b77 Privacy Policy

01 Who We Are

b77 is an online sports betting and casino entertainment platform operating at b77.st, built specifically for adult players in Pakistan. When you create an account and use the b77 platform, b77 acts as the data controller — meaning we are the entity responsible for deciding how your personal information is collected, stored and used.

This Privacy Policy applies to all users of b77 — registered account holders, visitors to the site who have not registered, and anyone interacting with the platform via mobile browser. By using b77, you acknowledge that you have read this policy and understand how your data is handled.

If you have questions about any part of this policy, you can reach us at [email protected] or via live chat through your b77 account.

02 What Personal Data We Collect

The type of data we collect depends on how you interact with b77. Here is a straightforward breakdown of the categories:

Registration and Account Data

• Full name as it appears on your identification documents
• Date of birth (required for age verification — 18+ only)
• Email address
• Mobile phone number
• Chosen username and encrypted password
• Country and city of residence

Identity Verification Data (KYC)

When we carry out identity verification — which may be required before processing withdrawals or during a routine account review — we may collect:

• Copy of your CNIC (Computerised National Identity Card) or passport
• Proof of address (utility bill, bank statement or similar)
• Proof of payment method ownership where relevant

Transaction Data

• Deposit amounts and dates in PKR
• Withdrawal requests and settlement records
• Payment method used (JazzCash account reference, Easypaisa account reference, bank account details, card details — see Section 5)
• Bonus activity and wagering history

Platform Usage Data

• Bets placed, games played and results
• Session duration and login timestamps
• Device type, browser type and operating system
• IP address and approximate location derived from IP
• Pages visited on b77 and navigation patterns

Communication Data

• Support chat transcripts and email correspondence
• Feedback and queries submitted to the support team

03 How We Collect Your Data

We collect data through the following methods:

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, contact support, or update your account details
• Automatically — through cookies, device fingerprinting and server logs when you browse or use the platform (see Section 6)
• From payment processors — JazzCash, Easypaisa, Raast and banking partners share transaction confirmation data when you make a deposit or receive a withdrawal
• From identity verification providers — when KYC checks are carried out, a third-party verification service may process your documents and return a result to b77

We do not purchase personal data lists from third parties and we do not collect data from social media platforms about you without your direct interaction with b77.

04 Why We Use Your Personal Data

Every piece of data b77 collects is used for a specific, defined purpose. We do not collect data speculatively. The table below maps our main data uses to their purpose:

05 Payment Data and Financial Information

Because b77 processes real money transactions in PKR, payment data is one of the more sensitive categories of information we handle. Here is exactly how it works:

What Payment Data We Hold

• For JazzCash and Easypaisa: we store a reference to your registered mobile wallet number. We do not store your wallet PIN or full account credentials.
• For Raast and Bank Transfer: we store your IBAN or bank account number for the purpose of processing withdrawals to your verified account.
• For Debit and Credit Cards: card processing is handled by a PCI-DSS compliant payment gateway. b77 does not store your full card number, CVV or expiry date on our own servers. Only a tokenised reference is held to allow repeat deposits without re-entering full card details.

Why We Need Payment Data

Payment data is required to process your deposits and withdrawals, to verify that funds come from and return to your own accounts (anti-money laundering compliance), and to investigate any disputed transactions. This data is retained for the period set out in Section 8.

Third-Party Payment Processors

When you make a payment via JazzCash, Easypaisa, Raast or card, the transaction passes through the relevant payment processor's systems. Each processor has its own privacy policy governing how it handles transaction data. b77 only receives the confirmation and reference data necessary to credit or debit your b77 PKR balance.

06 Cookies and Tracking Technologies

b77 uses cookies and similar technologies to make the platform work correctly and to understand how players use it. Here is a plain explanation of each category:

Essential Cookies

These cookies are required for the platform to function. They keep you logged in during a session, remember your language preference and maintain your session security token. You cannot opt out of essential cookies while using b77 — without them the platform cannot work.

Analytics Cookies

We use anonymised analytics data to understand which pages are visited most, where users drop off in the registration flow, and how the platform performs on different devices. This data is aggregated — it does not identify you personally. It helps us fix problems and improve the b77 experience over time.

