td77 Privacy Policy

1. Introduction

td77 ("we", "us", "the Platform") operates the online cricket betting and casino platform accessible at td77.biz. In providing our services to registered players across Pakistan — in cities like Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad — we necessarily collect and process certain personal data. This Privacy Policy describes what data we collect, why we collect it, how it is used, and how it is protected.

By registering an account on td77.biz or by using any part of the td77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy should be read alongside td77's Terms & Conditions.

td77 does not sell personal data to third parties for marketing purposes. Data collected is used to operate, secure, improve, and legally comply in the provision of the td77 platform services.

2. Data We Collect

td77 collects the following categories of personal data from users:

2.1 Data You Provide Directly: The majority of personal data is provided by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account preferences.

2.2 Data Collected Automatically: Technical and usage data is collected automatically as you interact with td77.biz, primarily through server logs and cookies. This data is used for platform security, fraud prevention, and service improvement.

3. How We Use Your Data

td77 uses collected personal data for the following specific purposes:

• Account Management: To create, maintain, verify, and administer your td77 account, including processing deposits and withdrawals via JazzCash, Easypaisa, and Pakistani bank transfers.
• Service Delivery: To provide cricket betting markets, PSL odds, live casino games, slots, and all other td77 platform features to you as a registered user.
• Identity Verification (KYC): To verify your identity and age (18+) in accordance with responsible gaming obligations and fraud prevention requirements before processing withdrawals.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorised access, suspicious account activity, payment fraud, money laundering, and other prohibited conduct on the td77 platform.
• Legal Compliance: To fulfil td77's obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming requirements.
• Platform Improvement: To analyse usage patterns, game performance, and user behaviour to improve td77's product features, user interface, and service quality.
• Customer Support: To respond to support requests, complaints, and account queries submitted via td77's support channels.
• Responsible Gaming Monitoring: To monitor gambling patterns for indicators of problem gambling behaviour and to enforce account limits, self-exclusion requests, and cooling-off periods where applicable.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. Users may opt out at any time via account settings.

4. Legal Basis for Processing

td77 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the user agreement (Terms & Conditions) — including account creation, deposit processing, and game access.
• Legal Obligation: Processing required to comply with AML, KYC, and responsible gaming obligations.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, and service improvement, where these interests are not overridden by user privacy rights.
• Consent: Processing for marketing communications, where explicit consent has been obtained during registration or in account settings. This consent may be withdrawn at any time.

5. Data Sharing & Disclosure

5.1 td77 does not sell your personal data to third parties. Data sharing is limited to the following categories of recipients and circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT gateway providers receive the financial and identity data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and security standards.
• Game Software Providers: Certified casino game providers (such as Pragmatic Play, PG Soft, and others) may receive anonymised session and game data for RNG certification compliance and game performance monitoring. No directly identifying personal data is shared with game providers.
• KYC & Identity Verification Services: Where td77 uses third-party identity verification services to validate CNIC and other identity documents, those service providers receive the minimum data necessary to perform the verification.
• Legal & Regulatory Authorities: td77 will disclose personal data to law enforcement or regulatory authorities where required by applicable law, court order, or where td77 has a good-faith belief that disclosure is necessary to prevent fraud, financial crime, or harm to persons.
• Professional Advisors: Legal, accounting, and compliance advisors who are bound by professional confidentiality obligations may access user data on a strictly need-to-know basis.

5.2 In the event of a business transfer, merger, or acquisition involving td77, personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

6. Cookies & Tracking Technologies

6.1 td77.biz uses cookies and similar tracking technologies to operate the platform, maintain login sessions, prevent fraud, and analyse user behaviour. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for platform operation — maintaining your logged-in session, remembering your basket/selections, and enabling security features. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language settings, game filters, and notification choices to personalise your td77 experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate td77.biz — which pages are visited, how long sessions last, which games are most accessed. This data is used to improve the platform.
• Security Cookies: Used for fraud detection, bot prevention, and suspicious login identification.

6.2 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent core td77 platform features from functioning correctly.

7. Data Retention

7.1 td77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and compliance obligations.

7.2 As a general guideline, td77 applies the following retention periods:

• Active account data (identity, contact, transaction records): retained for the duration of the account relationship plus a minimum of 5 years following account closure, to comply with AML and financial record-keeping obligations.
• KYC documents: retained for a minimum of 5 years from the date of verification, in accordance with applicable AML requirements.
• Communication and support records: retained for 3 years from the date of the interaction.
• Technical and usage logs: retained for 12 months for security and fraud prevention purposes.

7.3 Where a user requests account deletion or self-exclusion, td77 will anonymise or delete personal data subject to the retention obligations described above. Anonymised, aggregated data that can no longer be used to identify individuals may be retained indefinitely for analytical purposes.

8. Data Security

8.1 td77 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and td77.biz;
• Passwords stored using one-way cryptographic hashing — td77 cannot retrieve your plaintext password;
• Two-factor authentication (2FA) available for all account logins;
• Access to personal data restricted to td77 staff on a need-to-know basis, with role-based access controls;
• Regular security assessments and penetration testing of platform infrastructure;
• Intrusion detection and real-time suspicious activity monitoring.

8.2 Despite these measures, no internet-based platform can guarantee absolute security. td77 recommends that users further protect their accounts by using strong, unique passwords and enabling 2FA. Report any suspected unauthorised account access to td77 support immediately.

9. Your Rights

9.1 Subject to applicable law, td77 users have the following rights regarding their personal data:

• Right of Access: You may request a copy of the personal data td77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your account.
• Right to Erasure: You may request deletion of your personal data, subject to td77's legal retention obligations (see Section 7).
• Right to Restriction: You may request that td77 restrict the processing of your personal data in certain circumstances, such as while a complaint is under review.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Opting out of marketing communications can be done at any time through your td77 account settings.
• Right to Data Portability: You may request that td77 provide your personal data in a structured, machine-readable format.

9.2 To exercise any of these rights, contact td77 support. td77 will respond to valid data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days with notice provided to you.

9.3 td77 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

10. Children's Privacy

10.1 The td77 platform is strictly for individuals aged 18 and above. td77 does not knowingly collect personal data from individuals under 18. Age verification is conducted as part of the KYC process before withdrawals are authorised.

10.2 If td77 becomes aware that personal data has been collected from an individual under 18 without appropriate parental consent, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an under-18 account will be forfeited.

10.3 If you believe that a person under 18 may have registered on td77 using false age information, please contact td77 support immediately so that the matter can be investigated and resolved.

11. Third-Party Services

11.1 The td77 platform integrates with third-party services to deliver its full product, including payment gateways (JazzCash, Easypaisa, HBL and others), game software providers, and analytics platforms. These third parties operate under their own privacy policies.

11.2 td77 is not responsible for the privacy practices of third-party services. td77 selects third-party providers who maintain appropriate data security standards and contractually restricts their use of any td77 user data to the specific purpose for which it was shared.

11.3 td77.biz does not contain links to external third-party websites beyond the payment and game integrations described above. Users are advised to review the privacy policies of any external service they interact with separately from td77.

12. Changes to This Privacy Policy

12.1 td77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised whenever a change is made.

12.2 For material changes — those that significantly affect how your personal data is used — td77 will provide advance notice via email to your registered address and/or a prominent notice on the platform. Continued use of td77.biz following the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy, wish to exercise a data rights request, or need to report a privacy concern, please contact td77 at: