At cd77, protecting your personal data is a fundamental responsibility. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, who we may share it with, and what rights you hold over your own data as a user of the cd77 platform.
Data Controller Notice: cd77 operates under the data protection framework applicable within the operator's licensing jurisdiction. For Pakistani users: Pakistan's data protection legislation is evolving and users should also familiarise themselves with the Personal Data Protection Bill (PDPB) and any applicable regulations in their province. This page explains cd77's approach to your data. For questions about your rights, contact us using the details in Section 15.
This Privacy Policy ("Policy") sets out how cd77 ("cd77", "we", "us", "our") collects, processes, stores, uses and protects the personal data of users ("you", "your", "User") who access or use the cd77 platform at cd77.cam, including its associated web interfaces, mobile applications, live chat systems, customer support channels and any other services offered under the cd77 brand.
We are committed to processing your personal data transparently, lawfully and securely. We collect only the data that is necessary for the purposes described in this Policy. We do not sell your personal data to third parties for marketing purposes.
By registering an account on cd77 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the Terms & Conditions, which governs your overall use of the platform.
This Policy applies to all users worldwide, including players accessing cd77 from Pakistan and other jurisdictions. Where specific references to Pakistani context are made, they are provided as informational context only and do not constitute legal advice.
For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:
Any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, email address, phone number, date of birth, CNIC number, IP address and device identifiers.
Any operation performed on personal data — including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission and deletion.
cd77, being the entity that determines the purposes and means of processing your personal data.
Any external entity engaged by cd77 to process personal data on its behalf, under a data processing agreement that binds the processor to appropriate security and confidentiality obligations.
Small text files stored on your device by the cd77 platform for session management, preference storage and analytical purposes, as described in Section 10.
cd77 collects the following categories of personal data from users. We collect only what is necessary for legitimate operational and legal purposes.
When you create a cd77 account, we collect:
As part of mandatory identity verification, we may collect:
We collect transactional data including deposit amounts, withdrawal requests, wagering history and bonus usage. We do not store full payment card numbers. Payment method references familiar to Pakistani players — such as those associated with bank transfers through HBL, UBL, Meezan Bank, Bank Alfalah, and mobile wallet services — are recorded as transaction metadata for fraud prevention and audit purposes only.
Records of your interactions with cd77 customer support, including live chat transcripts, email correspondence and support ticket history, are retained for quality assurance, dispute resolution and regulatory compliance purposes.
cd77 collects personal data through the following primary channels:
cd77 processes your personal data on the following legal grounds, as recognised under the applicable data protection framework in the operator's licensing jurisdiction:
| Legal Basis | Processing Activity |
|---|---|
| Contractual Necessity | Processing required to perform the contract between you and cd77 — including account operation, bet settlement, deposits, withdrawals and customer support. |
| Legal Obligation | Processing required to comply with applicable law — including KYC/AML obligations, age verification, fraud prevention and regulatory reporting to licensing authorities. |
| Legitimate Interests | Processing for fraud detection, platform security, responsible gambling monitoring, service improvement and internal analytics — where such interests are not overridden by your rights. |
| Consent | Processing for optional marketing communications — only where you have provided explicit, freely given consent. You may withdraw consent at any time by contacting support. |
Personal data collected by cd77 is used strictly for the purposes listed below. We do not use your data for any purpose incompatible with those described here without first obtaining your consent or having a lawful basis to do so.
To create, manage and maintain your cd77 account, process transactions in PKR, settle wagers and manage bonus balances.
To verify your identity (KYC), conduct anti-money-laundering (AML) screening, detect fraudulent activity and comply with operator licensing obligations.
To monitor wagering patterns, enforce self-exclusion and deposit limit settings, and fulfil our responsible gambling obligations under the applicable operator licence.
To respond to enquiries, resolve disputes, process complaints and provide assistance in English and Urdu to players across Pakistan.
To analyse aggregated usage patterns, improve platform performance, enhance the mobile experience and develop new features relevant to Pakistani players.
Where you have explicitly consented, to send promotional communications about cd77 offers, new game launches, cricket/PSL betting markets and platform updates. You may opt out at any time.
cd77 does not sell your personal data to third parties. We may share your data in the following limited circumstances:
cd77 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory obligations. The following general retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + minimum 5 years after closure | Legal / AML obligations |
| KYC / Identity Documents | Minimum 5 years from account closure | Regulatory compliance |
| Transaction Records | Minimum 5 years | Financial records law |
| Support Communications | 3 years from last interaction | Dispute resolution |
| Technical / Log Data | Up to 12 months | Security & fraud detection |
| Marketing Consent Records | Until consent withdrawn + 1 year | Audit trail |
Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.
cd77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Our security measures include:
Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, cd77 will notify you and the applicable supervisory authority in accordance with the requirements of the governing data protection framework. We will provide clear information about the nature of the breach and the steps taken to address it.
