77ac Privacy Policy

1 Data Controller

1.1 For the purposes of this Privacy Policy, the data controller responsible for the personal data of 77ac players is the operator of the 77ac platform ("77ac," "we," "us"). 77ac operates the online gaming and sports betting platform accessible at 77ac.today.

1.2 As data controller, 77ac determines the purposes and means by which personal data collected through the platform is processed. Where 77ac engages third-party processors — such as payment service providers and identity verification services — those processors act on 77ac's instructions and are bound by data processing agreements that impose data protection obligations consistent with this Privacy Policy.

1.3 All data-related enquiries, access requests, and complaints should be directed to the 77ac data protection contact at [email protected] (displayed as plain text only).

2 Data We Collect

77ac collects the following categories of personal data in the course of providing its services to Pakistani players:

2.1 Registration & Account Data

• Full legal name as it appears on your Pakistani CNIC or passport.
• Date of birth (used to verify compliance with the 21+ age requirement).
• Pakistani mobile number (used for account communications and OTP authentication).
• Email address (used for account notifications and correspondence).
• Username and hashed password (your password is never stored in plain text).
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad).

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of your Pakistani CNIC or passport.
• Proof of address documentation where requested.
• Source of funds documentation for high-volume account activity.
• Selfie photographs or video verification where required by the verification process.

2.3 Financial & Transaction Data

• JazzCash account number, EasyPaisa account number, SadaPay details, or bank account details used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and statuses, all denominated in PKR.
• USDT TRC20 wallet addresses where crypto transactions are used.

2.4 Gaming Activity Data

• Betting history including bet selections, stake amounts, odds, and outcomes.
• Casino game session logs including game titles played, bet sizes, and session durations.
• Bonus usage history and wagering progress.
• Responsible gaming tool activations including deposit limits, loss limits, and self-exclusion events.

2.5 Technical & Device Data

• IP address at the time of login and transaction events.
• Device type, operating system, and browser information.
• Session timestamps and page interaction data.
• Cookie and tracking technology data as described in Section 6.

3 How We Use Your Data

77ac uses the personal data it collects for the following purposes:

4 Legal Basis for Processing

4.1 Contract Performance. The majority of 77ac's data processing is necessary to provide the services you have contracted for by registering an account. This includes creating and managing your account, processing your transactions, and delivering the platform features you use.

4.2 Legal Obligation. Certain processing is required by law, including identity verification under anti-money laundering regulations, retention of financial records, and cooperation with lawful regulatory or law enforcement requests. 77ac cannot waive these obligations at your request.

4.3 Legitimate Interests. 77ac processes some data on the basis of legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics. Where we rely on legitimate interests, we have conducted a balancing assessment to ensure that our interests do not override your privacy rights.

4.4 Consent. Where 77ac seeks your consent to process data — for example, to send you promotional communications — this consent is sought separately and can be withdrawn at any time. Withdrawal of consent does not affect processing already carried out on the basis of that consent prior to its withdrawal.

5 Data Sharing & Third Parties

5.1 77ac does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. Data sharing by 77ac is limited to the following categories of recipient and purpose:

5.1 Payment Service Providers

To process your deposits and withdrawals, 77ac shares necessary payment data with providers including JazzCash, EasyPaisa, SadaPay, Raast, HBL, UBL, and Meezan Bank, as well as USDT TRC20 processing services. These providers receive only the data required to execute the specific transaction.

5.2 Identity Verification Services

77ac uses third-party KYC and identity verification providers to process CNIC documents, verify dates of birth, and conduct sanctions screening. These providers act as data processors under contract with 77ac and are not permitted to use your data for their own purposes.

5.3 Game Content Providers

Third-party casino game providers whose titles appear on 77ac may receive anonymised session data necessary to operate their games. Game providers do not receive your identity, contact, or payment data.

5.4 Regulatory & Law Enforcement

77ac may be required to disclose personal data to regulatory bodies, tax authorities, or law enforcement agencies where required by applicable law, court order, or regulatory demand. 77ac will notify you of any such disclosure where legally permitted to do so.

6 Cookies & Tracking Technologies

6.1 77ac uses cookies and similar tracking technologies on the 77ac.today website to support platform functionality, measure performance, and improve the player experience. The categories of cookies used by 77ac are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 77ac account during a session. These cannot be disabled without impairing your use of the platform.
• Performance & Analytics Cookies: Used to collect anonymised data about how players navigate and use the platform, helping 77ac identify areas for improvement. These do not identify individual users.
• Preference Cookies: Store your platform settings and preferences — such as language and display preferences — so that they persist between sessions.
• Security Cookies: Support fraud detection and account security functions, including login anomaly detection and session integrity verification.

