2777sz Privacy
Policy

This Privacy Policy ("Policy") is issued by 2777sz ("we", "us", "our"), the operator of the online gaming platform accessible at https://2777sz.org ("the Platform"). This Policy describes how 2777sz collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit, register on, or otherwise interact with the Platform ("you", "your").

2777sz is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. As an internationally licensed gaming operator serving players in Pakistan and other permitted jurisdictions, we operate under data handling obligations imposed by our Gaming License and associated regulatory framework.

This Policy should be read in conjunction with the 2777sz Terms & Conditions and any supplementary notices provided to you at the point of data collection. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall take precedence.

2777sz collects personal data from you in the following categories, depending on how you interact with the Platform:

Registration & Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (for age verification — you must be 21 or older).
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postal code.
• Email address and mobile phone number.
• Username and hashed password (passwords are never stored in plain text).

Identity Verification (KYC) Data

• Copies of government-issued identification documents such as your Pakistani CNIC or passport.
• Proof of address documentation (e.g., a utility bill or bank statement issued within the last three months).
• Source-of-funds documentation where required by our compliance obligations for large transactions.

Financial & Transaction Data

• Payment method details including JazzCash account number, EasyPaisa account number, HBL or UBL bank account details, SadaPay details, or USDT TRC20 wallet address.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers.
• Account balance history and wagering activity records.

Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser type and version.
• Pages visited on the Platform, time spent, click patterns, and navigation paths.
• Session duration, login timestamps, and logout timestamps.
• Game activity logs including game type, stake amounts, outcomes, and timestamps.

Communications Data

• Content of emails and live chat conversations with the 2777sz support team.
• Records of any formal complaints or disputes raised through our complaints procedure.
• Responses to surveys or feedback requests where you choose to participate.

2777sz uses the personal data we collect for the following specific purposes:

2777sz does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is required by our regulatory obligations, in which case we will notify you accordingly.

2777sz processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your player account, process your transactions, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is necessary to comply with our obligations under our Gaming License, including anti-money-laundering requirements, age verification mandates, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 2777sz, such as fraud prevention, platform security, responsible gaming monitoring, and general platform improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on your consent (e.g., receiving marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

2777sz does not sell your personal data. We do not rent it or share it for third-party commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual safeguards:

• KYC and Identity Verification Providers: Regulated third-party providers who assist us in verifying identity documents and conducting age verification checks as required by our Gaming License.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network infrastructure providers, to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Fraud Prevention and Compliance Services: Specialist third-party services that assist 2777sz in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• IT and Platform Infrastructure Providers: Cloud hosting and server providers who store and process Platform data on our behalf under strict data processing agreements.
• Regulatory and Licensing Authorities: Our Gaming License regulator and any other competent authority that is legally entitled to receive information about 2777sz's operations or player activity.
• Law Enforcement: Where required by applicable law or a valid court order, we may be obligated to disclose personal data to law enforcement or government authorities.

All third-party service providers who process personal data on behalf of 2777sz are required to do so only in accordance with our instructions and are prohibited from using that data for their own purposes.

2777sz uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform. They serve several important functions:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and region preferences. These cannot be disabled without breaking Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are most visited, where players drop off, and how long sessions typically last. This data helps us improve the Platform experience. You may opt out of analytics cookies through your browser settings.
• Functional Cookies: Remember your Platform preferences such as your preferred game category or display settings, so you do not have to reconfigure them each time you visit.
• Security Cookies: Used to identify and flag suspicious activity, such as multiple failed login attempts from different IP addresses, helping protect your account from unauthorised access.

2777sz does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to build profiles of your behaviour across other websites.

2777sz implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for all personal and financial data stored on our servers.
• TLS 1.2 or higher encryption for all data transmitted between your device and the 2777sz Platform.
• Strict access controls ensuring that only authorised 2777sz personnel can access personal data, and only to the extent required by their specific role.
• Regular security audits and penetration testing of Platform infrastructure by qualified independent security professionals.
• Two-factor authentication available to all players for account login, and required for all 2777sz staff with access to player data systems.
• Formal data breach response procedures, including protocols for notifying affected players and relevant authorities in the event of a confirmed data breach.

