28x777 Privacy Policy

1. Who We Are and How to Contact Us

28x777 is an online entertainment platform offering casino games, sports betting markets, live dealer tables, and related services to adult users. For purposes of this Policy, 28x777 is the data controller responsible for the personal data processed in connection with the 28x777 platform.

If you have questions about this Policy or wish to exercise any of your data rights, you may contact the 28x777 data privacy team at: [email protected]. Please mark the subject line of your communication "Data Privacy Enquiry" to ensure it is directed to the appropriate team.

2. Data We Collect

28x777 collects the following categories of personal data in connection with the provision of its Services:

• Identity Data: Full name, date of birth, gender, and copies of identity documents (such as a Pakistani National Identity Card or passport) provided during account verification.
• Contact Data: Email address, mobile telephone number, and residential address provided at registration or during account updates.
• Financial Data: Payment method identifiers (e.g., JazzCash account number, Easypaisa wallet reference, bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah), transaction history, deposit amounts, withdrawal requests, and balance records. Full payment credentials are processed by our licensed payment service providers and are not stored by 28x777 in unencrypted form.
• Technical Data: IP address, device type and operating system, browser type and version, session timestamps, and login history.
• Usage Data: Game history, betting activity, wagering patterns, promotional interactions, and platform navigation behaviour.
• Communications Data: Records of your interactions with the 28x777 customer support team, including live chat transcripts, email correspondence, and support ticket history.
• Responsible Gaming Data: Self-reported information relating to responsible gaming preferences, limit settings, self-exclusion elections, and any information provided in connection with a responsible gaming support request.

3. How We Collect Your Data

28x777 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account on 28x777, completing identity verification, submitting a support request, or participating in a promotion.
• Automated Technical Collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools as you interact with the 28x777 platform.
• Payment Processors: Transaction confirmation data received from our licensed payment service providers when you make deposits or withdrawals via JazzCash, Easypaisa, or connected bank partners.
• Third-Party Verification Services: Identity and address verification data returned by KYC (Know Your Customer) service providers engaged by 28x777 for compliance purposes.
• Responsible Gaming Registries: Where applicable, data confirming self-exclusion status received from industry self-exclusion registers that 28x777 participates in.

4. Purposes and Legal Bases for Processing

28x777 processes personal data for the following purposes, each supported by an appropriate legal basis:

• Account Registration and Management – to create, maintain, and administer your 28x777 account. Legal basis: performance of a contract.
• Identity Verification and KYC – to verify your identity and age in compliance with our legal obligations. Legal basis: compliance with a legal obligation.
• Payment Processing – to process deposits, withdrawals, and associated financial transactions. Legal basis: performance of a contract.
• Anti-Money Laundering and Fraud Prevention – to detect and investigate suspicious activity in accordance with applicable financial crime regulations. Legal basis: compliance with a legal obligation and legitimate interests.
• Game and Betting Services – to provide, administer, and settle your bets and gameplay sessions on 28x777. Legal basis: performance of a contract.
• Customer Support – to respond to your enquiries, resolve disputes, and maintain support records. Legal basis: legitimate interests.
• Responsible Gaming Compliance – to administer responsible gaming tools including limit enforcement and self-exclusion. Legal basis: compliance with a legal obligation and legitimate interests.
• Marketing and Promotions – to send you promotional communications about 28x777 offers where you have consented or where we have a legitimate interest and you have not objected. Legal basis: consent or legitimate interests.
• Platform Improvement – to analyse usage patterns and improve the functionality, security, and content of the 28x777 platform. Legal basis: legitimate interests.

5. Cookies and Tracking Technologies

5.1 The 28x777 platform uses cookies and similar tracking technologies to enable core platform functionality, maintain session authentication, and collect analytics data about how Users interact with the platform.

