1 Introduction
pb77 ("we," "us," "our," or "pb77") operates the online casino and sports betting platform accessible at pb77.vu. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, account applicants, and visitors to our website.
This Privacy Policy describes the types of personal data pb77 collects, the purposes for which it is used, the parties with whom it may be shared, and the rights you hold as a data subject. This policy applies to all personal data processed by pb77 in connection with the operation of the pb77 platform, including data collected through our website, account registration process, customer support channels, and payment processing systems.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between pb77 and its registered players.
By registering a pb77 account or continuing to use the pb77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
2 Data Controller
pb77 acts as the data controller in respect of the personal data collected from players and users of the pb77 platform. As data controller, pb77 determines the purposes and means by which personal data is processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection standards and our international gaming licence obligations.
For all privacy-related enquiries, data access requests, or complaints relating to pb77's handling of your personal data, please contact us using the details provided in Section 15 of this Policy.
3 Data We Collect
pb77 collects personal data across several categories, depending on the nature of your interaction with the platform. The following table outlines the primary categories of personal data collected:
| Data Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, CNIC number, passport number |
Age verification, KYC compliance, account authentication |
| Contact Data |
Email address, Pakistani mobile number, city and province of residence |
Account communications, OTP verification, support interactions |
| Financial Data |
JazzCash / EasyPaisa wallet numbers, bank account details, transaction history, PKR balance records |
Payment processing, fraud prevention, withdrawal verification |
| Gaming Activity Data |
Game sessions, bet history, wagering amounts, win/loss records, bonus usage |
Account management, responsible gaming monitoring, dispute resolution |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps |
Security monitoring, fraud detection, platform optimisation |
| Communications Data |
Live chat transcripts, support emails, complaint records |
Support quality assurance, dispute resolution, compliance records |
| Verification Documents |
CNIC scan, utility bill, bank statement, selfie with ID |
KYC and AML compliance required under international gaming licence |
pb77 does not collect or process data relating to racial or ethnic origin, religious beliefs, health conditions, or political opinions, except where required by applicable anti-money-laundering regulations in connection with enhanced due-diligence procedures.
4 How We Collect Your Data
pb77 collects personal data through the following means:
- Direct collection: Information you voluntarily provide when registering an account, completing identity verification, submitting a withdrawal request, or contacting pb77 support.
- Automated collection: Technical data such as IP addresses, device identifiers, and session logs collected automatically when you access the pb77 website or use platform features. This is explained further in the Cookies section.
- Third-party sources: Identity verification data returned by our licensed KYC verification service providers when processing your submitted identity documents. Payment confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 payment processors in connection with your transactions.
- Publicly available sources: In limited circumstances relating to fraud prevention or AML compliance, pb77 may reference publicly available information to validate account details or transaction legitimacy.
5 How We Use Your Data
pb77 uses the personal data it collects for the following purposes:
- Account Registration & Management — to create, maintain, and administer your pb77 account, including verifying your eligibility to play and processing your identity verification documents;
- Payment Processing — to process deposits and withdrawals via your selected payment method (JazzCash, EasyPaisa, bank transfer, SadaPay, or USDT TRC20) and to maintain an accurate PKR balance record;
- Regulatory Compliance — to meet our obligations under our international gaming licence, including anti-money-laundering (AML) checks, age verification, and Know Your Customer (KYC) procedures;
- Responsible Gaming Monitoring — to monitor player activity for indicators of problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests as described in our Responsible Gaming Policy;
- Security & Fraud Prevention — to detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, and other prohibited conduct;
- Customer Support — to respond to your queries, process complaints, and maintain records of support interactions for quality assurance purposes;
- Platform Improvement — to analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and user experience;
- Marketing Communications — to send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
pb77 does not use your personal data for automated decision-making processes that produce legally significant effects without human review. Where automated systems flag an account for review, a pb77 compliance team member assesses the case before any action is taken.
