This Privacy Policy describes how cd77 collects, processes, stores, and protects the personal data of Pakistani players who register and use the cd77 online casino and sports betting platform. cd77 takes data protection seriously. Your information is used only for the specific purposes described in this document and is never sold to third parties. By creating a cd77 account, you consent to the data practices described in this Privacy Policy.
Your Privacy Matters to cd77: cd77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data collected by cd77 is processed strictly for the purposes of operating your account, processing your PKR transactions, complying with legal obligations, and maintaining the integrity of the cd77 platform. This policy explains exactly what data cd77 holds about you and what your rights are regarding that data.
1.1 Identity. The data controller responsible for your personal data on the cd77 platform is the cd77 operator — the licensed entity operating the cd77 brand under applicable international gaming licensing arrangements. References to "cd77", "we", "us", or "our" in this Privacy Policy refer to that entity.
1.2 Contact. For all privacy-related queries, data access requests, or complaints relating to how cd77 handles your personal data, you may contact the cd77 Data Privacy team directly at [email protected]. Please include "Privacy Request" in the subject line of your correspondence so that it is routed to the appropriate team promptly.
1.3 Scope. This Privacy Policy applies to all personal data collected by cd77 through the cd77 website, mobile site, cashier system, customer support channels, and any other service forming part of the cd77 platform. It applies to all Pakistani players and to any individual whose personal data is processed by cd77 in connection with their use of the platform.
cd77 collects personal data in three primary ways: data you provide directly when registering or using your account, data generated automatically through your use of the cd77 platform, and data received from third-party service providers such as payment processors and identity verification services.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, passport number | Provided by you at registration or during KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad) | Provided by you at registration |
| Financial Data | JazzCash account number, EasyPaisa number, HBL / UBL / Meezan Bank account details, USDT wallet address, PKR transaction history | Provided by you via the cd77 cashier; received from payment processors |
| Account Activity Data | Login timestamps, game history, bet records, deposit and withdrawal records, bonus usage, responsible gaming preferences | Generated automatically by the cd77 platform |
| Device & Technical Data | IP address, device type, operating system, browser type, session duration, referring URL | Collected automatically via cookies and server logs |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Generated through your interactions with cd77 support |
| KYC Documents | Scanned copies or photographs of CNIC, passport, proof of address, source of funds documents | Provided by you during identity verification |
Sensitive Data: cd77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If you voluntarily disclose sensitive information — for example, when contacting cd77 regarding a responsible gaming concern — that information will be treated with the highest level of confidentiality and used only to provide the support you have requested.
cd77 uses your personal data strictly for the following purposes:
Marketing Opt-Out: If you do not wish to receive promotional communications from cd77, you may update your communication preferences in your cd77 account settings at any time, or request opt-out by contacting [email protected]. Opting out of marketing communications does not affect transactional or account-related notifications, which cd77 is required to send for operational purposes.
4.1 Contractual Necessity. The majority of cd77's data processing activities are necessary for the performance of the contract between you and cd77 — specifically, the Terms and Conditions you accepted when registering your cd77 account. This includes processing your identity data, financial data, and account activity data to provide you with the cd77 platform services you have requested.
4.2 Legal Obligation. cd77 is required by its international gaming licence and applicable anti-money laundering regulations to collect and retain certain categories of personal data, including KYC documents and transaction records. Processing for these purposes is mandatory and cannot be waived by the player.
4.3 Legitimate Interests. cd77 processes certain data — including device and technical data, fraud signals, and aggregated usage analytics — on the basis of cd77's legitimate interests in maintaining a secure, functional, and commercially viable platform. cd77 has assessed that these legitimate interests are not overridden by your privacy interests in each case.
4.4 Consent. Where cd77 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you retain the right to withdraw that consent at any time by contacting [email protected] or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
5.1 No Sale of Data. cd77 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes under any circumstances.
5.2 Service Providers. cd77 shares personal data with carefully selected third-party service providers who process data on cd77's behalf and under cd77's instructions. These include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT gateway providers), identity verification services, game platform providers, cloud hosting infrastructure providers, and customer support technology providers. All such service providers are contractually required to handle your data in accordance with applicable data protection standards.
5.3 Legal Disclosure. cd77 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, gaming regulation, or valid legal process. This includes disclosures required under anti-money laundering legislation.
5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of cd77's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.
Cross-Border Transfers: cd77's service providers may be located outside Pakistan. Where personal data is transferred internationally, cd77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Details of applicable safeguards are available on request from [email protected].
6.1 Payment Processing. When you make a deposit or request a withdrawal on cd77 via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, your payment details are transmitted directly to the relevant payment processor using industry-standard encryption. cd77 does not store full payment account credentials on its own servers beyond what is required for transaction records and anti-fraud purposes.
6.2 Transaction Records. cd77 retains records of all PKR and USDT transactions conducted through your cd77 account. These records include deposit amounts, withdrawal amounts, transaction timestamps, and the payment method used. Transaction records are retained for the period specified in Section 8 of this Privacy Policy, in compliance with cd77's regulatory obligations.
6.3 Source of Funds. Where cd77 is required to verify the source of funds deposited into a cd77 account for anti-money laundering compliance purposes, any supporting documentation you provide will be treated as confidential, stored securely, and used solely for the purpose of that compliance check.
7.1 What Are Cookies. Cookies are small text files placed on your device by the cd77 website. cd77 uses cookies and similar tracking technologies to keep you logged into your cd77 account session, remember your platform preferences, analyse platform usage patterns, and deliver relevant promotional content.
7.2 Types of Cookies Used by cd77. cd77 uses the following categories of cookies:
7.3 Cookie Management. You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the cd77 platform, including the ability to remain logged into your cd77 account session.
