2777cx Privacy Policy

1 Data Controller

1.1 For the purposes of this Privacy Policy, 2777cx is the data controller responsible for your personal data. The 2777cx platform operates at 2777cx.asia and processes personal data in accordance with applicable data protection legislation.

1.2 As data controller, 2777cx determines the purposes and means of processing your personal data and is responsible for implementing appropriate technical and organisational measures to protect that data against unauthorised access, loss, destruction, or alteration.

1.3 If you have any questions about how 2777cx processes your personal data, or wish to exercise any of your data rights described in this Policy, please contact our Data Privacy team through the channels listed in Section 14.

2 Personal Data We Collect

2.1 2777cx collects personal data across several categories, depending on your interaction with the platform. The following table summarises the types of data collected:

2.2 2777cx does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or data concerning sexual orientation. The only potentially sensitive category collected is financial information, which is handled under heightened security protocols.

3 How We Collect Your Data

3.1 Directly from you: The majority of personal data 2777cx holds is provided directly by you through the registration form, KYC upload process, deposit and withdrawal requests, responsible gaming tool settings, and any correspondence with our customer support team via live chat or email.

3.2 Automatically during platform use: When you access 2777cx.asia, certain technical data is collected automatically — including your IP address, device identifiers, browser type, and session activity — through standard server logs, session cookies, and analytics tools. This data helps us secure the platform, detect fraud, and maintain service performance.

3.3 From third-party payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency channels, the relevant payment processor shares limited transaction confirmation data with 2777cx to reconcile your account balance. 2777cx does not receive or store full payment credentials (such as complete IBAN numbers or mobile banking PINs) from these processors.

3.4 From identity verification services: 2777cx may use accredited third-party identity verification services to assist with automated CNIC and Passport document checking during the KYC process. These services return a verification result to 2777cx and may retain a record of the verification for their own regulatory obligations, subject to their own privacy policies.

4 Purpose & Legal Basis for Processing

4.1 2777cx processes personal data only where a lawful basis exists. The primary purposes and their corresponding legal bases are as follows:

• Account registration and management — processed on the basis of contract performance (necessary to provide the 2777cx service you have requested).
• KYC identity verification and age verification — processed on the basis of legal obligation (required by applicable anti-money laundering and gaming regulatory frameworks).
• Payment processing and transaction management — processed on the basis of contract performance and legal obligation.
• Fraud prevention and security monitoring — processed on the basis of legitimate interests (protecting the platform, its players, and financial integrity).
• Responsible gaming monitoring — processed on the basis of legal obligation and legitimate interests (player welfare).
• Customer support and complaint handling — processed on the basis of contract performance and legitimate interests.
• Marketing and promotional communications — processed on the basis of consent (only where you have explicitly opted in).
• Platform analytics and improvement — processed on the basis of legitimate interests (maintaining and improving the quality of the 2777cx platform for all players).

4.2 Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Retention

5.1 2777cx retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law — whichever is the longer period.

5.2 The following standard retention periods apply at 2777cx:

• Account data (active accounts): Retained for the duration of the account relationship plus a minimum of 5 years after account closure, in line with AML record-keeping obligations.
• KYC / identity documents: Retained for a minimum of 5 years from the date of the last transaction associated with the account, subject to regulatory requirements.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date in accordance with financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each session, to support dispute resolution, responsible gaming reviews, and regulatory audit requirements.
• Customer support records: Retained for 2 years from the date of the last interaction, unless the record relates to a regulatory or legal matter in which case the longer applicable period applies.
• Marketing consent records: Retained for 3 years from the date of last consent confirmation or until withdrawal of consent, whichever is earlier.

5.3 At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with 2777cx's data disposal procedures.

6 Data Sharing & Disclosure

6.1 2777cx does not sell, rent, or trade personal data with any third party for marketing or commercial purposes. Data is only shared with third parties in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment infrastructure providers receive the minimum data necessary to process your requested deposit or withdrawal transaction.
• Identity verification services: Accredited third-party KYC providers receive document images and personal details for the purpose of identity verification. These providers operate under binding data processing agreements with 2777cx.
• Game providers: Where technically required for game launch, your session token and account currency are passed to the game provider's servers. Game providers receive no personally identifiable data beyond what is technically necessary to initiate and manage a gaming session.
• Regulatory and legal authorities: 2777cx will disclose personal data to competent law enforcement agencies, financial intelligence units, or regulatory bodies where legally required to do so — for example, in connection with AML reporting obligations or a valid court order.
• Fraud prevention services: 2777cx may share limited account and device data with industry fraud prevention networks to identify patterns of fraudulent activity across the online gaming sector.

6.2 All third parties with whom 2777cx shares personal data are required to operate under binding contractual obligations that ensure an equivalent level of data protection to that described in this Privacy Policy.

7 Security Measures

7.1 2777cx implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmission between player devices and 2777cx servers.
• PCI-compliant payment data handling — full payment credentials are never stored on 2777cx servers post-transaction.
• Access controls — personal data is accessible only to 2777cx staff who require it for their specific job function, governed by role-based access permissions and audit logging.
• Two-factor authentication available for all player accounts, and mandatory for 2777cx staff accounts with access to player data systems.
• Regular security assessments including penetration testing and vulnerability scanning of the 2777cx platform infrastructure.
• Encrypted data storage — personal data stored at rest is encrypted using industry-standard algorithms.
• Incident response procedures — documented data breach response protocols including player notification within legally required timeframes in the event of a material breach affecting their personal data.

