td7778 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by td7778 ("td7778", "we", "us", "our"), the operator of the online gaming platform accessible at td7778.org. This Policy applies to all personal data collected from individuals ("Member", "you", "your") who register an account, visit the Platform, use any service, or otherwise interact with td7778, including through desktop browsers and mobile devices.

td7778 is the data controller responsible for the personal information processed under this Policy. We are committed to handling your data with transparency, integrity, and in accordance with the data protection obligations imposed by our international gaming license. Our Platform is designed primarily for Members based in Pakistan, and we apply all reasonable measures to handle Pakistani Member data with appropriate care given the sensitivity of financial and identity information involved in online gaming.

By registering a td7778 account, completing the KYC verification process, or simply using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please do not register or continue to use the td7778 platform.

2. Data We Collect

td7778 collects personal data through multiple channels: directly from you when you register or use the Platform, automatically through technical systems as you browse and play, and occasionally from trusted third-party verification providers. The categories of data we collect are as follows:

td7778 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by responsible gaming obligations (for example, a Member's self-declaration of a gambling-related health condition when requesting self-exclusion).

3. How We Use Your Data

td7778 uses your personal data only for the specific, legitimate purposes described below. We do not engage in mass profiling for advertising purposes, and we do not sell your personal data to third parties under any circumstances.

• Account Registration and Management: To create and maintain your td7778 Member account, verify your identity, and ensure only one account exists per individual.
• Service Delivery: To provide access to casino games, sports betting markets (including PSL cricket), Jackpot Bingo, Mermaid Fishing, and all other platform features available following td7778 login.
• Financial Transactions: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods; to reconcile accounts; and to issue bonus credits.
• Identity Verification (KYC/AML): To verify Member identity, comply with Anti-Money Laundering (AML) obligations, and meet the requirements of td7778's international gaming license.
• Responsible Gaming: To monitor wagering behaviour for signs of problem gambling, apply Member-requested limits, process cooling-off and self-exclusion requests, and deliver responsible gaming communications.
• Customer Support: To respond to Member enquiries, complaints, and technical support requests submitted via live chat or email.
• Security and Fraud Prevention: To detect and prevent fraud, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in the td7778 Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game performance, user experience, and platform reliability.
• Marketing Communications: To send promotional offers, bonus alerts, and platform updates to Members who have opted in to receive such communications. You may withdraw your consent at any time through your account settings.
• Legal and Regulatory Compliance: To meet reporting obligations to our licensing authority and to respond to lawful requests from competent authorities.

4. Legal Basis for Processing

td7778 processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to create and operate your td7778 account, process transactions, and deliver the services you have registered for. Without this processing, td7778 cannot provide its services to you.
• Legal Obligation: KYC verification, AML transaction monitoring, and regulatory reporting are required by the conditions of td7778's gaming license. td7778 is legally obligated to perform this processing regardless of Member consent.
• Legitimate Interests: td7778 processes technical and usage data on the basis of its legitimate interest in maintaining platform security, preventing fraud, improving service quality, and detecting responsible gaming concerns — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

td7778 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Financial data is shared with payment service providers including JazzCash, EasyPaisa, and partner banks (HBL, UBL, Meezan Bank) to process your PKR deposits and withdrawals. These providers are bound by their own data protection obligations and are prohibited from using your data for any other purpose.
• Identity Verification Providers: CNIC data and verification documents may be shared with licensed third-party KYC providers to perform identity checks. These providers act as data processors under strict contractual data protection terms.
• Game Software Providers: Your Member ID and session tokens (not your full personal profile) are shared with our game software providers to enable gameplay. These providers do not receive your CNIC, financial account details, or contact information.
• Regulatory and Licensing Authorities: td7778 is required to share certain Member data and transaction records with its licensing authority upon request. This is a legal obligation and cannot be refused.
• Law Enforcement and Government Authorities: td7778 will disclose personal data in response to a lawful court order, regulatory investigation, or government directive. We will notify affected Members where legally permitted to do so.
• AML Reporting Bodies: Where td7778's AML programme identifies a suspicious transaction, the relevant data may be reported to the appropriate financial intelligence authority as required by our license conditions.
• Business Transfers: In the unlikely event of a merger, acquisition, or asset sale, Member data may be transferred to the acquiring entity, subject to equivalent data protection commitments. Affected Members will be notified in advance.

