hc77 Privacy Policy

1 Introduction

hc77 ("hc77", "we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses the hc77 platform. This Privacy Policy sets out in clear and transparent terms how we collect, use, store, share, and protect your personal information when you access or use any part of the hc77 website, mobile platform, or associated services.

This policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the hc77 website who interact with any feature of the platform. It covers all personal data processing activities carried out by hc77 in connection with the delivery of online casino games, sports betting markets, payment processing, customer support, and marketing communications.

This Privacy Policy should be read alongside hc77's Terms and Conditions, which are available at /terms-conditions, and the Responsible Gaming Policy at /responsible-gaming. Together, these documents form the complete framework governing your relationship with hc77.

If you have any questions about this Privacy Policy or how hc77 handles your personal data, please contact us using the details provided in Section 14 of this document.

2 Who We Are

hc77 is an internationally licensed online gaming and sports betting platform operating at https://hc77.bet. hc77 serves players primarily in Pakistan, offering cricket betting, live casino games, slot titles, bingo, Plinko, and other gaming products, with all transactions processed in Pakistani Rupees (PKR).

For the purposes of data protection law, hc77 acts as the data controller in respect of your personal information — meaning hc77 determines the purposes for which and the means by which your personal data is processed. Where hc77 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by contractual obligations to process your data only in accordance with hc77's documented instructions.

3 Data We Collect

hc77 collects personal data through several channels, including directly from you during registration and account use, automatically through your interaction with the platform, and from third-party identity verification and payment service providers. The categories of personal data we collect are described below.

3.1 Registration and Identity Data

When you create an hc77 account, we collect your full legal name, date of birth, residential address, email address, and a username of your choosing. This information is mandatory — without it, we cannot create a verified account for you on the platform.

3.2 Identity Verification Data

To comply with our international gaming licence requirements and anti-money laundering obligations, hc77 must verify your identity before permitting withdrawals and in certain other circumstances. For this purpose, we may collect copies of government-issued identity documents (such as a CNIC, passport, or driver's licence), proof of residential address documents, and where required, evidence of the source of funds used to deposit on hc77.

3.3 Financial and Payment Data

When you make a deposit or withdrawal on hc77, we collect payment account information sufficient to process the transaction. This may include your JazzCash or EasyPaisa mobile wallet number, bank account details for HBL, UBL, or Meezan Bank transfers, or card details for Visa and Mastercard transactions. Full card numbers are not stored by hc77 — payment card processing is handled by our PCI-DSS compliant payment gateway partners.

3.4 Transaction and Gaming Data

hc77 maintains records of all financial transactions on your account, including deposits, withdrawals, bonus credits, and wager settlements. We also record gaming activity data, including game sessions, bet amounts, game outcomes, and betting history across all products on the hc77 platform.

3.5 Technical and Device Data

When you access hc77, our systems automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation purposes.

3.6 Communications Data

If you contact hc77 customer support by email, live chat, or any other channel, we retain records of that correspondence. This includes the content of your messages, timestamps, the nature of your query, and any resolution or action taken by the hc77 support team in response.

3.7 Marketing Preferences

Where you have given consent to receive marketing communications from hc77, we record your marketing preferences, the communications we have sent you, and your interaction history with those communications (such as email open rates and click-through data).

4 How We Use Your Data

hc77 uses the personal data we collect strictly for the following purposes. We do not use your data for purposes that are incompatible with those listed here without first obtaining your explicit consent or as required by applicable law.

• Account creation and management: To register your hc77 account, verify your identity, maintain your account profile, and administer your relationship with hc77 as a registered player.
• Service delivery: To provide you with access to all hc77 gaming products, including cricket betting markets, live casino tables, slot titles, Super Bingo, and Plinko, and to process all gameplay and betting transactions on your account.
• Payment processing: To process your deposit and withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records of all transactions on your account.
• Identity verification and AML compliance: To verify your identity in accordance with our licensing obligations, to conduct anti-money laundering and fraud screening checks, and to comply with any applicable financial crime prevention regulations.
• Customer support: To respond to your queries, complaints, and account-related requests, and to maintain a record of all support interactions for quality assurance and dispute resolution purposes.
• Security and fraud prevention: To monitor your account activity and platform interactions for signs of unauthorised access, fraudulent behaviour, multi-accounting, or other prohibited conduct, and to take appropriate protective or remedial action where such activity is detected.
• Responsible gaming: To implement and monitor the responsible gaming tools you have applied to your account, including deposit limits, self-exclusion orders, and session time restrictions, and to identify players who may be exhibiting signs of problem gambling.
• Marketing communications: Where you have given consent, to send you promotional emails, bonus notifications, and personalised offers relating to hc77 products and services. You may withdraw this consent at any time through your account settings or by contacting hc77 support.
• Platform improvement: To analyse aggregate usage data and technical performance metrics in order to improve the hc77 platform, optimise the user experience, and develop new features and products.
• Legal compliance: To comply with any applicable laws, regulations, court orders, or regulatory directives that require hc77 to collect, retain, or disclose personal data.

