td7776 Privacy Policy — How We Protect Your Data

1.1 The data controller responsible for the processing of your personal data under this Privacy Policy is td7776, the international online gaming entity operating the platform at td7776.asia and its associated subdomains (hereafter "td7776", "we", "us", or "the Company").

1.2 For all data protection enquiries, including requests to access, correct, or delete your personal data, you may contact the td7776 data protection team via the support channels published on the Platform. Communications regarding data protection should reference this Privacy Policy and clearly identify the data subject making the request.

td7776 collects and processes the following categories of personal data. The specific data points collected depend on your interaction with the Platform and the level of account verification completed.

3.1 Directly from you. The majority of personal data processed by td7776 is provided directly by you when you register an account, complete KYC verification, make a deposit via JazzCash, EasyPaisa, or bank transfer, contact our support team, or adjust your account settings. You are responsible for ensuring the accuracy of the data you provide.

3.2 Automatically during Platform use. Technical data — including your IP address, device fingerprint, browser type, and session behaviour — is collected automatically when you access the td7776 platform. This data is collected through server logs, session cookies, and Platform security systems. Gameplay data is generated automatically each time you place a wager, claim a bonus, or interact with any game.

3.3 From third-party processors. In limited circumstances, td7776 may receive data from third-party payment processors (such as JazzCash or EasyPaisa transaction confirmation data), KYC verification service providers, or fraud detection systems. This data is used solely for the specific purpose for which it was received and is not repurposed.

td7776 processes your personal data for the following specific purposes:

• Account Administration: To create, maintain, and manage your td7776 account, including login authentication, password management, and account settings.
• KYC & Age Verification: To verify your identity, age (21+ requirement), and address in compliance with our international gaming licence and anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20, and to maintain accurate PKR transaction records.
• Service Delivery: To provide you with access to casino games, sports betting (including PSL cricket and international markets), slots, Keno, Mines Gold, and all other products on the td7776 platform.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits, process self-exclusion requests, and operate session timers and cooling-off periods.
• Security & Fraud Prevention: To detect and prevent unauthorised access, multi-accounting, collusion, bonus abuse, payment fraud, and other prohibited conduct.
• AML Compliance: To monitor transactions for suspicious activity and report to relevant authorities as required by td7776's international licensing obligations.
• Customer Support: To handle queries, complaints, and disputes raised through live chat, email, or other support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game selection, and user experience — particularly on mid-range mobile devices commonly used by Pakistani players.
• Legal Obligations: To comply with any lawful request from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

5.1 Contractual Necessity. Processing of your identity, contact, financial, and gameplay data is necessary for the performance of the contract between you and td7776 (i.e., the Terms & Conditions). Without this data, td7776 cannot operate your account or provide gaming services.

5.2 Legal Obligation. Processing for KYC verification, AML monitoring, age verification, and regulatory reporting is required by td7776's international gaming licence and applicable anti-money laundering laws. This processing is mandatory regardless of Player consent and cannot be opted out of.

5.3 Legitimate Interests. Processing for security, fraud prevention, multi-accounting detection, responsible gaming monitoring, and platform improvement is undertaken on the basis of td7776's legitimate interest in operating a safe, fair, and functional gaming platform. These interests have been balanced against your privacy rights and are proportionate to the risks they address.

5.4 Consent. Where processing is not covered by contractual necessity, legal obligation, or legitimate interest — such as optional marketing communications or use of non-essential cookies — td7776 will obtain your explicit consent. Consent may be withdrawn at any time through your account settings.

6.1 td7776 does not sell, rent, or trade your personal data to any third party for marketing purposes. Personal data is shared only with the following categories of recipients, for the specific purposes described:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network service providers — to process your deposits and withdrawals in PKR. Only the data strictly necessary for payment processing is shared.
• KYC Verification Partners: Identity verification service providers contracted by td7776 — to verify your CNIC, age, and address against authoritative databases. These partners process data under strict contractual data protection obligations.
• Regulatory Authorities: td7776's licensing regulator and any other regulatory body with lawful authority to request data — for compliance audits, AML reporting, and suspicious activity reports. Such disclosures are made only as required by law.
• Fraud Prevention Services: Specialised third-party fraud detection and prevention platforms — to identify suspicious login patterns, payment anomalies, and multi-accounting behaviour.
• Game Providers: Licensed game studio providers whose games are available on the td7776 lobby — limited to session identifiers and gameplay data necessary for game delivery and RNG audit compliance.
• Legal Advisors and Law Enforcement: Where required by court order, subpoena, or other lawful legal process, or where td7776 is required to protect its legal rights.

7.1 td7776 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include but are not limited to:

• Encryption: 256-bit TLS encryption for all data in transit. AES-256 encryption for all sensitive data at rest, including CNIC numbers, payment credentials, and passwords (stored as bcrypt hashes).
• Access Controls: Role-based access controls limiting employee access to personal data on a strict need-to-know basis. Access logs are maintained and audited regularly.
• Infrastructure Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS protection deployed across the td7776 hosting infrastructure.
• Security Audits: Regular penetration testing and vulnerability scanning conducted by independent security firms, in compliance with td7776's international gaming licence requirements.
• Incident Response: A documented data breach response plan with defined escalation procedures, regulatory notification timelines, and Player notification protocols.