2777sz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our Gaming License obligations. The following general retention periods apply:

Longer retention periods may apply where required by a regulatory investigation, legal proceedings, or a specific instruction from a competent authority. At the end of the applicable retention period, data is securely deleted or irreversibly anonymised.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 2777sz:

• Right of Access: You have the right to request a copy of the personal data 2777sz holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your address or contact number, you can update these directly through your account settings.
• Right to Erasure: You have the right to request that 2777sz delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations under our Gaming License; we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You have the right to request that 2777sz restricts the processing of your personal data in certain circumstances, for example while a dispute over its accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact the 2777sz privacy team by email at [email protected] with the subject line "Data Rights Request — [Your Username]". We will verify your identity before processing any request. We aim to respond to all data rights requests within 30 calendar days; complex requests may require up to 60 days, in which case we will inform you of the extension.

The 2777sz platform is strictly for adults aged 21 and above. 2777sz does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the registration process and is enforced through our KYC procedures.

If 2777sz becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the personal data collected, and return any funds to the source of the original deposit in accordance with applicable regulations and our underage gambling policy.

As an internationally licensed gaming operator, 2777sz's data infrastructure involves servers and service providers located in multiple jurisdictions. Your personal data may therefore be transferred to and processed in countries outside Pakistan. Where such transfers occur, 2777sz takes the following measures to ensure your data remains protected:

• Transfers to third-party service providers are governed by contractual data processing agreements that impose data protection obligations equivalent to those under which 2777sz itself operates.
• Where service providers are based in jurisdictions with robust data protection frameworks, we rely on those frameworks as the basis for transfer.
• Where service providers are based in other jurisdictions, we conduct due diligence on their data protection practices and require contractual commitments before any transfer is made.

You may request further information about the specific safeguards 2777sz has in place for international data transfers by contacting [email protected].

2777sz may send you promotional communications about bonuses, new game launches, PSL cricket betting offers, seasonal promotions, and other 2777sz platform news — but only where you have explicitly opted in to receive such communications at the time of registration or subsequently through your account settings.

Marketing communications are sent by email and, where you have provided your mobile number and consented separately, by SMS. We do not send unsolicited marketing communications to players who have not opted in.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email from 2777sz.
• Updating your communication preferences in your 2777sz account settings.
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Please note that opting out of marketing communications does not affect transactional or account-related communications, such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts. These communications are sent on the basis of contractual necessity and cannot be unsubscribed from while your account remains active.

The 2777sz platform may from time to time contain references to third-party services (such as payment method providers). Where we do reference such services, we are not responsible for the privacy practices of those third parties. Each third-party service operates under its own privacy policy, and you should review those policies independently before providing personal data to any third-party service.

2777sz does not endorse, and accepts no liability for, the privacy practices or content of any third-party website or service that may be referenced in connection with the Platform.

2777sz reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. When material changes are made to this Policy, we will notify registered players by email and by means of a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how 2777sz protects your personal data. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2777sz processes your personal data, please do not hesitate to get in touch with our privacy team using the details below:

• Email: [email protected] — Please use the subject line "Privacy Enquiry" for all privacy-related correspondence. We aim to respond within 4 hours during business hours.
• Live Chat: Available 24/7 directly on the 2777sz platform. For urgent privacy concerns, live chat is the fastest way to reach our team.

For formal data rights requests (access, erasure, rectification, portability, objection), please email [email protected] with the subject line "Data Rights Request — [Your Username]" and include a description of your request along with a copy of a valid identity document so we can verify your identity before processing the request.

2777sz is committed to resolving all privacy-related enquiries and data rights requests promptly, fairly, and in full compliance with our obligations under applicable data protection law and our Gaming License conditions.