hh77 Privacy Policy

This Privacy Policy is issued by hh77 ("hh77", "the Platform", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at hh77.im. hh77 operates under an internationally recognised gaming licence and serves players primarily located across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and other major cities.

For the purposes of applicable data protection law, hh77 acts as the data controller in respect of all personal data collected through the hh77 website, mobile platform, and associated services. This means hh77 determines the purposes for which personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all individuals who access or use the hh77 platform, including registered players, visitors who browse the site without creating an account, and individuals who contact hh77 support. By accessing hh77, you acknowledge that you have read and understood this Privacy Policy.

hh77 collects personal data across several categories, depending on your level of interaction with the platform. The following table summarises the categories of personal data we collect and examples of the specific data points within each category:

hh77 does not collect special category data (such as health information, religious beliefs, or biometric data) unless you voluntarily provide it in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for the purpose of administering that request.

hh77 collects personal data through the following channels and methods:

• Direct Registration: When you create an hh77 account, you provide Identity Data and Contact Data directly through the registration form.
• KYC Verification: When completing identity verification, you submit documentation such as your CNIC or passport scan, which constitutes Identity Data under this policy.
• Deposits and Withdrawals: When you transact through JazzCash, EasyPaisa, Raast, HBL, UBL, or Meezan Bank, Financial Data is generated and retained in connection with your account.
• Platform Use: When you browse, play games, place bets, or interact with the hh77 platform, Gaming Activity Data and Usage Data are automatically generated and recorded.
• Device and Browser: Technical Data including your IP address, device identifiers, and browser fingerprint are collected automatically through standard web server logs and analytics tools whenever you access the hh77 platform.
• Customer Support: When you contact hh77 support via live chat or email, the content of that communication is retained as Communications Data.
• Cookies and Tracking Technologies: hh77 uses cookies, pixel tags, and similar technologies to collect Usage Data and Technical Data. Full details are provided in Section 6 of this policy.

hh77 uses the personal data it collects for the following defined purposes. No data is used for any purpose not listed below unless hh77 notifies you and, where required, obtains your consent:

• Account Creation and Management: To register your hh77 account, verify your identity, and maintain your account in an active and accurate state.
• Service Delivery: To provide the games, sportsbook, live casino, crash, slots, Callbreak, and cricket betting services that constitute the hh77 platform.
• Payment Processing: To process deposits and withdrawals via local Pakistani payment methods and to reconcile your account balance accurately in PKR.
• KYC and Age Verification: To comply with our obligations under the terms of our gaming licence, which require us to verify that all players are 21 years of age or older and that their identity matches the information provided at registration.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multiple account creation, bonus abuse, money laundering, and other prohibited activities.
• Regulatory Compliance: To meet our legal obligations under applicable gaming regulation, anti-money laundering requirements, and data protection law.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, session reminders, and cool-off periods.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may withdraw consent at any time — see Section 13.
• Platform Improvement: To analyse aggregated usage data to improve hh77's design, performance, game selection, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.

In accordance with internationally recognised data protection principles, hh77 processes your personal data only where it has a clearly defined lawful basis for doing so. The table below sets out the lawful basis applicable to each primary processing purpose:

Where hh77 relies on legitimate interests as its lawful basis, we have assessed that those interests are not overridden by your rights and interests. You may contact us to request information about any specific legitimate interests assessment.

hh77 uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and understand how users interact with our services. The following categories of cookies are in use on hh77:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preferences, and protect against cross-site request forgery. These cookies cannot be disabled without preventing the platform from operating correctly.
• Performance Cookies: These cookies collect anonymised data about how players use hh77 — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used to improve platform performance and user experience.
• Functional Cookies: These cookies remember your preferences and personalise your hh77 experience, such as your preferred game lobby view or responsible gaming reminder settings.
• Analytics Cookies: hh77 uses analytics tools to generate aggregated reports on platform usage. These tools may set their own cookies and collect Technical Data and Usage Data as described in Section 2.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to access core hh77 services, but may limit certain personalisation features. hh77 does not use cookies to serve third-party advertising.

hh77 does not sell your personal data. We share personal data with third parties only in the following defined circumstances, and only to the extent necessary for each stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive transaction data necessary to process deposits and withdrawals on your behalf. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity Verification Partners: hh77 uses third-party KYC and identity verification services to validate player identity and age. These partners receive Identity Data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Game Software Providers: The studios and providers that supply hh77's casino games, slots, crash games, and sportsbook data feeds may receive pseudonymised gaming activity data for the purpose of game operation, dispute resolution, and RNG audit compliance.
• Fraud Prevention Services: hh77 shares Technical Data and limited Identity Data with anti-fraud and AML screening services to protect the platform and its users from financial crime.
• Regulatory and Legal Authorities: hh77 may be required by law, court order, or regulatory direction to disclose personal data to government authorities, law enforcement agencies, or our gaming licensing authority. hh77 complies with such requirements and, where legally permitted, will notify affected players.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving hh77, player data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom hh77 shares personal data are required by contract to implement appropriate technical and organisational security measures and to process data only in accordance with hh77's instructions.

hh77 operates on a global infrastructure. As a result, personal data collected from Pakistani players may be processed on servers located outside of Pakistan, including in jurisdictions where hh77's technology partners and gaming licence authority are based.

