pak77 Privacy Policy

pak77 ("we", "us", "our" or "pak77") operates the online gambling platform accessible at https://pak77.cam (the "Platform"). This Privacy Policy describes how we collect, use, store, share and protect personal data that you provide to us or that we collect during your use of the Platform.

By registering an account, accessing the Platform or otherwise interacting with pak77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you must not use the Platform.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gambling Policy. In the event of any conflict between these documents, this Privacy Policy governs data-handling matters.

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or indirectly, including name, CNIC number, email address, IP address and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means pak77, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of pak77 under a contractual obligation.
• "User" / "You" means any registered player or visitor accessing the Platform.
• "KYC Data" means identity verification documents and related information including CNIC, passport, proof of address and biometric or liveness-check data.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and analytics.
• "Special Category Data" means particularly sensitive data including health information (relevant in the context of responsible-gambling assessments), which we handle with heightened care.

3.1 Registration and Account Data

When you register on pak77, we collect:

• Full legal name and date of birth;
• Residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or other);
• Valid email address and mobile phone number;
• Username and encrypted password;
• Nationality and country of residence.

3.2 Identity Verification (KYC) Data

To comply with know-your-customer and anti-money-laundering obligations, we may collect:

• A copy of your Pakistan CNIC (Computerized National Identity Card) or passport;
• Proof of residential address (utility bill, bank statement or official correspondence);
• Selfie photograph and/or liveness-verification video;
• Source-of-funds information where required by applicable compliance rules.

3.3 Financial Data

• Deposit and withdrawal transaction records, including method, amount in PKR (or other applicable currency) and timestamps;
• Partial payment account identifiers (e.g., masked card numbers, mobile wallet reference identifiers) as required for transaction reconciliation;
• Account balance history.

3.4 Betting and Gaming Activity Data

• Bet placement and settlement records across sports (cricket, PSL, football, UFC) and casino products;
• Game session timestamps, wager amounts and outcomes;
• Responsible-gambling tool activation history (limit adjustments, self-exclusions, cooling-off requests).

3.5 Technical and Device Data

• IP address and approximate geolocation derived from IP;
• Browser type and version, operating system and device type;
• Session logs, page-visit records and click-path data;
• Cookie identifiers and similar tracking technologies.

3.6 Communications Data

• Support ticket and live-chat transcript records;
• Email and notification correspondence history;
• Feedback, complaints and survey responses.

We collect Personal Data through the following means:

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, place a bet, contact support or respond to a communication from us;
• Automatically — through cookies, server logs and analytics tools as you navigate the Platform;
• From third-party service providers — including KYC verification partners, payment processors and fraud-detection services who process data on our behalf under strict data-processing agreements;
• From publicly available sources — where permitted by applicable law for the purposes of identity verification and fraud prevention.

We will not use your Personal Data for any purpose that is incompatible with the purposes listed above without obtaining your prior consent, unless we are required to do so by law.

Where applicable international data protection law requires, pak77 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — account creation, bet settlement, payment processing;
• Legal obligation: Processing required to comply with applicable KYC, AML, and regulatory requirements;
• Legitimate interests: Fraud prevention, platform security, analytics and service improvement — provided such interests are not overridden by your rights;
• Consent: Where you have provided specific, informed and freely given consent — for example, optional marketing communications, where offered. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

pak77 does not sell, rent or otherwise trade your Personal Data to any third party for their own marketing purposes. We may share your data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage carefully selected third-party processors — including payment gateway operators, KYC verification providers, cloud hosting providers and fraud-detection services — who process data solely on our documented instructions and under binding contractual obligations that include appropriate technical and organisational security measures.

7.2 Legal and Regulatory Authorities

We may be required to disclose Personal Data to law enforcement agencies, regulatory bodies, courts or other government authorities where we are under a legal obligation to do so. We will, where legally permitted, notify you of such disclosure.

7.3 Responsible Gambling Partners

In limited circumstances — for example, where a Player has self-excluded across an operator network — data may be shared with responsible-gambling organisations or operator-group exclusion registries to enforce the exclusion effectively.