5 Legal Basis for Processing

hc77 processes your personal data on the following legal bases, in accordance with applicable data protection law:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as an hc77 account holder, including account management, game delivery, payment processing, and customer support.
• Legal obligation: Processing necessary to comply with our obligations under applicable law, including identity verification, anti-money laundering screening, and regulatory reporting requirements imposed by our gaming licence authority.
• Legitimate interests: Processing carried out for hc77's legitimate business interests, including fraud detection, security monitoring, platform improvement, and responsible gaming monitoring, where those interests are not overridden by your fundamental privacy rights.
• Consent: Where hc77 relies on your consent as the legal basis for processing — specifically in relation to marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6 Sharing Your Data

hc77 does not sell your personal data to any third party. We share your personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Identity verification providers: hc77 shares identity document data and personal details with accredited third-party KYC (Know Your Customer) verification service providers who check your identity against official databases. These providers act as data processors under contract with hc77.
• Payment service providers: Transaction data is shared with our payment gateway partners — including JazzCash, EasyPaisa, and card processing networks — solely to the extent necessary to process your deposit or withdrawal requests.
• Gaming software providers: hc77's games are powered by third-party software providers. In the course of game delivery, limited session and account data may be passed to the relevant game provider solely for the purpose of enabling game functionality. No marketing use of this data is permitted.
• Fraud prevention and security services: hc77 may share account activity data with fraud prevention service providers and gaming industry self-exclusion registries where there is a reasonable basis to do so in connection with the detection or prevention of fraud, money laundering, or problem gambling.
• Legal and regulatory authorities: hc77 may disclose your personal data to law enforcement agencies, regulatory bodies, gaming licence authorities, or courts where required to do so by applicable law, court order, or regulatory directive. hc77 will, where legally permitted, notify you of any such disclosure.
• Business transfers: In the event that hc77 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms of the new controller prior to the transfer taking effect.

7 Cookies & Tracking Technologies

hc77 uses cookies and similar tracking technologies on its website to enable core platform functionality, improve the user experience, and gather aggregate analytics data. A cookie is a small text file placed on your device by a website server, which the server can subsequently read when your browser accesses the same domain.

The cookies used by hc77 fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the hc77 platform to function. They manage your login session, maintain your account authentication state, and support core security features. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: These cookies remember your preferences and personalisation settings, such as your preferred language, display settings, and recently viewed game categories, so you do not need to reconfigure them on each visit.
• Analytics cookies: hc77 uses analytics cookies to collect aggregate, anonymised data about how players navigate and interact with the platform. This information is used to identify usability issues and inform platform improvements. Analytics data is not linked to individual player identities.
• Marketing cookies: Where you have given consent, hc77 may use marketing cookies to deliver personalised promotional content and track the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time through your browser settings or our cookie preference centre.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use the hc77 platform. For a full list of cookies used by hc77 and their specific retention periods, please contact hc77 support.

8 Data Retention

hc77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and dispute resolution requirements. The following general retention principles apply:

• Active account data: Personal data associated with your hc77 account is retained for the duration of your active account and for a minimum period of five years following the closure of your account, in accordance with our licensing authority's record-keeping requirements.
• Financial and transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of seven years from the date of the transaction, in compliance with applicable anti-money laundering record-keeping obligations.
• Identity verification documents: Copies of identity documents submitted for KYC purposes are retained for five years following account closure, or longer where required by a specific legal or regulatory obligation.
• Customer support records: Support correspondence is retained for three years from the date of the interaction, unless the matter relates to a dispute or legal claim in which case records are retained for the duration of the relevant limitation period.
• Marketing data: Marketing preference records and communication history are retained until you withdraw consent or until hc77 ceases marketing activities, whichever occurs first, plus a reasonable administrative period for processing the withdrawal.

