Privacy Policy — ad77 Online Casino & Sportsbook

1. Who We Are & Scope of This Policy

This Privacy Policy applies to the ad77 platform operated at ad77.asia, including the website, mobile applications, and all related services (collectively, "ad77", "we", "us", or "our"). ad77 is the data controller responsible for the personal data of registered players and website visitors.

This Policy governs all personal data collected when you: visit ad77.asia; register an account; make deposits or withdrawals; place bets or play casino games; contact customer support; use the ad77 mobile application; or otherwise interact with ad77's services. By registering an account you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2. Data We Collect

2.1 Registration Data

When you create an ad77 account, we collect: full name; email address; Pakistani mobile number (Jazz, Zong, Telenor, Ufone, or Warid); date of birth (to verify the 18+ age requirement); and the password you create (stored in hashed, non-reversible form — never in plaintext).

2.2 Identity Verification (KYC) Data

When identity verification is required — including before processing large withdrawal requests — ad77 may collect: a copy of your CNIC (Computerised National Identity Card), passport, or other government-issued photo ID; a selfie photograph for liveness verification; and proof of address documentation. KYC documents are processed and stored with heightened security controls.

2.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, JazzCash account references, Easypaisa wallet numbers, bank account details provided for bank transfer transactions, and USDT wallet addresses where applicable. We do not store full payment card numbers if card payments are accepted via a payment gateway — card data is handled entirely by the gateway's PCI-DSS-compliant infrastructure.

2.4 Gaming Activity Data

ad77 records all betting and gaming activity associated with your account: sports bets placed (including markets, stakes, and outcomes), casino game sessions (game type, duration, stakes, and results), slot game play history, and real-time in-play betting activity. This data is retained for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical & Device Data

When you access ad77, we automatically collect: IP address; device type and model; operating system and version; browser type; mobile network operator; session timestamps; and pages visited. This data is used for security monitoring, fraud prevention, platform optimisation, and geographic compliance purposes.

2.6 Communication Data

If you contact ad77 customer support — via live chat, email, or any other channel — we retain records of those communications including message content, timestamps, and resolution outcomes. This data is used to resolve your enquiry and to improve support quality.

3. How We Use Your Data

ad77 uses the personal data described above for the following purposes:

• Account Management: To create, maintain, and administer your ad77 account, including processing login authentication, two-factor authentication SMS delivery, and account security alerts.
• Payment Processing: To process deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and USDT; to reconcile transactions; and to investigate and resolve payment disputes.
• Identity Verification: To verify that you meet the 18+ age requirement; to conduct KYC checks as required by our operational compliance obligations; and to prevent fraud and money laundering.
• Platform Operation: To provide access to betting markets, casino games, live dealer tables, and slot titles; to settle bets accurately; and to display your PKR balance and transaction history.
• Security & Fraud Prevention: To detect and prevent unauthorised account access, fraudulent activity, bonus abuse, and use from Prohibited Jurisdictions.
• Responsible Gaming: To monitor account activity for signs of problem gambling behaviour; to enforce deposit limits, loss limits, and self-exclusion requests set by the player; and to comply with responsible gaming obligations.
• Customer Support: To respond to your support enquiries, investigate complaints, and maintain records of communications for quality and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving ad77's features, game library, and user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to marketing communications. You may withdraw consent at any time via your account notification settings.

4. Legal Bases for Processing

ad77 processes personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract between ad77 and the player — including account creation, payment processing, bet settlement, and account management.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML (Anti-Money Laundering) obligations, age verification requirements, and record-keeping obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by the player's fundamental rights.
• Consent: Processing for optional marketing communications, where express consent has been provided. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

ad77 does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. We share data only in the following limited circumstances:

• Game Content Providers: Certified game providers (including Evolution Gaming and Pragmatic Play) receive session data necessary to deliver live casino and slot content. These providers are bound by data processing agreements and may not use session data for independent purposes.
• Payment Processors: JazzCash, Easypaisa, bank transfer intermediaries, and USDT payment infrastructure providers receive transaction data necessary to process deposits and withdrawals. All payment partners are contractually bound to handle data securely.
• Identity Verification Services: Where automated KYC verification is used, encrypted identity document images may be transmitted to a certified identity verification provider. Documents are not retained by the verification provider beyond the verification session.
• Regulatory Authorities: ad77 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, valid legal process, or regulatory instruction — and only to the extent required.
• Fraud Prevention Networks: Aggregated, pseudonymised fraud signals may be shared with industry fraud prevention networks to protect ad77 and other platforms from known bad actors.

