td77 Privacy Policy

About This Policy

This Privacy Policy applies to all personal data collected and processed by td77 in connection with the operation of the td77 online casino and sports betting platform accessible at td77.ws. It applies to all registered account holders, visitors to the td77 website, and any individual who interacts with td77 services, including customer support channels.

This Policy should be read alongside the td77 Terms & Conditions, which govern the broader agreement between you and td77. Together, these two documents form the complete framework governing your use of the platform and td77's handling of your personal information.

td77 acts as the data controller in respect of all personal data collected through the platform. This means td77 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is conducted lawfully, fairly, and transparently.

Personal Data We Collect

td77 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and occasionally from third-party verification providers. The categories of data we collect are set out below.

td77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where directly relevant to a responsible gaming assessment made at your own request.

How We Use Your Personal Data

td77 uses the personal data described in Section 2 for the following specific purposes:

• Account creation and management: To register your td77 account, verify your identity, and maintain your account in good standing throughout your time as a player.
• Age and identity verification: To confirm that you are at least 21 years of age and that the identity information you have provided is accurate, as required by responsible gaming standards.
• Payment processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your nominated payment account.
• Platform security and fraud prevention: To monitor platform activity for signs of unauthorised access, fraudulent behaviour, bonus abuse, money laundering, or other prohibited conduct as defined in the td77 Terms & Conditions.
• Personalisation: To tailor your td77 experience, including displaying relevant game recommendations and promotional offers based on your account activity, where you have consented to receive such communications.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, and support ticketing systems.
• Legal and regulatory compliance: To comply with applicable anti-money laundering obligations, licensing requirements, and any lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer the responsible gaming tools available on the platform, including deposit limits, cooling-off periods, and self-exclusion.

Legal Basis for Processing

td77 processes your personal data on the following legal grounds, depending on the specific purpose involved:

• Contractual necessity: Processing required to fulfil our obligations under the td77 Terms & Conditions, including account management, payment processing, and customer support.
• Legal obligation: Processing necessary to comply with applicable law, including anti-money laundering regulations, age verification requirements, and responses to lawful regulatory or court orders.
• Legitimate interests: Processing carried out in pursuit of td77's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes, such as direct marketing communications and personalised promotional offers, where td77 has obtained your express, freely given consent. You may withdraw this consent at any time by contacting support or updating your account marketing preferences.

Cookies & Tracking Technologies

td77 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. td77 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without preventing access to core platform features.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the td77 platform — for example, which pages are most visited and how long players spend on them. This data helps td77 improve platform performance and usability.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content within the td77 platform based on your gaming preferences and account activity.

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or by contacting td77 support. Please note that disabling certain cookies may affect the functionality of the platform.

Data Sharing & Disclosure

td77 does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction-specific data required to process your deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification providers: Third-party KYC service providers may receive your identity and documentation data for the sole purpose of verifying your age and identity in accordance with our responsible gaming and compliance obligations.
• Game software providers: Game studios and platform providers whose content is hosted on td77 may receive anonymised or pseudonymised gameplay data necessary to deliver and audit their games. They do not receive your full identity or financial data.
• Regulatory and law enforcement authorities: td77 will disclose personal data to competent authorities where required to do so by a valid legal obligation, court order, or regulatory direction. td77 will notify affected users of such disclosures where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and insurers may access personal data on a strictly confidential basis where necessary in the course of the professional services they provide to td77.

Data Retention

td77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your td77 account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, or longer if required by applicable law.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer where a dispute or legal claim is ongoing.
• Technical and usage data: Retained for up to two (2) years from collection, after which it is anonymised or deleted.
• Marketing consent records: Retained for the period during which consent remains valid and for one (1) year following withdrawal of consent, as evidence of the consent history.

Upon expiry of the applicable retention period, td77 will securely delete or irreversibly anonymise your personal data unless a specific legal obligation requires continued retention.

Security Measures

td77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for all personal data stored in td77 databases.
• 256-bit SSL/TLS encryption for all data transmitted between your device and the td77 platform.
• Multi-factor authentication requirements for all td77 administrative system access.
• Role-based access controls ensuring that td77 staff can only access personal data to the extent required for their specific job function.
• Regular independent security audits and penetration testing of the td77 platform infrastructure.
• Real-time intrusion detection and automated alerting systems to identify and respond to security incidents promptly.
• Secure data centre facilities with physical access controls, environmental monitoring, and redundant power and connectivity infrastructure.

While td77 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own td77 login credentials. If you suspect that your account has been accessed without your authorisation, please contact [email protected] immediately.

Your Rights Over Your Personal Data

td77 respects and upholds your rights as a data subject. You have the following rights in respect of the personal data td77 holds about you:

• Right of access: You may request a copy of the personal data td77 holds about you, along with information about how it is processed. Requests will be responded to within thirty (30) days.
• Right to rectification: If any personal data td77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that td77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that td77 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that td77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on td77's legitimate interests, including objections to direct marketing communications.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact td77 support at [email protected] with the subject line "Data Rights Request". td77 will verify your identity before processing the request and will respond within thirty (30) days.

Children & Minors

The td77 platform is strictly intended for adults aged 21 years and above. td77 does not knowingly collect personal data from any person under the age of 21. The platform employs mandatory age verification procedures at the point of registration to enforce this requirement.

If td77 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed without notice. Any funds deposited by an underage user will be handled in accordance with applicable law and the td77 Terms & Conditions.

Cross-Border Data Transfers

In the course of operating the td77 platform, your personal data may be transferred to and processed in countries outside Pakistan, including countries where td77's licensing authority, data centre infrastructure, or technology partners are located. Where such transfers occur, td77 takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy.

These steps may include entering into contractual arrangements with recipient organisations that require them to protect your personal data to a standard equivalent to that described in this Policy, and conducting due diligence assessments of the data protection practices of key third-party recipients prior to transfer.

Updates to This Privacy Policy

td77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, td77 will notify registered account holders by email to the address on file and will update the "Last Updated" date displayed at the top of this page.

We encourage you to review this page from time to time so that you remain informed about how td77 is protecting your personal data. Your continued use of the td77 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or td77's handling of your personal data, please contact the td77 Data Protection team using the details below:

• Email: [email protected]
• Subject line: Privacy Enquiry or Data Rights Request
• Response time: td77 will acknowledge your enquiry within 48 hours and provide a substantive response within thirty (30) days.
• Support availability: 24 hours a day, 7 days a week, in English and Urdu.

If you are not satisfied with td77's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to seek a remedy through the dispute resolution process described in the td77 Terms & Conditions.