77cb Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") describes how 77cb ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals who access or use the 77cb online casino, sportsbook, and associated services available at https://77cb.lat and through any related browser-based or mobile interfaces ("the Platform").

77cb is committed to protecting the personal information of all its users in accordance with applicable data protection laws and the requirements of its international gaming licence. This Policy applies to all registered players, prospective players who visit the Platform without registering, and any other individual whose personal data is processed in connection with the operation of 77cb.

By accessing the 77cb Platform, creating an account, or submitting any personal information to 77cb in any form, you acknowledge that you have read this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

2. Data Controller

For the purposes of applicable data protection legislation, 77cb is the data controller responsible for the personal data collected through the Platform. As data controller, 77cb determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with the requirements of its international gaming licence and applicable privacy law.

If you have any questions or concerns regarding the processing of your personal data, or wish to exercise any of the rights described in Section 12 of this Policy, you may contact the 77cb data protection contact point using the details provided in Section 16.

3. Data We Collect

3.1 Registration Data

When you create a 77cb account, we collect the following personal data that you provide directly:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for mandatory age verification).
• Pakistani mobile phone number (primary contact and account verification).
• Email address (account notifications and support communications).
• Residential address (required for KYC verification and AML compliance).
• Username and password (account access credentials — password stored in hashed form only).
• Pakistani CNIC number or passport number (collected during KYC verification if required).

3.2 Identity Verification Documents

As part of the Know Your Customer ("KYC") process required under our gaming licence, we may collect copies of the following documents:

• Pakistani National Identity Card (CNIC) — front and back.
• Pakistani passport — biographical data page.
• Proof of current residential address (e.g., recent utility bill or bank statement).
• Proof of payment method ownership (e.g., screenshot of JazzCash or EasyPaisa account confirming ownership).

3.3 Financial Data

We collect data relating to transactions you conduct through the Platform, including deposit amounts, withdrawal amounts, transaction dates and times, payment method identifiers (such as JazzCash or EasyPaisa account references), and transaction status records. We do not store full payment card numbers; where card payments are processed, they are handled directly by a PCI-DSS compliant payment processor.

3.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including games played, wagers placed, outcomes, session durations, bonus usage, and win/loss history. This data is used for account management, regulatory reporting, responsible gaming monitoring, and fraud prevention purposes.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived from IP.
• Device type, operating system version, and browser type.
• Mobile network operator (e.g., Jazz, Telenor, Zong, Ufone).
• Session timestamps and navigation data within the Platform.
• Referral source (the URL or channel through which you arrived at the Platform).

3.6 Communications Data

We retain records of communications you have with 77cb customer support, including live chat transcripts, email correspondence, and any documents or screenshots you provide in the course of a support interaction. These records are retained for customer service quality management, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

77cb collects personal data through the following primary methods:

• Directly from you — through account registration forms, KYC document submission, deposit and withdrawal requests, bonus opt-ins, support communications, and voluntary information you provide in your account profile.
• Automatically — through cookies, server logs, and tracking technologies that record your interactions with the Platform as described in Section 9 of this Policy.
• From payment processors — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, which provide transaction confirmation data and, where required, identity verification data as part of payment processing.
• From identity verification providers — third-party KYC service providers who assist in verifying the authenticity of identity documents submitted during account verification.
• From fraud prevention services — automated systems that analyse technical and behavioural data to detect and prevent fraudulent account activity.

5. How We Use Your Personal Data

77cb processes your personal data for the following purposes:

77cb will not process your personal data for any purpose that is incompatible with the purposes described above without providing prior notice and, where required, obtaining your consent.

6. Legal Basis for Processing

77cb processes personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, deliver gaming services, and respond to support requests is necessary for the performance of the contract between you and 77cb.
• Legal obligation: Processing for KYC, anti-money laundering, and regulatory reporting purposes is required by our gaming licence and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics is conducted on the basis of 77cb's legitimate interest in operating a secure, compliant, and commercially viable platform.
• Consent: Processing for direct marketing communications is conducted on the basis of your consent, which may be withdrawn at any time by contacting 77cb support or using the unsubscribe option in any marketing communication.

7. Data Sharing with Third Parties

7.1 Categories of Third-Party Recipients

77cb shares personal data with the following categories of third parties where necessary for the operation of the Platform:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank): Receive transaction data and player identity confirmations required to process deposits and withdrawals.
• Game software providers (e.g., Pragmatic Play, NetEnt, Play'n GO): Receive session identifiers and wager data required to operate the relevant game titles. These providers do not receive full identity data.
• KYC and identity verification providers: Receive identity document data for verification processing on behalf of 77cb in fulfilment of licence obligations.
• Fraud prevention and AML service providers: Receive financial and technical data for the purpose of automated fraud and money laundering detection.
• Cloud infrastructure providers: Host Platform data on secure, encrypted servers in certified data centre facilities. Access is restricted to authorised personnel only.
• Regulatory and law enforcement authorities: Receive data where required by law, court order, or a lawful request from a competent authority.

7.2 No Sale of Personal Data

77cb does not sell, rent, or otherwise transfer personal data to third parties for their own marketing or commercial purposes. All third-party data processors who receive 77cb player data are subject to contractual data processing agreements that restrict their use of the data to the specific purpose for which it was shared.