Functional Cookies

Functional cookies remember your preferences — for example, your preferred deposit method or the last sports category you were browsing. These make your experience smoother but are not strictly necessary for core functionality.

Security Cookies

Security cookies help us detect and prevent fraudulent login attempts, multiple account creation from the same device, and automated bot activity. These run silently in the background and do not affect your normal use of b77.

07 Who We Share Your Data With

b77 does not share your data with any party that does not have a direct role in operating the platform for you. The categories of third parties we work with are:

• Payment Processors — JazzCash, Easypaisa, Raast, banking partners and card payment gateways receive the minimum data required to process your transactions.
• Identity Verification Providers — When KYC is required, a specialist verification service processes your documents. They return only a pass/fail result and the verified name and date of birth to b77. They do not use your documents for any other purpose.
• Game Providers — Live casino and slots providers receive your anonymised session token to serve games. They do not receive your name, CNIC, payment details or other personal identifiers.
• Technology and Hosting Providers — The servers, databases and security infrastructure that run b77 are operated by third-party cloud providers. These providers process data on b77's behalf under strict data processing agreements and do not access user data independently.
• Fraud Prevention Services — Anonymised device and behaviour data may be shared with fraud detection providers to protect the platform and all users from fraudulent activity.

In all cases, third-party data sharing is governed by contracts that require the recipient to handle data securely, use it only for the stated purpose and not share it further without permission.

08 How Long We Keep Your Data

b77 retains personal data only for as long as there is a genuine need to hold it. Our standard retention periods are:

• Active account data — retained for the duration of your account being open
• Transaction records — retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements
• KYC documents — retained for the duration of your account plus five years after closure
• Support communications — retained for three years from the date of the conversation
• Analytics and usage data — retained in aggregated, anonymised form; individual session logs are deleted after 12 months

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

If you close your b77 account, your personal data is not deleted immediately. Transaction records and KYC documents are retained for the periods stated above to satisfy our obligations. After these periods expire, your data is fully purged from our systems.

09 Your Rights Over Your Data

As a b77 account holder, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with your registered email address and a description of your request.

10 How We Protect Your Data

b77 takes data security seriously and applies multiple layers of protection to keep your information safe:

• Encryption in transit — all data transmitted between your browser or device and b77 servers is encrypted using TLS (Transport Layer Security). Look for the padlock in your browser's address bar.
• Encryption at rest — sensitive data including passwords (which are hashed, not stored in plain text), payment references and KYC documents are encrypted when stored in our databases.
• Access controls — internal access to user data is restricted to staff members who need it to perform their job. All access is logged and audited.
• Fraud monitoring — automated systems monitor for unusual account activity, suspicious login attempts and patterns that may indicate a data breach or account takeover.
• Regular security reviews — the b77 platform undergoes periodic security assessments to identify and address vulnerabilities before they can be exploited.

No system is 100% secure, and b77 cannot guarantee absolute security. If you suspect your account has been accessed without your permission, contact support immediately so we can investigate and take protective action.

11 Children's Privacy

b77 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we discover that an account has been created or used by a person under 18, the account will be closed immediately and any data collected will be deleted as soon as it is no longer required for investigation purposes.

If you are a parent or guardian and believe your child has registered on b77, please contact us immediately at [email protected] so we can take action. Please include as much account information as you have available so we can locate and close the account promptly.

12 Updates to This Privacy Policy

b77 may update this Privacy Policy from time to time to reflect changes in how we operate, improvements to our security practices, or changes in applicable requirements. When we make changes, we update the "Last Updated" date at the top of this page.

For significant changes that affect how we use your personal data, we will make reasonable efforts to notify active account holders via email or an in-platform notification before the change takes effect. For minor clarifications or wording improvements that do not change the substance of how data is handled, the updated policy will simply be published here.

We encourage you to revisit this page periodically. Your continued use of b77 after a policy update is published constitutes acceptance of the revised terms.

13 How to Contact Us

For any questions, requests or concerns related to this Privacy Policy or the handling of your personal data, you can reach the b77 team through the following channels:

We aim to acknowledge all privacy-related requests within two business days and resolve them within a reasonable period depending on the complexity of the request. Data access requests for large volumes of historical data may take longer — we will keep you updated on the progress.

You can also read our Terms and Conditions and Responsible Gaming pages for more information about how b77 operates.