TD77 Privacy Policy – How We Collect and Protect Your Data

1 Who We Are

This Privacy Policy applies to the td77 online betting and casino platform, accessible at td77.life. TD77 is the data controller for all personal information collected through the platform. When we say "td77", "we", "us", or "our" in this policy, we are referring to the operator of the td77 platform.

This policy applies to all players who register an account at td77, visitors who browse the td77 website without registering, and anyone who contacts td77 customer support. It covers all products and services available on the platform, including sports betting, cricket betting, football betting, esports betting, virtual sports, the online casino, and the VIP Club.

If you are a registered player at td77 and have questions about how your specific data is being handled, you can contact us at any time at support@td77.life. We will respond to data-related queries within 30 days.

2 Data We Collect

TD77 collects personal data from players in three main ways: information you provide directly, information generated by your use of the platform, and information obtained from third parties for verification purposes.

2.1 Information You Provide

• Registration data: Full name, date of birth, mobile number, email address, and preferred payment method details.
• Identity verification documents: CNIC scan or photograph, and in some cases proof of address or source of funds documentation.
• Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or masked card numbers for Visa/Mastercard transactions. TD77 does not store full card numbers.
• Customer support communications: Messages sent to td77 via live chat or email, including any attachments you provide.
• Responsible gaming preferences: Deposit limits, loss limits, and self-exclusion settings applied through your account dashboard.

2.2 Information Generated by Platform Use

• Betting and gaming activity: Details of every bet placed, games played, stakes, winnings, and outcomes on the td77 platform.
• Account activity logs: Login times, IP addresses, device identifiers, browser type and version, and session duration.
• Transaction history: A complete record of all deposits, withdrawals, bonus credits, and balance adjustments on your td77 account.
• Navigation data: Pages viewed, features accessed, and time spent on different sections of the td77 platform.

2.3 Information from Third Parties

TD77 may receive limited personal data from identity verification service providers for the purposes of confirming your identity during account registration or at the point of a large withdrawal. This is standard practice for responsible platform operation and anti-money laundering compliance. TD77 does not receive or request unnecessary personal data from third-party sources.

3 How We Use Your Data

TD77 uses the personal data collected from players for the following purposes. We use only what is necessary for each purpose and do not apply data collected for one purpose to an unrelated one without your awareness.

TD77 does not use player data to make fully automated decisions that have significant legal or personal effects without human review. Any account restrictions applied on the basis of responsible gaming monitoring are reviewed by the td77 responsible gaming team before being applied.

4 Legal Basis for Processing

TD77 processes personal data on the following legal grounds depending on the specific purpose:

• Contract performance: Processing necessary to provide the td77 platform service — account management, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required by applicable law — including anti-money laundering (AML) requirements, identity verification obligations, and responsible gaming regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and general service improvement, where these interests do not override your privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit consent. You may withdraw consent at any time.

5 Cookies & Tracking

TD77 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that allow td77 to recognise returning users, maintain your session while you're logged in, and gather aggregate data about how the platform is being used.

Types of Cookies Used at TD77

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your td77 account and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences on the td77 platform, such as preferred language, display settings, and recently viewed sections. These can be disabled without affecting core functionality.
• Analytics cookies: Collect aggregate, anonymised data about how players navigate the td77 platform — which pages are visited most, where users drop off, and how platform changes affect engagement. This data is used to improve the platform. Individual players cannot be identified from analytics data.
• Marketing cookies: Only applied with your consent. Used to identify your visit origin for internal marketing attribution purposes. TD77 does not use third-party advertising cookies to serve targeted ads to players on external sites.

You can manage cookie preferences through your browser settings. Most browsers allow you to view, delete, and block cookies. Note that blocking essential cookies will prevent the td77 platform from functioning correctly.

6 Third-Party Sharing

TD77 shares personal data with third parties only where necessary to deliver platform services or comply with legal obligations. We do not sell player data to advertisers, data brokers, or any other commercial third parties under any circumstances.

6.1 Service Providers

TD77 works with carefully selected third-party service providers who process data on our behalf under strict contractual data protection agreements. These include:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processing partners who handle transaction data to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC (Know Your Customer) services that verify identity documents against government databases where required for regulatory compliance.
• Customer support platform: The live chat software used to deliver td77 customer support stores chat transcripts for quality assurance and dispute resolution purposes.
• Casino game software providers: Game studios whose products are available in the td77 casino may receive anonymised game session data for game performance monitoring.

6.2 Legal Disclosure

TD77 may disclose personal data to law enforcement authorities, financial regulators, or other government bodies where required by applicable law, pursuant to a valid legal order, or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. TD77 will notify affected players of such disclosures where legally permitted to do so.