6. Cookies & Tracking Technologies

td7778 uses cookies and similar tracking technologies to operate the Platform securely and efficiently. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the td7778 platform, but may affect the functionality of certain personalisation features. td7778 does not use third-party advertising cookies or cross-site tracking pixels.

7. Data Retention

td7778 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by our licensing and legal obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active Member account, plus a minimum of five (5) years following account closure — as required by AML and gaming license regulations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later. This is a mandatory regulatory requirement.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with financial record-keeping obligations.
• Customer Support Correspondence: Retained for three (3) years from the date of the last interaction, to enable dispute resolution and quality assurance.
• Technical Logs (IP addresses, session data): Retained for twelve (12) months for security and fraud detection purposes, then permanently deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever comes first.

Upon expiry of the applicable retention period, td7778 securely deletes or irreversibly anonymises your personal data. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for statistical and business improvement purposes.

8. Security Measures

td7778 takes the security of Member personal data seriously and implements a layered set of technical and organisational safeguards to protect your information against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and the td7778 platform is encrypted using industry-standard TLS/SSL protocols. This applies to all td7778 login sessions, deposit flows, and KYC document uploads.
• Encrypted Data Storage: Sensitive data at rest — including CNIC numbers, financial account references, and KYC documents — is encrypted in our databases using AES-256 encryption.
• Access Controls: Personal data is accessible only to td7778 staff and contractors who require it to perform their specific job functions. All personnel with data access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: td7778 offers optional two-factor authentication (2FA) for Member accounts to provide an additional layer of login security. Members are strongly encouraged to enable 2FA via account settings.
• Fraud Detection Systems: Automated systems monitor account activity for anomalies, including unusual login locations, atypical transaction patterns, and simultaneous session attempts, triggering alerts for manual review where appropriate.
• Penetration Testing: td7778 conducts regular security assessments and vulnerability testing of the platform infrastructure to proactively identify and remediate potential weaknesses.

9. Your Rights

As a td7778 Member, you hold the following rights with respect to your personal data. These rights are available to all Members and can be exercised free of charge by contacting us at [email protected]:

• Right of Access: You may request a copy of the personal data td7778 holds about you, along with details of how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Contact Support with the specific details to be updated.
• Right to Erasure ("Right to be Forgotten"): You may request that td7778 delete your personal data. Note that this right is subject to legal override — data we are required to retain for AML, KYC, or licensing compliance cannot be erased before the mandatory retention period expires.
• Right to Restrict Processing: In certain circumstances, you may request that we limit how we use your data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including automated profiling for responsible gaming monitoring, where you believe your fundamental rights override td7778's interest.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and your registered Member name and email address. We will verify your identity before processing the request and respond within 30 calendar days.

10. Minors & Age Restriction

td7778 is strictly an adults-only platform. Membership and access to all services are restricted to individuals who are 21 years of age or older. td7778 does not knowingly collect personal data from individuals under the age of 21, and the collection of such data is expressly prohibited by our gaming license.

td7778 employs age verification checks during the registration process and mandatory CNIC-based identity verification to confirm that all Members meet the 21+ age requirement. Accounts found to belong to individuals under the age of 21 will be immediately suspended, all funds held in the account will be frozen pending investigation, and the matter will be referred to our licensing authority.

If you are a parent or guardian and believe that a person under 21 in your care has registered a td7778 account or submitted personal data to the Platform, please contact us immediately at [email protected]. We will take immediate action to identify and close the account and will securely delete any personal data associated with the underage individual that is not required to be retained for legal purposes.

11. Policy Changes

td7778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, licensing requirements, or platform services. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the td7778 platform for a period of at least 14 days following the change.
• Send an email notification to all registered Members with active accounts, summarising the key changes.

Your continued use of the td7778 platform following notification of a Policy update constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must stop using the Platform and may close your account by contacting Support. Material changes that significantly affect Member rights will be accompanied by a renewed consent request where required by applicable law.

12. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or td7778's data handling practices, please contact our Data Protection team at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 14 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the dispute resolution body designated by td7778's licensing authority. Details of this body are available upon request from Support.