Privacy Policy – How 77ad Collects, Uses and Protects Your Personal Data in Pakistan

1 Who We Are and What This Policy Covers

This Privacy Policy applies to the 77ad online gaming platform operated at 77ad.im. When this policy refers to "77ad", "we", "us", or "our", it means the entity operating 77ad.im and all associated services including the casino game library, sports and cricket betting, fishing games, Teen Patti, Ludo games, live dealer tables, and the VIP Club loyalty programme.

This policy covers all personal data that 77ad collects from you when you: browse the 77ad website; create a 77ad account; deposit or withdraw funds; play games; contact 77ad support; or participate in promotions and tournaments. It applies regardless of whether you access 77ad on a mobile device, tablet, or desktop browser.

2 Personal Data We Collect

Data You Provide Directly

When you register a 77ad account, you provide us with personal data that is necessary to create and operate your account. This includes:

• Your full legal name as it appears on your CNIC
• Your Pakistani CNIC number (collected at KYC verification)
• Your date of birth (for age verification — 77ad is 18+ only)
• Your Pakistani mobile number (used as your account identifier and for OTP authentication)
• Your email address
• Your city and province of residence
• The password you create for your account (stored in hashed, non-reversible form — 77ad does not store plain-text passwords)

Data Generated by Your Activity

When you use the 77ad platform, we automatically collect data about your activity that is necessary to provide and improve the service:

• Login times, session durations, and logout records
• Game play history: which games you played, bet amounts, outcomes, and timestamps
• Deposit and withdrawal transaction records including amounts, payment methods, and timestamps
• Bonus claims and wagering progress data
• Customer support interactions including chat logs and email correspondence
• Device type, operating system version, and browser type (used for technical support and compatibility)
• Your IP address at login and during play sessions (used for security and fraud detection)

Data From KYC Documents

To comply with our licence obligations and anti-money laundering requirements, 77ad collects identity and address verification documents. See Section 6 for full details on how KYC data is handled.

3 How 77ad Uses Your Personal Data

77ad uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent. The purposes for which 77ad processes your personal data are:

Account Operation

Your registration data is used to create and maintain your 77ad account, authenticate your logins, and communicate with you about your account status including deposit confirmations, withdrawal receipts, and security alerts. This processing is essential — without it, we cannot provide you with a 77ad account.

Payment Processing

Your payment details and transaction data are used to process deposits and withdrawals in PKR through your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard. Payment data is also used for fraud detection and prevention and to reconcile your transaction history.

Regulatory Compliance and Anti-Money Laundering

77ad is obligated under its gaming licence to verify the identity of all players before processing withdrawals, to monitor for suspicious financial activity, and to report certain transactions to relevant authorities if required. This processing is a legal requirement — it cannot be opted out of as a condition of using the platform.

Responsible Gaming Monitoring

77ad uses play history data — session lengths, bet sizes, deposit frequency, and loss patterns — to identify accounts that may be showing signs of problem gaming. Where such patterns are identified, 77ad may proactively contact the player and offer responsible gaming support tools. This processing is in the legitimate interest of player welfare.

Security and Fraud Prevention

IP addresses, device data, and login patterns are analysed by 77ad's security systems to detect and prevent unauthorised account access, fraudulent payment activity, and attempts to circumvent platform rules including multi-account creation and bonus abuse. This processing is essential to protecting all 77ad players.

Service Improvement

Aggregated, anonymised usage data is used by 77ad to understand how the platform is used, which games and features are popular, and where technical issues occur. This data is not linked to individual player profiles and is used solely to improve the platform for all users.

Marketing Communications (Opt-In Only)

If you have opted in to marketing communications during registration or in your account settings, 77ad will send you promotional emails and SMS messages about bonuses, new games, and platform features. You can withdraw your marketing consent at any time through your account settings or by contacting support.

4 Legal Basis for Processing

77ad processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to create and operate your account, process payments, and provide the gaming services you have signed up for.
• Legal Obligation: Processing required to comply with KYC and AML obligations under 77ad's gaming licence, including identity verification and transaction monitoring.
• Legitimate Interest: Processing for fraud prevention, security monitoring, responsible gaming monitoring, and anonymised service improvement analytics — where this does not override your privacy rights.
• Consent: Processing for optional marketing communications, which you may withdraw at any time without affecting your account.

5 Who We Share Your Data With

77ad does not sell your personal data to any third party under any circumstances. We share your data only with the following categories of recipients, only to the extent necessary for the stated purpose, and only where we have confirmed they maintain data protection standards equivalent to our own:

Payment Service Providers

To process deposits and withdrawals, 77ad shares necessary transaction data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank for IBFT transfers, or Visa/Mastercard networks. The data shared is limited to what is necessary to authorise and complete the specific transaction. These providers operate under their own privacy policies which apply to the data they hold independently.

Identity Verification Providers

For KYC purposes, 77ad may use a third-party identity verification service to validate CNIC documents against official records. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.

Licensing Authority

77ad is required under the terms of its gaming licence to share certain data with the relevant regulatory authority when requested. This includes transaction records, identity verification outcomes, and responsible gaming case files where relevant to a regulatory audit or investigation.

Technology and Hosting Providers

The 77ad platform is hosted on servers operated by contracted infrastructure providers. These providers have access to data stored on their infrastructure as necessary to perform maintenance and ensure uptime, but are contractually bound by strict confidentiality and data protection obligations.

Legal and Law Enforcement

77ad may disclose personal data where required to do so by a valid court order, regulatory requirement, or other legal obligation. In such cases, 77ad will disclose only the minimum data required and will, where legally permitted, notify the affected player of the disclosure.

