wc77 Casino — Privacy Policy
How We Protect Your Personal Data

1. Identity of the Data Controller

wc77 Casino, operating the platform accessible at wc77.bid, is the data controller responsible for the personal data of all registered Members and visitors to the platform. As a licensed gaming operator, wc77 is obligated under its gaming licence to maintain robust data governance practices and to ensure that all personal data collected from Pakistani players — whether residing in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, or elsewhere — is processed lawfully, fairly, and transparently.

The wc77 data controller is the entity holding the relevant international gaming licence, details of which are available from our support team upon written request. All data protection queries, subject access requests, and complaints should be directed to the wc77 Data Protection contact, details of which are provided in Section 14 of this Policy.

2. Personal Data We Collect

wc77 collects personal data that is necessary to operate the platform, comply with our regulatory obligations, and provide you with a complete gaming experience. The categories of data we collect are as follows:

wc77 applies a data minimisation principle — we collect only the personal data that is genuinely necessary for the specified processing purpose. We do not collect sensitive personal data beyond what is required for KYC compliance and responsible gaming obligations.

3. How We Collect Your Data

wc77 collects personal data through the following primary channels:

3.1 Direct Collection

Data you provide directly when you register for a wc77 account, complete our KYC verification process, make a deposit or withdrawal, contact our support team, respond to a promotional survey, or update your account profile. This constitutes the majority of personal data we hold about you.

3.2 Automated Collection

Technical and gameplay data collected automatically as you interact with the wc77 platform. This includes IP addresses, device identifiers, session logs, browser fingerprinting data used for fraud prevention, game session records generated by our platform systems, and cookie-based tracking data as described in Section 8 of this Policy.

3.3 Third-Party Sources

wc77 may receive limited personal data from verified third-party sources where this is necessary for compliance or fraud prevention purposes. These sources include:

• Payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) — for transaction confirmation and payment identity verification;
• Game software providers — for game session audit data required under our gaming licence;
• Identity verification services — where additional document authentication is required beyond the standard CNIC upload process;
• Fraud prevention and AML screening databases — as required under our anti-money laundering compliance programme.

4. Purposes of Processing & Legal Basis

wc77 processes your personal data only where there is a lawful basis to do so. The table below sets out our primary processing purposes and the corresponding legal basis under applicable data protection frameworks:

5. Data Sharing & Third-Party Disclosure

wc77 may share your personal data with the following categories of third parties under strict data processing agreements:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transaction data necessary to process your deposits and withdrawals in PKR;
• Game Software Providers: Certified game studios receive session-level gameplay data as required for audit trails under our gaming licence. Individual player identity is not shared with game providers beyond what is necessary for technical operation;
• Identity Verification Services: Third-party KYC verification providers may process your CNIC and selfie data to authenticate your identity. These providers are bound by strict data processing terms and may not use your data for any purpose other than identity verification;
• Regulatory Authorities: Where required by our gaming licence or applicable law, wc77 may disclose player data to the relevant regulatory body, law enforcement agencies, or courts of competent jurisdiction;
• AML Screening Services: Transaction data may be processed through licensed AML compliance screening databases as required under our anti-money laundering obligations;
• Fraud Prevention Networks: Limited technical identifiers may be shared with fraud prevention industry databases to identify and block fraudulent account patterns.

All third-party service providers engaged by wc77 are required to operate under contractually binding data processing agreements that restrict their use of your personal data to the specific purposes for which it was disclosed. wc77 conducts periodic reviews of third-party compliance.

6. International Data Transfers

As an internationally licensed gaming operator serving Pakistani players, wc77 may transfer personal data to servers and service providers located outside Pakistan. Where such transfers occur, wc77 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to or exceeding the protection afforded in Pakistan.

Safeguards applied to international transfers include:

• Contractual data processing agreements incorporating standard data protection clauses with all international data recipients;
• Selection of service providers operating in jurisdictions with recognised data protection frameworks;
• Technical measures including end-to-end encryption for data in transit and at rest;
• Regular assessment and audit of international data transfer arrangements as part of our licence compliance programme.

7. Data Retention Periods

wc77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by our gaming licence and applicable legal obligations. The principal retention periods applied by wc77 are as follows:

• Account and Identity Data: Retained for the full duration of your wc77 membership and for a minimum of five (5) years following account closure, as required under AML and gaming licence obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements under our gaming licence;
• Game Session Data: Retained for a minimum of three (3) years from the date of each session, for audit and dispute resolution purposes;
• Customer Support Records: Retained for three (3) years from the date of each interaction, to support complaint resolution and training quality processes;
• Marketing Consent Records: Retained from the date consent is given until consent is withdrawn, plus an additional period of twelve (12) months for compliance record purposes.