6. Payment Data & Financial Information

The financial data ad77 holds about you — including JazzCash references, Easypaisa wallet numbers, and bank account details — is used exclusively for processing your transactions and for required financial record-keeping. ad77 implements role-based access controls ensuring that financial data is accessible only to systems and personnel with a direct operational need.

Bank account details provided for withdrawal purposes are stored in encrypted form. JazzCash and Easypaisa references are stored only in tokenised or reference form sufficient to process the intended transaction. ad77 does not store USDT private keys or wallet seed phrases belonging to players — only the destination wallet address provided by the player for withdrawal purposes.

7. Cookies & Tracking Technologies

ad77 uses the following categories of cookies and similar technologies on ad77.asia:

• Strictly Necessary Cookies: Required for the platform to function — including login session management, bet slip functionality, and security tokens. These cannot be disabled without impairing core platform functionality.
• Performance Cookies: Anonymised analytics data used to understand how players navigate ad77 and identify pages or features that require improvement. No personally identifiable information is transmitted via performance cookies.
• Functional Cookies: Used to remember your preferences — such as language settings, preferred deposit method, and in-game settings — between sessions.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the ad77 Platform, including logging in and placing bets. The ad77 mobile application uses equivalent session management and analytics technologies governed by the same data principles as the web platform.

8. Data Retention

ad77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations:

• Account Data: Retained for the lifetime of the account and for a period of at least 5 years following account closure, in compliance with financial record-keeping and AML obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for the required regulatory retention period following account closure, typically 5 years.
• Support Communications: Retained for 2 years from the date of resolution, unless the communication relates to an active dispute or regulatory matter.
• Technical Logs: IP address logs and access logs are retained for up to 12 months for security and fraud investigation purposes.

When data is no longer required to be retained, it is securely deleted or anonymised.

9. Data Security

ad77 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• All data transmitted between your device and ad77.asia is encrypted using TLS 1.3.
• Passwords are hashed using a strong one-way hashing algorithm and are never stored in plaintext or reversible form.
• Financial data fields are encrypted at rest using AES-256 or equivalent encryption standards.
• Access to personal data is restricted on a need-to-know basis through role-based access controls.
• ad77 systems are subject to regular security monitoring and periodic vulnerability assessments.
• Two-factor authentication (2FA) is available to all players via Account Settings and is strongly recommended to protect against unauthorised account access.

No data transmission or storage system is entirely immune from risk. If you become aware of a potential security incident involving your ad77 account, contact support immediately at [email protected].

10. Your Rights as a Data Subject

Subject to applicable law, you have the following rights regarding your personal data held by ad77:

• Right of Access: You may request a copy of the personal data ad77 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some data (such as your registered name and date of birth) may require KYC verification before amendment.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (see Section 8).
• Right to Restriction of Processing: You may request that ad77 restrict processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ad77 in structured, commonly used format.
• Right to Object: You may object to processing of your data for direct marketing purposes at any time, with immediate effect, via your account notification settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit your request to [email protected]. ad77 will respond within 30 days of receiving a valid request. Identity verification may be required before a request is actioned to prevent unauthorised access to another player's data.

11. Children's Privacy

ad77 is strictly for individuals aged 18+. ad77 does not knowingly collect personal data from individuals under 18 years of age. If we become aware that a person under 18 has provided personal data or registered an account, that account will be closed immediately, and all associated data will be deleted or anonymised except to the extent required to be retained for legal or compliance purposes.

If you are a parent or guardian and believe your child has accessed or registered with ad77, contact us immediately at [email protected].

12. Changes to This Policy

ad77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or in-platform notification at least 7 days before the updated Policy takes effect, except where immediate change is required by law or regulation. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the ad77 Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

13. Contact & Data Enquiries

For all privacy-related enquiries, data access requests, or concerns about how ad77 handles your personal data, please contact us at:

• Email: [email protected]
• Live Chat: Available via the ad77 Platform for registered players
• Response time for data enquiries: within 30 days of receipt of a valid, verified request

This Privacy Policy was last updated on 1 June 2026 and is effective immediately for all new registrations from that date, and for existing accounts from 8 June 2026.