The cd77 platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences and gather anonymised analytics data to improve the service.
You may control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of the cd77 platform. For comprehensive cookie management, refer to the cookie settings available within your browser or device settings.
cd77 operates as an international platform and your personal data may be transferred to, stored and processed in countries other than Pakistan. These countries may have different data protection laws than those applicable in your home jurisdiction.
Where personal data is transferred internationally, cd77 ensures that appropriate safeguards are in place — such as contractual data protection clauses, adequacy decisions or other recognised transfer mechanisms — to protect your data to a standard equivalent to that described in this Policy.
For Pakistani users, this means your data may be processed on servers located outside of Pakistan. By using the cd77 platform, you acknowledge that such international transfers may occur as part of the platform's normal operation.
Subject to applicable data protection law and any legal obligations that require us to retain or process your data, you hold the following rights in relation to your personal data held by cd77. To exercise any of these rights, please contact us using the details in Section 15.
You may request a copy of the personal data cd77 holds about you, along with information about how it is used and to whom it has been disclosed.
If your personal data is inaccurate or incomplete, you may request that we correct or update it. Some changes may require re-verification of identity documents.
You may request deletion of your personal data where it is no longer necessary for the purpose collected or where processing was unlawful. This right is subject to legal retention obligations.
You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
Where processing is based on consent or contract, you may request that we provide your personal data in a structured, machine-readable format so it can be transferred to another service.
You may object to processing based on our legitimate interests — including direct marketing. We will cease such processing unless we have compelling legitimate grounds that override your interests.
⚠️ Response Timeframe: We aim to respond to all rights requests within 30 calendar days of receipt. Where a request is complex or involves multiple data sets, this period may be extended by a further 60 days with prior notification to you. We may request proof of identity before processing any rights request to protect your data from unauthorised access.
cd77 does not knowingly collect, process or retain personal data from individuals under the age of 18, or under the higher minimum age required by the operator's licence jurisdiction. The platform is strictly for adult users only.
Age verification is conducted as part of the KYC process. Where cd77 discovers that an account has been registered by a minor, the account will be immediately suspended, all associated funds will be locked pending investigation, and any data will be handled in accordance with applicable child protection obligations.
If you have reason to believe that a minor has registered a cd77 account using your details or otherwise, please contact the support team immediately.
cd77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, platform operations or data processing practices. When material changes are made, we will notify registered users by email or via a prominent notice within the platform prior to the changes taking effect.
The effective date of the current version of this Policy is displayed at the top of this page. Continued use of the cd77 platform following the publication of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting support.
We encourage you to review this page periodically to stay informed about how cd77 handles your personal data.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, please contact the cd77 data support team through the following channels:
Available 24/7 within the cd77 platform. Our agents can assist in English and Urdu and will route data-related queries to the appropriate team.
Contact us at [email protected] — please note this is a plain-text reference and is not a clickable link. Include "Privacy Request" in your subject line for faster routing. We aim to respond within 30 days.
All data rights requests must be submitted with sufficient identification information to allow us to verify your identity before processing the request. This is a security measure to ensure that personal data is not disclosed to unauthorised parties.
Players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and all other locations in Pakistan are welcome to contact us through either channel above. All communications are handled in English and Urdu.
Six principles that guide how cd77 handles your personal data every day.
cd77 collects only the personal data that is strictly necessary for account operation, KYC compliance, fraud prevention and responsible gambling obligations. No data is collected unnecessarily.
Every data transmission between your device and cd77 servers is protected by SSL/TLS encryption. Your account credentials, financial information and identity documents travel securely at all times.
cd77 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. Data sharing is limited strictly to operational, legal and compliance requirements.
Access, rectification, erasure, portability and objection rights are all available to cd77 users. Submit a request through live chat or email and we will respond within 30 days.
Each category of personal data is held for a defined retention period, after which it is securely deleted or anonymised. Retention periods are driven by legal obligations and operational necessity — not convenience.
In the unlikely event of a data breach posing a risk to your rights, cd77 will notify you and the applicable authority in accordance with the governing data protection framework — promptly and clearly.
Read the full Terms & Conditions or visit the FAQ for more information about how the cd77 platform works for Pakistani players.