tp777 Privacy Policy — How We Handle Your Personal Data in Pakistan

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the tp777 platform is the operator of tp777, the online gaming and sports betting platform accessible at tp777.site. As the data controller, tp777 determines the purposes for which personal data is collected and the means by which it is processed.

tp777 holds a valid international gaming licence issued by a recognised gaming regulatory authority. Our licence imposes specific and legally binding obligations regarding the collection, processing, security, and retention of player personal data. Compliance with these obligations is continuously monitored by our licensing authority and forms a fundamental condition of our continued right to operate.

tp777 collects the following categories of personal data from players. The specific data points collected from any individual player depend on the stage of their relationship with the platform and the services they use.

tp777 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health information, or criminal conviction data, except where criminal conviction data arises directly from our legally mandated fraud and AML investigation obligations — in which case such data is handled under the specific legal permissions applicable to those obligations.

tp777 collects personal data through the following primary mechanisms:

• Direct Provision by You: The majority of personal data tp777 holds is provided directly by you during registration, account verification, payment processing, support interactions, and responsible gaming tool activations. This includes your name, mobile number, date of birth, CNIC details, and bank account references.
• Automatic Collection During Platform Use: Technical and gaming activity data is collected automatically when you access the tp777 platform. This includes your IP address, device identifiers, session timing, game participation records, and betting history. This collection is a technical requirement of delivering a functional online gaming platform and cannot be disabled without also disabling the ability to deliver the platform itself.
• Third-Party Payment Providers: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment provider transmits transaction confirmation data to tp777 to enable proper crediting or processing of funds. tp777 does not receive your full bank account credentials through this process — only the data necessary to confirm and match the transaction.
• Cookies and Similar Technologies: tp777 uses session cookies and similar browser-based technologies as described in Section 7 of this Policy. These collect technical data necessary for the platform to function correctly across sessions.
• Identity Verification Services: In the course of KYC verification, tp777 may use the services of regulated third-party identity verification providers to authenticate the CNIC documents and selfie photographs submitted by players. These providers process the specific documents submitted for the sole purpose of verification and do not retain them beyond the completion of the verification process.

tp777 uses the personal data it collects for the following defined purposes, and no others:

• Account Creation and Management: Creating and maintaining your tp777 account, authenticating your identity at login (including OTP delivery to your registered Pakistani mobile number), and managing account settings and preferences.
• Platform Service Delivery: Enabling access to all tp777 gaming and betting products, processing your bets and game outcomes, tracking your balance, and delivering the personalised gaming dashboard displayed after each tp777 login.
• Payment Processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank and executing withdrawal payments to your verified payment account in Pakistani Rupees.
• Identity Verification and KYC Compliance: Verifying your identity and age (minimum 21 years) using your CNIC and selfie in compliance with our gaming licence KYC obligations and applicable AML regulations.
• Fraud Prevention and AML Compliance: Monitoring account activity and transactions for patterns consistent with fraud, money laundering, or other prohibited conduct as defined in the tp777 Terms and Conditions.
• Responsible Gaming: Enabling and enforcing the responsible gaming tool settings you activate, including deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion. Monitoring gaming activity to identify patterns consistent with problem gambling and enabling supportive intervention.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution.
• Platform Improvement: Analysing aggregated, anonymised platform usage data to identify technical issues, improve navigation, optimise game loading performance, and enhance the tp777 user experience for Pakistani players.
• Legal and Regulatory Obligations: Maintaining records required by our licensing authority, responding to lawful requests from regulatory or law enforcement bodies, and fulfilling all other legal obligations applicable to tp777's operations.

tp777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing necessary for the performance of the player agreement between you and tp777 — including account management, game delivery, and payment processing. Without this processing, tp777 could not provide the services you have contracted to receive.
• Legal Obligation: Processing required by applicable laws, regulations, and the conditions of tp777's international gaming licence — including KYC identity verification, AML transaction monitoring, age verification, and retention of records required by our regulator.
• Legitimate Interests: Processing carried out for tp777's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, abuse prevention, and platform improvement — where those interests are not overridden by your privacy rights.
• Consent: Where tp777 relies on your consent as the legal basis for processing — primarily in connection with optional marketing communications — you retain the right to withdraw that consent at any time by contacting tp777 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

tp777 does not sell, rent, or trade your personal information with third parties for their own marketing or commercial purposes. tp777 shares personal data externally only in the following limited and specific circumstances:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process deposits and withdrawals. These providers act as independent data controllers for the financial data they process in connection with your payments and are governed by their own privacy policies and applicable Pakistani financial regulations.
• KYC and Identity Verification Providers: Regulated identity verification service providers receive the CNIC documents and selfie photographs submitted by players for the sole purpose of verifying identity and age. These providers are contractually bound to process this data only for verification purposes and to handle it with appropriate security measures.
• Game Content Providers: Third-party game developers and aggregators who supply the games available on tp777 may receive the technical data necessary for game delivery, including session identifiers and wagering data. These providers do not receive personally identifiable player information beyond what is technically required for game operation.
• Regulatory and Law Enforcement Authorities: tp777 will disclose player data to gaming regulators, financial intelligence authorities, or law enforcement agencies where required to do so by applicable law, a valid legal order, or the conditions of our gaming licence. tp777 will notify affected players of such disclosures where legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and other professional advisors retained by tp777 may access player data on a need-to-know basis in connection with specific engagements. All such advisors are bound by professional confidentiality obligations.

tp777 uses cookies and similar browser-based storage technologies to operate the platform effectively and deliver a consistent experience across sessions. The following categories of cookies are used by tp777:

• Essential Session Cookies: These cookies are strictly necessary for the tp777 platform to function. They maintain your login session, store your current language preference, and enable secure communication between your browser and tp777's servers. The platform cannot operate without these cookies and they cannot be disabled without disabling core platform functionality.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and cross-site request forgery (CSRF) attacks. These cookies are part of tp777's account security infrastructure and are not optional for registered players.
• Performance and Analytics Cookies: Used in anonymised form to understand how Pakistani players navigate the tp777 platform — which games are most accessed, where users encounter navigation difficulties, and how loading performance varies across different network conditions. This data is processed in aggregated, non-personally-identifiable form and used solely to improve the platform.
• Preference Cookies: These cookies remember your tp777 platform preferences — such as your preferred game lobby view or responsible gaming reminder settings — so that you do not need to re-configure them on every visit.

tp777 does not use third-party advertising cookies or tracking pixels that would allow external advertising networks to build a profile of your browsing behaviour across other websites. Your tp777 session data is used solely within the tp777 platform environment.

tp777 implements comprehensive technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly in line with industry best practice and regulatory requirements:

• Encryption in Transit: All data transmitted between player devices and tp777's servers is protected by 256-bit SSL/TLS encryption, the same standard used by Pakistan's major banks for online banking portals.
• Encryption at Rest: Sensitive personal data — including CNIC details, financial account references, and authentication credentials — is encrypted when stored on tp777's servers, ensuring that even in the unlikely event of a server breach, the data cannot be read without the encryption keys.
• Access Controls: tp777 employee access to player personal data is governed by role-based access control (RBAC). Only staff members whose job function requires access to specific data categories can access those categories. All data access is logged and subject to regular audit review.
• Multi-Factor Authentication: tp777 uses SMS OTP verification as an additional authentication layer for player logins from new devices and for high-value account operations, reducing the risk of account takeover through credential theft.
• Regular Security Assessments: tp777's technical infrastructure undergoes regular penetration testing and security assessments conducted by qualified third-party security specialists. Findings from these assessments are addressed within defined timelines based on risk severity.
• Incident Response: tp777 maintains a data security incident response plan. In the event of a data breach that affects player personal data, affected players will be notified within the timeframe required by our licensing authority's breach notification obligations, together with details of the nature of the breach and the remediation steps being taken.