7.2 While td7776 employs industry-standard security measures, no method of electronic transmission or data storage is 100% secure. td7776 cannot guarantee absolute security of your data and shall not be liable for any breach resulting from circumstances beyond its reasonable control, including but not limited to actions by third-party hackers, force majeure events, or your own failure to maintain the security of your login credentials.

8.1 td7776 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligation. The following retention periods apply:

• Active Accounts: Personal data is retained for the duration of your td7776 account. Data is accessible and modifiable through your account settings during this period.
• Closed Accounts: Upon voluntary account closure or td7776-initiated closure, personal data is retained for a minimum of five (5) years after the date of closure, as required by international anti-money laundering regulations and td7776's licensing obligations.
• Financial Transaction Records: Deposit and withdrawal records are retained for a minimum of seven (7) years from the date of the transaction, as required by financial regulatory obligations.
• Self-Exclusion Records: Records of self-exclusion are retained indefinitely to ensure that self-excluded Players cannot re-register.
• Communication Records: Live chat and email support records are retained for three (3) years from the date of the communication.

8.2 Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9.1 Essential Cookies. td7776 uses essential cookies that are strictly necessary for the operation of the Platform. These include session cookies that maintain your login state, security cookies that detect and prevent fraudulent access, and load-balancing cookies that ensure Platform availability. These cookies cannot be disabled without preventing Platform functionality.

9.2 Functional Cookies. td7776 uses functional cookies that remember your preferences — such as language settings, display preferences, and recent game selections — to provide a personalised experience. These cookies improve convenience but are not essential for Platform operation.

9.3 Analytical Cookies. td7776 uses analytical cookies and similar technologies to understand how Players use the Platform — including page views, session durations, and navigation patterns. This data is aggregated and anonymised before analysis and is used solely for Platform improvement.

9.4 td7776 does not use advertising or tracking cookies from third-party advertising networks. No personal data is shared with ad exchanges or social media platforms through cookie-based tracking.

9.5 You may control cookie settings through your browser preferences. Disabling essential cookies may prevent you from using certain features of the td7776 platform, including login and gameplay functionality.

You have the following rights in relation to your personal data held by td7776. To exercise any of these rights, contact our support team with a clear description of your request, along with sufficient information to verify your identity.

• Right of Access: You may request a copy of all personal data that td7776 holds about you. td7776 will respond to verified access requests within 30 calendar days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Most data points can be updated directly through your td7776 account settings; for data that cannot be self-corrected (e.g., CNIC details), contact support.
• Right to Erasure: You may request deletion of your personal data, subject to td7776's legal obligation to retain certain data for regulatory compliance (see Clause 8). Where deletion conflicts with a legal retention obligation, the data will be restricted from active processing and securely stored until the retention period expires.
• Right to Restrict Processing: You may request that td7776 restrict the processing of your personal data in specific circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time through your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Complain: If you believe that td7776 has processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

11.1 The td7776 platform is strictly restricted to individuals aged 21 and above. td7776 does not knowingly collect personal data from any person under the age of 21. The KYC process — including CNIC verification — is designed to detect and prevent underage registration.

11.2 If td7776 becomes aware that personal data has been collected from an individual under the age of 21, the associated Account will be immediately closed, all personal data will be deleted without undue delay, and any balance in the Account will be handled in accordance with the Terms & Conditions.

11.3 If you believe that a minor has provided personal data to td7776 or has access to a td7776 Account, please contact our support team immediately so that appropriate action can be taken.

12.1 td7776 operates an international platform. Your personal data may be processed and stored on servers located outside Pakistan — including in jurisdictions where td7776's hosting infrastructure, payment processors, or licensing regulator are based.

12.2 Where personal data is transferred to a jurisdiction outside Pakistan, td7776 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections described in this Privacy Policy. These safeguards include contractual data protection clauses with all data processors, encryption of data in transit and at rest, and compliance with the data protection requirements of td7776's licensing jurisdiction.

13.1 td7776 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or licensing requirements. The updated version will be published on this page with a revised effective date.

13.2 Where changes are material — for example, the introduction of a new category of data collection, a new third-party data recipient, or a change to retention periods — td7776 will provide reasonable advance notice via email to your registered address or an in-Platform notification.

13.3 Your continued use of the td7776 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any revised Privacy Policy, you must stop using the Platform and contact support to close your account.

14.1 For all enquiries related to this Privacy Policy, including requests to exercise your data protection rights under Clause 10, please contact the td7776 data protection team via the support channels published on the Platform. For formal written correspondence, use the email address displayed in the footer of this page.

14.2 All data protection correspondence should be in English and should include: (a) a clear description of the request or enquiry, (b) your registered td7776 account identifier (mobile number or email), and (c) sufficient information for td7776 to verify your identity before processing the request.

14.3 td7776 aims to respond to all data protection enquiries within 48 hours of receipt. Formal data subject access requests are processed within the timeframes set out in Clause 10.