c77 Privacy Policy

This Privacy Policy ("Policy") describes how c77 ("c77", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at c77.bio, collects, processes, stores, and protects personal data provided by users ("you", "Player") when accessing or using any c77 service. This Policy applies to all registered players and visitors to c77.bio, including users accessing the platform from Pakistan.

By registering an account, accessing c77's platform, or using any of its services — including cricket betting, PSL odds markets, live casino, slots, Pool Rummy, and the Color Game — you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use c77.

c77 is committed to processing personal data responsibly, transparently, and in accordance with the principles set out in its applicable operating framework and internationally recognised data protection standards.

c77 collects personal data that you provide directly, data generated by your use of the platform, and data received from third-party service providers. Specifically, c77 may collect the following categories of personal data:

a) Registration & Identity Data:

• Full legal name
• Date of birth (for age verification purposes — c77 is strictly 18+)
• Pakistani mobile number (in 03XX format)
• Email address
• Residential address (city, province — e.g., Karachi, Lahore, Islamabad)
• Government-issued identification documents (CNIC, passport) where verification is required

b) Financial & Transaction Data:

• Deposit and withdrawal amounts in PKR
• Payment method identifiers (JazzCash account numbers, Easypaisa wallet references, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, USDT wallet addresses)
• Transaction timestamps and reference numbers
• Bonus activation and wagering history

c) Gaming & Behavioural Data:

• Bet placement history, game session logs, and win/loss records
• Cricket betting activity including PSL markets accessed and in-play wagers placed
• Live casino session data, slot game activity, and card game participation
• Responsible gaming tool usage (deposit limit settings, session timers, self-exclusion requests)

d) Technical & Device Data:

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session timestamps, login history, and platform navigation data
• Cookie identifiers and analytics data (see Section 7)

c77 uses the personal data collected for the following purposes:

• Account management: Creating and maintaining your c77 player account, processing logins, and managing your PKR wallet.
• Identity and age verification: Verifying that you are aged 18 or above and that the information provided at registration is accurate, in accordance with c77's responsible gaming obligations.
• Payment processing: Processing deposits and withdrawals via JazzCash, Easypaisa, Pakistani bank transfers, and USDT, and maintaining transaction records for financial compliance purposes.
• Service provision: Enabling access to cricket betting, PSL markets, live casino, slots, Pool Rummy, Color Game, and all other c77 services.
• Customer support: Responding to queries, resolving disputes, and providing 24/7 live chat support for players across Pakistan.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, account takeovers, and other forms of platform abuse.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and providing access to responsible gaming tools.
• Platform improvement: Analysing aggregated and anonymised usage data to improve c77's platform, game offerings, and user experience for Pakistani players.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL-related betting updates to players who have opted in to marketing communications. You may opt out at any time via your account settings.

c77 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the player agreement, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming obligations under c77's operating framework.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where c77's interests do not override your fundamental rights.
• Consent: Processing for marketing communications, non-essential cookies, and analytics, where you have given explicit, informed consent. Consent may be withdrawn at any time.

c77 does not sell, rent, or trade your personal data to any third party. Personal data is shared only in the following limited circumstances:

• Payment processors: Personal and financial data is shared with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processing providers solely to execute your financial transactions. These providers are contractually bound to process data only as instructed by c77 and in accordance with applicable data protection standards.
• Identity verification providers: Where KYC checks are required, identity documents may be shared with certified third-party identity verification services operating under strict data security obligations.
• Game providers: Anonymised session data may be shared with c77's licensed game content providers for the purpose of game performance analytics and RNG certification compliance.
• Regulatory and legal compliance: c77 may disclose personal data to relevant regulatory bodies, law enforcement authorities, or courts where required to do so by applicable law, legal process, or c77's operating obligations — including AML reporting requirements.
• Business transfers: In the event of a merger, acquisition, or transfer of c77's business operations, personal data held by c77 may be transferred to the acquiring entity, subject to equivalent data protection obligations.

c77 handles all financial data with heightened security measures. Payment processing for JazzCash, Easypaisa, and Pakistani bank transfers is handled via certified payment gateways that operate under applicable financial institution security standards. c77 does not store full bank account numbers, CNIC numbers, or complete USDT wallet private keys on its own servers. All payment-related data transmissions are encrypted using SSL/TLS protocols. c77 undergoes regular security assessments of its payment infrastructure to maintain the integrity of financial data for all Pakistani players.

c77 uses cookies and similar tracking technologies on its platform. The following categories of cookies are in use:

• Strictly necessary cookies: Required for core platform functionality, including session management, login persistence, and wallet operations. These cookies cannot be disabled without impairing c77's core services.
• Performance and analytics cookies: Used to understand how players navigate c77 — which game categories are visited, how long sessions last, and where technical issues arise. Data collected is aggregated and anonymised. These cookies are activated only with your consent.
• Functional cookies: Store your preferences such as language settings, responsible gaming tool configurations, and preferred payment methods. Functional cookies improve your experience on return visits.
• Marketing cookies: Used to deliver relevant promotional content, including cricket betting and PSL offers where you have opted in to marketing communications. You may withdraw consent for marketing cookies at any time via your browser settings or c77 account preferences.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use c77 fully.

c77 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, including meeting its legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active player account data is retained for the duration of your account's existence on c77.
• Following account closure, c77 retains identity, transaction, and gaming records for a minimum of five (5) years, as required by AML compliance obligations under c77's operating framework.
• Marketing communication preferences and consent records are retained for three (3) years following the last recorded interaction.
• Technical and device data (IP logs, session data) is retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual.

Subject to c77's applicable operating framework and legal obligations, you hold the following rights in relation to your personal data held by c77:

• Right of access: You may request a copy of the personal data c77 holds about you at any time.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Certain data fields can be updated directly within your c77 account settings.
• Right to erasure: You may request deletion of your personal data where c77 no longer has a legal basis to retain it. Note that data subject to regulatory retention obligations cannot be deleted before the applicable retention period expires.
• Right to restrict processing: You may request that c77 restrict the processing of your data in certain circumstances, such as where the accuracy of data is disputed.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to c77, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.

To exercise any of the above rights, contact c77's support team via live chat within your account dashboard or by email at [email protected]. c77 will respond to data rights requests within 30 days. Identity verification may be required before processing a request.

c77 is strictly an adult platform. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 18. Age verification is a mandatory component of the c77 registration process. If c77 discovers that personal data has been collected from a minor, that data will be deleted immediately and the associated account permanently closed. If you believe a minor has created a c77 account, please contact us immediately at [email protected].

c77's platform infrastructure and data processing operations may involve the transfer of personal data to servers or service providers located outside of Pakistan. Where such transfers occur, c77 ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that applied within c77's operating jurisdiction. These safeguards may include contractual data protection clauses with third-party processors and the use of certified, internationally recognised data security frameworks.

c77 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and c77's servers.
• Encrypted storage of sensitive data fields including passwords and payment identifiers.
• Two-factor authentication (2FA) available to all registered c77 players as an additional account access security layer.
• Automated monitoring for suspicious login activity, including failed login attempts and access from new devices or geographic locations.
• Restricted internal access to personal data on a need-to-know basis, with staff access controls and audit logging in place.
• Regular security assessments and penetration testing of c77's platform infrastructure.

While c77 employs robust security practices, no digital platform can guarantee absolute security. You are encouraged to use a strong, unique password for your c77 account and to enable two-factor authentication.

c77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, legal obligations, or platform operations. Material changes will be communicated to registered players via the email address associated with their c77 account or via an in-platform notification. The effective date of the most current version of this Policy is displayed at the top of this page. Continued use of c77 following the publication of an updated Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or formal requests relating to this Privacy Policy or c77's data processing practices, please contact c77's Data Protection team via:

• Live Chat: Available 24/7 within your c77 account dashboard.
• Email: [email protected]

c77 aims to respond to all privacy-related enquiries within 14 business days. For formal data rights requests, please include your registered email address and a description of the data right you wish to exercise.