2777cx Privacy Policy

1. Who We Are

1.1  2777cx operates the online gaming and sports betting platform accessible at 2777cx.pro. We are an internationally licensed online gaming operator providing casino games, live dealer tables, sports betting (including cricket and PSL markets), slots, poker variants, and related gaming services to players in Pakistan and other permitted jurisdictions.

1.2  For the purposes of this Privacy Policy, "2777cx", "we", "us", and "our" refer to the operating entity responsible for the 2777cx platform. "You" and "your" refer to any individual who accesses the platform, whether as a registered player or as a visitor.

1.3  2777cx acts as the data controller in respect of all personal data collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party processors to handle data on our behalf, we do so under contractual obligations that require those processors to handle your data in accordance with applicable data protection standards.

1.4  Our primary contact for all data protection enquiries is our player support team, reachable at [email protected]. We aim to acknowledge all data-related correspondence within 48 hours and provide a substantive response within 14 business days.

2. Personal Data We Collect

2.1  2777cx collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of personal data we may collect include:

2.1.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify you meet the 21+ age eligibility requirement);
• Pakistani national identity card (CNIC) number or passport number, where provided for KYC;
• Residential address in Pakistan;
• Contact email address;
• Mobile phone number (used for account security and, where opted in, promotional SMS).

2.1.2 Financial Data

• JazzCash or EasyPaisa mobile wallet account identifiers associated with deposit and withdrawal transactions;
• Bank account details (HBL, UBL, Meezan Bank, or other institutions) where provided for bank transfer withdrawals;
• Transaction history including deposits, withdrawals, and net gaming activity denominated in PKR.

2.1.3 Gaming & Behavioural Data

• Game participation history, bet amounts, wagering patterns, and session durations;
• Sportsbook selections, including cricket and PSL betting markets;
• Responsible gaming tool usage, including deposit limits, cooling-off periods, and self-exclusion requests;
• Customer support interaction records, including chat transcripts and email correspondence.

2.1.4 Technical & Device Data

• IP address and geolocation data derived from your IP at the time of login or deposit;
• Device type, operating system, browser type and version;
• Session timestamps, login history, and platform navigation data collected via server logs and cookies.

3. How We Collect Your Data

3.1  2777cx collects personal data through the following channels:

• Direct submission: Data you actively provide during account registration, the KYC verification process, deposit or withdrawal requests, contact form submissions, and player support interactions;
• Automated platform collection: Technical and behavioural data collected automatically via server logs, session cookies, and platform analytics tools as you interact with the 2777cx platform;
• Third-party payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and banking partners in connection with deposit and withdrawal processing;
• Identity verification providers: Results of automated or assisted identity document verification checks conducted through our KYC compliance partners;
• Fraud and AML screening tools: Risk signals and screening results generated by our anti-fraud and anti-money-laundering monitoring systems based on transactional and behavioural patterns.

4. How We Use Your Personal Data

4.1  2777cx uses the personal data we collect for the following specific purposes:

4.2  We do not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where such processing is strictly necessary for fraud prevention or regulatory compliance. Where automated decisions are taken in such contexts, you have the right to request human review of that decision by contacting [email protected].

5. Legal Basis for Processing

5.1  2777cx processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and 2777cx, including account management, payment processing, and game delivery;
• Legal obligation: Processing required for 2777cx to comply with applicable legal and regulatory obligations, including KYC, AML, and gaming licence compliance requirements;
• Legitimate interests: Processing conducted in pursuit of 2777cx's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics, provided those interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing of your data for optional purposes such as marketing communications and non-essential cookies, which is carried out only where you have provided explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1  2777cx does not sell, rent, or commercially trade your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers engaged to process your deposits and withdrawals. These processors receive only the data required to complete the transaction;
• KYC and identity verification providers: Specialist third-party services engaged to verify the authenticity of identity documents submitted during the KYC process. These providers act as data processors under contractual obligations;
• Game content providers: Licensed game studios whose titles are accessible on the 2777cx platform may receive anonymised session data necessary for RNG certification and game delivery. They do not receive identifiable player data beyond what is required for the relevant game service;
• Regulatory and law enforcement authorities: Where legally required under applicable law or our gaming licence obligations, including in response to valid court orders, regulatory directives, or law enforcement requests;
• Professional advisors: Legal, accounting, and auditing firms engaged by 2777cx on a confidential basis in connection with their professional services.