8. Payment Data & JazzCash / EasyPaisa

Given that the majority of 77cb's Pakistani players transact via JazzCash or EasyPaisa, it is important to explain how payment data is handled specifically for these methods.

When you initiate a JazzCash or EasyPaisa deposit, 77cb passes a transaction reference and your registered mobile number to the relevant payment gateway to generate the payment request. 77cb does not store your JazzCash PIN, EasyPaisa PIN, or any equivalent authentication credential. Payment authentication takes place directly between you and your payment provider — 77cb receives only a transaction confirmation result (success or failure) and the transaction reference.

For withdrawals, 77cb stores the mobile number associated with your JazzCash or EasyPaisa wallet in order to process the payout. This data is treated as financial data under this Policy and is subject to the same security and retention controls as all other financial transaction data.

77cb does not store bank account numbers or bank card numbers in raw form. All bank transfer details submitted for withdrawal purposes are encrypted at rest and in transit.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. 77cb uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, maintain your session while you are logged in, and improve your experience.

9.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a session. These cookies cannot be disabled without preventing the Platform from operating.
• Functional cookies: Store your preferences such as language settings and game lobby display preferences.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the Platform, which pages are visited most frequently, and where errors occur. This data is used to improve the Platform's performance and usability.
• Security cookies: Used by fraud detection systems to identify and mitigate suspicious login patterns and bot activity.

9.3 Managing Cookies

You may configure your browser to block or delete cookies. However, disabling essential cookies will prevent you from logging into your 77cb account and using the Platform. Analytics and functional cookies can be disabled without affecting core Platform functionality. Instructions for managing cookies are available in the help documentation of your browser.

10. Data Retention

77cb retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply as a general guide:

• Account registration data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC identity documents: Retained for a minimum of five years following account closure or the completion of the relevant KYC review, whichever is later.
• Gaming activity data: Retained for a minimum of three years for responsible gaming monitoring and regulatory reporting purposes.
• Customer support communications: Retained for three years from the date of the last communication in a support thread.
• Technical and device data (logs): Retained for a maximum of thirteen months from collection unless a fraud or security investigation requires longer retention.
• Marketing preferences data: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

11. Data Security

77cb implements a range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption of all data in transit between your device and 77cb servers.
• Encryption at rest for sensitive data fields including passwords (stored as one-way cryptographic hashes), financial account identifiers, and identity document data.
• Role-based access controls limiting access to personal data to authorised personnel whose job functions require it.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication options for player accounts and mandatory multi-factor authentication for all internal 77cb administrative access.
• Incident response procedures that include prompt notification obligations in the event of a data breach that poses a risk to affected individuals.

Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Players are encouraged to use strong, unique passwords for their 77cb accounts and to contact 77cb support immediately if they suspect unauthorised access to their account.

12. Your Privacy Rights

Subject to applicable law and our gaming licence obligations, you have the following rights with respect to your personal data held by 77cb:

To exercise any of the above rights, please contact 77cb using the details in Section 16. We will acknowledge your request within 5 business days and aim to respond substantively within 30 calendar days. Where the complexity or volume of requests requires additional time, we will notify you and provide an updated timeline. Certain rights may be limited where processing is required for legal compliance or gaming licence obligations.

13. Minors & Age Verification

The 77cb Platform is strictly for individuals aged 21 years and above. 77cb does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process and is reinforced during KYC document verification prior to first withdrawal processing.

Where 77cb becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all associated personal data will be deleted from 77cb's systems in accordance with applicable legal requirements, and any deposits made to the account will be returned to the original payment method.

If you are a parent or guardian and believe that a minor has created a 77cb account without authorisation, please contact 77cb support immediately using the contact details in Section 16 so that appropriate action can be taken without delay.

14. International Data Transfers

As an internationally licensed platform, 77cb may process or store personal data in jurisdictions outside Pakistan. Where personal data is transferred to a country that does not have an equivalent level of data protection to that which applies in the jurisdiction of our gaming licence, 77cb ensures that appropriate safeguards are in place to protect your data. These safeguards include contractual clauses binding recipient organisations to data protection standards consistent with those described in this Policy.

Data transfers to payment processors located in Pakistan — including JazzCash and EasyPaisa — are governed by the data processing agreements described in Section 7 of this Policy and are subject to the applicable Pakistani financial data protection regulations.

15. Changes to This Privacy Policy

77cb reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is collected, used, or shared — will be communicated to registered players via their registered email address at least 14 days before the changes take effect. The updated Policy will be published on this page with a revised effective date.

Your continued use of the 77cb Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any updated Policy, you must contact 77cb to close your account before the new Policy takes effect.

Non-material clarifications or formatting corrections may be made to this Policy at any time without specific notification. The "Last Updated" date at the top of this page will always reflect the most recent revision.

16. Contact & Data Rights Requests

For any questions relating to this Privacy Policy, to exercise any of your data rights described in Section 12, or to report a privacy concern, please contact 77cb using the following details:

Where your request relates to the erasure or portability of personal data, please include a copy of your CNIC or other government-issued ID so that we can verify your identity before processing the request. Identity verification is required to protect your data from being disclosed or deleted based on a fraudulent request made by a third party.