b9777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is issued by b9777 ("b9777", "we", "us", "our"), the operator of the online gaming platform accessible at b9777.app. b9777 is the data controller in respect of all personal data collected from players and users who interact with the b9777 Platform, including Pakistani players accessing b9777 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, Peshawar, Hyderabad, Quetta, and all other cities across Pakistan.

b9777 operates under an internationally recognised gaming license issued by a recognised gaming regulatory authority. As a licensed gaming operator, b9777 is subject to regulatory data protection obligations that apply in addition to — and in some respects exceed — general commercial privacy standards. These obligations include mandatory KYC data retention requirements, AML transaction monitoring duties, and responsible gaming data handling standards.

b9777 collects personal data across several categories, depending on your level of interaction with the Platform. The following table sets out the categories of data collected and the typical source:

b9777 collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a b9777 account, you provide your mobile number, username, password, and any other details entered during the registration process.
• KYC Submission: When you submit identity documents, proof of address, or payment method verification materials to satisfy b9777's KYC requirements.
• Platform Activity: Automatically, as you navigate and use the b9777 Platform — including when you place bets, spin slots, join live dealer tables, deposit or withdraw funds, or use the color prediction feature.
• Support Interactions: When you contact b9777 via live chat — available 24/7 in Urdu and English — or when b9777 initiates contact with you regarding your account.
• Cookies and Technical Tracking: Through cookies, session identifiers, and analytics tools — as described in Section 8 of this Policy.
• Payment Processors: From our payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK) — limited to transaction reference data necessary for reconciliation and AML monitoring.
• Fraud Prevention Partners: From third-party identity and fraud verification services used to detect and prevent multi-accounting, identity fraud, and payment fraud on the b9777 Platform.

b9777 processes personal data only where a valid legal basis for processing exists. The following table sets out our principal processing purposes and the legal basis relied upon in each case:

b9777 does not sell your personal data. We share personal data only with carefully selected third parties where it is necessary to deliver Platform services, comply with legal obligations, or protect the legitimate interests of b9777 and its players. All third-party recipients are bound by contractual data protection obligations consistent with the standards set out in this Policy.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — to process PKR deposits and withdrawals. Data shared is limited to what each processor requires to complete the specific transaction.
• KYC and Identity Verification Providers: Third-party identity verification services that assist b9777 in fulfilling its Know Your Customer obligations under gaming license requirements.
• Game Software Providers: The developers and operators of casino game products (slots, live dealer, RNG table games) available on b9777, who may receive anonymised or pseudonymised session data for game audit purposes.
• Fraud Prevention Services: Third-party services that assist b9777 in detecting multi-accounting, payment fraud, and platform manipulation.
• Regulatory Authorities: b9777's gaming licensing authority and any law enforcement or government body that issues a legally valid request for player data. b9777 will notify affected players where legally permitted to do so.
• Professional Advisers: Legal, accounting, and auditing firms engaged by b9777 — who are bound by strict professional confidentiality obligations.

As a globally licensed online gaming platform serving Pakistani players, b9777 may transfer your personal data to countries outside Pakistan for the purposes of storage, processing, and service delivery. Such transfers occur where b9777's technology infrastructure, licensing authority, KYC providers, or game software partners are based in jurisdictions other than Pakistan.

Where personal data is transferred internationally, b9777 ensures that appropriate safeguards are in place, which may include standard contractual clauses approved by recognised data protection authorities, binding corporate rules, or transfers to jurisdictions that the applicable regulatory framework recognises as providing adequate data protection.

b9777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. The following retention periods apply as a general guide:

• Account and Identity Data: For the duration of the active account relationship plus a minimum of 5 years following account closure — as required by gaming license AML obligations.
• Financial Transaction Records: Minimum 7 years from the date of the transaction, in compliance with financial record-keeping requirements applicable under b9777's gaming license jurisdiction.
• KYC Documentation: For the duration of account activity plus 5 years post-closure, or as specifically mandated by the gaming regulatory authority.
• Gaming Session Data: Minimum 5 years for audit purposes; anonymised analytics data may be retained indefinitely in aggregate form.
• Support Communications: 3 years from the date of the relevant interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: For the duration of the account relationship plus 2 years, to evidence consent or its withdrawal.

b9777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your authenticated session, and analyse Platform performance. The following categories of cookies are used:

• Essential / Strictly Necessary Cookies: Required for Platform operation — including authentication session cookies, security tokens, and anti-fraud device fingerprinting. These cannot be disabled without impairing Platform functionality.
• Functional / Preference Cookies: Remember your language settings, game lobby preferences, and notification configurations. Disabled by opting out in your account settings.
• Analytics Cookies: Collect anonymised data about how players navigate and use the Platform to help b9777 identify performance issues and improve the user experience. No personally identifiable data is shared with third-party analytics providers.
• Third-Party Advertising Cookies: b9777 does not place third-party advertising tracking cookies on the Platform or permit advertising networks to set cookies for their own purposes through b9777.

