sx77 Privacy Policy —
How We Protect Your Data

01 About This Privacy Policy

This Privacy Policy applies to the sx77 Platform operated at sx77.bid and all associated services, including the casino games lobby, cricket sportsbook, live dealer tables, the sx77 Login portal, Fortune Tiger, Fortune Snake and all account management functions. It governs how sx77 collects, stores, uses and protects the personal data of all registered players and visitors, including Pakistani users accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad and all other cities and regions of Pakistan.

This Policy should be read alongside the sx77 Terms & Conditions, which together form the complete agreement between you and sx77 concerning your use of the Platform. By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Privacy Policy and agree to the data practices described herein.

This Policy is written in plain English to ensure that it is genuinely understandable, not deliberately opaque. If any aspect of it is unclear, please contact our support team who can explain any provision in further detail, in Urdu or English, as you prefer.

02 Data Controller

For the purposes of this Privacy Policy, sx77 — the operator of the Platform at sx77.bid — acts as the Data Controller in respect of all personal data collected from players and visitors to the Platform. As Data Controller, sx77 determines the purposes for which and the means by which your personal data is processed.

sx77 operates under international gaming regulations and maintains data governance practices aligned with internationally recognised data protection standards, including the principles established under the General Data Protection Regulation (GDPR) where applicable to our data processing activities.

Where sx77 engages third-party service providers to process personal data on our behalf — such as identity verification services, payment processors or fraud prevention tools — those third parties act as Data Processors and are bound by strict contractual obligations regarding the security and permissible use of your personal data. A list of the categories of Data Processors we engage is set out in Section 6 of this Policy.

03 Personal Data We Collect

sx77 collects personal data across several categories, each collected for a defined and legitimate purpose. The following table sets out the categories of data collected, the circumstances of collection, and the primary purposes for which each category is used.

Data We Do Not Collect: sx77 does not collect sensitive personal data beyond what is required for mandatory identity and age verification. We do not collect biometric data beyond the photograph submitted for KYC purposes. We do not collect data relating to religious beliefs, political affiliations or health information, except where a player voluntarily provides context related to responsible gaming support.

04 How We Use Your Personal Data

sx77 uses your personal data for the following specific purposes, each of which is explained in plain terms below:

• Account Creation & Management: Creating and maintaining your sx77 Account, including login authentication, balance management and account settings across all Platform features.
• Identity & Age Verification: Confirming that you are a real person aged 21 or older, as required by our international gaming licence and responsible gaming obligations. This process uses your identity and date of birth data.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Bank Alfalah, and processing withdrawal requests to your registered payment method.
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, bonus abuse, money laundering, multiple account registrations and any other conduct that violates the sx77 Terms & Conditions or Applicable Law.
• Customer Support: Responding to your queries and complaints submitted via live chat or email, and maintaining records of our communications to ensure consistency of service.
• Regulatory Compliance: Meeting our obligations under our international gaming licence, including mandatory reporting to licensing authorities, anti-money laundering compliance and record-keeping requirements.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and applying responsible gaming interventions in accordance with our licence obligations and the sx77 Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the sx77 Platform, including game selection, payment system performance and the overall player experience.
• Marketing (With Consent): Sending promotional communications about sx77 bonuses, PSL betting promotions and new game releases where you have provided explicit consent. See Section 12 for details.

05 Legal Basis for Data Processing

sx77 processes your personal data on the following legal bases, which are applied on a purpose-by-purpose basis:

• Contract Performance: Processing necessary to fulfil the contract between you and sx77 — including account management, payment processing, game delivery and support — is carried out on the basis that it is required to perform that contract.
• Legal Obligation: Processing required to comply with our obligations under our gaming licence, anti-money laundering regulations, and mandatory identity verification requirements is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement and certain analytics activities is carried out on the basis of sx77's legitimate business interests, subject always to those interests not overriding your fundamental data protection rights.
• Consent: Where processing is not covered by any of the above bases — specifically, the sending of marketing communications — sx77 will seek your explicit, informed consent before commencing that processing. You may withdraw your consent at any time.

06 Data Sharing & Third-Party Disclosure

sx77 does not sell, rent or trade your personal data. The following categories of third parties may receive your personal data only to the extent necessary to deliver the services described in this Policy:

• Identity Verification Providers (KYC): Licensed third-party KYC service providers used to verify your identity and age as required by our gaming licence. These providers operate under strict data processing agreements and applicable data protection law.
• Payment Processors: JazzCash, EasyPaisa and banking partners including HBL, UBL, Meezan Bank and Bank Alfalah — only the financial data necessary to complete your requested transaction is shared with the relevant payment processor.
• Fraud & AML Systems: Third-party fraud detection and anti-money laundering screening services that analyse transaction patterns to protect the Platform and its players. These services access transaction and identity data on a read-only, analysis basis.
• Regulatory Authorities: sx77's licensing authority and, where legally required, law enforcement authorities. Such disclosures are made only when required by Applicable Law and are not made voluntarily beyond those legal obligations.
• Cloud Infrastructure Providers: The encrypted cloud infrastructure on which the sx77 Platform operates. These providers do not access or use player data for their own purposes; they serve exclusively as technical infrastructure.
• Customer Support Tools: The live chat and ticketing system used to manage support interactions. Support data is retained only for the purposes of delivering consistent support and resolving complaints.

