hh77 Privacy Policy —
How We Protect Your Data

1. Introduction

hh77 (hh77.today) is Pakistan's leading online casino and sports betting platform, serving players across Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and throughout the country. As part of providing our gaming services, hh77 necessarily processes certain personal data relating to the individuals who register and use our platform.

This Privacy Policy has been drafted in accordance with internationally recognised data protection principles and the requirements of hh77's international gaming licence. It covers all personal data processing activities conducted in connection with the hh77 Platform, whether initiated at account registration, during active play, through customer support interactions, or via our marketing communications.

hh77 processes personal data lawfully, fairly, and transparently. We collect data for specific, explicit, and legitimate purposes and do not process data in a manner that is incompatible with those purposes. The data we collect is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

2. Data Controller

For the purposes of this Privacy Policy, hh77 acts as the Data Controller in respect of personal data collected from registered players and site visitors. As Data Controller, hh77 determines the purposes and means by which personal data is processed.

Players who wish to exercise their data rights or who have questions about how their personal data is handled may contact the hh77 Data Protection contact via the support email address published in the footer of this website. All data-related enquiries will be acknowledged within 48 hours and responded to substantively within 30 days.

3. Personal Data We Collect

hh77 collects the following categories of personal data from players and site visitors:

3.1 Identity Data

• Full legal name as it appears on government-issued identity documents;
• Date of birth (for age verification purposes);
• National identity document type and reference number (collected during KYC verification);
• Scanned copies or photographs of identity documents submitted for KYC purposes.

3.2 Contact Data

• Pakistani mobile phone number (used as the primary account identifier);
• Email address, where provided;
• Current residential address (collected during KYC verification).

3.3 Financial Data

• JazzCash or EasyPaisa account numbers associated with deposit and withdrawal transactions;
• Bank account details (IBAN, account title) where bank transfer methods are used;
• Transaction history including deposits, withdrawals, bonuses credited, and wagers placed;
• Payment method verification documents, where required for KYC.

3.4 Technical Data

• IP address and approximate geographic location derived therefrom;
• Device identifiers (model, operating system, browser type and version);
• Session timestamps, login records, and access logs;
• Cookies and similar tracking technologies as described in Section 7.

3.5 Behavioural and Gaming Data

• Game participation history, wager amounts, and game outcomes;
• Bonus usage patterns and promotional offer interactions;
• Session duration data and responsible gaming tool usage;
• Sports betting selections, odds accepted, and live betting activity.

3.6 Communications Data

• Records of all support interactions, including live chat transcripts and support email exchanges;
• Survey responses and feedback submitted voluntarily by players;
• Marketing communication preferences and opt-in or opt-out records.

4. How We Collect Personal Data

hh77 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in surveys and promotions;
• Automated collection: Technical data collected automatically when you access and interact with the hh77 Platform, via server logs, cookies, and analytics tools;
• Third-party collection: Data received from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and others) in connection with the processing of financial transactions; data received from identity verification service providers during KYC checks; and data received from fraud detection and anti-money laundering screening services.

5. Purpose and Legal Basis for Processing

The table below summarises the principal purposes for which hh77 processes personal data and the legal basis for each processing activity:

6. Data Sharing and Third-Party Disclosure

hh77 does not sell, rent, or trade personal data. hh77 shares personal data with third parties only in the following defined circumstances:

6.1 Service Providers and Data Processors

hh77 engages third-party companies to perform specific functions on our behalf, including payment processing (JazzCash, EasyPaisa, and banking partners), identity verification and KYC screening, fraud detection and anti-money laundering services, IT infrastructure and hosting, and customer support platform providers. These entities process data solely on hh77's instructions and are contractually bound to protect it to the same standard as hh77.

6.2 Game Content Providers

hh77 integrates games provided by third-party game studios and technology providers. These providers may receive anonymised or pseudonymised technical data necessary for game delivery and RNG certification. They do not receive personally identifiable player data beyond what is technically required for game operation.

6.3 Regulatory and Legal Disclosure

hh77 may be required to disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where legally obligated to do so. hh77 will comply with such lawful obligations while seeking to limit the scope of any disclosure to what is strictly required.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of hh77's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the privacy practices applicable to their data following the transfer.

