports seriously and will investigate and respond within 24 hours.

With your explicit consent, 77com may send you promotional communications regarding new games, bonus offers, PSL betting promotions, platform updates, and other news relevant to your 77com account. Marketing communications may be sent via:

• Email to your registered address.
• SMS to your registered Pakistani mobile number.
• In-platform notifications within your 77com account dashboard.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email.
• Replying "STOP" to any 77com marketing SMS.
• Adjusting your marketing preferences in your account settings.
• Contacting 77com support directly at [email protected].

Opting out of marketing communications does not affect essential service communications such as account verification reminders, withdrawal confirmations, security alerts, or responsible gaming notifications — which are sent regardless of marketing preferences as they are necessary for account management and legal compliance.

77com reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, regulatory obligations, or platform functionality. When material changes are made, 77com will notify registered players via:

• Email to your registered email address at least fourteen (14) days before the revised Policy takes effect.
• A prominent banner notice displayed on the 77com platform during the notification period.
• An updated "Last reviewed" date at the top of this Policy page.

Your continued use of the 77com platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

77com recommends that players review this Privacy Policy periodically — particularly if you have not logged in for an extended period — to stay informed of how your data is being processed.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 77com processes your personal data, please contact the 77com data privacy team using any of the following methods:

• Email: [email protected] — mark your email "Data Privacy Query" or "Privacy Complaint" for fastest routing to the relevant team.
• Live Chat: Available 24/7 directly from your 77com account dashboard. Ask to speak to the data privacy team.
• Languages: Support is available in both English and Urdu.

We will acknowledge all privacy-related queries within two (2) business days and provide a substantive response within thirty (30) calendar days. If a more detailed investigation is required, we will inform you of the extended timeline and keep you updated throughout.

If you are not satisfied with 77com's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in the jurisdiction where 77com holds its gaming licence. Contact details for the appropriate supervisory authority can be provided upon request.