7.4 Business Transfers

In the event of a merger, acquisition or sale of all or substantially all of pak77's assets, Personal Data may be transferred to the successor entity. You will be notified of any such transfer and the successor's privacy practices before any change in control takes effect.

pak77 operates with service providers and infrastructure that may be located in countries outside Pakistan. Where Personal Data is transferred to a country that does not have data protection laws equivalent to those in the operator's licensing jurisdiction, we implement appropriate safeguards to protect your data during transfer, which may include standard contractual clauses, adequacy decisions or equivalent transfer mechanisms recognised under applicable law.

By using the Platform, you acknowledge that your Personal Data may be transferred to, stored and processed in jurisdictions outside Pakistan. We take reasonable steps to ensure that any such transfer is conducted securely and in accordance with this Privacy Policy.

We retain your Personal Data for as long as your Account remains active and for the period required thereafter by applicable legal, regulatory and contractual obligations. The following general retention principles apply:

• Account and KYC data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, or longer where required by AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years in line with standard financial record-keeping requirements;
• Betting and gaming history: Retained for the duration of the Account and for three (3) years thereafter;
• Support communications: Retained for three (3) years from the date of the last relevant interaction;
• Technical logs: Typically retained for ninety (90) days to six (6) months, depending on the log type.

Where Personal Data is no longer required for any lawful purpose, it will be securely deleted or anonymised so that it can no longer be associated with you.

pak77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session state and gather analytics about Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core Platform functionality — login sessions, security tokens and preference settings. These cannot be disabled.
• Analytical / Performance Cookies: Used to understand how users navigate the Platform, which pages are most visited and where errors occur. Data collected is aggregated and does not identify you individually.
• Functional Cookies: Used to remember your choices — such as language preference and responsible-gambling tool settings — between sessions.

You can control cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features, but may affect personalisation and some analytical functions.

Depending on the data protection law applicable to your circumstances, you may have the following rights in relation to your Personal Data held by pak77:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed;
• Right of Rectification: You may request that we correct inaccurate or incomplete Personal Data;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected — subject to our legal retention obligations;
• Right to Restrict Processing: You may request that we temporarily suspend processing of your data while a dispute about accuracy or legitimate-interest grounds is resolved;
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests; we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within a reasonable period and respond substantively as required by applicable law. We may ask you to verify your identity before processing any request.

The Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the operator's licensing jurisdiction. pak77 does not knowingly collect Personal Data from any person under the age of 18. If we discover that a minor has provided Personal Data or created an Account, we will immediately close the Account, delete all associated data and, where applicable, report the matter to relevant authorities.

If you believe a minor has registered or provided data on the Platform, please contact us immediately at [email protected] so that we can investigate and take prompt action.

pak77 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• HTTPS / TLS encryption across all Platform pages and API endpoints;
• Encrypted storage of sensitive data at rest, including KYC documents and account credentials;
• Role-based access controls limiting employee and system access to Personal Data on a strict need-to-know basis;
• Secure, HTTPS-only KYC document submission portal — we never request sensitive documents via email, WhatsApp, social media or any unsecured channel;
• Two-factor authentication (2FA) available on all user accounts;
• Regular security reviews of internal data-handling processes and third-party processor compliance.

While we maintain robust security practices, no method of electronic transmission or storage is entirely risk-free. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with applicable law.

pak77 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via the email address associated with their Account and/or through a prominent notice on the Platform prior to the change taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of updated terms constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or the way in which pak77 handles your Personal Data, please contact our Data Support team through the following channels. All communications regarding data rights are handled in English.

• Data Rights & Privacy Email: [email protected] — subject line: "Privacy / Data Rights Request"
• Live Chat: Available 24/7 from your Account dashboard
• Support Ticket: Submit via the Account portal — responses within 24 hours
• Languages: English and Urdu

We will acknowledge all privacy-related requests promptly and respond substantively within the timeframe required by applicable law, typically within thirty (30) calendar days. Identity verification may be required before a request can be actioned.