8.1 Active Accounts. cd77 retains your personal data for as long as your cd77 account remains active and for such period thereafter as is required to fulfil the purposes described in this Privacy Policy, including compliance with regulatory retention obligations.
8.2 Closed Accounts. Following account closure, cd77 retains account records — including identity data, KYC documents, and transaction history — for a minimum of five years in compliance with anti-money laundering record-keeping requirements. After the applicable retention period expires, data is securely deleted or anonymised.
8.3 Self-Excluded Players. Where a player has requested permanent self-exclusion from the cd77 platform, certain identity data is retained on cd77's self-exclusion register for the duration of the self-exclusion period. This retention is necessary to prevent the player from re-registering a new cd77 account during the exclusion period.
8.4 Marketing Data. Where you have consented to receive marketing communications from cd77, cd77 retains your contact details for marketing purposes until you withdraw your consent or request deletion, subject to overriding legal retention requirements.
Subject to applicable data protection law and cd77's regulatory obligations, you have the following rights regarding your personal data held by cd77. To exercise any of these rights, contact cd77 at [email protected] with the subject line "Data Rights Request":
You may request a copy of the personal data cd77 holds about you, along with information about how it is being used.
You may request correction of any inaccurate or incomplete personal data held in your cd77 account.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cd77's legal retention obligations.
You may request that cd77 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
Where processing is based on your consent or on a contract, you may request that cd77 provide your personal data in a structured, machine-readable format.
You may object to processing based on cd77's legitimate interests, including direct marketing. cd77 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
Response Timeframe: cd77 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or cd77 receives a high volume of requests, the response period may be extended by a further 60 days, in which case cd77 will notify you of the extension within the initial 30-day period.
10.1 Technical Safeguards. cd77 implements industry-standard technical security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include 256-bit SSL/TLS encryption for all data transmitted between your device and the cd77 platform, encrypted storage for sensitive account data, and multi-factor authentication options for cd77 account access.
10.2 Organisational Safeguards. Access to personal data held by cd77 is restricted to authorised personnel who require that access to perform their job functions. All cd77 staff with access to personal data are subject to confidentiality obligations. cd77 conducts regular internal security reviews and staff data protection training.
10.3 Data Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, cd77 will notify you and the relevant supervisory authority in accordance with applicable legal requirements. cd77 maintains an incident response procedure to ensure that breaches are identified, contained, and reported promptly.
10.4 Your Role in Security. The security of your cd77 account also depends on the strength and confidentiality of your cd77 Login credentials. cd77 strongly recommends using a unique, strong password for your cd77 account and enabling any available multi-factor authentication option. Do not share your cd77 Login credentials with any third party.
11.1 Age Policy. The cd77 platform is strictly for individuals aged 21 years and above. cd77 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the cd77 KYC process before any withdrawal is processed.
11.2 Discovery of Underage Data. If cd77 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately closed, all balances will be returned to the depositing payment method, and all personal data associated with that account will be deleted from cd77's systems, subject only to overriding legal retention requirements.
11.3 Parental Responsibility. cd77 urges all account holders to ensure that minors in their household do not have access to their cd77 account credentials or to any device that remains logged into a cd77 account session. If you suspect a minor has registered a cd77 account, please contact [email protected] immediately.
12.1 Right to Update. cd77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, cd77's data processing practices, or the services offered on the cd77 platform. Updated versions will be published on this page with a revised effective date.
12.2 Notification of Material Changes. Where cd77 makes a material change to this Privacy Policy — for example, a change in the categories of data collected or a new category of third-party sharing — cd77 will endeavour to notify registered players via the email address or mobile number associated with their cd77 account before the change takes effect.
12.3 Continued Use. Your continued use of the cd77 platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised document. If you do not agree with any change to this Privacy Policy, you should discontinue use of the cd77 platform and request account closure.
For any questions, concerns, or requests relating to this Privacy Policy or to how cd77 processes your personal data, please contact the cd77 Data Privacy team using the details below:
If you are not satisfied with cd77's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction or to the supervisory authority in the jurisdiction of cd77's licensing authority. Details of the applicable supervisory authority are available on request from [email protected].
Responsible Gaming & Privacy: Information shared with cd77 in the context of a responsible gaming request — including self-exclusion applications and problem gambling disclosures — is treated as strictly confidential. This information is accessed only by the cd77 responsible gaming team and is never used for marketing purposes. For more information on cd77's responsible gaming tools, please visit the cd77 Responsible Gaming page.
Key privacy and data protection commitments cd77 makes to every Pakistani player on the platform.
All data transmitted between your device and the cd77 platform is protected by 256-bit SSL/TLS encryption — the same standard used by global financial institutions. Your cd77 login credentials and PKR transaction details travel over an encrypted channel at all times.
cd77 operates a strict zero-data-selling policy. Your personal data — including your Pakistani mobile number, CNIC details, and JazzCash or EasyPaisa account information — is never sold, rented, or traded to any third party for commercial purposes.
cd77 enforces mandatory KYC age verification before processing any withdrawal. CNIC or passport-based identity checks ensure that no player under 21 years of age can access real-money features of the cd77 platform.
Every cd77 player has the right to request a full copy of their personal data, correct inaccurate records, request deletion, or restrict processing. Submit a data rights request to [email protected] and cd77 will respond within 30 days.
cd77 processes USDT and PKR transactions through encrypted payment channels. Full payment credentials are never stored on cd77 servers beyond the minimum required for transaction records and regulatory compliance. USDT wallet addresses are handled with the same care as PKR bank details.
Any information you share with cd77 in connection with a responsible gaming request — including self-exclusion applications and problem gambling disclosures — is kept strictly confidential and is never used for marketing or profiling purposes.
PKR accounts. JazzCash & EasyPaisa deposits. Encrypted transactions. 21+ only — please play responsibly.