77pak Privacy Policy

1 Overview

This Privacy Policy explains how 77pak ("we," "us," "the platform") collects, uses, protects and stores your personal information when you use our website, mobile app or related services. By registering an account or using the platform you agree to the practices described in this policy.

77pak is an online gaming and sports betting platform serving players in Pakistan. We take data protection seriously and are committed to handling your information responsibly. This policy is written in plain English to make it as clear as possible what data we collect and why we need it.

If you have questions about anything in this policy or how your data is handled, you can contact our support team using the details at the end of this document. We aim to respond to privacy inquiries within 48 hours.

2 Data We Collect

When you register and use a 77pak account, we collect several categories of personal information. What we collect depends on how you use the platform, but in general we collect the following:

Account Registration Data

• Full name as it appears on your national ID or payment account
• Date of birth (to verify you are 18 or older)
• Mobile phone number (used for account verification and two-factor authentication)
• Email address (used for account notifications and support)
• Username and password (password is stored in hashed form and is not visible to staff)

Identity Verification Data

• Scanned copies of identity documents (CNIC, passport or driver's license)
• Proof of address documents if requested (utility bill, bank statement)
• Selfie photo holding your ID card (used for enhanced verification)

Payment & Transaction Data

• JazzCash or Easypaisa mobile number used for deposits and withdrawals
• Bank account details if you choose bank transfer as your withdrawal method
• Last four digits of any debit or credit card used for deposits
• Transaction history including deposit amounts, withdrawal requests and transaction timestamps

Usage & Activity Data

• Betting history including stakes placed, outcomes and winnings
• Games played, session duration and gameplay patterns
• Device information including model, operating system, browser type and screen resolution
• IP address and approximate geolocation (city level, not precise GPS coordinates)
• Login timestamps and session activity logs

We only collect data that is necessary for operating the platform, processing transactions, preventing fraud and complying with our internal policies. We do not collect sensitive personal data such as religious beliefs, health information or political opinions.

3 How We Use Your Data

The personal data we collect is used for the following purposes. We do not use your data for any purpose not listed here without your explicit consent.

• Account management: Creating and managing your 77pak account, verifying your identity and maintaining secure access to your account.
• Transaction processing: Processing deposits via JazzCash, Easypaisa, Raast and bank transfers; processing withdrawal requests; maintaining accurate balance records.
• Fraud prevention: Detecting and preventing duplicate accounts, collusion, bonus abuse and other prohibited activity described in our Terms and Conditions.
• Age verification: Ensuring all players are 18 years of age or older as required by our terms.
• Customer support: Responding to your queries, troubleshooting technical issues and resolving disputes.
• Platform improvement: Analysing usage patterns to improve game selection, identify technical issues and optimise user experience.
• Marketing communications: Sending you promotional offers, bonus announcements and news about PSL betting markets or new game releases — only if you have opted in to receive marketing messages.
• Legal compliance: Meeting our internal risk and compliance obligations including anti-money laundering checks and responsible gaming monitoring.

4 Payment Data & Financial Privacy

Payments on 77pak are processed in PKR through third-party payment providers including JazzCash, Easypaisa, Raast and banking partners. Each payment provider operates under its own privacy and security framework. When you initiate a deposit or withdrawal, your payment credentials are submitted directly to the payment gateway — 77pak does not receive or store your JazzCash or Easypaisa PIN, your mobile banking password or your full card number.

What we do retain is a record of the transaction: the amount, the timestamp, the payment method type, the last four digits of a card or the mobile number associated with a wallet, and whether the transaction was successful. This is necessary for balance management, dispute resolution and fraud prevention.

• All payment processing pages are served over HTTPS with 256-bit SSL encryption.
• Payment gateway connections use tokenisation so that sensitive card or wallet data never passes through our servers in plaintext.
• Withdrawal requests are matched to the account holder's verified identity before processing to prevent misdirected payments.
• Deposits from third-party payment accounts are flagged for review — payments must come from accounts registered in the same name as the 77pak account.

5 Cookies & Tracking

77pak uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse how the site is used. Cookies are small text files stored in your browser when you visit the site. They do not contain your password or payment information.

