Privacy Policy – d77 Pakistan Online Gaming Platform

1Introduction

d77 is an online gaming and sports betting platform operating for players in Pakistan. This Privacy Policy describes how d77 collects, uses, stores and protects the personal information of registered users and visitors to the platform, including the website and the d77 mobile app.

By registering an account on d77, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here. If you do not agree, please do not register or continue using the platform.

This policy applies to all personal data collected through d77, regardless of the device or method used to access the platform – whether through a browser on your phone, the downloadable app, or any other interface. References to "d77", "we", "us" or "our" throughout this document refer to the d77 platform and its operating team.

2Data We Collect

d77 collects personal information at different points during your use of the platform. The main categories are:

• Registration data: Full name, date of birth, email address, username and password when you create an account.
• Identity verification data: Government-issued ID or other verification documents requested during KYC (Know Your Customer) checks.
• Payment data: Transaction amounts, payment method type, and the last few digits of the account or card used. Full payment credentials are processed by the payment provider, not stored directly by d77.
• Device and technical data: IP address, browser type, operating system, device identifiers and session timestamps collected automatically when you access the platform.
• Usage data: Games played, bets placed, deposit and withdrawal history, time spent on platform, and interactions with promotions and bonuses.
• Communications data: Messages sent to d77 support, including live chat transcripts and email correspondence.

We do not collect sensitive personal information such as biometric data, health records or information about political or religious views. All data collection is limited to what is necessary for the operation of your account and the security of the platform.

3How We Use Your Data

The personal information collected by d77 is used for the following purposes:

• Account management: Creating and maintaining your account, processing logins and verifying your identity when required.
• Payment processing: Facilitating deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfers and other supported methods.
• Fraud prevention and security: Monitoring for suspicious activity, detecting duplicate accounts, preventing unauthorised access and protecting against financial crime.
• Platform improvement: Analysing usage patterns to improve game performance, loading speed and overall user experience on both the website and the app.
• Customer support: Responding to queries, resolving disputes, processing account requests and improving support response quality.
• Promotions and bonuses: Determining eligibility for offers, crediting bonuses and communicating relevant promotional information to opted-in players.
• Responsible gaming: Using activity data to identify patterns that may indicate problematic play and enabling voluntary tools such as deposit limits and self-exclusion.
• Legal compliance: Retaining records as required by applicable laws and cooperating with lawful requests from competent authorities.

4Payment Data & PKR Transactions

All financial transactions on d77 are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank transfer or a debit/credit card, the actual payment credentials – such as your JazzCash PIN, bank account number or card details – are entered directly into the payment provider's secure interface and are not stored by d77.

What d77 does retain is a transaction record that includes the amount, date, payment method type and the outcome of the transaction (successful, pending or failed). This information is used for account balance management, withdrawal processing and dispute resolution.

Transaction records are retained for a minimum of five years from the date of the transaction for accounting and compliance purposes. This retention period applies regardless of whether your account is active or closed.

5Cookies & Tracking Technologies

d77 uses cookies and similar technologies to operate the platform efficiently. A cookie is a small text file stored on your device that helps the platform remember your session, preferences and certain activity data between visits.

The cookies used by d77 fall into the following categories:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Store your preferences such as language setting, preferred payment method and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Used internally to understand how players navigate the platform, which games are most popular and where technical issues are occurring. This data is aggregated and not linked to individual identifiable records for analytical purposes.

d77 does not use third-party advertising cookies or allow external ad networks to place tracking pixels on the platform. You can manage cookie preferences through your browser settings, though disabling essential cookies may prevent the platform from working correctly.

6Sharing Your Data

d77 does not sell, rent or trade your personal information. However, in the course of operating the platform, your data may be shared with a limited set of third parties in specific circumstances:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card networks receive the information required to process your transactions. Each provider operates under its own privacy and security standards.
• Identity verification services: When KYC checks are required, your submitted documents may be processed by a third-party verification provider. These providers are contractually bound to handle your data securely and only for the purpose of verification.
• Technical infrastructure providers: Hosting, cloud storage and content delivery services that support the operation of d77 may have access to data as part of their service. These providers do not use your data for any purpose beyond fulfilling their service obligations to d77.
• Legal and regulatory authorities: d77 will disclose personal data to competent authorities when required to do so by applicable law, court order or other lawful process. This is not discretionary and applies regardless of account status.

