2777sz Privacy Policy – How We Collect, Use & Protect Your Personal Data

This Privacy Policy applies to personal data processed by 2777sz (hereinafter "2777sz", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at 2777sz.asia. 2777sz acts as the data controller in respect of personal data collected directly from users who register accounts or interact with the 2777sz platform.

Where 2777sz uses third-party data processors — such as payment infrastructure providers (JazzCash, EasyPaisa integrators), KYC verification services, or game streaming technology providers — those parties act as data processors under formal agreements, and 2777sz remains the data controller responsible for determining the purposes and means of processing.

2777sz collects and processes the following categories of personal data in connection with the operation of the platform and the delivery of gaming and betting services to Pakistani users:

2777sz does not collect or process special categories of sensitive personal data (such as racial origin, health data, religious beliefs, or biometric data) beyond what is strictly required for identity verification purposes as part of the mandatory KYC process.

2777sz collects personal data through the following channels and mechanisms:

• Direct Provision by You: When you register a 2777sz account, you directly provide your name, mobile number, email, date of birth, and password. When you complete KYC verification, you submit your CNIC photograph and selfie. When you contact support via live chat or email, you provide the content of those communications;
• Automated Technical Collection: When you access the 2777sz platform — whether logged in or not — our systems automatically collect technical data including your IP address, device characteristics, browser type, and session behaviour data through server logs and first-party cookies;
• Payment Processing Systems: When you initiate a deposit or withdrawal, the 2777sz payment system receives transaction reference data from the payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT network). 2777sz receives confirmation and reference data sufficient to credit or debit your account, but does not store full payment credentials;
• KYC Verification Providers: Where 2777sz uses an integrated third-party KYC verification service to process identity documents, that provider may share a verification outcome and summary risk score with 2777sz. The document data itself is processed by the KYC provider under its own privacy terms as a data processor under agreement with 2777sz;
• Game Studios: Game content delivered by third-party studios (Pragmatic Play, Evolution, NetEnt, etc.) to your 2777sz session may involve the studio's own technical systems. Game studios receive a pseudonymised session identifier from 2777sz — they do not receive your name, contact details, or CNIC information.

2777sz processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out our processing purposes and the corresponding legal basis for each:

• Account Registration & Management — Legal basis: Performance of contract. We require your identity and contact data to establish your 2777sz account and maintain it throughout the account relationship.
• KYC Identity Verification — Legal basis: Legal obligation. We are required by applicable anti-money laundering regulations and international gaming compliance standards to verify the identity of users before processing withdrawals and to screen against sanctions lists.
• Payment Processing — Legal basis: Performance of contract. Processing financial data is necessary to execute deposits and withdrawals between your 2777sz account and your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT).
• Fraud Detection & Security — Legal basis: Legitimate interests. We process technical data including IP addresses, device fingerprints, and login patterns to detect and prevent fraudulent account activity, multiple account creation, and unauthorised access to your 2777sz account.
• Responsible Gaming Monitoring — Legal basis: Legal obligation and legitimate interests. We monitor gaming activity data to identify patterns that may indicate problem gambling behaviour, in fulfilment of our responsible gaming obligations and our genuine duty of care to Pakistani players.
• Customer Support — Legal basis: Performance of contract. Communications data from live chat and email is processed to respond to your queries and resolve complaints in connection with your 2777sz account.
• Platform Analytics & Improvement — Legal basis: Legitimate interests. Pseudonymised usage data is analysed to improve 2777sz platform performance, game selection, user interface design, and payment channel reliability for Pakistani users.
• Marketing Communications — Legal basis: Consent (where required). Promotional communications from 2777sz are sent only to users who have opted in to receive them and may be withdrawn at any time.