7 Payment Data Security

Payments at td77 are processed in Pakistani Rupees through local payment providers. TD77 applies the following security measures to payment data specifically:

• Full card numbers are never stored on td77 servers — only masked representations (e.g., ending in the last four digits) are retained for record-keeping;
• All payment data in transit is encrypted using TLS 1.2 or higher;
• Mobile wallet transactions (Easypaisa, JazzCash, NayaPay, SadaPay) are processed through the respective provider's secured API and are subject to that provider's security protocols;
• All payment transactions at td77 are logged with timestamp, amount, and method for fraud detection and compliance purposes;
• Access to payment records within td77's internal systems is restricted to authorised personnel on a need-to-know basis.

If you suspect unauthorised payment activity on your td77 account, contact customer support immediately via live chat. TD77 will investigate and respond within 24 hours.

8 Data Retention

TD77 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for as long as your td77 account is active. This includes your profile information, betting history, and transaction records.
• Identity verification documents: Retained for a minimum of five years after account closure, in compliance with anti-money laundering and financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years in compliance with applicable financial record-keeping obligations.
• Customer support records: Chat transcripts and email correspondence retained for two years from the date of the interaction.
• Closed account data: Following voluntary account closure, personally identifiable information is anonymised within 90 days, except where retention is required for legal compliance purposes.

Aggregate and anonymised data — from which individual players cannot be identified — may be retained indefinitely for platform analytics and improvement purposes.

9 Your Data Rights

As a registered player at td77, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting support@td77.life. TD77 will acknowledge your request within 72 hours and complete it within 30 days.

10 Children's Privacy

TD77 is strictly an adults-only platform. Players must be at least 18 years of age to register an account, place bets, or access any service on the td77 platform. TD77 does not knowingly collect personal data from anyone under the age of 18.

Age verification is a mandatory part of the td77 account registration process. Where there is any reasonable doubt about a player's age, td77 will request documentary proof before allowing any activity on the account. Accounts confirmed to belong to players under 18 are closed immediately, all funds are returned, and no bonuses or winnings are retained.

If you believe that a minor has accessed or created an account at td77, please contact support@td77.life immediately. TD77 treats such reports as urgent and will investigate and act without delay.

11 Marketing Communications

TD77 may send promotional communications to registered players by SMS, email, or in-platform notification. These communications may include information about new promotions, deposit bonuses, VIP Club offers, new platform features, and upcoming sporting events covered by td77.

Marketing communications are sent only to players who have consented to receiving them at registration or who have subsequently opted in through their account settings. Consent is freely given and can be withdrawn at any time by:

• Clicking the "unsubscribe" link at the bottom of any td77 marketing email;
• Replying STOP to any td77 SMS promotional message;
• Updating your communication preferences in your td77 account settings;
• Contacting td77 customer support at support@td77.life.

Withdrawing consent from marketing communications does not affect essential account communications — you will still receive transactional messages related to deposits, withdrawals, account security, and responsible gaming at td77.

12 Data Breach Procedure

Despite the security measures td77 applies, no online platform can guarantee complete immunity from data breaches. In the event of a confirmed security incident affecting personal data, td77 will take the following steps:

• Contain the breach immediately and assess its scope and severity;
• Notify all affected players within 72 hours of confirming the nature of the incident, where notification is required by applicable law;
• Provide affected players with a clear description of what data was involved, the likely consequences of the breach, and the steps td77 is taking to address it;
• Advise affected players of any immediate steps they should take — such as changing their account password or monitoring their payment accounts;
• Report the incident to the relevant regulatory authorities as required by law.

TD77 maintains an incident response plan that is reviewed and updated regularly. Penetration testing and security audits are conducted periodically on the td77 platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

13 Changes to This Policy

TD77 may update this Privacy Policy from time to time to reflect changes in platform services, applicable law, or best practices in data protection. The "Last Updated" date at the top of this page shows when the policy was most recently revised.

Where changes are material — meaning they significantly affect how td77 uses your data or alter your privacy rights — we will notify registered players via email or an in-platform notice at least 14 days before the changes take effect. Minor editorial or clarification changes may be made without advance notice.

Your continued use of the td77 platform after the effective date of any policy changes constitutes your acceptance of those changes. If you disagree with any update to this policy, you may request account closure as described in the Terms and Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how td77 handles your personal data, please reach out through the following channels:

• Email: support@td77.life — for data access requests, deletion requests, correction requests, or any privacy-related query. We respond within 30 days.
• Live Chat: Available 24/7 on the td77 platform. For non-data-rights queries, live chat is the fastest way to get assistance.

When contacting td77 about a data rights request, please include your registered email address or mobile number so we can verify your identity before processing the request. We take data rights seriously and will always confirm the identity of the person making a request before releasing or deleting any personal data.