6 KYC and Identity Verification Data

Identity verification (KYC) is a mandatory requirement under 77ad's gaming licence. The data collected during KYC — CNIC images, proof of address documents, and payment method verification — is treated with a higher level of security than standard account data and is subject to the following specific handling rules:

• KYC documents are stored in an encrypted, access-controlled repository separate from general account data.
• Access to KYC document files is restricted to specifically authorised compliance staff who require access to perform verification duties.
• KYC documents are not shared with any third party other than the identity verification provider used to validate CNIC data and the licensing authority when required by regulation.
• KYC documents are retained for the period specified by 77ad's licensing requirements after account closure, after which they are securely destroyed.
• 77ad will never use KYC documents for any purpose other than identity verification and regulatory compliance.

If your KYC submission is unsuccessful, 77ad will advise you of the reason and request alternative documentation where permitted. You will not be penalised for initial KYC failure provided you supply valid documentation promptly.

7 Payment Data and Financial Information

77ad is committed to keeping your financial information secure and private. The following rules apply specifically to payment data:

What 77ad Stores

77ad stores a record of your transactions — deposit amounts, dates, payment method type (e.g., Easypaisa, JazzCash), and transaction reference numbers. This transaction history is available to you in your 77ad account statement at all times and is retained for the dispute resolution and regulatory periods described in Section 9.

What 77ad Does Not Store

77ad does not store full card numbers, CVV codes, or Easypaisa/JazzCash PINs. Card payment processing on 77ad is handled through a PCI DSS-compliant payment gateway that tokenises card data — meaning your full card details are never transmitted to or stored on 77ad servers.

Anti-Money Laundering Monitoring

As required by our licence, 77ad's systems monitor transaction patterns for indicators of money laundering or other financial crime. This monitoring is automated and is not a personal surveillance of individual players. Transactions that trigger AML rules are reviewed by 77ad's compliance team before any player-facing action is taken.

8 Data Security Measures

77ad implements technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and 77ad servers is encrypted using TLS 1.3 / 256-bit SSL — the same encryption standard used by international banks.
• At-Rest Encryption: Sensitive data stored on 77ad servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: Passwords are stored using one-way cryptographic hashing with salt. Even 77ad's own technical staff cannot retrieve your plain-text password.
• Access Controls: Access to production systems and player data is restricted to authorised personnel only, based on the minimum access principle — staff are given only the data access necessary for their specific role.
• Security Monitoring: 77ad operates continuous automated security monitoring to detect unusual access patterns, brute-force attempts, and other potential threats in real time.
• Regular Penetration Testing: 77ad commissions regular independent security audits and penetration tests to identify and address vulnerabilities before they can be exploited.

9 Data Retention Periods

77ad does not retain your personal data for longer than is necessary for the purpose for which it was collected, or for longer than is required by applicable regulation. The following retention periods apply:

• Account Data (name, contact details, account settings): Retained for the duration of your active account plus five years after permanent account closure, as required by our licensing obligations for dispute resolution and regulatory audit purposes.
• Transaction Records (deposits, withdrawals, game play history): Retained for seven years from the date of the transaction, as required by anti-money laundering regulations applicable to licensed gaming operators.
• KYC Documents (CNIC images, proof of address): Retained for five years from the date of account closure, after which they are securely destroyed by deletion from encrypted storage.
• Customer Support Records (chat logs, email correspondence): Retained for three years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, plus one year after opt-out for proof-of-consent documentation purposes.
• Security Logs (IP address logs, login records): Retained for 90 days for active fraud investigation purposes, after which raw logs are deleted and only aggregated anomaly data is retained.

When a retention period expires, 77ad deletes or anonymises the relevant data. You may also request early deletion of certain categories of data under your right to erasure described in Section 10, subject to any overriding legal retention requirements.

10 Your Data Rights as a 77ad Player

As a 77ad player, you have the following rights in relation to your personal data. To exercise any of these rights, email support@77ad.im with the subject line "Data Rights Request" and your registered mobile number. 77ad will respond within 30 days of receiving a valid request.

11 Cookies and Tracking Technologies

77ad uses cookies and similar technologies on the 77ad.im website to enable essential functions, maintain your login session, and improve your browsing experience. The following types of cookies are used:

You can control and delete cookies through your browser settings at any time. Disabling essential cookies will affect the functionality of your 77ad account. 77ad does not use third-party advertising cookies or tracking pixels for marketing retargeting purposes.

12 Children's Privacy

77ad is strictly for users aged 18 and above. 77ad does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted at account registration and before the first withdrawal. If 77ad becomes aware that personal data has been collected from a person under 18, that account will be immediately suspended, the data will be deleted, and any deposit balance will be returned.

If you are a parent or guardian and believe your child under 18 has created a 77ad account, please contact support@77ad.im immediately with the account's registered mobile number. 77ad will investigate and take appropriate action promptly.

13 Updates to This Privacy Policy

77ad may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our privacy practices. When material changes are made, 77ad will notify all registered players via email or SMS to their registered contact details at least 14 days before the changes take effect.

The updated policy will be published on this page with a revised "Last Updated" date. We recommend bookmarking this page and reviewing it periodically, particularly after receiving an update notification from 77ad. Continued use of the 77ad platform after the effective date of any policy change constitutes acceptance of the revised terms.

If you object to any change to this Privacy Policy, you should stop using 77ad and contact support to close your account and request data deletion under your right to erasure before the change takes effect.

14 Contact Us and How to Raise a Complaint

If you have a question about this Privacy Policy, want to exercise a data right, or wish to raise a complaint about how 77ad has handled your personal data, please contact the 77ad data protection team through the following channels. Support is available 24/7 in Urdu and English.