07 Cookies & Tracking Technologies

The sx77 Platform uses cookies and similar tracking technologies to provide core functionality, improve your experience and comply with certain regulatory requirements. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies used to maintain your sx77 Login state across pages and to protect your account from session hijacking. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Remember your preferences, such as your chosen game filters, responsible gaming limit settings and interface language preference. These improve your experience without being strictly required for core Platform operation.
• Analytics Cookies: Aggregate, anonymised data about how players navigate the Platform — which game categories are most visited, where players encounter difficulties — used to improve Platform design and performance. Individual players are not identified in analytics reports.
• Security Cookies: Used as part of fraud detection and account security monitoring, including login anomaly detection and multi-factor authentication state tracking.

You can manage most cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing the sx77 Platform. For all other cookie categories, your browser-level preferences will be respected.

08 Data Retention

sx77 does not retain personal data indefinitely. The following retention schedule applies to the principal data categories we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is retained beyond the periods listed above, this will be on the basis of a specific legal obligation, of which you will be notified.

09 Security Measures

sx77 employs a layered information security programme designed to protect your personal data against unauthorised access, disclosure, alteration and destruction. Key security measures include:

• Transport Encryption: All data transmitted between your device and the sx77 Platform is encrypted using 256-bit SSL/TLS protocols. The Platform enforces HTTPS across all pages and connections.
• Data at Rest Encryption: Personal data stored in sx77 databases is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within sx77 is limited to staff and contractors who require it for their defined role. All internal access is logged, monitored and subject to regular review.
• Multi-Factor Authentication: Internal systems holding personal data require multi-factor authentication for all access. Players may also enable MFA on their own sx77 Accounts via the security settings in their dashboard.
• Independent Security Audits: sx77's information security infrastructure is subject to periodic independent third-party penetration testing and security audits. Material findings are remediated within defined timescales.
• Incident Response: sx77 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified within the timeframe required by Applicable Law.

10 Your Data Protection Rights

As a player registered with sx77, you hold the following rights in respect of your personal data. These rights apply regardless of which city in Pakistan you are based in and may be exercised by contacting our support team via live chat or by emailing [email protected].

• Right of Access: You may request a copy of the personal data sx77 holds about you, together with an explanation of the purposes for which it is processed, the categories involved, and who it is shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update most contact and preference data directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data. This right is subject to our regulatory obligations — data we are legally required to retain under gaming licence or AML regulations cannot be erased before the end of the mandatory retention period. All data beyond those obligations will be deleted promptly on receipt of a valid erasure request.
• Right to Restrict Processing: You may request that we limit how we use your data while a rectification or objection request is being resolved.
• Right to Object: You may object to processing carried out on the basis of our legitimate interests, including certain fraud prevention and analytics processing. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used and machine-readable format for transfer to another controller.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

All rights requests will be acknowledged within 72 hours of receipt and resolved within 30 calendar days. Where additional time is required, you will be notified with reasons. There is no charge for exercising any of these rights.

11 Children & Minors — Strict 21+ Policy

The sx77 Platform is strictly intended for individuals aged 21 years and older. sx77 does not knowingly collect personal data from, or provide services to, any person under the age of 21. This is both an ethical commitment and a mandatory obligation under our international gaming licence.

All Account registrations are subject to age verification as part of the KYC process. Any Account found to have been registered by a person under the age of 21 will be immediately suspended, all balances will be forfeited in accordance with our Terms & Conditions, and the relevant personal data will be securely deleted except to the extent required by our regulatory obligations.

sx77 recommends that parents and guardians in Pakistan use content filtering software to prevent minors from accessing online gaming content. The Platform does not currently appear in content categories likely to be encountered by minors, but parental oversight remains an important first line of defence.

12 Marketing Communications

sx77 may send promotional communications about bonus offers, PSL betting promotions, new game releases and platform updates. All marketing communications are sent only to players who have provided explicit consent during account registration or subsequently through their account notification settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences directly in your sx77 Account dashboard under "Communication Settings";
• Using the unsubscribe link included in every marketing email;
• Contacting our support team via live chat or at [email protected] with a request to opt out.

Opt-out requests are processed within 5 business days. Opting out of marketing communications does not affect transactional notifications — including payment confirmations, security alerts and account activity notifications — which are required for the safe operation of your account and cannot be disabled.

13 Amendments to This Privacy Policy

sx77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements or Platform features. When changes are made, we will update the "Effective Date" at the top of this document.

Where changes are material — meaning they significantly affect how we collect, use or share your personal data — we will provide notice via email to your registered address or via a prominent notification on the Platform at least 14 days before the updated Policy takes effect. For non-material changes, such as corrections to language or formatting, we may update the Policy without prior notice.

Your continued use of the sx77 Platform following any amendment constitutes your acknowledgement of the updated Privacy Policy. If you disagree with any change, you must cease using the Platform and may request Account closure and data deletion in accordance with Section 10.

14 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data sx77 holds about you, please contact our Data Support team through the following channels:

• Live Chat: Available 24/7 directly from within your sx77 Account dashboard. Our bilingual Urdu and English support team will assist you immediately.
• Email: [email protected] — please include "Privacy Request" in your email subject line to ensure prompt routing to our Data Support team.

All privacy-related enquiries are handled by our Pakistan-dedicated support team who are trained in data protection procedures and available around the clock. Whether your query is in English or Urdu, you will receive a substantive response, not an automated reply, within 72 hours of submission.

This Privacy Policy was last updated on 1 January 2026 and supersedes all prior versions. The most current version of this Policy is always available at sx77.bid/privacy-policy.