Types of Cookies We Use

• Essential cookies: Required for the platform to function. These keep you logged in, remember your session and ensure bets are placed correctly. These cannot be disabled without breaking core platform features.
• Preference cookies: Remember settings such as your language preference, odds format and notification settings so you don't have to reconfigure them each visit.
• Analytics cookies: Help us understand how players use the platform — which pages are most visited, where users drop off and how long sessions last. This data is aggregated and anonymised.
• Security cookies: Used to detect and prevent fraudulent login attempts and unusual account activity.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Be aware that disabling certain cookies may affect how the platform functions — in particular, blocking essential cookies will prevent you from staying logged in.

The 77pak Android app uses equivalent device-level tracking identifiers (not browser cookies) for session management and analytics. These can be reset from your device's app settings.

6 Data Sharing

We do not sell your personal information. We do not share your data with advertisers or marketing companies. In limited circumstances we share data with trusted third parties who are necessary to operate the platform:

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the transaction data necessary to process deposits and withdrawals.
• Identity verification providers: If enhanced KYC verification is required, your identity documents may be processed by a specialist verification service operating on our behalf under strict data processing agreements.
• Customer support platforms: Support queries may be handled through a third-party support ticketing system. Only the data relevant to your query is accessible to support staff.
• Cloud hosting: Platform data is stored on secure cloud infrastructure. Our hosting providers process data strictly on our instructions and do not use it for their own purposes.

All third parties who process your data on our behalf are bound by data processing agreements requiring them to maintain appropriate security standards and to use your data only for the specific purposes we have instructed.

7 Data Security

Protecting your personal and financial information is a core responsibility for us. We maintain a range of technical and organisational security measures to guard against unauthorised access, disclosure, loss or misuse of your data.

• All web traffic is encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
• Passwords are hashed using a strong one-way hashing algorithm. Even 77pak staff cannot retrieve your original password.
• Sensitive account data is stored in encrypted form in our database. Encryption keys are managed separately from the data they protect.
• Access to player account data is restricted to staff who need it to perform their job — support agents, fraud analysts and platform administrators only.
• Staff access is logged. Any access to your account by our team generates an internal audit record.
• The platform undergoes regular internal security reviews to identify and address vulnerabilities.
• The 77pak Android app stores session tokens in secure device storage and supports biometric authentication to prevent unauthorised access if your phone is lost.

Despite these measures, no online platform can guarantee absolute security. You play an important role in keeping your account safe — use a strong unique password, enable biometric login on the app, and contact support immediately if you suspect unauthorised access to your account.

8 Data Retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards. Specific retention periods by data category are as follows:

• Account and identity data: Retained for the duration of your account and for up to 5 years after permanent account closure. This is primarily to allow resolution of any delayed disputes and to meet our internal record-keeping requirements.
• Transaction records: Deposit, withdrawal and betting records are retained for 5 years from the date of the transaction for financial record-keeping purposes.
• Support correspondence: Support tickets and related communications are retained for 2 years from the date the ticket was closed.
• Marketing preferences: Records of your marketing opt-in or opt-out status are retained for the life of your account and for 1 year after closure.
• Anonymised analytics data: Usage data that has been stripped of personal identifiers may be retained indefinitely for platform improvement purposes.

When the retention period for your data expires, we delete it from our active systems or anonymise it so that it can no longer be linked to you personally.

9 Your Rights

As a 77pak user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team with your account username and a description of your request.

• Right of access: You can request a copy of the personal data we hold about your account. We will provide this within 14 days.
• Right to correction: If any of your personal data is inaccurate — for example your name is misspelled or your contact number is outdated — you can ask us to correct it.
• Right to deletion: You can request that we delete your personal data. We will do so within 90 days of account closure, except where retention is required for dispute resolution or record-keeping purposes.
• Right to restrict processing: You can ask us to stop using your data for certain purposes, such as marketing, while we investigate a complaint or dispute.
• Right to data portability: You can request your account and transaction data in a structured, machine-readable format (CSV).
• Right to withdraw consent: Where data processing is based on your consent, you can withdraw that consent at any time by closing your account or contacting support.

10 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your information is being used, please reach out to our support team. We aim to respond to all privacy-related queries within 48 hours.

You can contact us at: [email protected]

When contacting us about a privacy matter, please include your registered username and a clear description of your request or concern. This helps us locate your account quickly and respond accurately.

This Privacy Policy may be updated from time to time. When we make material changes we will notify registered players via their registered contact details and update the "last updated" date at the top of this page. Continued use of the platform after notification constitutes acceptance of the revised policy.