hc77 Privacy Policy

1. Who We Are

This Privacy Policy is issued by hc77, the operator of the online casino and sports betting platform accessible at hc77.ws (referred to throughout this Policy as "hc77", "we", "us", or "our"). hc77 operates under an international gaming licence and provides cricket betting, live casino, slot games, crash games, and related gaming services to registered players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, hc77 acts as the data controller in respect of all personal data collected from players who access hc77.ws, create an hc77 account, make deposits, place wagers, or interact with hc77 customer support.

If you have any questions about this Privacy Policy or about how hc77 handles your personal data, you can contact our support team at any time via 24/7 live chat on hc77.ws or by emailing [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

hc77 collects the following categories of personal data from players during the account registration, KYC verification, payment processing, and platform usage processes:

3. How We Collect Your Data

hc77 collects personal data through the following means:

• Direct submission: Data you provide voluntarily when completing the hc77 registration form, submitting KYC documents, entering payment details for a deposit or withdrawal, or contacting hc77 support via live chat or email.
• Automated technical collection: Data collected automatically by hc77's platform infrastructure when your device connects to hc77.ws, including IP address, device identifiers, browser data, and session activity logs. This collection occurs regardless of whether you are a registered hc77 player or a visitor browsing the site without an account.
• Cookies and similar technologies: hc77 uses first-party cookies and similar tracking technologies to maintain your login session, remember your preferences, and gather aggregated analytics about platform usage. See Section 7 for full details of hc77's cookie practices.
• Third-party verification services: hc77 may receive identity verification data from third-party KYC service providers used to validate CNIC documents and confirm player identity. Data received from these providers is treated identically to data submitted directly by the player.
• Payment processors: When you deposit or withdraw funds via JazzCash, EasyPaisa, or a bank transfer, hc77 receives transaction confirmation data from the relevant payment processor — including transaction reference numbers and amounts — to credit or debit your hc77 PKR wallet accurately.

4. How hc77 Uses Your Personal Data

hc77 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your hc77 account, maintain your PKR wallet, process your deposits and withdrawals, and manage your account settings and preferences throughout the lifetime of your hc77 account.
• Identity verification and KYC compliance: To verify your age (21+ requirement), confirm your identity as required by hc77's international gaming licence, and comply with applicable anti-money-laundering (AML) and Know Your Customer (KYC) obligations.
• Payment processing: To process PKR deposits from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 sources, and to process withdrawal requests back to your registered payment methods.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, multi-accounting, and other forms of platform abuse that could harm hc77 or its legitimate players.
• Responsible gaming compliance: To monitor your gaming behaviour for indicators of problem gambling, enforce self-exclusion periods you have requested, and ensure compliance with hc77's responsible gaming obligations under its international gaming licence.
• Customer support: To respond to your support enquiries via live chat or email, investigate account disputes, process bonus claims, and resolve any technical issues you report affecting your hc77 gaming experience.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve the hc77 platform's performance, game selection, navigation, and overall player experience for Pakistani users.
• Marketing communications (with consent): To send you promotional emails, SMS notifications, and in-platform messages about new hc77 bonuses, PSL betting promotions, new slot releases, and platform features — but only where you have provided your explicit consent to receive marketing communications at registration or in your account settings.

5. Legal Basis for Processing

hc77 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing your identity data, contact data, financial data, and account data is necessary for hc77 to perform its contractual obligations to you as a registered player — specifically, to operate your account, process your transactions, and provide access to hc77's gaming services.
• Legal obligation: KYC identity verification, AML transaction monitoring, age verification, and record-keeping of player data are processing activities required by hc77's international gaming licence and applicable financial crime prevention regulations.
• Legitimate interests: Processing technical data and usage data for fraud prevention, platform security, and aggregate analytics is conducted on the basis of hc77's legitimate interest in maintaining a safe, secure, and well-functioning platform for all players.
• Consent: Sending you marketing communications is conducted only on the basis of your freely given, specific, and informed consent. You may withdraw your consent to marketing at any time by updating your communication preferences in your hc77 account settings or by contacting hc77 support via live chat.