As a tp777 player, you hold the following rights with respect to the personal data tp777 holds about you. These rights can be exercised by submitting a written request to [email protected] with the subject line "DATA RIGHTS REQUEST" along with your account mobile number for identity verification.

tp777 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention requirements imposed by our gaming licence conditions, applicable law, or legitimate dispute resolution needs. The following general retention periods apply:

• Active Account Data: Personal data associated with an active tp777 account is retained for the duration of the account lifespan plus a minimum period of five (5) years following account closure, as required by our gaming licence's AML record-keeping obligations.
• KYC Documentation: CNIC copies, selfie photographs, and other identity verification documents are retained for a minimum of five (5) years from the date of verification, as required by AML regulations applicable to licensed gaming operators.
• Financial Transaction Records: Deposit and withdrawal records, including payment account references and transaction amounts, are retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping requirements.
• Gaming Activity Records: Bet history, game participation records, and win/loss data are retained for a minimum of five (5) years from account closure for regulatory audit and dispute resolution purposes.
• Support Communications: Records of customer support interactions and complaints are retained for three (3) years from the date of closure of the relevant interaction or complaint.
• Technical Logs: Server-side technical logs including IP addresses and session data are retained for up to twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, tp777 will securely delete or anonymise the relevant personal data. Anonymised data — which cannot be attributed to any identifiable individual — may be retained indefinitely for statistical and platform improvement purposes.

The tp777 platform is strictly intended for adults aged 21 years and above. tp777 does not knowingly collect personal data from any individual under the age of 21 and does not permit persons under that age to register for or use any tp777 service.

Age is collected at registration in the form of date of birth and is verified formally through CNIC-based KYC checks before any withdrawal is processed. tp777 takes a proactive approach to age verification — where there is reasonable grounds to believe a player may be under the minimum age, the account is suspended pending verification and all gameplay is frozen for the duration of the investigation.

Parents and guardians who have reason to believe that a person under 21 has registered for or used a tp777 account should contact tp777 support immediately at [email protected]. Such reports are treated with the highest priority.

As an internationally licensed gaming operator, tp777's data processing infrastructure may involve the transfer of personal data across international borders — for example, to server infrastructure, KYC verification providers, or game content aggregators operating in other jurisdictions.

Where personal data is transferred outside Pakistan to a country that does not provide an equivalent level of data protection through its domestic laws, tp777 ensures that appropriate safeguards are in place to protect that data. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to recipients in countries that have been assessed as providing adequate data protection by relevant regulatory authorities.

All international data transfers by tp777 are conducted in compliance with the requirements of our gaming licence, which imposes specific standards on cross-border data handling by licensed operators. Players may request details of the specific international transfer arrangements applicable to their data by contacting tp777 at [email protected].

tp777 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or applicable law. The effective date at the top of this Policy indicates the date on which the current version came into force.

Material changes to this Privacy Policy will be communicated to registered players via SMS notification to the registered Pakistani mobile number associated with each account, at least seven (7) days prior to the change taking effect. This notification will describe the nature of the change and direct players to the updated Policy on the tp777 website.

Where a proposed change involves new or significantly different processing of personal data that was not contemplated at the time of original registration, tp777 will seek fresh consent from affected players where required by applicable law or our licensing authority's guidance. Continued use of the tp777 platform following the effective date of any Privacy Policy change constitutes acceptance of the updated Policy.

The current version of the tp777 Privacy Policy is always available on this page. Previous versions may be requested from tp777 support for reference purposes.

For all matters relating to this Privacy Policy — including data rights requests, questions about how your personal data is used, or concerns about tp777's data handling practices — please contact the tp777 data protection team through the following channel:

tp777 does not provide telephone support. All privacy-related communications must be submitted in writing via email to create a proper record of the matter and ensure it is handled by the appropriate team member with the appropriate expertise.