Most web browsers allow you to manage cookie preferences through browser settings. Blocking essential cookies will affect your ability to log in and use the b9777 Platform. For Pakistani players using mobile browsers on Jazz, Zong, Telenor, Ufone, or Warid connections, cookie management is available through standard Android and iOS browser settings.

b9777 respects your rights in relation to your personal data. Subject to applicable law and b9777's regulatory retention obligations, you hold the following rights:

• Right of Access: You may request a copy of the personal data b9777 holds about you, along with information about how that data is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your b9777 Account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to b9777's legal retention obligations — data we are required to retain under gaming license or AML law cannot be erased on request.
• Right to Restrict Processing: You may request that b9777 restrict how it processes your personal data in defined circumstances, such as while an accuracy dispute is under review.
• Right to Data Portability: Where processing is based on your consent or performance of a contract and carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on b9777's legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing, b9777 will cease that processing immediately.
• Right to Withdraw Consent: Where b9777 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact b9777's support team via live chat (available 24/7) or by email at the address published in Section 15. b9777 will respond to all data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, with notification provided to you within the initial 30-day period.

b9777 is strictly an adult platform. Access is prohibited to persons under the age of 21. b9777 does not knowingly collect, process, or store personal data from individuals under the age of 21. The b9777 Platform is designed exclusively for adults of legal gaming age.

Age verification is applied at the account registration stage and prior to the processing of any withdrawal. If b9777 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the account will be closed, and all funds returned through the original deposit method to the extent technically possible.

If you believe that a minor may have accessed the b9777 Platform or provided personal data to b9777, please contact b9777 support immediately at the contact details provided in Section 15.

b9777 applies appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and b9777's servers.
• Encryption at rest for all stored personal data and KYC documentation.
• Password hashing using industry-standard algorithms — b9777 never stores passwords in plaintext.
• SMS-based two-factor authentication (2FA) for account login, with enhanced verification on new devices.
• Role-based access controls restricting internal access to personal data to those staff members who require it for their defined job functions.
• Audit logging of all internal access to player personal data, with regular review by b9777's data governance function.
• Regular penetration testing and security audits of b9777's platform infrastructure by qualified independent security professionals.

While b9777 implements all reasonable security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your b9777 account credentials confidential and for reporting any suspected unauthorised access to b9777 support immediately.

The b9777 Platform may contain links to third-party websites, payment platforms, or services. This Privacy Policy applies solely to data processed by b9777 through the b9777 Platform. b9777 does not control third-party websites and is not responsible for their privacy practices. When you leave the b9777 Platform by following a link to a third-party site, we encourage you to review the privacy policy of that site.

b9777 may send you marketing communications about promotions, bonuses, new games, PSL betting markets, and other b9777 Platform features where we have a legal basis to do so — either your explicit consent, or our legitimate interest in communicating relevant offers to existing players.

• You may opt out of marketing SMS messages at any time by contacting b9777 support or updating your communication preferences in your Account settings.
• Opt-out requests will be processed within 10 business days. You will continue to receive transactional messages (deposit confirmations, withdrawal notifications, OTP codes, and security alerts) regardless of marketing opt-out status — these are not marketing communications and cannot be disabled while your account is active.
• b9777 does not send marketing communications to players who have activated a self-exclusion or cooling-off period on their account. This restriction applies automatically from the moment self-exclusion takes effect.

b9777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform services. When we make material changes to this Policy, we will notify registered players via the mobile number or email address associated with their b9777 Account, or by placing a prominent notice on the Platform, no fewer than 7 calendar days before the changes take effect.

The "Last Reviewed" date at the top of this Policy will be updated each time an amendment is made. We encourage you to review this Policy periodically. Your continued use of the b9777 Platform following notification of changes constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to lodge a complaint about b9777's data handling practices, please contact b9777 through the following channels:

• Privacy Support Email: [email protected] — displayed as plain text only, not a clickable link.
• Live Chat: Available 24 hours a day, 7 days a week, in both English and Urdu — accessible from your b9777 Account dashboard. Average response time under 4 minutes.
• Response Timeframe: b9777 will acknowledge all privacy complaints and data rights requests within 5 business days and will provide a substantive response within 30 calendar days.