HC77 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy explains how HC77 ("we", "us", "HC77", "the Platform") collects, uses, stores, shares and protects the personal information of individuals ("you", "Player", "User") who register or otherwise interact with the HC77 online gaming platform at hc77.biz and any associated mobile applications.

HC77 is a Pakistani-focused online gaming platform where all transactions take place in Pakistani Rupees (PKR). We understand that when you share personal information with us – your name, your CNIC details, your Easypaisa or JazzCash account number – you are trusting us with data that matters to you. HC77 does not take that trust lightly. This policy is written to be clear and honest, not to hide anything in legal language.

By creating an HC77 account and using our services, you confirm that you have read and understood this Privacy Policy and that you consent to our processing of your personal data as described here. This policy should be read alongside our Terms and Conditions.

HC77 collects the following categories of personal data:

HC77 does not collect data beyond what is listed above. We do not collect biometric data, political opinions, religious beliefs or any other sensitive categories of personal information beyond what is necessary for identity and age verification.

HC77 collects your personal data through the following means:

• Registration form: When you create your HC77 account, you provide your name, mobile number, email address and date of birth directly.
• KYC verification: When you complete Know Your Customer verification (required before your first withdrawal), you submit a copy of your CNIC and possibly a selfie for liveness checks.
• Deposits and withdrawals: When you make a payment transaction, our payment gateway partners collect and relay the relevant financial identifiers (e.g. your Easypaisa account number) to HC77.
• Gameplay: HC77's platform automatically logs your gaming sessions, bets, game choices and session durations as part of normal platform operation.
• Technical data: Your device, browser and IP address are automatically captured when you access hc77.biz, as with any website.
• Communications: When you contact HC77 support by live chat or email, we retain a record of those communications.
• Cookies and similar technologies: As described in Section 9 below.

HC77 uses your personal data only for the purposes described below. We do not use your data for any purpose beyond what is set out here without first obtaining your explicit consent or unless required by law.

• Account creation and management: To create, operate and maintain your HC77 account, including processing logins, managing account settings and communicating account-related information.
• Payment processing: To process deposits from and withdrawals to your Pakistani payment methods (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard) accurately and securely, all in PKR.
• Identity and age verification: To confirm that you meet HC77's eligibility requirements, including being at least 18 years old and being the legitimate owner of your payment methods.
• Fraud prevention and security: To detect and prevent fraudulent activity, multiple account creation, money laundering and other activities that violate HC77's Terms and Conditions or applicable law.
• Regulatory compliance: To meet HC77's obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements and other legal obligations.
• Responsible gaming: To monitor gaming patterns that may indicate a problem with gambling and to enforce responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: To analyse aggregate, anonymised usage data to improve HC77's games, interface and overall player experience.
• Marketing (with consent only): To send you information about HC77 promotions, new games and offers – but only if you have explicitly opted in to marketing communications. You can withdraw marketing consent at any time from your account settings.
• Customer support: To respond to your queries, resolve disputes and provide the assistance you request.

HC77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the HC77 service you have contracted for – account management, payment processing, game access.
• Legal obligation: Processing required for HC77 to comply with applicable legal requirements, including AML and KYC regulations.
• Legitimate interests: Processing for fraud detection, platform security and aggregate analytics where these interests do not override your privacy rights.
• Consent: Marketing communications and any non-essential data processing for which HC77 has obtained your explicit opt-in agreement. You may withdraw consent at any time without penalty.

HC77 does not sell your personal data. We do not share it with third parties for their own marketing purposes. Data is shared only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card payment gateways receive the financial identifiers needed to process your transactions. These providers operate under their own privacy policies and are bound by financial data security standards.
• Identity verification providers: Where HC77 uses a third-party KYC service to verify CNIC authenticity or perform liveness checks, the minimum data necessary is shared with that provider solely for verification purposes.
• Game providers: For live casino and certain hosted game content, the relevant game provider may receive a session token and non-personal game activity data to render the game correctly. Your name and financial details are never shared with game providers.
• Regulatory and legal authorities: HC77 may be required by law, court order or regulatory instruction to disclose your data to a government authority. HC77 will comply with such requests and will, where legally permitted, notify you of such a disclosure.
• Fraud prevention networks: Where HC77 participates in shared fraud prevention databases, aggregated risk signals (not your full personal profile) may be contributed to and queried from these networks to protect the platform and our players from fraud.
• Business transfers: In the event of a merger, acquisition or sale of all or part of HC77's business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers who receive your data are required to handle it confidentially and to use it solely for the specified purpose. HC77 maintains data processing agreements with all relevant third parties.

