77cz Privacy Policy

01 Introduction and Scope

This Privacy Policy applies to all personal data collected, stored, and processed by 77cz in connection with the operation of its online gaming platform accessible at https://77cz.app. It applies to all registered members, visitors to the 77cz website, and individuals who interact with 77cz through any digital channel, including the platform's mobile interface.

By registering a 77cz account or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the 77cz Terms & Conditions, which are incorporated by reference.

02 Data Controller Identity

77cz operates as the data controller in respect of the personal data of its members and platform visitors. As data controller, 77cz determines the purposes and means by which your personal data is processed. All data protection enquiries, subject access requests, and privacy complaints should be directed to 77cz using the contact details set out in Section 14 of this Policy.

Where 77cz engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification providers — those providers act as data processors under contractual arrangements that require them to handle your data only on 77cz's documented instructions and to implement appropriate security safeguards.

03 What Personal Data We Collect

77cz collects the minimum personal data necessary to operate a licensed online gaming platform and fulfil its legal obligations. The categories of personal data we collect are set out in the table below:

04 How We Collect Your Data

77cz collects personal data through the following channels:

• Direct interaction: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies each time you access the platform from any device.
• Third-party sources: Identity and fraud-screening data received from KYC verification providers and payment processors where such data is required to verify your identity or assess financial risk in compliance with anti-money laundering obligations.
• Publicly available sources: Information from public registers or databases where necessary to fulfil regulatory compliance obligations, such as sanctions screening or politically exposed person (PEP) checks.

05 Purposes and Legal Basis for Processing

77cz processes your personal data only where a lawful basis exists for doing so. The table below sets out the primary purposes for which your data is processed and the corresponding legal basis:

Where processing is based on your consent — for example, receiving marketing communications about 77cz bonuses or seasonal promotions — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support.

06 Sharing and Disclosure of Data

77cz does not sell your personal data. We may share your data with the following categories of recipients where strictly necessary and under appropriate contractual safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks receive the minimum financial data required to process your PKR transactions. All payment partners are contractually bound to PCI-DSS compliance standards.
• Identity verification providers: KYC and AML screening partners receive identity documents and personal data solely for the purpose of verifying your identity, age, and compliance status.
• Regulatory and law enforcement authorities: 77cz will disclose personal data to competent authorities where required to do so by a valid legal obligation, court order, or regulatory directive. We cannot and will not notify you of such disclosures where prohibited by law.
• IT infrastructure and cloud service providers: Hosting, database, and security service providers process data on 77cz's behalf under data processing agreements that restrict their use of your data to platform operation purposes only.
• Fraud prevention networks: Where fraud is suspected, limited data may be shared with industry fraud prevention databases to protect the platform and other members.

07 Data Retention Periods

77cz retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five years following each transaction, or longer where required by applicable financial regulation.
• Communications data: Support chat transcripts and emails retained for up to two years following the resolution of the relevant enquiry.
• Technical and usage data: Server logs and session data retained for up to 12 months for security monitoring and platform improvement purposes.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Following the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Anonymised or aggregated data may be retained indefinitely for statistical and analytical purposes.

08 Security Measures

77cz implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and 77cz servers.
• AES-256 encryption for sensitive data fields stored at rest, including identity documents and payment reference data.
• Multi-factor authentication options for member accounts, including two-factor authentication (2FA) via registered Pakistani mobile number.
• Role-based access controls ensuring that 77cz staff can access personal data only to the extent required by their specific job function.
• Regular independent security audits and penetration testing of platform infrastructure.
• Real-time fraud detection and anomaly monitoring systems that flag suspicious account activity for immediate review.
• Formal data breach response procedures, including notification to affected members and relevant authorities within legally required timeframes where a qualifying breach occurs.

09 Cookies and Tracking Technologies

77cz uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, analyse usage patterns, and (where consented) deliver relevant promotional content. The categories of cookies used by 77cz are as follows:

• Strictly necessary cookies: Essential for the platform to function. These enable your login session, maintain your PKR balance display, and preserve security tokens. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your language preferences, display settings, and responsible gaming tool configurations across sessions.
• Analytical cookies: Collect anonymised data about how members navigate the 77cz platform, which pages are visited most frequently, and where technical errors occur. This data is used exclusively to improve the platform.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotions. These cookies help 77cz understand which bonus offers and seasonal campaigns are most relevant to your gaming activity.

You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your ability to use core 77cz platform features, though certain personalisation features may become unavailable.

10 Your Rights as a Data Subject

As a 77cz member and data subject, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact 77cz support using the details in Section 14:

• Right of access: You may request a copy of all personal data that 77cz holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by 77cz. Account details can also be updated directly in your member dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that regulatory retention obligations may prevent deletion of certain records for up to five years post-closure.
• Right to restriction: You may request that 77cz restrict processing of your data while a dispute or rectification request is under review.
• Right to data portability: You may request that 77cz provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Data Protection for Minors

77cz gaming services are strictly restricted to individuals aged 21 and above. 77cz does not knowingly collect or process personal data belonging to persons under the age of 21. As part of the registration and KYC process, all members are required to verify that they meet this age requirement.

If 77cz becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed. Any funds deposited by or on behalf of an underage individual will be handled in accordance with the 77cz Terms & Conditions and applicable regulatory guidance.

12 International Data Transfers

As an internationally licensed gaming platform, 77cz may transfer your personal data to servers, service providers, or regulatory bodies located outside Pakistan. Where such transfers occur, 77cz ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the applicable data protection framework governing 77cz's operations.

Safeguards for international transfers may include standard contractual clauses, binding corporate rules where applicable, or transfer to jurisdictions recognised as providing an adequate level of data protection. Details of the safeguards applicable to any specific transfer are available upon written request to 77cz support.

13 Amendments to This Policy

77cz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform operations. Where a material change is made, 77cz will notify registered members by email to the address on file and/or by a prominent notice displayed on the platform prior to the change taking effect.

The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. We recommend reviewing this page periodically to remain informed of how 77cz protects your data. Your continued use of the platform following any amendment constitutes acceptance of the revised Policy.

14 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, please contact the 77cz data protection team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint" for priority routing
• Live Chat: Available 24/7 through the 77cz platform after login — request escalation to the data protection team for formal matters
• Response time: All privacy enquiries acknowledged within 72 hours; formal subject access requests responded to within 30 days

If you are not satisfied with 77cz's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory or regulatory authority under the jurisdiction governing your 77cz account. Details of the applicable authority and complaint procedure are available from 77cz support upon request.