6. Data Sharing & Third-Party Disclosure

hc77 does not sell your personal data to third parties. hc77 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processing partners receive the minimum financial data necessary to process your deposit and withdrawal transactions. hc77 does not share your full personal profile with payment processors.
• KYC verification providers: Third-party identity verification services used by hc77 to validate CNIC documents and confirm player identity receive the identity documents you submit during the KYC process. These providers are contractually bound to process your data solely for identity verification purposes on behalf of hc77.
• Game software providers: Third-party casino game and live dealer software providers whose games are hosted on the hc77 platform may receive anonymised or pseudonymised session data necessary to deliver the game experience. hc77 does not share your full identity or financial data with game software providers.
• Regulatory and law enforcement authorities: hc77 may be required to disclose player data to its gaming licence regulatory authority, financial intelligence units, or law enforcement agencies where required by applicable law, a court order, or a regulatory compliance obligation. hc77 will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers: hc77's legal counsel, auditors, and compliance consultants may access player data on a strictly confidential basis where necessary to provide professional services to hc77. These advisers are bound by professional confidentiality obligations.

7. Cookies & Tracking Technologies

hc77.ws uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide a personalised player experience. The following categories of cookies are used on hc77.ws:

• Strictly necessary cookies: These cookies are essential for hc77.ws to function. They maintain your login session, preserve your account preferences, and enable core platform features such as deposit processing and game loading. These cookies cannot be disabled without breaking the hc77 platform experience.
• Analytics cookies: hc77 uses first-party analytics cookies to understand how players navigate hc77.ws, which game categories are most popular, and where players encounter friction in the deposit or registration flow. This data is collected in aggregated, anonymised form and is used solely to improve the hc77 platform.
• Preference cookies: These cookies remember your language preferences, display settings, and last-played game categories so that your hc77 experience is consistent across sessions and devices.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the hc77 platform, including logging in and processing transactions. hc77 does not currently use third-party advertising or cross-site tracking cookies.

8. Data Retention

hc77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

Once a retention period expires, hc77 will securely delete the relevant data or, where deletion is not technically feasible, anonymise it so that it can no longer be attributed to any individual player.

9. Data Security Measures

hc77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Our key security controls include:

• TLS 1.3 encryption in transit: All data exchanged between your browser or mobile device and hc77.ws is encrypted using TLS 1.3, the current industry-standard transport layer security protocol, preventing interception of your login credentials, payment details, and personal information during transmission.
• AES-256 encryption at rest: Personal data stored in hc77's databases — including KYC documents, financial records, and account information — is encrypted at rest using AES-256, making stored data unreadable to any party without the correct decryption keys.
• Bcrypt password hashing: hc77 never stores your account password in plain text. Passwords are hashed using bcrypt with an appropriate cost factor, ensuring that even in the unlikely event of a database breach, your password cannot be recovered from stored data.
• Two-factor authentication (2FA): hc77 strongly recommends enabling two-factor authentication on your account via the security settings panel. 2FA adds a critical second layer of protection by requiring a one-time verification code in addition to your password at each login.
• Access controls and audit logging: Access to hc77's player data systems is restricted to authorised personnel on a strict need-to-know basis. All access events are logged and subject to regular audit review to detect any unauthorised access attempts.
• Penetration testing and vulnerability assessments: hc77's platform undergoes regular security testing by qualified information security professionals to identify and remediate vulnerabilities before they can be exploited.

