9777cx Privacy Policy — Your Data, Your Rights

1.1 Data Controller. This Privacy Policy is issued by the Company operating the 9777cx platform at 9777cx.site (referred to throughout as "9777cx", "the Company", "we", "us", or "our"). The Company acts as Data Controller in respect of all personal data processed in connection with the provision of 9777cx gaming and payment services to players in Pakistan and other permitted jurisdictions.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected, processed, stored, or transmitted by 9777cx in connection with: (a) the registration and maintenance of player accounts; (b) deposits and withdrawals processed via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank; (c) gameplay activity across all 9777cx products including cricket betting, live casino, slots, Plinko, and Blackjack MH; (d) communications between players and the 9777cx support team; (e) promotional offers, loyalty programmes, and marketing communications.

1.3 Acceptance. By registering a 9777cx account or using any feature of the platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create a 9777cx account.

2.1 Categories of Personal Data. The following table sets out the categories of personal data 9777cx collects, and the primary source of each category:

2.2 Special Category Data. 9777cx does not intentionally collect special category personal data (including data concerning health, religion, political opinions, or biometric data beyond CNIC photograph verification). If such data is inadvertently included in communications to 9777cx, it will be deleted upon identification.

2.3 Data from Third Parties. 9777cx may receive limited personal data from third-party identity verification partners and payment processors (including JazzCash, EasyPaisa, and bank partners) for the purpose of confirming your identity and completing financial transactions. This data is handled under the same protections as data collected directly from you.

9777cx processes your personal data for the following purposes. Each processing purpose is mapped to a lawful basis in Section 4 below.

• Account Management: Creating and maintaining your 9777cx account, verifying your identity against CNIC, processing password resets, and managing account security settings including 2FA.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank; processing withdrawal requests to verified payment methods; maintaining transaction records as required by our international gaming license AML obligations.
• Gaming Service Delivery: Serving cricket betting markets, live casino tables, slot games, Plinko, and Blackjack MH; settling bets; crediting winnings; managing bonus and VIP programme activities.
• Legal Compliance: Meeting anti-money laundering (AML) and know-your-customer (KYC) obligations under our international gaming license; responding to lawful requests from regulatory and law enforcement authorities; enforcing our Terms and Conditions.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling; applying self-exclusion and deposit limit restrictions; sending responsible gaming communications to players who have opted into such alerts.
• Platform Improvement: Analysing aggregated and anonymised gameplay, navigation, and performance data to improve the 9777cx platform; resolving technical issues; testing new features before wider release.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in to receive such communications. Marketing is always opt-in at 9777cx.
• Fraud Prevention and Security: Detecting and preventing fraudulent accounts, unauthorised access, multi-account abuse, bonus abuse, money laundering, and any other activity that violates the 9777cx Terms and Conditions.

4.1 Contract Performance. The primary legal basis for the majority of 9777cx's data processing is the performance of the contract between you and the Company as set out in the Terms and Conditions — including account creation, payment processing, and gaming service delivery. Without this processing, we cannot provide the 9777cx service.

4.2 Legal Obligation. Certain processing activities — specifically AML/KYC identity verification and the retention of transaction records — are carried out to fulfil legal obligations imposed by the international gaming license framework under which 9777cx operates.

4.3 Legitimate Interests. 9777cx processes Technical Data and Gaming Activity Data on the basis of legitimate interests: specifically, our legitimate interest in operating a secure, fraud-free platform, improving our product, and identifying responsible gaming risks. In each case, we have assessed that this interest is not overridden by your privacy rights.

4.4 Consent. Marketing communications are sent only on the basis of your explicit consent. You may withdraw this consent at any time through account settings or by contacting the 9777cx support team — withdrawal of marketing consent does not affect any other processing activity.

5.1 General Principle. 9777cx does not sell, rent, or otherwise commercially transfer your personal data to any third party. Your data is shared only in the circumstances described in this Section.

5.2 Service Providers. 9777cx engages third-party service providers who process personal data on our behalf under binding data processing agreements. These providers include:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank — strictly for transaction processing purposes.
• Identity verification providers: Third-party KYC/AML screening services that verify CNIC documents and screen against sanctions lists.
• Game software providers: Third-party casino software studios whose games are available through the 9777cx platform — these providers receive only session and outcome data necessary for game delivery and RNG audit purposes.
• Cloud infrastructure providers: Hosting and data storage partners who hold 9777cx data under encryption in accordance with security standards required by our gaming license.
• Analytics providers: Providers of aggregated, anonymised platform analytics. No personally identifiable data is shared for analytics purposes.

5.3 Legal Disclosures. 9777cx will disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory direction. We will, where legally permitted, notify affected players of such disclosure requests.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all Company assets, player personal data held by 9777cx would form part of the transferred assets. Affected players would be notified prior to any material change in how their data is processed.

6.1 What Are Cookies. Cookies are small text files stored on your device when you visit the 9777cx platform. They allow the platform to recognise your device across page navigations within a session, and — where you have consented — across separate sessions.