Upon expiry of the applicable retention period, hc77 will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised data from which you cannot reasonably be identified may be retained indefinitely for statistical and research purposes.

9 Your Rights

Subject to applicable data protection law and certain conditions and limitations, you have the following rights in respect of your personal data held by hc77:

• Right of access: You have the right to request a copy of the personal data hc77 holds about you. hc77 will provide this information in a structured, commonly used format within 30 days of receiving a valid request.
• Right to rectification: If any personal data hc77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may also update certain account details directly through your hc77 account profile.
• Right to erasure: In certain circumstances, you have the right to request that hc77 delete your personal data. This right is subject to exceptions, including where retention is required by applicable law or is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: In certain circumstances, you have the right to request that hc77 restrict the processing of your personal data — for example, while a rectification request is being assessed or where you have objected to processing and hc77's legitimate grounds for processing are being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to the processing of your personal data where hc77 relies on legitimate interests as its legal basis. hc77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary for legal claims.
• Right to withdraw consent: Where hc77 processes your data on the basis of your consent (specifically for marketing communications), you may withdraw that consent at any time through your account settings or by contacting hc77 support. Withdrawal does not affect the lawfulness of prior processing.

10 Data Security

hc77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and hc77's servers.
• Encryption at rest for all sensitive personal data and financial information stored in hc77's databases.
• Role-based access controls ensuring that hc77 staff can only access the personal data necessary for their specific job function.
• Multi-factor authentication requirements for all hc77 staff accounts with access to player data systems.
• Regular penetration testing and security audits of hc77's platform infrastructure conducted by qualified third-party security specialists.
• Incident response procedures for detecting, assessing, and responding to data security incidents in accordance with applicable regulatory requirements.

While hc77 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also bear responsibility for the security of your own hc77 account credentials. hc77 strongly encourages you to use a unique, strong password for your hc77 account and to enable two-factor authentication from your account security settings.

In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, hc77 will notify you without undue delay in accordance with its legal obligations, providing information on the nature of the incident and the steps hc77 is taking in response.

11 Children's Privacy

hc77 is strictly an adults-only platform. The hc77 website and all services offered thereon are intended exclusively for individuals who are aged 21 years or older. hc77 does not knowingly collect, process, or retain the personal data of any individual under the age of 21.

During registration, all applicants are required to confirm their date of birth. hc77 conducts age verification checks as part of its standard KYC process. Any account where the account holder is found to be under the age of 21 will be immediately closed, all balances will be returned to the payment method of origin, and all personal data associated with the underage account will be securely deleted in accordance with hc77's data disposal procedures.

If you believe that hc77 has inadvertently collected personal data from a person under the age of 21, please contact hc77 support immediately at [email protected] so that appropriate action can be taken without delay.

12 Third-Party Links

The hc77 website may from time to time contain references to third-party services, such as payment providers or game software developers, in the context of describing platform features. hc77 does not include hyperlinks to external third-party websites within the main body of its platform pages, and this Privacy Policy governs only the data processing activities of hc77 itself.

Where you interact directly with a third-party service provider — such as your JazzCash or EasyPaisa app when completing a payment — you are subject to that provider's own privacy policy and data processing terms. hc77 has no control over, and accepts no responsibility for, the privacy practices of third-party services that you access independently outside the hc77 platform environment.

13 Changes to This Policy

hc77 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be required due to updates in applicable law or regulation, changes to our data processing activities, modifications to our platform or services, or guidance issued by our licensing authority.

When we make material changes to this Privacy Policy, we will update the "Last Updated" date displayed at the top of this page. Where changes are significant, hc77 will endeavour to provide reasonable advance notice to registered players via the email address associated with their hc77 account.

Your continued use of the hc77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how hc77 protects and processes your personal data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 9, please contact the hc77 privacy team using the following details:

hc77 takes all privacy-related queries and complaints seriously. If you submit a complaint regarding hc77's data processing practices and are not satisfied with the resolution provided, you have the right to escalate your complaint to the relevant data protection supervisory authority in accordance with the laws of hc77's licensing jurisdiction.