6.2 You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 77ac platform, particularly features that require authentication.

7 Data Security

7.1 77ac implements a layered security architecture to protect the personal data it holds. The technical and organisational measures in place include:

• AES-256 encryption for data at rest across all database systems containing personal information.
• TLS 1.3 encryption for all data transmitted between your device and the 77ac platform.
• Hashed password storage using industry-standard algorithms — your password is never stored in a readable format.
• SMS-based two-factor authentication (2FA) available on all 77ac accounts.
• Role-based access controls restricting staff access to personal data to only those with a genuine operational need.
• Continuous monitoring for unusual account activity and login anomalies.
• Regular security audits and penetration testing of the platform infrastructure.

7.2 Notwithstanding these measures, no online platform can guarantee absolute security. You play an important role in protecting your own account by choosing a strong, unique password, enabling 2FA, and not sharing your login credentials with anyone.

8 Data Retention

8.1 77ac retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal requirements. The following indicative retention periods apply:

• Account and registration data: Retained for the duration of your active account plus five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC and identity verification documents: Retained for five (5) years following account closure as required by financial crime prevention regulations.
• Transaction records: Retained for seven (7) years following the date of each transaction for financial and tax compliance purposes.
• Customer support records: Retained for three (3) years following the resolution of each support interaction.
• Gaming activity logs: Retained for three (3) years to support responsible gaming monitoring and dispute resolution.
• Technical and device logs: Retained for ninety (90) days in standard operations; extended where required for active security investigations.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 77ac's data destruction procedures. Anonymised or aggregated data that cannot be used to identify an individual may be retained for longer periods for analytical purposes.

9 Exercising Your Data Rights

9.1 To exercise any of the data rights described in Section 9 of this Policy — including access, rectification, erasure, restriction, portability, or objection — please submit a request to 77ac by emailing [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and your full name, registered mobile number, and a clear description of the right you wish to exercise.

9.2 77ac will acknowledge data rights requests within five (5) business days and provide a substantive response within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

9.3 Identity verification is required before 77ac can process any data rights request. This is necessary to ensure that personal data is not disclosed to, amended by, or deleted at the request of someone other than the account holder. 77ac will ask you to verify your identity using information associated with your registered account.

9.4 Data rights requests are processed free of charge for reasonable, non-repetitive requests. Where requests are manifestly unfounded, excessive, or repetitive, 77ac reserves the right to charge a reasonable administrative fee or decline to process the request, with written reasons provided.

10 Children's Privacy & Age Restriction

10.1 The 77ac platform is strictly intended for use by individuals aged 21 years and above. 77ac does not knowingly collect personal data from any individual under the age of 21. Age is verified as part of the account registration and KYC process.

10.2 If 77ac discovers or is informed that it has collected personal data from an individual who is under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and steps will be taken to delete it in accordance with applicable law, except where retention is required for regulatory compliance purposes.

10.3 Parents or guardians who believe that a minor may have registered an account with 77ac are encouraged to contact [email protected] immediately so that the matter can be investigated and resolved without delay.

11 International Data Transfers

11.1 In the course of operating the 77ac platform, personal data may be transferred to and processed in countries other than Pakistan, including countries where 77ac's technology infrastructure, payment partners, or game content providers are based. Such transfers occur only where adequate protections are in place, including contractual data protection obligations consistent with the standards set out in this Privacy Policy.

11.2 Where personal data is transferred to third-party processors located outside Pakistan, 77ac ensures that appropriate safeguards are in place — including data processing agreements with standard contractual clauses where applicable — to protect the rights of Pakistani players whose data is being transferred.

11.3 By registering an account with 77ac, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this section, subject to the protections outlined herein.

12 Changes to This Privacy Policy

12.1 77ac reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. All updates will be published on this page at 77ac.today/privacy-policy with the effective date updated accordingly.

12.2 Where an amendment materially changes the way in which 77ac processes your personal data, we will use reasonable efforts to notify you in advance via email or a platform notification. Your continued use of 77ac following publication of any material amendment constitutes your acceptance of the updated Privacy Policy.

12.3 We recommend that you review this page periodically. The effective date at the top of this document indicates when the current version was last updated.

13 Contact & Complaints

13.1 For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 77ac holds about you, please contact us using the following details:

• Email: [email protected] — Subject: "Privacy Enquiry" (plain text only — not a clickable link)
• Live Chat: Available 24/7 from within your logged-in 77ac account.
• Response Time: Privacy enquiries acknowledged within 5 business days; substantive response within 30 days.

13.2 If you are not satisfied with 77ac's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body applicable in your jurisdiction. 77ac will cooperate fully with any such regulatory inquiry.