5.2 The following categories of cookies are used on 28x777:

• Strictly Necessary Cookies: Required for the 28x777 platform to function, including session management and security tokens. These cannot be disabled without disrupting your use of the platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users navigate the 28x777 platform, helping us identify and fix usability issues.
• Preference Cookies: Store your language, display, and gameplay preferences so that 28x777 remembers your settings between sessions.

5.3 You may configure your browser to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the 28x777 platform, particularly session-based features such as maintaining your logged-in state.

6. Sharing of Personal Data

28x777 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

• Payment Service Providers: Transaction data is shared with licensed payment processors (including those facilitating JazzCash, Easypaisa, and banking transactions) solely to the extent necessary to execute the requested transaction.
• Identity Verification Partners: Identity and address data is shared with KYC service providers engaged to fulfil our regulatory verification obligations.
• Game Studio Providers: Technical session data (not including identity data) may be shared with licensed game studio providers such as Evolution and Pragmatic Play to operate their games within the 28x777 platform.
• Legal and Regulatory Authorities: Personal data may be disclosed to law enforcement, financial intelligence units, or other competent authorities where required by law, court order, or regulatory directive.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving 28x777, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third parties to whom 28x777 discloses personal data are required to process it only for the specified purpose and to maintain appropriate security measures.

7. International Data Transfers

7.1 The 28x777 platform is operated by a team across multiple locations, and some personal data processing may occur outside of Pakistan. Where personal data is transferred internationally, 28x777 takes steps to ensure that appropriate safeguards are in place, which may include contractual clauses that require the recipient to protect your data to standards equivalent to those applied by 28x777.

7.2 By using the 28x777 platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan and consent to such processing where necessary for the provision of our Services.

8. Data Retention

8.1 28x777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations.

8.2 Account and transaction records are typically retained for a minimum period of five (5) years following account closure to satisfy anti-money laundering and financial record-keeping requirements.

8.3 Communications data (support tickets, chat transcripts) is retained for a period of three (3) years after the close of the relevant interaction unless a longer period is required for an ongoing dispute or regulatory investigation.

8.4 Where you request deletion of your personal data and no legal retention obligation prevents us from doing so, 28x777 will action the deletion request within thirty (30) days of confirmation and provide written confirmation to your registered email address.

9. Your Rights Over Your Personal Data

Subject to applicable law, you hold the following rights in respect of the personal data that 28x777 holds about you:

• Right of Access: You may request a copy of the personal data 28x777 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account details, many fields can be updated directly within your 28x777 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that 28x777 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to Object: You may object to the processing of your personal data where 28x777 relies on legitimate interests as the legal basis, including objecting to receiving direct marketing communications.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request that your data be provided in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact the 28x777 privacy team at [email protected]. 28x777 will respond to verified requests within thirty (30) days.

10. Security Measures

10.1 28x777 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, restricted access controls for data at rest, regular security assessments, and staff training on data protection obligations.

10.2 Notwithstanding the above, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with 28x777 is no longer secure, please notify us immediately at [email protected].

10.3 In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 28x777 will notify affected Users without undue delay and will take all reasonable steps to contain and remediate the breach.

11. Children's Privacy

The 28x777 platform is strictly for adults aged 18 years and above. 28x777 does not knowingly collect personal data from individuals under 18. If we become aware that personal data has been collected from a minor, the relevant account will be closed immediately and the data deleted, except to the extent required to fulfil legal reporting obligations. If you believe a person under 18 has registered on 28x777, please contact us immediately at [email protected].

12. Changes to This Policy

28x777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. Material changes will be communicated to registered Users via the email address on file or through a prominent notice on the 28x777 platform at least seven (7) days before the changes take effect. Continued use of the 28x777 platform after the effective date of any update constitutes acceptance of the revised Policy.

13. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which 28x777 processes your personal data, please contact us at:

Email: [email protected]

Please include "Data Privacy" in your subject line and provide sufficient detail for the 28x777 privacy team to identify you and understand the nature of your request. We will acknowledge receipt of your communication within five (5) business days and aim to resolve all privacy-related enquiries within thirty (30) days.