7. Cookies & Tracking Technologies

7.1  The 2777cx platform uses cookies and similar technologies to ensure the platform functions correctly, to maintain your logged-in session, and to collect anonymised analytics about how the platform is used. We do not deploy advertising cookies or third-party behavioural tracking technologies.

7.2  The types of cookies used on the 2777cx platform are as follows:

• Strictly necessary cookies: Essential for platform operation including session management, security tokens, and load balancing. These cannot be disabled without impairing core platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations across sessions;
• Analytics cookies: Collect anonymised, aggregated data about platform usage patterns to help us improve the 2777cx user experience. No personally identifiable information is transmitted via analytics cookies.

7.3  You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling functional or analytics cookies will not affect your access to core gaming services.

8. Data Retention

8.1  2777cx retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law or our gaming licence obligations.

8.2  The following indicative retention periods apply to key categories of personal data:

• Account and identity data: Retained for the duration of your active account, and for a minimum of five (5) years following permanent account closure, in compliance with AML record-keeping requirements under our international gaming licence;
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by regulatory instruction;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity data: Retained for the duration of your account, and for two (2) years following account closure, for responsible gaming and dispute resolution purposes;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your active marketing consent, plus two (2) years following withdrawal of consent.

8.3  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

9. Data Security

9.1  2777cx implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include, without limitation:

• TLS 1.2 or higher encryption for all data transmitted between your device and 2777cx servers;
• AES-256 encryption for sensitive data at rest, including stored financial records and KYC documents;
• Role-based access controls ensuring that 2777cx staff can access personal data only to the extent required for their specific job functions;
• Multi-factor authentication requirements for all 2777cx staff accessing production systems containing player data;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• Audit logging of all access to personal data within 2777cx systems, reviewed periodically for anomalous activity.

9.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 2777cx will notify affected players without undue delay, providing information about the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

10. Your Data Rights

10.1  As a 2777cx player, you are entitled to the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with your registered username and a clear description of your request:

• Right of Access: You have the right to request a copy of the personal data 2777cx holds about you, together with information about how that data is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements);
• Right to Restriction: You have the right to request that we restrict processing of your personal data in certain circumstances, such as while a rectification request is being assessed;
• Right to Portability: You have the right to receive a copy of personal data you have provided to us in a structured, machine-readable format, where technically feasible;
• Right to Object: You have the right to object to processing of your personal data conducted on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

10.2  2777cx will respond to all valid data rights requests within 30 calendar days. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days with prior notification.

11. Children's Privacy

11.1  2777cx employs age verification measures during the registration process and as part of the KYC programme to prevent access by underage individuals. These measures include date-of-birth verification at registration and documentary identity verification prior to first withdrawal.

11.2  If 2777cx becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe their minor child may have registered an account on 2777cx are encouraged to contact [email protected] immediately so that the matter can be investigated and resolved.

12. International Data Transfers

12.1  As an internationally licensed online gaming operator, 2777cx may process or store personal data on servers or through service providers located outside Pakistan. Where personal data is transferred internationally, 2777cx ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy.

12.2  Safeguards for international transfers may include contractual data protection clauses with receiving parties, requiring them to apply equivalent technical and organisational security measures, and restricting the use of transferred data to the specified processing purpose only.

12.3  By using the 2777cx platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan in accordance with the safeguards described in this section.

13. Third-Party Links

13.1  The 2777cx platform may contain links to third-party websites or services, for example in connection with game provider information or payment method instructions. This Privacy Policy applies exclusively to data processed by 2777cx through the 2777cx.pro platform. It does not govern the data practices of any third-party website or service that you may access via a link from our platform.

13.2  2777cx is not responsible for the privacy practices, security standards, or content of any third-party website. We recommend that you review the privacy policy of any third-party site before providing personal data to that site.

14. Updates to This Privacy Policy

14.1  2777cx reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The revised policy will be published at 2777cx.pro/privacy-policy with an updated "Last Updated" date.

14.2  Where a material change is made to this Privacy Policy, 2777cx will notify registered players via their registered email address no less than seven (7) days prior to the change taking effect, except where immediate implementation is required by law.

14.3  Your continued use of the 2777cx platform following the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

15. Contact Us

15.1  For all privacy-related enquiries, data rights requests, or concerns about how 2777cx handles your personal data, please contact our player support team using the details below:

15.2  Please include your registered username, the nature of your request, and any relevant details to allow us to locate your records and respond efficiently. We aim to acknowledge all privacy correspondence within 48 hours and provide a substantive response within 14 business days.

15.3  If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant supervisory authority under the regulations applicable to our gaming licence jurisdiction.