77xc Privacy
Policy

For the purposes of applicable data protection legislation, the data controller responsible for the personal information of 77xc Platform users is the legal entity operating the 77xc online gaming and sports betting platform at the domain 77xc.bid ("77xc," "we," "us," or "our").

77xc operates under international gaming licensing standards and handles personal data in accordance with the principles and requirements set out under those standards, in addition to any data protection obligations applicable in the jurisdictions where our players are located.

By registering a 77xc Account and using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, to the extent that consent is required as a legal basis under applicable law.

77xc collects personal data in the following categories, each of which serves a defined and necessary purpose in the delivery of our services to Pakistani players:

77xc processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted when registering your 77xc Account — including account creation, payment processing, game delivery, and withdrawal management.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, identity verification requirements under our licensing framework, and fraud prevention mandates.
• Legitimate Interests: Processing carried out where 77xc has a legitimate business interest, provided that interest is not overridden by your fundamental rights and freedoms. This includes platform security monitoring, fraud detection, service improvement, and responsible gaming analysis.
• Consent: Processing for which you have provided explicit, freely given, informed consent — primarily in relation to marketing communications. Where consent is the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, 77xc may process personal data where necessary to protect the vital interests of a player or another individual — for example, in a safeguarding context arising from a responsible gaming interaction.

The personal data 77xc collects is used exclusively for the following defined purposes. We do not use personal data for purposes beyond those listed below without first providing notice and, where required, obtaining consent:

• Account Management: Creating, verifying, maintaining, and closing your 77xc Account; processing your 77xc login credentials; managing account security and two-factor authentication.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, and UBL; matching payment references; processing refunds and reversals where applicable.
• KYC and AML Compliance: Verifying your identity using CNIC documentation; conducting anti-money laundering checks; reporting suspicious activity to relevant regulatory bodies where legally required.
• Gaming Services Delivery: Providing access to the 77xc game library, Astar Live tables, sportsbook, and bonus wallet; recording game outcomes and bet settlements; maintaining your transaction history.
• Responsible Gaming: Monitoring gaming activity patterns in connection with responsible gaming obligations; enforcing deposit limits, loss limits, and self-exclusion decisions; conducting proactive outreach where concerning patterns are identified.
• Customer Support: Responding to queries, disputes, and account assistance requests submitted via live chat, email, or any other support channel in Urdu or English.
• Platform Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, bonus abuse, and collusion.
• Service Improvement: Analysing aggregated and anonymised Platform usage data to improve the 77xc product, identify technical issues, and enhance the user experience for Pakistani players.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and event alerts to players who have opted in to marketing communications. You may withdraw marketing consent at any time by contacting support at [email protected].

77xc uses cookies and related tracking technologies on the Platform to ensure correct functionality, maintain secure sessions, and understand how the Platform is used. A cookie is a small text file placed on your device by the Platform when you visit.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in to your 77xc account during a browsing session, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without impairing core functionality.
• Preference Cookies: Store your Platform preferences — such as language selection and display settings — so you do not need to re-configure them on each visit. These are set with your implied consent through your use of the Platform.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players interact with 77xc pages — which sections are visited, how long sessions last, which games are most accessed. This data is processed in aggregate and does not identify you personally.
• Security Cookies: Used in connection with fraud detection and account security monitoring. These may track device fingerprint characteristics across sessions to identify anomalous login behaviour on your 77xc account.

77xc does not sell your personal data to any third party under any circumstances. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the specified purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, and UBL receive the minimum personal and financial data required to process deposit and withdrawal transactions. These providers are contractually bound to use your data only for transaction processing.
• Identity Verification Services: Third-party KYC and AML verification service providers may receive your identity documents and personal details for the purpose of conducting identity verification checks required under 77xc's licensing framework.
• Game Software Providers: Providers of game software — such as slot developers and live dealer studio operators including Astar Live — may receive pseudonymised gaming activity data for the purpose of game delivery, fairness auditing, and RTP certification.
• Regulatory and Legal Authorities: 77xc will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, court order, or regulatory directive — including disclosures required under anti-money laundering legislation.
• Platform Technology Service Providers: Cloud infrastructure, cybersecurity, and technical support providers who process personal data on 77xc's behalf under data processing agreements that bind them to equivalent data protection standards.