2777sz does not sell personal data to third parties under any circumstances. Personal data is shared with third parties only in the following defined categories and strictly on a need-to-know basis:

• Payment Processors: JazzCash, EasyPaisa integrators, HBL, UBL, Meezan Bank payment gateways, and USDT network processors receive the minimum transaction data required to execute deposits and withdrawals. These providers are contractually bound to use the data solely for payment processing purposes;
• KYC Verification Providers: Identity document data submitted during your 2777sz verification is processed by our contracted KYC service provider. This provider operates under a data processing agreement with 2777sz and is prohibited from using your data for any purpose other than identity verification on behalf of 2777sz;
• Game Content Studios: Third-party game studios receive a pseudonymised session identifier to deliver game content to your 2777sz session. Studios do not receive personally identifying information;
• Technology Infrastructure Providers: Cloud hosting and server infrastructure providers that house 2777sz systems may technically access data as part of infrastructure management but are bound by strict confidentiality obligations;
• Legal and Regulatory Authorities: 2777sz is legally required to share personal data with regulatory bodies, law enforcement agencies, or judicial authorities upon receipt of a valid legal order or regulatory request. 2777sz will notify affected users of such requests to the extent legally permissible.

As an internationally operating online gaming platform serving Pakistani players, 2777sz may process and store personal data on servers located in jurisdictions outside Pakistan. Where data is transferred internationally, 2777sz ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection principles.

Safeguards for international data transfers employed by 2777sz include:

• Data processing agreements incorporating internationally recognised standard contractual clauses where applicable;
• Transfers to jurisdictions that maintain adequate data protection standards through regulatory assessment;
• Technical and organisational security measures applied uniformly regardless of the server location processing the data.

You may request information about the specific safeguards applied to international transfers of your personal data by contacting 2777sz at [email protected].

The 2777sz platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your login session, and collect analytical data to improve the platform experience for Pakistani users. The following categories of cookies are used by 2777sz:

• Strictly Necessary Cookies: Essential for the 2777sz platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without materially impairing platform functionality;
• Performance & Analytics Cookies: Used to collect anonymised or pseudonymised data about how users navigate the 2777sz platform — which games are most accessed, which payment methods are most selected, which pages receive the most traffic from Pakistani cities. This data informs platform improvements;
• Functionality Cookies: Remember user preferences such as session timeout settings, responsible gaming tool configurations, and display options, so that your 2777sz experience is consistent across visits;
• Security & Fraud Detection Cookies: Assist in identifying suspicious login behaviour, detecting automated bot activity, and distinguishing legitimate players from potentially malicious actors attempting unauthorised access to 2777sz accounts.

2777sz applies a multi-layered technical and organisational security framework to protect personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• Transport Layer Security: All data transmitted between your device and 2777sz servers is encrypted using TLS 1.3, the current industry standard. This applies to all platform interactions — login, gaming sessions, payment processing, and support communications;
• Data Encryption at Rest: Personal data stored in 2777sz databases is encrypted at rest using AES-256 encryption. Password data is stored exclusively as a bcrypt hash — 2777sz never stores plaintext passwords, and even internal technical staff cannot retrieve your password;
• Access Controls: Internal access to personal data systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for staff systems, and comprehensive audit logging of all data access events;
• Penetration Testing: 2777sz systems are subject to periodic third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited;
• Incident Response: 2777sz maintains a formal data breach incident response procedure, including defined escalation paths, containment measures, and user notification protocols as described in the introduction to this Policy.

2777sz retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with legal and regulatory obligations. Our data retention schedule is as follows:

• Active Account Data: Retained for the duration of your active 2777sz account relationship. If you close your account voluntarily, basic account identification data is retained for a minimum of five years thereafter for AML compliance and dispute resolution purposes;
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial record-keeping requirements applicable to online gaming platforms;
• KYC Documents: Retained for the duration of the account relationship plus five years, or longer if required by applicable regulatory obligations in the jurisdictions in which 2777sz operates;
• Gaming & Betting Activity Logs: Retained for three years from the date of each activity record, for responsible gaming monitoring, dispute resolution, and regulatory audit purposes;
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction;
• Technical & Log Data: Server log files and technical session data are retained for twelve months, after which they are aggregated or deleted.

When retention periods expire, 2777sz deletes personal data through secure deletion procedures that prevent recovery. Where data is retained in anonymised aggregate form for statistical or analytical purposes beyond the retention period, it ceases to qualify as personal data and falls outside the scope of this Privacy Policy.

As a user of the 2777sz platform, you hold the following rights in relation to your personal data. These rights apply regardless of which city in Pakistan you are based in or what your account activity level is:

• Right of Access: You may request a copy of all personal data that 2777sz holds about you. We will provide this within 30 days of a verifiable request in a structured, commonly used, machine-readable format;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. Standard account details (such as mobile number and email) can be updated directly within your 2777sz account settings;
• Right to Erasure: Subject to legal obligations (including our AML retention requirements), you may request the deletion of your personal data. Note that data retained for mandatory legal compliance purposes cannot be erased during the applicable retention period;
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is under dispute or while a legitimate interests objection is being assessed;
• Right to Data Portability: You may request that personal data you have provided to 2777sz be transmitted to you or to another nominated controller in a structured format, where processing is based on consent or contract and carried out by automated means;
• Right to Object: Where 2777sz relies on legitimate interests as the legal basis for processing, you may object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms;
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request – [Account Username]". 2777sz will verify your identity before processing the request and will respond within the applicable statutory timeframe.

2777sz enforces the 21+ age requirement through mandatory CNIC-based KYC verification prior to withdrawal processing. The CNIC verification process confirms the date of birth of the account holder against their national identity document. Any discrepancy between the declared age at registration and the verified age from the CNIC will result in immediate account suspension and investigation.

If you are aware of a minor who has registered or is attempting to use the 2777sz platform, please report this to our support team immediately through live chat or at [email protected]. We take every such report seriously and act on it without delay.

2777sz processes gaming activity data specifically to fulfil its responsible gaming obligations — this is a legally mandated processing purpose that operates independently of account management or commercial interests. Specifically, 2777sz's responsible gaming systems analyse:

• Changes in betting frequency, stake sizes, or session duration patterns that deviate significantly from a player's established baseline;
• Attempted use of the 2777sz platform by a player who is currently under a self-exclusion order;
• Multiple failed withdrawal requests followed by continued deposit activity (a potential indicator of financial distress);
• Completion of responsible gaming tool limits and immediate continuation of play (escalation pattern).

Responsible gaming data — including self-exclusion status, deposit limit configurations, and responsible gaming interaction history — is treated with heightened confidentiality and is not shared with any third party for commercial purposes. This data is used solely for player protection purposes and for compliance with applicable gaming regulatory requirements.

For further detail on 2777sz responsible gaming tools and how your gaming data is used to protect your wellbeing, please visit our dedicated Responsible Gaming page.

2777sz may send you promotional communications about new game launches, bonus offers, PSL betting markets, and platform updates where you have consented to receive such communications. Marketing communications from 2777sz are delivered via:

• Email to your registered 2777sz address;
• SMS to your registered Pakistani mobile number;
• In-platform notifications visible after login to your 2777sz account.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link included in all 2777sz email marketing messages;
• Updating your communication preferences in your 2777sz account settings panel;
• Contacting our support team via live chat or email and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect transactional and account communications — you will continue to receive account security alerts, deposit confirmations, withdrawal notifications, and support responses as these are not marketing communications but rather essential service communications related to your 2777sz account.

2777sz reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. The effective date at the top of this document will be updated whenever a new version is published. We encourage all registered 2777sz users to review this Privacy Policy periodically.

Where changes are material — for example, a new category of data being collected, a new purpose of processing being introduced, or a significant change in third-party sharing arrangements — 2777sz will endeavour to provide advance notice through your registered contact details or through a prominent notification within your 2777sz account dashboard before the changes take effect.

Your continued use of the 2777sz platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept any update to this Privacy Policy, you should cease using the platform and request account closure.

If you have any questions, concerns, or complaints regarding the way 2777sz processes your personal data, or if you wish to exercise any of your privacy rights as described in Section 10, please contact us using the details below. We are committed to addressing all privacy-related communications promptly and thoroughly.

If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with a relevant data protection supervisory authority, depending on your location and the applicable regulatory framework. 2777sz will cooperate fully with any such authority in relation to investigations regarding the processing of your personal data.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the 2777sz Privacy Policy. If you accessed a previous version, please treat this document as the governing version from the effective date forward.