6 Legal Basis for Processing
pb77 processes your personal data under the following legal bases, depending on the specific processing activity:
- Contractual Necessity — processing required to fulfil pb77's obligations under your account agreement, including account administration, payment processing, and gaming service delivery;
- Legal Obligation — processing required to comply with our international gaming licence conditions, anti-money-laundering regulations, and applicable financial compliance requirements;
- Legitimate Interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests are not overridden by your data protection rights;
- Consent — processing of your data for marketing communications, promotional offers, and optional platform features, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7 Data Sharing & Disclosure
pb77 does not sell, rent, or otherwise trade your personal data to third parties for commercial purposes. Your data may be disclosed to the following categories of recipients only where strictly necessary:
- Payment Service Providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors receive only the data necessary to process your specific transaction;
- KYC Verification Providers — licensed third-party identity verification service providers process your submitted identity documents to validate your age and identity. These providers are contractually bound to process your data solely for verification purposes;
- Gaming Software Providers — game studios supplying casino games, slots, and specialty titles to the pb77 platform may receive anonymised session data for technical purposes. They do not receive personally identifiable information;
- Regulatory Authorities — pb77 may disclose player data to its licensing regulator, financial intelligence authorities, or law enforcement agencies where required to do so by law or under the terms of our gaming licence;
- Legal Advisors & Auditors — professional service providers engaged by pb77 for legal counsel, financial audit, or compliance review may access relevant data under strict confidentiality obligations.
All third-party service providers engaged by pb77 are contractually required to maintain the confidentiality of your personal data and to process it only for the specific purposes for which it was shared.
8 International Data Transfers
As an internationally licensed gaming platform, pb77 may transfer your personal data to service providers and infrastructure partners located outside Pakistan. Where such transfers occur, pb77 ensures that appropriate safeguards are in place to protect your data, including:
- Contractual data protection clauses with all international service providers requiring compliance with standards equivalent to pb77's privacy obligations;
- Transfer only to providers operating in jurisdictions with recognised data protection frameworks, or under binding corporate rules where applicable;
- Technical security measures including encryption in transit and at rest for all cross-border data transfers.
Identity verification documents submitted for KYC purposes are processed via pb77's licensed KYC verification partner. These documents are not stored beyond the period required for verification and regulatory compliance.
9 Data Retention
pb77 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and our gaming licence conditions. The following general retention guidelines apply:
- Active Account Data — retained for the duration of your active pb77 account plus a minimum of five (5) years following account closure, to meet AML and gaming licence record-keeping obligations;
- Transaction Records — deposit and withdrawal records are retained for a minimum of five (5) years following the date of the transaction;
- KYC Documentation — identity verification documents are retained for the period required by our gaming licence and applicable AML regulations, typically five (5) years from the date of submission;
- Support Communications — live chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes;
- Marketing Preferences — records of your marketing consent or opt-out status are retained for the lifetime of your account to ensure compliance with your stated preferences.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification.
10 Cookies & Tracking Technologies
pb77 uses cookies and similar technologies on its website to enhance platform functionality, maintain session integrity, and analyse user behaviour in aggregate. The following categories of cookies are used:
- Strictly Necessary Cookies — required for the pb77 platform to function correctly, including maintaining your logged-in session, remembering your language preference, and processing in-platform transactions. These cannot be disabled;
- Functional Cookies — remember your platform preferences such as display settings, last-visited game category, and notification preferences to personalise your pb77 experience;
- Analytical Cookies — collect anonymised data about how players navigate the pb77 platform, which games are most used, and where technical errors occur. This data is used to improve platform performance and is not linked to your personal identity;
- Security Cookies — used to detect and prevent fraudulent login attempts, account takeover attacks, and other security threats.
pb77 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of selling targeted advertising placements. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to access your pb77 account.