All third parties who receive personal data from 77xc are required to maintain appropriate technical and organisational security measures and to process that data only in accordance with our instructions and for the specified purpose.

As a platform serving Pakistani players and operating under an international gaming licensing framework, some of the personal data 77xc collects may be processed by service providers and infrastructure partners located outside Pakistan. Where such transfers occur, 77xc implements appropriate safeguards to ensure your data receives a level of protection equivalent to the standards described in this Privacy Policy.

We take reasonable steps to ensure that any international recipient of your data is subject to security obligations at least as stringent as those described in Section 10 of this Privacy Policy. If you wish to understand the specific safeguards in place for any particular international transfer, please contact us at [email protected].

77xc retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with 77xc's data destruction procedures. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical and product improvement purposes, as it no longer constitutes personal data.

You hold the following rights in respect of your personal data held by 77xc. To exercise any of these rights, please contact us at [email protected] with your full name, registered mobile number, and a clear description of the right you wish to exercise. We will respond within thirty (30) days of receipt of a verified request.

77xc implements a comprehensive set of technical and organisational security measures to protect the personal data of our Pakistani players from unauthorised access, loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and the 77xc Platform is encrypted using TLS 1.3. This applies to your 77xc login credentials, personal profile data, payment information, and all support communications.
• Encryption at Rest: Personal data stored in 77xc databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data and rotated on a defined schedule.
• Access Control: Access to personal data within 77xc is restricted to personnel with a documented business need. Role-based access control (RBAC) is enforced, and access logs are maintained and reviewed periodically.
• Payment Data Isolation: Financial data processed through JazzCash, EasyPaisa, HBL, and UBL payment gateways is not stored on 77xc servers after transaction completion. Payment processing data remains within the respective payment gateway's PCI-compliant environment.
• Two-Factor Authentication: All 77xc internal system access by staff requires multi-factor authentication. Player accounts may additionally be secured with SMS OTP two-factor authentication enabled at the player's discretion.
• Security Monitoring: 77xc operates continuous security monitoring of Platform infrastructure, including intrusion detection, anomaly detection, and real-time alerting on suspicious activity patterns.
• Incident Response: 77xc maintains a documented security incident response procedure. In the event of a personal data breach that poses a risk to affected individuals, we will notify impacted players without undue delay in accordance with applicable notification requirements.

Age verification through CNIC-based KYC is mandatory for all 77xc account withdrawals. Any account found to be held by a person under the age of 21 will be immediately closed, all funds will be returned to source payment methods (net of any losses, which will not be recoverable), and the relevant personal data will be securely deleted in accordance with our data retention policy.

77xc takes the protection of minors seriously and supports responsible gaming initiatives that prevent underage access to online gaming platforms. We actively co-operate with organisations and tools that provide parental controls and underage access prevention in Pakistan and internationally.

77xc reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable regulatory requirements, or industry best practices. The version number and effective date at the top of this document identify the current operative version.

Material Changes: Where a proposed update constitutes a material change to how we process your personal data — for example, a new category of data collected, a new third-party recipient category, or a change to retention periods — 77xc will notify registered players via SMS to their registered Pakistani mobile number and/or via email, no fewer than fourteen (14) days before the amended policy takes effect.

Minor Updates: Non-material updates — such as clarifications of existing language, corrections of typographical errors, or structural reorganisation without substantive change — may be published without advance notice. The effective date will be updated to reflect the revision date.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how 77xc has handled your personal data, please contact our support team:

Complaints: If you are not satisfied with our response to a privacy concern or data subject request, you have the right to escalate your complaint to the relevant data protection supervisory authority applicable in your jurisdiction. 77xc will co-operate fully with any supervisory authority investigation in connection with complaints by our players.

This Privacy Policy was last reviewed and approved by the 77xc compliance function on 1 January 2026. It supersedes all previous versions of the 77xc Privacy Policy and constitutes the complete statement of 77xc's data protection commitments to its players as at the effective date.