Where personal data is transferred internationally, hh77 ensures that appropriate safeguards are in place to protect the data, including:

• Transfers to jurisdictions that provide an adequate level of data protection as recognised by internationally accepted frameworks.
• Use of standard contractual clauses or equivalent data transfer mechanisms where transfers occur to jurisdictions without a formal adequacy determination.
• Contractual obligations on receiving parties to maintain data protection standards equivalent to those described in this Privacy Policy.

hh77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for analytical purposes.

hh77 respects your rights in relation to your personal data. The following rights are available to all hh77 players and site visitors, subject to applicable law and any overriding legal obligations that hh77 must fulfil:

• Right of Access: You have the right to request a copy of the personal data hh77 holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). hh77 will respond to valid SARs within 30 days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by hh77 be corrected. For basic account details such as contact information, you may update these directly within your account settings.
• Right to Erasure: You may request that hh77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds to continue. This right is subject to hh77's legal data retention obligations, which may prevent immediate deletion of certain data categories.
• Right to Restrict Processing: You may request that hh77 suspend processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or where you have objected to processing pending determination of whether hh77's legitimate interests override yours.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. Where you object, hh77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact hh77 via live chat or by emailing [email protected]. hh77 may need to verify your identity before processing a data rights request. There is no charge for submitting a request, though hh77 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

hh77 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and hh77's servers is encrypted using TLS (Transport Layer Security) protocols. The hh77 platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive data stored on hh77's servers, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Password Security: Player passwords are stored as one-way cryptographic hashes and are never stored or transmitted in plain text. Even hh77 staff cannot retrieve your password — only a password reset can be initiated.
• Access Controls: Access to personal data within hh77 is restricted to authorised staff on a strict need-to-know basis. Access is logged, monitored, and subject to regular review.
• Fraud Detection Systems: Automated fraud detection monitors transactions and account activity in real time to identify and respond to suspicious patterns rapidly.
• Regular Security Audits: hh77 undergoes periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: hh77 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to player rights and freedoms, hh77 will notify affected players without undue delay in accordance with applicable regulatory requirements.

hh77 operates an absolute minimum age requirement of 21 years. The hh77 platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21.

hh77 conducts age verification checks as a mandatory step of the account registration and KYC process. Where hh77 discovers or has reasonable cause to believe that an account is held by an individual under the age of 21, that account will be immediately suspended, any deposits will be refunded to the payment method used, and all associated personal data will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and you believe that a minor in your care has accessed hh77 or provided personal data to the platform, please contact us immediately via [email protected] so that we can take prompt remedial action.

hh77 sends marketing communications — including promotional offers, bonus notifications, PSL cricket betting alerts, and platform updates — only to players who have explicitly opted in to receive them. We do not send unsolicited marketing emails or SMS messages.

When you register an hh77 account, you will be given a clear and separate option to consent to marketing communications. This consent is entirely voluntary and is not a condition of using the hh77 platform. You may opt in or out of specific communication channels independently, including:

• Email newsletters and promotional offers
• SMS notifications for deposits, withdrawals, and bonuses
• Push notifications via the hh77 mobile app (where applicable)
• In-platform promotional banners and personalised game recommendations

To withdraw your marketing consent at any time, you may update your preferences within your hh77 account settings or contact support directly. Once you withdraw consent, hh77 will cease sending marketing communications within a reasonable operational timeframe, typically no longer than 5 business days. Your withdrawal of marketing consent does not affect your ability to use the hh77 platform or receive transactional communications related to your account.

Please note that transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates — are sent regardless of your marketing preferences, as they are necessary for the operation of your hh77 account and cannot be opted out of while your account remains active.

hh77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of the hh77 platform. When material changes are made to this policy, hh77 will notify registered players via the email address associated with their account and will display a prominent notice on the hh77 platform for a reasonable period following the update.

The "Effective Date" and "Last Updated" date displayed at the top of this policy will always reflect the current version. We encourage you to review this Privacy Policy periodically so that you remain informed about how hh77 processes your personal data.

Your continued use of the hh77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with the terms of an updated Privacy Policy, you should discontinue your use of hh77 and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way hh77 handles your personal data, please contact us through any of the following channels:

• Live Chat Support: Available directly within your hh77 account dashboard, 24 hours a day, 7 days a week.
• Support Email: [email protected] — please include "Privacy Request" in the subject line so that your query is routed directly to our data protection team.
• Data Protection Officer (DPO): hh77 has appointed a Data Protection Officer who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be contacted at [email protected] with the subject line "DPO Enquiry".

hh77 is committed to resolving all data protection queries and complaints fairly and promptly. If you are not satisfied with hh77's response to a data protection complaint, you have the right to escalate the matter to the relevant supervisory authority or gaming regulatory body in your jurisdiction.

For players in Pakistan, hh77 also recommends that any concerns about data protection practices may be raised with the Pakistan Telecommunication Authority (PTA) or relevant consumer protection bodies, where applicable under Pakistani law.