Any third party that d77 shares data with is required to handle that data in accordance with appropriate security standards and only for the stated purpose. d77 does not permit third parties to use your data for their own marketing or commercial purposes.

7Data Retention

d77 retains personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. Different categories of data are held for different periods:

• Account data (name, email, date of birth): Retained for the duration of the account and for a period after closure as required for fraud prevention and legal compliance.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Identity verification documents: Retained for the duration required by applicable verification and compliance standards, typically five years from the date of last account activity.
• Support communications: Chat transcripts and email records retained for up to two years from the date of the interaction.
• Analytics and usage data: Aggregated usage data retained indefinitely in anonymised form; individual session logs retained for up to twelve months.

When data is no longer required and its retention period has expired, it is securely deleted or anonymised so that it can no longer be linked to any individual account.

8Your Rights Over Your Data

As a registered player on d77, you have the following rights in relation to your personal data. To exercise any of these rights, contact the d77 support team with your registered email address and a description of your request.

• Right of access: You can request a copy of the personal data d77 holds about you. We will respond within a reasonable timeframe and provide the information in a readable format.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected. For some types of data, such as name or date of birth, additional verification may be required.
• Right to deletion: You can request that your account and associated personal data be deleted. Note that transaction records, verification documents and any data subject to a legal retention obligation cannot be deleted before the applicable retention period has expired.
• Right to restrict processing: In certain circumstances, you can request that d77 stop actively processing your data while a query or dispute is being resolved.
• Right to data portability: You can request a structured, machine-readable copy of the data you have provided to d77.

9Security Measures

d77 takes the security of your personal and financial data seriously. The platform employs a combination of technical and operational controls to protect against unauthorised access, data breaches and misuse.

• Encryption in transit: All data transmitted between your device and d77's servers is encrypted using TLS (Transport Layer Security). This applies to the website, the mobile app and all API communications.
• Encryption at rest: Sensitive data stored on d77's servers is encrypted at rest, meaning that even in the unlikely event of a server being accessed without authorisation, the data remains unreadable.
• Access controls: Internal access to personal data is restricted to authorised staff on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Fraud monitoring: d77 uses automated systems to detect unusual account activity, multiple account registrations from the same device, and patterns consistent with account takeover attempts.
• Secure passwords: Passwords are stored in hashed form. d77 does not have access to your plaintext password. If you forget your password, a reset process is used rather than password retrieval.

While d77 uses industry-standard security measures, no system is entirely immune to risk. You can contribute to your own account security by using a strong, unique password, enabling any available account protection features and logging out when using shared devices.

10Children's Privacy

d77 is an adult platform and is strictly not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If a player is found to be under 18, their account will be closed immediately and any deposit balance returned after verification, in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor has created an account on d77 or provided us with personal information, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

11Updates to This Policy

d77 may update this Privacy Policy from time to time to reflect changes in how the platform operates, new services we introduce, or requirements under applicable law. When significant changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Continued use of d77 following any update to this policy constitutes acceptance of the revised version. We recommend reviewing this page periodically, particularly if you receive a notification about a policy change. Archived versions of this policy are available from our support team on request.

12Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how d77 handles your personal information, please reach out to our support team. We are available 24 hours a day, seven days a week.

• Live chat: Available directly within the d77 platform and app. Fastest response times, typically under five minutes.
• Email: [email protected] – please include your registered email address and a clear description of your query.
• Subject line for data requests: Use "Data Request – [your registered email]" to ensure your message is routed to the right team quickly.

For questions specifically about responsible gaming tools such as deposit limits, session reminders or self-exclusion, visit our Responsible Gaming page or ask the support team directly.