8. Cookies & Tracking Technologies

wc77 uses cookies and similar tracking technologies on the wc77.bid platform. Cookies are small data files placed on your device when you visit the wc77 platform. They serve a number of functions essential to the secure and efficient operation of the platform.

8.1 Types of Cookies Used by wc77

• Strictly Necessary Cookies: Required for core platform functions including session authentication, fraud prevention, and security. These cookies cannot be disabled without breaking platform functionality;
• Functional Cookies: Enable personalisation features such as remembering your language preferences, game lobby settings, and preferred payment method;
• Analytics Cookies: Collect aggregated data on how players interact with the wc77 platform, helping us identify pages and features that need improvement. Data collected through analytics cookies is anonymised at the point of collection;
• Security Cookies: Used for device fingerprinting, bot detection, and the identification of suspicious login patterns that could indicate account takeover attempts.

8.2 Managing Cookies

You may configure your browser to refuse some or all cookies. Please be aware that disabling strictly necessary cookies will impair or prevent your ability to use the wc77 platform, including the ability to log in to your account. Instructions for managing cookies are available in the settings menu of all major browsers.

9. Technical & Organisational Security Measures

wc77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and the wc77 platform is encrypted using TLS 1.3 / 256-bit SSL on every page and API endpoint — including login, payment, and game pages;
• Encryption at Rest: Personal data stored on wc77 servers is encrypted at rest using AES-256 standard encryption;
• Access Controls: Access to personal data by wc77 staff is restricted on a strict need-to-know basis using role-based access control systems, with all access events logged for audit purposes;
• Password Security: Member passwords are stored using bcrypt hashing with individual salts — they are never stored in plain text and cannot be recovered in their original form by wc77 staff;
• Two-Factor Authentication: wc77 offers SMS OTP-based two-factor authentication for all member accounts and requires 2FA for high-value withdrawal authorisations;
• Intrusion Detection: The wc77 platform infrastructure is monitored continuously for intrusion attempts, anomalous access patterns, and vulnerability exposures;
• Data Breach Response: wc77 maintains a documented data breach response plan. In the event of a breach affecting player data, affected Members will be notified in accordance with applicable regulatory requirements and our gaming licence obligations.

10. Your Data Subject Rights

As a wc77 Member, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact wc77 via the channels set out in Section 14:

11. Minors & Age Restriction — 21+

If you become aware that a person under the age of 21 has created a wc77 account or provided personal data to wc77 without parental consent and in contravention of our age verification requirements, please notify our support team immediately at the contact details provided in Section 14. wc77 will take immediate action to close the account and delete the associated personal data to the extent permissible under applicable law.

Parents and guardians should be aware that wc77 operates parental control compatibility — if parental control software is active on a device, wc77.bid should be listed as a blocked site for users under 21. We recommend using available device-level parental controls to prevent unauthorised access by minors.

12. Marketing Communications

wc77 sends marketing communications — including promotional offers, bonus notifications, PSL betting specials, tournament announcements, and new game alerts — only to Members who have explicitly opted in to receive such communications during the registration process or at a later time through their account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your wc77 account settings page;
• Clicking the unsubscribe link included in any marketing email sent by wc77;
• Contacting the wc77 support team via live chat or email with a written opt-out request.

Withdrawal of marketing consent will be processed within 72 hours. Please note that transactional communications — such as deposit confirmations, withdrawal processing notifications, security alerts, and KYC status updates — are not marketing communications and will continue to be sent regardless of your marketing preference settings, as they form a necessary part of platform operation.

13. Changes to This Privacy Policy

wc77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, regulatory requirements, or applicable law. Where changes are material, wc77 will provide at least fourteen (14) days' advance notice by displaying a prominent notification on the wc77 platform and, where reasonably practicable, by notifying registered Members via their registered email addresses.

Continued use of the wc77 platform following the effective date of any updated Privacy Policy constitutes acceptance of the revised policy. The current version of this Privacy Policy is always available at wc77.bid/privacy-policy. The effective date and review date are displayed at the top of this document and will be updated on each revision.

14. Contact & Data Protection Enquiries

For all privacy-related enquiries, subject access requests, data rights exercises, or concerns about how wc77 processes your personal data, please contact our Data Protection team using the following channels:

• Live Chat: Available 24/7 from within your wc77 account dashboard. For urgent data security concerns — such as suspected unauthorised access — live chat is the fastest response channel;
• Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Subject Request" in your email subject line to ensure prompt routing to our data protection team;
• Response Commitment: Acknowledgement of all written privacy enquiries within 48 hours; full substantive response within 30 calendar days (or such shorter period as required by applicable regulation).

If you are not satisfied with wc77's response to a privacy concern, you may escalate your complaint to the relevant data protection supervisory authority or to the independent complaints body available under our gaming licence. Details of the applicable escalation route are available upon written request to our support team.