HC77 Privacy Policy — How We Protect Your Data

1 Who We Are

HC77 is an online sports betting and casino platform operating at hc77.onl, built specifically for players in Pakistan. The platform offers sports betting — with a particular focus on Cricket, PSL, T20 and international matches — along with Live Casino, Slot Games, and a VIP programme.

When this Privacy Policy refers to "HC77", "we", "us", or "our", it refers to the operators of the hc77.onl platform. When it refers to "you" or "your", it refers to any person who accesses or uses the Platform, whether as a registered account holder or as a visitor.

This policy explains how HC77 acts as the data controller for the personal information collected through the Platform — meaning we determine the purposes and methods of processing your data.

2 Data We Collect

HC77 collects the following categories of personal data in connection with account registration, platform use, and payment processing:

Account & Identity Data

• Full name as provided at registration
• Email address
• Date of birth (to verify you are 18 or older)
• CNIC number or other identity document details (requested during verification)
• Username and encrypted password

Contact & Device Data

• Mobile number (where provided)
• IP address at login and registration
• Device type, operating system and browser details
• General location data derived from IP address (country/city level)

Transaction Data

• Deposit amounts, dates and payment methods used
• Withdrawal requests, amounts and destination account details
• Betting and gaming history — amounts wagered, games played, results
• Bonus claims and wagering activity

Communication Data

• Messages sent to HC77 via live chat, email or support tickets
• Records of customer support interactions

3 How We Collect Your Data

HC77 collects your personal data through the following means:

• Registration: When you create an HC77 account, you provide your name, email address and date of birth directly.
• Account use: As you deposit, bet, play games and withdraw, transaction and activity data is generated and recorded automatically.
• Identity verification: Where verification is required, you may be asked to upload documents such as a CNIC copy. These are collected directly from you.
• Device and connection data: When you log in or use the Platform, your device and IP data are automatically captured by our servers as part of standard web operation.
• Cookies: The Platform uses cookies to maintain your session, store preferences and analyse usage patterns. See Section 7 for full details.
• Support interactions: When you contact HC77 support, the content of those communications is retained to allow us to handle your query and improve service quality.

4 Why We Use Your Data

HC77 uses your personal data for the following purposes:

HC77 does not use your personal data for third-party advertising or to build marketing profiles for sale to external companies.

5 Who We Share Your Data With

HC77 only shares your personal data where it is necessary to deliver the service or to meet our obligations. The categories of recipients are:

• Identity verification providers: Third-party services used to confirm the identity and age of account holders. These providers receive only the data required for verification.
• Payment processors: JazzCash, Easypaisa, Raast, bank transfer systems and card networks receive transaction data necessary to process your deposits and withdrawals. These providers operate their own privacy standards.
• Platform technology providers: Companies providing hosting, database management, security, and analytics infrastructure. These providers process data on HC77's behalf under data processing agreements.
• Fraud prevention services: Where there is a suspicion of fraudulent activity, relevant data may be shared with fraud detection services or, where legally required, with law enforcement.

HC77 does not share your personal data with any party for their own commercial use without your explicit consent.

6 Payment Data & Financial Information

When you make a deposit or request a withdrawal on HC77, your transaction is processed through the payment provider you select — JazzCash, Easypaisa, Raast, bank transfer, or card. The following applies to how HC77 handles payment-related data:

• What HC77 stores: HC77 records the payment method type used (e.g., JazzCash), the transaction amount in PKR, the date and time, and a transaction reference. This is needed to match your deposit to your account and to process withdrawal requests to the correct destination.
• What HC77 does not store: HC77 does not retain your full mobile wallet account credentials, your full card number, your card CVV, or your mobile banking PIN. These details are entered directly into the payment provider's own secure interface and never pass through HC77's servers in full.
• Withdrawal matching: To process a withdrawal, HC77 may need to confirm the payment account details you registered. This information is held securely and used only for the purpose of returning funds to you.
• Transaction history: Your deposit and withdrawal history is visible within your HC77 account. This data is retained for record-keeping purposes as described in Section 8.

If you believe a transaction has been processed incorrectly or you notice an unfamiliar transaction in your HC77 history, contact support immediately with the relevant transaction reference number.

7 Cookies & Tracking

HC77 uses cookies — small text files stored on your device — to operate the Platform and improve your experience. Here is a breakdown of the types of cookies used:

• Essential cookies: These are required for the Platform to function. They keep you logged in during your session, remember your language preference, and ensure that game data is saved correctly. You cannot opt out of essential cookies while using HC77.
• Analytics cookies: HC77 uses anonymised usage data to understand which pages and features are most used, how long sessions last, and where players encounter difficulties. This data is aggregated and does not identify you personally.
• Preference cookies: These remember choices you have made — such as display settings — so you do not have to reset them each time you log in.