7.2 Whilst 2777cx takes all reasonable technical and organisational precautions, no data transmission over the internet or electronic storage system is 100% secure. You accept a residual risk when transmitting data to any online platform and are encouraged to maintain strong account passwords and enable two-factor authentication.

8 Cookies & Tracking Technologies

8.1 2777cx uses cookies and similar tracking technologies on the 2777cx.asia platform. A cookie is a small text file placed on your device by the platform's server that helps the platform remember your preferences and session status.

Essential Cookies

These cookies are strictly necessary for the 2777cx platform to function. They maintain your logged-in session, remember your preferred language settings, and support core security functions. Essential cookies cannot be disabled without breaking core platform functionality.

Functional Cookies

Functional cookies remember your preferences — such as your preferred game lobby view, currency display settings, and responsible gaming reminder configuration — to personalise your experience between sessions. These can be disabled in your browser settings, though doing so may affect your experience.

Analytics Cookies

2777cx uses anonymised analytics data to understand how players interact with the platform — which sections are most visited, where users drop off in a registration flow, and how game categories perform. This data is aggregated and anonymised before analysis and does not identify individual players.

Security Cookies

Cookies used to support fraud detection, bot mitigation, and login security features. These include session fingerprinting tools that help identify suspicious login attempts originating from unrecognised devices or geographic locations inconsistent with your normal access pattern.

8.2 You can control cookie settings through your browser's privacy preferences. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent you from logging in to your 2777cx account or accessing platform features that require an active session.

9 Minors & Age Verification Policy

9.1 The 2777cx platform is strictly intended for individuals aged 21 years and above. 2777cx does not knowingly collect personal data from individuals under the age of 21, and does not permit individuals under 21 to register or use the platform in any capacity.

9.2 Age verification is enforced through mandatory KYC identity document submission — specifically CNIC or Passport. Self-declaration of age at registration is not sufficient. Any account where the KYC documentation reveals the account holder to be under 21 years of age is suspended immediately, the relevant data is handled in accordance with the account closure process, and access to any deposited funds is managed through the procedures described in the 2777cx Terms & Conditions.

9.3 If you are a parent or guardian and believe an individual under the age of 21 has registered a 2777cx account using false documentation, please contact 2777cx support immediately via live chat so that the account can be investigated and suspended without delay.

10 Marketing Communications

10.1 2777cx sends promotional communications — including SMS notifications about PSL betting promotions, new slot releases, VIP tier milestones, and exclusive bonus offers — only to players who have explicitly consented to receive such communications during registration or via Account Settings.

10.2 You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in Account Settings under the "Marketing Preferences" section.
• Contacting 2777cx support via live chat and requesting removal from all promotional lists.
• Replying STOP to any promotional SMS message sent by 2777cx.

10.3 Withdrawal of marketing consent does not affect your ability to continue using the 2777cx platform. Transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and responsible gaming alerts — are sent regardless of marketing preferences because they are operationally necessary.

11 International Data Transfers

11.1 2777cx's platform infrastructure may involve the storage or processing of personal data on servers located outside Pakistan. Where personal data is transferred internationally, 2777cx ensures that such transfers are subject to appropriate safeguards — including standard contractual clauses, adequacy determinations, or equivalent data protection frameworks — to ensure that your personal data receives equivalent protection regardless of where it is processed.

11.2 Specifically, certain game provider integrations and payment processor operations involve data processing infrastructure located in Asia-Pacific data centre regions. All such processors operate under binding data protection agreements with 2777cx that require compliance with the data protection standards described in this Privacy Policy.

12 Exercising Your Privacy Rights

12.1 To exercise any of the data rights described in this Privacy Policy — including rights of access, rectification, erasure, restriction, portability, or objection — please contact 2777cx through one of the following channels:

• Live Chat: Available 24/7 directly on the 2777cx platform. Identify your request as a "data rights request" to ensure routing to the appropriate team.
• Email: [email protected] — include "Data Rights Request" in the subject line and provide your registered email or mobile number for account identification.

12.2 2777cx will respond to all data rights requests within 30 days of receipt. Where a request is particularly complex or where we have received a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day period and explain the reason for the extension.

12.3 2777cx may request verification of your identity before processing any data rights request, to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised individual.

12.4 Data rights requests are processed free of charge. However, where requests are manifestly unfounded or excessive — particularly where they are repetitive in nature — 2777cx reserves the right to charge a reasonable administrative fee or decline to respond, with written explanation provided.

13 Changes to This Privacy Policy

13.1 2777cx reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or data processing practices. The effective date of the current version is displayed in the hero section of this page.

13.2 Where amendments are material — meaning they affect the types of data collected, the purposes for which data is processed, or the rights available to players — 2777cx will notify registered players via their registered mobile number or email address at least 7 days before the updated Policy takes effect.

13.3 Your continued use of the 2777cx platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the updated Privacy Policy, you must cease using the platform and contact support to arrange account closure.

13.4 Archived versions of previous 2777cx Privacy Policies are available on request through the support team for players who wish to review historical data processing practices.

14 Contact & Complaints

14.1 For all privacy-related enquiries, data rights requests, or to raise a concern about how 2777cx has handled your personal data, please contact us through:

• Live Chat: 24/7, directly on 2777cx.asia — fastest response channel, typically under 3 minutes during peak hours.
• Email: [email protected] — responses within 24 hours for privacy-related queries.

14.2 2777cx takes all privacy complaints seriously and will investigate each complaint thoroughly. You will receive an acknowledgement within 48 hours and a substantive response within 30 days.

14.3 If you are unsatisfied with 2777cx's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. 2777cx will cooperate fully with any investigation conducted by a competent supervisory authority.