7. Cookies and Tracking Technologies

hh77 uses cookies and similar technologies on the hh77 Platform for the following purposes:

• Essential cookies: Required for the platform to function, including session management, login authentication, and security token validation. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players interact with the hh77 Platform — pages visited, features used, session duration — to enable us to improve the platform experience. Analytics data is aggregated and does not identify individual players.
• Preference cookies: Used to remember player settings and preferences such as language and responsible gaming configurations.
• Marketing cookies: Used only where a player has explicitly consented to receive personalised promotional communications. Players may withdraw marketing consent at any time through their account settings or by contacting hh77 support.

Players may manage cookie preferences through their browser settings. Disabling non-essential cookies will not affect access to core hh77 gaming functions, though some preference-related features may be less persistent between sessions.

8. Data Security

hh77 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players and the hh77 Platform;
• AES-256 encryption for personal data stored in hh77 databases at rest;
• Bcrypt hashing for all player passwords — passwords are never stored in plain text;
• Two-factor authentication available to all players for enhanced account security;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Real-time intrusion detection and monitoring systems across all hh77 infrastructure;
• Regular penetration testing and security audits conducted by independent third-party security professionals;
• Segregation of player funds from operational accounts to protect financial interests.

9. Data Retention

hh77 retains personal data for the periods specified below, after which data is securely deleted or anonymised:

• Account and identity data: Retained for the duration of the account relationship and for a period of five years following permanent account closure, in compliance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.
• Financial and transaction data: Retained for five years from the date of each transaction, as required by international financial regulations applicable to hh77's licensing jurisdiction.
• KYC documents: Retained for five years following account closure or the last regulated transaction, whichever is later.
• Technical and log data: Retained for twelve months from collection, or longer where relevant to an active fraud investigation or legal proceeding.
• Marketing preference data: Retained until consent is withdrawn, after which marketing communications cease immediately and preference records are anonymised.
• Support communications: Retained for three years from the date of the interaction.

10. Your Data Rights

As an hh77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the hh77 support team using the email address in the footer of this website:

• Right of Access: You may request a copy of all personal data held by hh77 about you. hh77 will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Contact the hh77 support team with the correct information and supporting documentation where appropriate.
• Right to Erasure: You may request deletion of your personal data where hh77 no longer has a legitimate basis for retaining it. Note that erasure requests may be declined where retention is required by law, regulation, or active licensing obligation.
• Right to Restrict Processing: You may request that hh77 restrict processing of your data to storage only in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to hh77 for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your data based on legitimate interest grounds. You may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.

hh77 will respond to all data rights requests within 30 calendar days. Complex requests may take up to 90 days, in which case hh77 will notify you of the extended timeline within the initial 30-day period. Identity verification will be required before any data rights request is processed.

11. Children's Privacy

The hh77 Platform is strictly for adults aged 21 and above. hh77 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts. If hh77 discovers that personal data has been collected from an individual under 21, that account will be immediately suspended, all associated data will be deleted, and any funds held will be returned to the originating payment method after completing necessary regulatory reporting.

If you believe that a minor may have registered an hh77 account, please contact the hh77 support team immediately using the contact details in the footer of this website.

12. International Data Transfers

hh77 operates under an international gaming licence and engages service providers located in multiple countries to deliver its platform. Personal data may therefore be transferred to and processed in countries outside of Pakistan. Where such transfers occur, hh77 ensures that appropriate data transfer mechanisms and contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy.

hh77 will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing appropriate contractual controls, including standard data protection clauses or equivalent measures.

13. Updates to This Privacy Policy

hh77 reviews this Privacy Policy on a regular basis and will update it to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Privacy Policy, hh77 will notify registered players via the contact details on record — which is why maintaining accurate and current contact information in your hh77 account is important. Continued use of the hh77 Platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy.

The current version of this Privacy Policy is always the definitive version and supersedes all prior versions. It is accessible at all times at hh77.today/privacy-policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or hh77's data processing practices, please contact the hh77 support team. Our support team is available 24 hours a day, 7 days a week, in both English and Urdu.

You may reach us using the support email address displayed in the footer of this website. All privacy-related enquiries should be submitted in writing to ensure a clear record of the communication and to enable hh77 to respond accurately and completely.

Pakistani players based in Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, and elsewhere can expect acknowledgement of privacy enquiries within 48 hours and a full response within 30 calendar days.