HC77 takes data security seriously and maintains the following technical and organisational measures to protect your personal information:

• SSL/TLS encryption: All data transmitted between your device and hc77.biz is encrypted using current industry-standard TLS protocols. The padlock icon in your browser confirms this is active.
• Encrypted data storage: Sensitive personal data – including CNIC information and financial identifiers – is stored in encrypted form at rest. Plain-text storage of sensitive data is never used on HC77 infrastructure.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. HC77 staff cannot access player financial data beyond what is necessary for their role. Access logs are maintained and reviewed regularly.
• Security audits: HC77's platform and infrastructure undergo regular security reviews. Known vulnerabilities are patched promptly following standard responsible disclosure practices.
• Two-factor authentication: HC77 supports two-factor authentication (2FA) for player account logins. We strongly encourage all players to enable 2FA for enhanced account security.
• Incident response: HC77 maintains a data breach response procedure. In the event of a security incident that poses a risk to player data, affected players will be notified as quickly as practicable.

HC77 retains your personal data for as long as your account is active and for a period after account closure as required by applicable legal and regulatory obligations. Specific retention periods are:

• Account data and KYC documents: Retained for the duration of your active account and for a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction for financial compliance purposes.
• Gaming activity logs: Retained for 2 years from the date of each session for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for 2 years from the date of each communication.
• Marketing data: Deleted within 30 days of you withdrawing marketing consent, unless retained for another purpose listed above.

When data is no longer required for any of the purposes listed above and the relevant retention period has expired, HC77 will securely delete or anonymise the data so that it can no longer be linked to you.

HC77 uses cookies – small text files stored on your device – and similar technologies to make hc77.biz work properly and to improve your experience. We use the following categories of cookies:

• Essential cookies: These are strictly necessary for the HC77 platform to function. They keep you logged in during your session, maintain your game state and process transactions. Without these cookies, HC77 cannot operate. These cannot be disabled.
• Preference cookies: These remember your settings and preferences on HC77 – such as your display language, lobby filters and notification settings – so you don't have to re-enter them every visit.
• Analytics cookies: HC77 uses anonymised analytics data to understand how players use the platform – which pages are most visited, where players encounter difficulties and how navigation can be improved. This data is aggregated and cannot identify individual players.
• Security cookies: These help HC77 detect suspicious activity such as unusual login patterns, multiple failed authentication attempts or signs of account sharing, protecting you and the platform.

You can manage your browser's cookie settings at any time. Disabling essential cookies will prevent HC77 from functioning correctly. Disabling preference or analytics cookies will not affect your ability to play but may reduce the quality of your experience. HC77 does not use third-party advertising cookies.

As an HC77 player, you have the following rights over your personal data. To exercise any of these rights, contact HC77 support at support@hc77.biz. HC77 will respond within 30 days and will request appropriate identity verification before acting on your request.

HC77 is an adult gaming platform and is strictly restricted to users aged 18 and over. HC77 does not knowingly collect personal data from anyone under the age of 18. If HC77 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed and all associated data deleted, except where retention is required for legal purposes such as reporting the minor's access attempt.

If you are a parent or guardian and believe your child has registered on HC77, please contact us immediately at support@hc77.biz so we can investigate and take appropriate action without delay.

HC77 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When material changes are made, HC77 will notify registered players by email or through a prominent notice on the platform at least 7 days before the changes take effect, unless a shorter notice period is required for legal or security reasons.

The updated policy will be published on this page with a revised "Last Updated" date at the top. Continued use of HC77 after the effective date of any change constitutes acceptance of the updated policy. If you do not accept the updated policy, you should stop using HC77 and may request account closure by emailing support@hc77.biz.

We encourage you to review this page periodically so you are always aware of how HC77 handles your personal information.

If you have any questions, concerns or requests relating to this Privacy Policy or HC77's handling of your personal data, please contact us through one of the following channels. Our team is available around the clock:

• Live Chat: Available from any page on hc77.biz. Typical response time: under 2 minutes.
• Email: support@hc77.biz – for general privacy queries, responses within 4 hours. For formal data rights requests, mark the email subject line "Data Rights Request" and we will respond within 30 days.

HC77 is committed to resolving all privacy concerns directly and promptly. If you are not satisfied with HC77's response to a privacy complaint, you retain the right to escalate the matter to relevant authorities.