HC77 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites.

8 Data Retention

HC77 retains your personal data for as long as your account is active and for a reasonable period thereafter, in line with standard record-keeping practices for financial services. Specific retention periods are as follows:

• Account data: Retained for the duration of your account and for a period after account closure to allow for any outstanding matters — such as disputes or withdrawal processing — to be resolved.
• Transaction records: Deposit and withdrawal records are retained for an extended period to support financial record-keeping requirements and to assist in resolving any transaction disputes that may arise.
• Identity verification documents: Copies of verification documents (such as your CNIC) are retained for as long as required to support ongoing account management and anti-fraud obligations, and are securely deleted once retention obligations are met.
• Support communications: Records of customer support interactions are retained for a reasonable period to allow us to track ongoing issues and maintain service quality.
• Anonymised data: Aggregated, anonymised usage and analytics data may be retained indefinitely as it cannot be linked back to any individual.

When data is no longer required for any of the purposes described in this policy, it is securely deleted or anonymised.

9 Security Measures

HC77 takes the protection of your personal data seriously and has implemented a range of technical and operational measures to keep it secure:

• Encrypted connections: All data transmitted between your device and HC77 is protected using HTTPS encryption, preventing interception during transit.
• Password security: Account passwords are stored in hashed form — HC77 staff cannot read your password, and it is never stored in plain text.
• Access controls: Access to personal data within HC77's systems is restricted to staff who genuinely need it to perform their role. Access is logged and reviewed regularly.
• Fraud monitoring: HC77 monitors account activity for patterns that suggest unauthorised access or fraudulent behaviour, and will alert you or restrict account access if suspicious activity is detected.
• Third-party security: Service providers who handle data on HC77's behalf are selected with data security standards as a consideration.

10 Your Rights Over Your Data

As an HC77 account holder, you have the following rights in relation to the personal data HC77 holds about you:

• Right of access: You may request a copy of the personal data HC77 holds about you. Submit a request to HC77 support with your account username or registered email, and we will respond promptly.
• Right to correction: If the personal data HC77 holds about you is inaccurate or incomplete, you have the right to ask us to correct it. For basic details such as contact information, you can update these directly in your account settings.
• Right to deletion: In certain circumstances, you may ask HC77 to delete your personal data. Note that some data — particularly transaction records — may need to be retained for financial record-keeping purposes even after an account is closed.
• Right to restrict processing: You may ask HC77 to limit how your data is used in certain circumstances, such as where you dispute the accuracy of the data HC77 holds.
• Right to object: Where HC77 is using your data based on our own legitimate interests, you may object to this use. We will assess your objection and respond accordingly.

To exercise any of these rights, contact HC77 support using the details in Section 13. We will respond to all rights requests as promptly as possible. In some cases, we may need to verify your identity before fulfilling a request.

11 Children's Privacy

HC77 is strictly for adults aged 18 and above. The Platform does not knowingly collect or process personal data belonging to anyone under the age of 18.

During registration, every user is required to confirm their date of birth. Where HC77 has reason to believe that an account has been created by someone under 18, the account will be suspended immediately, any deposited funds will be returned via the original payment method, and all data associated with the account will be handled appropriately.

If you are a parent or guardian and believe your child has created an HC77 account, please contact support immediately using the details in Section 13 so we can take appropriate action without delay.

12 Changes to This Privacy Policy

HC77 may update this Privacy Policy from time to time. When we make changes, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes — for example, if we begin using your data in a materially different way — HC77 will make reasonable efforts to notify registered users via the contact details held on their account, such as a notification email or an in-platform alert when you next log in.

Your continued use of the HC77 Platform after a change to this policy has been published constitutes your acceptance of the updated policy. We recommend reviewing this page periodically, particularly if you have not used HC77 for some time.

If you disagree with any changes to this policy, you should stop using the Platform and may request account closure by contacting support.

13 Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, you can reach HC77 as follows:

• Email: [email protected] (please copy this address manually into your email client)
• Support email: [email protected]
• Live Chat: Available within your HC77 account when logged in
• FAQ: Answers to common questions are available at hc77.onl/faq

When contacting us about a data matter, please include your registered email address or account username so we can locate your account quickly. For data deletion or access requests, we may need to verify your identity before we can action your request — this is to protect your data from being disclosed or deleted by an unauthorised third party.