10. Your Data Rights

As a player whose personal data is processed by hc77, you have the following rights in relation to your personal data. hc77 is committed to honouring these rights promptly and without unnecessary bureaucracy:

• Right of access: You have the right to request a copy of all personal data that hc77 holds about you. hc77 will provide this in a structured, readable format within 30 days of a verified request.
• Right to rectification: If any personal data hc77 holds about you is inaccurate or incomplete, you have the right to request correction. You can update most account information directly from your hc77 account settings panel, or contact support for assistance with data that cannot be self-edited.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you have objected to processing based on legitimate interests. Note that hc77 may be required to retain certain data for regulatory compliance periods even after an erasure request — such data will be flagged as suppressed and not used for any active processing during the retention period.
• Right to restriction: You may request that hc77 restricts its processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being resolved, or while you object to processing based on legitimate interests pending hc77's assessment of that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, or to request that hc77 transmit it directly to another data controller where technically feasible.
• Right to withdraw consent: Where hc77 processes your data on the basis of your consent — specifically for marketing communications — you may withdraw that consent at any time with immediate effect, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact hc77 support via 24/7 live chat on hc77.ws or by emailing [email protected]. hc77 may need to verify your identity before processing a data rights request to ensure the security of your personal data.

11. Children's Privacy & Age Restriction

hc77 is strictly an adults-only platform. The minimum age to register an hc77 account, make a deposit, or place any wager on the hc77 platform is 21 years of age. hc77 does not knowingly collect personal data from any person under the age of 21, and registration by a person under 21 constitutes a material breach of the hc77 Terms and Conditions.

hc77 applies active age verification controls during the registration process and may request CNIC documentation at any stage to confirm age compliance. If hc77 discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, any balance will be reviewed in line with hc77's Terms and Conditions, and the data will be securely deleted as soon as legally permissible.

12. Marketing Communications

hc77 sends marketing communications — including emails about new bonuses, PSL cricket betting promotions, new slot game launches, and platform feature updates — only to players who have provided explicit consent to receive such communications at the time of registration or subsequently through their hc77 account settings.

If you have opted in to hc77 marketing communications, you may opt out at any time by:

• Clicking the unsubscribe link present in every hc77 marketing email you receive.
• Updating your communication preferences in the notification settings section of your hc77 account dashboard.
• Contacting hc77 customer support via live chat and requesting removal from all marketing communications lists.

hc77 will process opt-out requests within 5 business days. Note that opting out of marketing communications does not affect transactional communications — hc77 will continue to send you account security notifications, transaction confirmations, and other service-critical messages regardless of your marketing preferences.

13. International Data Transfers

hc77 operates under an international gaming licence and its data infrastructure may involve storage or processing of player data in jurisdictions outside Pakistan. Where personal data is transferred internationally, hc77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used by hc77 for international data transfers include contractual data processing agreements with all third-party service providers that impose data protection obligations equivalent to those applicable in the primary licensing jurisdiction, and technical security measures including encryption in transit and at rest that apply regardless of the geographic location of the data infrastructure.

hc77 does not transfer personal data to any country or entity that does not provide adequate data protection safeguards. If you have specific concerns about the international transfer of your personal data, please contact hc77 support via live chat.

14. Updates to This Privacy Policy

hc77 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or regulatory requirements, or improvements to the hc77 platform that affect how we collect or use personal data. The effective date at the top of this Policy indicates when the current version took effect.

Where updates to this Privacy Policy are material — meaning they significantly affect your rights or how hc77 uses your personal data — hc77 will notify you by email to the address registered on your hc77 account and by a prominent in-platform notification when you next log in. For minor clarifications and non-material updates, hc77 will update the Policy text and effective date without individual notification.

Your continued use of the hc77 platform following notification of a material Privacy Policy update constitutes your acknowledgement of the updated Policy. If you do not agree with any updated terms, you should cease using the hc77 platform and may request account closure by contacting hc77 support via live chat.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to hc77's handling of your personal data, please get in touch with our team using any of the following methods:

• Live Chat: Available 24/7 directly on hc77.ws — the fastest way to reach our support team for any data rights request or privacy concern.
• Email: [email protected] — for formal written data rights requests, please include your registered account username and a clear description of your request so our compliance team can process it efficiently.

hc77 aims to respond to all privacy-related enquiries within 3 business days and to fulfil verified data rights requests within 30 days of receipt.