6.2 Cookies Used by 9777cx.

• Strictly Necessary Cookies: Required for core platform function — maintaining your login session, processing deposits, and securing your account. These cannot be disabled without impairing the service.
• Functional Cookies: Remember your language preference, game lobby filters, and responsible gaming display settings between sessions. These are set with your consent.
• Analytics Cookies: Aggregate, anonymised data about how pages and features are used — helping 9777cx improve navigation and performance. No personal betting data is transmitted through analytics cookies.
• Session Security Cookies: Maintain the integrity of your authenticated session and protect against cross-site request forgery. These are strictly necessary and expire when you close your browser.

6.3 Cookie Management. On your first visit to 9777cx, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can review and update your cookie preferences at any time through your browser settings. Note that declining functional cookies may affect your platform experience.

7.1 General Principle. 9777cx retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our international gaming license obligations.

• Active Account Data: Retained for the full duration of your 9777cx account. Identity and contact data is updated upon player request where the updated information can be verified.
• Post-Closure Account Data: Following account closure, identity verification records and transaction history are retained for a minimum of five years to meet AML/KYC obligations under our gaming license. This retention period cannot be shortened by player deletion request.
• Gaming Activity Logs: Detailed bet history and game session logs are retained for two years post-session for dispute resolution and audit purposes, then archived in anonymised form.
• Support Communications: Customer support transcripts are retained for two years following resolution of the relevant query, then deleted.
• Marketing Data: Email and communication preferences are deleted within 30 days of a player opting out or requesting deletion of marketing data.
• Technical Logs: Server access logs containing IP address and session technical data are retained for 90 days for security and fraud prevention purposes, then automatically deleted.

7.2 Deletion on Request. Where a player requests deletion of their personal data, 9777cx will delete all data that is not subject to mandatory retention under our legal and regulatory obligations within 30 days of receiving a verified deletion request. The player will be notified of what data has been deleted and what data is being retained and under what legal basis.

8.1 Technical Measures. 9777cx implements the following technical security measures to protect your personal data:

• 256-Bit AES Encryption: All personal and financial data at rest is encrypted using 256-bit AES. Data in transit is protected by TLS 1.3 encryption.
• Password Hashing: Account passwords are stored only as salted cryptographic hashes using bcrypt. 9777cx staff cannot retrieve your password — only reset it.
• Access Controls: Internal access to player personal data is restricted on a need-to-know basis. All staff access is logged, and privileged access requires multi-factor authentication.
• Intrusion Detection: 9777cx operates continuous intrusion detection and anomaly monitoring on all systems holding player data.
• Penetration Testing: The platform undergoes regular third-party penetration testing as required by our international gaming license security standards.

8.2 Data Breach Response. In the event of a personal data breach that is likely to result in risk to the rights of affected players, 9777cx will: (a) notify the relevant regulatory authority within 72 hours of becoming aware of the breach; and (b) notify affected players without undue delay where the breach is likely to result in a high risk to their rights, including the nature of the breach, the data involved, and the remediation steps taken.

10.1 Strict 21+ Policy. The 9777cx platform is strictly for players aged 21 years or older. 9777cx does not knowingly collect or process personal data from any person under the age of 21. Age verification through CNIC is a prerequisite for withdrawal and a standard element of our KYC process.

10.2 Underage Account Discovery. If 9777cx discovers or reasonably suspects that an account holder is under 21 years of age, the account will be immediately suspended. Any real-money balance on the account will be returned to the payment source. Any bonus credits will be forfeited. All personal data associated with the underage account will be deleted as soon as it is no longer required for the refund processing, except where retention is required by law.

10.3 Parental Controls. If you share a device with minors, 9777cx strongly advises enabling device-level parental control software and keeping your 9777cx login credentials entirely confidential. 9777cx is not responsible for access by minors using a responsible adult's account credentials.

11.1 Transfer Necessity. In order to provide the 9777cx gaming service, certain personal data may be transferred to and processed in countries outside Pakistan. This may occur in connection with cloud infrastructure, game software providers, and payment processor operations.

11.2 Transfer Safeguards. Where personal data is transferred outside Pakistan, 9777cx ensures that appropriate safeguards are in place — including contractual data protection clauses equivalent to those required under the applicable privacy law framework. We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing compensating contractual safeguards.

11.3 Player Enquiries. Players may request further information about the specific safeguards in place for international transfers of their personal data by contacting the 9777cx support team.

12.1 Right to Update. 9777cx reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The version number and effective date at the top of this page will be updated with each revision.

12.2 Notification of Material Changes. Where a proposed change materially affects how 9777cx processes your personal data or the rights available to you, we will notify registered players by email to their registered address not less than 14 days before the change takes effect.

12.3 Continued Use. Your continued use of the 9777cx platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you should cease using 9777cx and contact support to close your account and request balance withdrawal.

13.1 Privacy Enquiries. For any question, concern, or request relating to this Privacy Policy or to the personal data 9777cx holds about you, please contact our Privacy team using the support email address displayed in plain text in the footer of every page on this platform (support [at] 9777cx.site).

13.2 Response Timeframes. 9777cx acknowledges all privacy-related enquiries within 72 hours. For formal data subject rights requests (access, erasure, portability, etc.), a substantive response will be provided within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days with written explanation.

13.3 Verification. To protect against fraudulent data access requests, all formal privacy rights requests require identity verification before data is disclosed or deleted. Verification is conducted using the same CNIC-based process used for withdrawal verification.