2777sz Privacy Policy

1. Introduction & Data Controller

2777sz ("we", "us", "our") operates an online casino and sports betting platform targeting English-speaking players in Pakistan and other eligible jurisdictions. We are the data controller responsible for the personal information collected through the Platform.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with internationally recognised data protection standards. This Policy sets out the types of personal data we collect, the purposes for which we process it, the legal bases on which we rely, and the rights you hold in respect of your data.

2. Information We Collect

2777sz collects personal data from and about you in the following categories:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where voluntarily disclosed in a responsible gaming context (e.g., a player disclosing a gambling disorder when requesting self-exclusion). Such disclosures are handled with strict confidentiality.

3. How We Use Your Information

2777sz processes your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your 2777sz player account.
• Service delivery: Enabling you to place bets on cricket (including PSL fixtures), play casino games, and make deposits and withdrawals in PKR.
• Identity verification (KYC): Confirming your identity and age (18+) before processing withdrawals, as required by our operational compliance framework.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, and card networks.
• Fraud prevention and security: Detecting, investigating, and preventing fraud, money laundering, match-fixing, and other prohibited activities.
• Responsible gaming: Monitoring account activity for signs of problem gambling, enforcing self-exclusion requests, and applying responsible gaming limits.
• Legal and regulatory compliance: Meeting obligations under applicable gambling regulations, anti-money-laundering requirements, and other applicable laws.
• Customer support: Responding to queries, resolving complaints, and maintaining communication records.
• Marketing: Sending promotional offers, bonus notifications, and platform updates to you via SMS or email, where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the 2777sz platform, user experience, and game selection.

4. Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Contract performance: Processing necessary to provide the 2777sz Services you have contracted for, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable anti-money-laundering, KYC, and responsible gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where our legitimate interests are not overridden by your rights.
• Consent: Processing for marketing communications, where you have given explicit, freely-given, specific consent. You may withdraw consent at any time by contacting support or using the opt-out mechanism in any marketing message.

5. Sharing Your Information

2777sz does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, Skrill, Neteller, and USDT TRC20 network operators, solely to process your transactions.
• Game software providers: Evolution Gaming, Pragmatic Play, PG Soft, JILI, and other game studios, limited to session data required to operate games you play.
• Identity verification providers: Third-party KYC verification services, strictly for the purpose of confirming your identity documents.
• Legal authorities: Government agencies, law enforcement, or regulatory bodies where 2777sz is legally required or compelled to disclose data, including in response to court orders or regulatory investigations.
• Service providers: IT infrastructure, cloud hosting, cybersecurity, and customer support platform providers operating under contractual data processing agreements that prohibit them from using your data for any other purpose.

All third parties with whom 2777sz shares personal data are contractually bound to process it only for the specified purpose, maintain appropriate security measures, and comply with applicable data protection standards.

6. Cookies & Tracking Technologies

2777sz uses cookies and similar tracking technologies to operate and improve the Platform. Categories of cookies used include:

• Essential cookies: Required for login session management, security, and core platform functionality. These cannot be disabled without impairing Platform use.
• Analytics cookies: Anonymised data on page visits, session durations, and navigation patterns used to improve Platform performance. No personally identifiable data is retained in analytics cookies.
• Preference cookies: Store your language, game lobby, and display preferences between sessions.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to 2777sz. 2777sz does not use advertising or third-party tracking cookies.

7. Data Retention

2777sz retains your personal data for as long as your account remains active and for a period thereafter as required by applicable regulatory obligations. Specifically:

• Account and KYC records are retained for a minimum of 5 years from the date of account closure, as required by anti-money-laundering regulations.
• Transaction and bet records are retained for a minimum of 5 years.
• Support communication records are retained for 3 years from the date of resolution.
• Marketing consent records are retained for the duration of the consent plus 3 years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

2777sz implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• TLS/SSL encryption for all data transmitted between your device and 2777sz servers
• Encrypted storage of sensitive personal data and KYC documents at rest
• Two-factor authentication (OTP) available for all player accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits and vulnerability testing
• Incident response procedures with defined timelines for breach notification

No method of transmission over the internet or electronic storage is 100% secure. While 2777sz takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, 2777sz will notify you in accordance with applicable legal requirements.

9. Your Rights & Choices

Subject to applicable law, you have the following rights in respect of your personal data held by 2777sz:

• Access: Request a copy of the personal data 2777sz holds about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where there is no compelling legal basis for continued retention (note: regulatory retention obligations may prevent full erasure).
• Restriction: Request that 2777sz restrict the processing of your data in certain circumstances.
• Objection: Object to processing of your data on the basis of legitimate interests.
• Data portability: Request a machine-readable copy of personal data you have provided to 2777sz.
• Withdraw consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the 2777sz Data Privacy team at [email protected]. We will respond to all requests within 30 days. We may require identity verification before processing a request.

10. Children's Privacy

The 2777sz Platform is strictly for users aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has provided us with personal data, please contact us immediately at [email protected].

11. Cross-Border Data Transfers

2777sz operates internationally and your personal data may be processed in countries outside Pakistan. Where data is transferred to countries that do not provide an equivalent level of data protection, 2777sz implements appropriate safeguards, including standard contractual clauses, to ensure your data receives adequate protection. By using the 2777sz Platform, you consent to the transfer of your personal data as described in this Policy.

12. Third-Party Links & Services

The 2777sz Platform may contain links to third-party websites or services (for example, game software providers). 2777sz is not responsible for the privacy practices of third-party websites and this Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party service you access.

13. Changes to This Privacy Policy

2777sz reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered mobile number or email address at least 7 days before the changes take effect. The updated Policy will be published at 2777sz.app/privacy-policy with a revised "Last Updated" date. Continued use of the Platform following the effective date constitutes acceptance of the revised Policy.

14. Contact & Complaints

For questions, requests, or complaints relating to this Privacy Policy or 2777sz's data processing practices, please contact us: