tc77 Privacy Policy — How We Protect Your Personal Data on Pakistan's Licensed Gaming Platform

This Privacy Policy ("Policy") describes how tc77 ("tc77", "We", "Us", "Our") — the operator of the online gaming platform available at tc77.one — collects, uses, discloses, stores, and protects personal data relating to individuals ("Players", "You", "Your") who access or use the tc77 Platform, including all casino games, sports betting markets, live dealer tables, account management features, and any other services offered through tc77.one.

This Policy applies to all personal data processed by tc77 in connection with its Services, regardless of whether the data is collected through the tc77 website, mobile browser sessions, communications with tc77 support, or through tc77's KYC identity verification process.

tc77 is committed to processing personal data in accordance with the requirements of its international gaming license, which mandates responsible data handling, player fund security, and compliance with applicable data protection frameworks. If you have any questions about this Policy or how tc77 handles your data, contact us at [email protected].

tc77 collects personal data through several distinct channels, each serving a specific purpose in delivering and protecting our Services. The categories of personal data we collect include:

2.1 Registration Data

When you create a tc77 Account, we collect the information you provide during the registration process, which typically includes:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — tc77 is 21+ only).
• Email address.
• Mobile phone number (Pakistani mobile numbers are accepted).
• Residential address.
• Preferred username and password (passwords are stored in encrypted form and are never accessible in plain text by tc77 staff).
• Currency preference (all tc77 accounts are denominated in PKR by default).

2.2 Identity Verification (KYC) Data

tc77 is required by its international gaming license to conduct Know Your Customer (KYC) identity and age verification on all Accounts before real-money access is granted. The KYC process requires:

• A copy of a government-issued identity document — for Pakistani players, this is typically the Computerised National Identity Card (CNIC). tc77 may also accept a Pakistani passport or other acceptable identity document where the CNIC is unavailable.
• A live selfie photograph or a photograph of you holding your identity document, used for biometric identity matching against the submitted document.
• Proof of address documentation may be requested where tc77's compliance team deems it appropriate.
• Source of funds documentation may be requested in connection with large deposits or unusual account activity patterns, in accordance with tc77's anti-money laundering obligations.

KYC documents are handled with the highest level of security and confidentiality. Access to KYC documentation is restricted to tc77's dedicated compliance team and is subject to strict internal access controls and audit logging.

2.3 Financial Transaction Data

tc77 collects records of all financial transactions associated with your Account, including:

• Deposit amounts, dates, payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard), and transaction reference numbers.
• Withdrawal requests, amounts, processing dates, and destination payment method identifiers.
• Current and historical account PKR balances.
• Bonus credits, wagering activity, and bonus expiry records.

tc77 does not store full payment card numbers. Card payments are processed through certified payment service providers (PCI DSS compliant), and tc77 receives only a tokenised reference to the card used.

2.4 Gaming and Betting Activity Data

tc77 maintains server-side records of all gaming and betting activity associated with your Account, including game sessions, bet amounts and outcomes, sports betting selections, win and loss records, session duration, and game-specific data. This data is retained for regulatory compliance purposes (including dispute resolution), responsible gaming monitoring, and fraud prevention.

2.5 Technical and Device Data

When you access the tc77 Platform, our servers and analytics systems automatically collect certain technical data about your device and connection, including:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser type and version.
• Session start and end times, pages visited within the Platform, and features accessed.
• Connection type (e.g., 4G mobile data or Wi-Fi, which is relevant for players accessing tc77 from Karachi, Lahore, or other Pakistani cities).

2.6 Communications Data

tc77 retains records of all communications between Players and tc77's support team, including live chat transcripts, emails sent to [email protected], and any attachments or documentation submitted in connection with a support query or dispute. These records are retained for quality assurance, training, compliance, and dispute resolution purposes.

tc77 processes personal data only for defined, legitimate purposes. The following table summarises the primary purposes for which tc77 uses your personal data and the legal basis for each processing activity:

tc77 does not sell, rent, or trade your personal data to any third party for commercial purposes. tc77 may share personal data with the following categories of third parties where necessary to deliver the Services or fulfil legal obligations:

4.1 Payment Service Providers

tc77 shares relevant transaction data with authorised payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and international card processors — for the sole purpose of processing deposits and withdrawals to and from your tc77 Account. These providers operate under their own privacy frameworks and are contractually required to handle tc77 player data only as directed by tc77.

4.2 Identity Verification Partners

tc77 may share KYC identity document data with authorised third-party identity verification service providers for the purpose of conducting identity and age verification checks. These providers are certified and operate under strict contractual data processing agreements with tc77.

4.3 Game and Technology Providers

tc77 works with third-party game providers (live dealer studios, RNG game providers, and sports data providers) to deliver the games and betting markets available on the Platform. Minimal account identifier data may be shared with these providers to facilitate game session management. Game providers do not receive your full identity or KYC data.

4.4 Regulatory and Licensing Authorities

tc77 may be required to disclose personal data and transaction records to its international gaming license authority, anti-money laundering regulators, or other competent authorities, where such disclosure is required by applicable law, court order, or regulatory directive. tc77 will comply with such requirements while taking reasonable steps to notify affected Players where legally permitted to do so.

4.5 Law Enforcement

tc77 may disclose personal data to law enforcement or governmental authorities where required to do so by law or in connection with an investigation of fraud, money laundering, or other criminal activity involving a tc77 Account. tc77 will only make such disclosures where legally compelled to do so or where tc77 has a good-faith belief that disclosure is necessary to prevent imminent harm.

tc77 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser and tc77's servers is encrypted using 256-bit SSL/TLS protocols. This applies to all pages on the tc77 Platform, including the login page, the cashier, the game interfaces, and account management sections.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial information — is stored in encrypted form on tc77's servers. Encryption keys are managed under strict access controls separate from the encrypted data itself.
• Access Controls: Access to tc77's data systems is restricted to authorised personnel on a strict need-to-know basis. All internal access to personal data is logged and auditable. Privileged access accounts are subject to multi-factor authentication requirements.
• Vulnerability Management: tc77's technical infrastructure is subject to regular security assessments, including penetration testing and vulnerability scanning, conducted by qualified internal and external security professionals.
• Incident Response: tc77 maintains a documented security incident response plan. In the event of a data breach that poses a risk to Players, tc77 will notify affected individuals in accordance with applicable notification requirements and will take immediate remedial action.
• Password Security: Player passwords are stored using industry-standard one-way hashing with salting. tc77 staff cannot read or retrieve Player passwords in plain text.

tc77 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to tc77's legal and regulatory obligations, which in some cases require data to be retained for defined minimum periods. The following general retention principles apply:

• Active Accounts: Personal data associated with an active tc77 Account is retained for as long as the Account remains open and for a defined period thereafter.
• Closed Accounts: Following the closure of a tc77 Account — whether by the Player or by tc77 — personal data and transaction records are retained for a minimum of five (5) years, in accordance with tc77's international gaming license conditions and applicable anti-money laundering regulatory requirements.
• KYC Documents: Identity verification documents are retained for the period required by tc77's gaming license authority and applicable AML regulations, typically five (5) years from the date of the last transaction or Account closure, whichever is later.
• Communication Records: Support communications are retained for a minimum of three (3) years for quality assurance, compliance, and dispute resolution purposes.
• Anonymised Analytics Data: Aggregated, anonymised usage data that cannot be linked to an individual Player may be retained indefinitely for platform improvement and analytics purposes.

Following the expiry of applicable retention periods, tc77 will securely delete or anonymise personal data in accordance with its data destruction procedures.

tc77 uses cookies and similar client-side tracking technologies (such as local storage and session storage) on the tc77 Platform. Cookies are small text files stored on your device by your browser when you visit a website. tc77 uses cookies for the following purposes:

7.1 Strictly Necessary Cookies

These cookies are essential for the tc77 Platform to function. Without them, the Platform cannot operate correctly. They include session management cookies that keep you logged in during your tc77 session, security cookies that support tc77's fraud prevention and authentication systems, and technical cookies that manage platform configuration. These cookies cannot be disabled without breaking core Platform functionality.

7.2 Functional Cookies

Functional cookies remember your preferences — such as language settings, preferred game categories, and whether you have dismissed certain Platform notifications — to provide a more personalised experience when you return to tc77. These cookies improve your experience but are not strictly necessary.

7.3 Analytics Cookies

tc77 uses analytics cookies to collect aggregate, anonymised data about how Players use the Platform — which pages are visited most frequently, where players drop off in a registration or deposit flow, and which game categories are most popular. This data helps tc77 identify improvements to the Platform experience. Analytics data collected by tc77 is not shared with advertising networks and is not used to build individual user profiles.

7.4 Managing Cookies

You can manage or disable non-essential cookies through your browser's privacy or cookie settings. Please note that disabling functional or analytics cookies may affect your experience on the tc77 Platform, but will not prevent you from accessing core gaming and account management features, which rely only on strictly necessary cookies.

As a Player whose personal data is processed by tc77, you have the following rights in relation to your personal data. To exercise any of these rights, contact tc77 at [email protected] with a clear description of your request. tc77 will respond to valid requests within a reasonable timeframe, typically within thirty (30) calendar days of receipt.

Please note that tc77's ability to fulfil certain data rights requests — particularly erasure requests — may be limited by tc77's mandatory data retention obligations under its international gaming license, anti-money laundering regulations, and applicable law. Where a request cannot be fulfilled in full, tc77 will provide a written explanation of the applicable limitation.

If tc77 becomes aware that personal data has been collected from an individual who is under 21 years of age, tc77 will immediately suspend the Account, notify the individual, and delete or anonymise the collected data to the extent permitted by tc77's compliance obligations. If you believe a minor has registered an Account on tc77, please contact tc77 support at [email protected] immediately.

tc77 will only send promotional communications — such as bonus offer notifications, new game announcements, PSL betting promotions, or account-specific offers — to Players who have explicitly opted in to receive such communications during the Account registration process or subsequently through their Account preferences.

Marketing communications from tc77 will always:

• Clearly identify tc77 as the sender.
• Contain a clear and functional unsubscribe or opt-out mechanism.
• Comply with applicable spam and electronic communications regulations.
• Not be sent to Players who are registered on tc77's self-exclusion list.

To withdraw your consent to marketing communications at any time, update your communication preferences in your tc77 Account settings, or contact tc77 support at [email protected]. Withdrawal of consent to marketing communications does not affect your ability to continue using tc77's gaming Services.

The tc77 Platform does not contain links to third-party websites outside of tc77.one as part of its standard navigation and content structure. However, where any third-party links may be present — for example, within specific promotional communications — tc77 is not responsible for the privacy practices or content of those third-party websites. This Privacy Policy applies only to data collected and processed by tc77 through the tc77 Platform and Services. Visiting any third-party site from a link is governed by that site's own privacy policy.

tc77 reserves the right to update or amend this Privacy Policy at any time. Material changes to this Policy will be notified to registered Players via the email address associated with their tc77 Account, or via a prominent notice displayed on the tc77 Platform login or home page, prior to the changes taking effect.

The updated Policy will specify the date on which the revised version becomes effective. Your continued use of the tc77 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with material changes to this Policy, you should cease using the Platform and contact tc77 support to close your Account.

tc77 recommends that Players review this Privacy Policy periodically to stay informed of how tc77 handles personal data, even in the absence of a material change notification.

If you have any questions, concerns, or requests relating to this Privacy Policy or tc77's handling of your personal data, you may contact tc77's data team at:

tc77 will acknowledge receipt of all data-related enquiries within five (5) business days and will aim to resolve substantive data access, correction, or deletion requests within thirty (30) calendar days. Where a request is complex or where tc77 receives a high volume of requests, this period may be extended by a further thirty (30) days, and tc77 will notify you of the extension and the reason for it.

tc77 takes all data privacy concerns seriously and commits to reviewing and responding to every data-related query in good faith, whether submitted by players from Karachi, Lahore, or anywhere else in Pakistan.