11 Your Data Rights
As a pb77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the pb77 support team as described in Section 15:
- Right of Access — you may request a copy of the personal data pb77 holds about you, the purposes for which it is being processed, and the categories of third parties with whom it has been shared;
- Right to Rectification — if any personal data pb77 holds about you is inaccurate or incomplete, you may request that it be corrected or updated;
- Right to Erasure — you may request the deletion of personal data that pb77 is no longer required to retain. Note that data subject to mandatory retention periods under our gaming licence or AML obligations cannot be erased prior to the expiry of those periods;
- Right to Restrict Processing — in certain circumstances, you may request that pb77 restrict the processing of your personal data while a query or complaint is being resolved;
- Right to Object — you may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing carried out on the basis of legitimate interests, subject to pb77's overriding legal or contractual obligations;
- Right to Data Portability — where technically feasible, you may request that pb77 provide your personal data in a structured, machine-readable format for transfer to another service provider;
- Right to Withdraw Consent — where pb77 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
pb77 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, pb77 may extend this period by a further thirty (30) days, with prior notification to you.
12 Children & Minors
pb77 is strictly for players aged 21 and above. pb77 does not knowingly collect personal data from individuals under the age of 21.
pb77 employs age verification procedures at account registration and at the point of withdrawal to ensure that all players meet the minimum age requirement of 21 years. If pb77 discovers that personal data has been collected from an individual under the age of 21, the following actions will be taken immediately:
- The account will be closed and access to the platform revoked;
- Any deposited funds will be returned to the original payment method;
- Any winnings generated will be voided and are not payable;
- All personal data associated with the underage account will be deleted, except where retention is required for regulatory reporting purposes;
- The incident will be logged and reported to pb77's licensing regulator in accordance with our licence conditions.
If you are a parent or guardian and believe that a minor under your care has registered a pb77 account, please contact our support team immediately via live chat or email so we can take appropriate action.
13 Security Measures
pb77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:
- SSL/TLS Encryption — all data transmitted between your device and pb77.vu is encrypted using industry-standard SSL/TLS protocols;
- Data Encryption at Rest — sensitive personal data, including KYC documents and financial records, is stored in encrypted form on pb77's secure servers;
- Access Controls — access to personal data within pb77's internal systems is restricted to authorised personnel only, on a need-to-know basis, and is subject to audit logging;
- Two-Factor Authentication — pb77 supports OTP-based two-factor authentication on player accounts to prevent unauthorised login access;
- Fraud Detection Systems — automated systems monitor account activity for unusual patterns that may indicate account takeover, identity fraud, or financial crime, with escalation to human reviewers where required;
- Regular Security Reviews — pb77's platform infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities.
While pb77 takes all reasonable steps to secure your data, no digital platform can guarantee absolute security. In the event of a data breach affecting player personal data, pb77 will notify affected players and relevant regulatory authorities in accordance with applicable obligations.
14 Changes to This Privacy Policy
pb77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. The "Effective Date" at the top of this page will be updated whenever a material change is made.
Where changes are material — such as changes to the categories of data collected, new purposes for processing, or changes to data sharing arrangements — pb77 will notify registered players via the email address associated with their account at least seven (7) calendar days before the revised policy takes effect.
Non-material updates, such as typographical corrections or clarifications that do not alter the substance of the policy, may be made without advance notice. Continued use of the pb77 platform following the effective date of any revised policy constitutes acceptance of the updated terms.
15 Contact & Privacy Requests
For all privacy-related enquiries, data access requests, rectification requests, erasure requests, or complaints regarding pb77's handling of your personal data, please contact the pb77 support team through one of the following channels:
- Live Chat — available 24/7 inside your pb77 account dashboard. This is the fastest channel for privacy queries and data requests during Pakistan Standard Time peak hours (09:00–22:00 PKT);
-
Email — for formal data rights requests or written complaints, contact us at:
[email protected]
Please include your registered pb77 account email address, the nature of your request, and any relevant account details to allow us to locate your records and process your request promptly. pb77 will acknowledge receipt of all formal data rights requests within five (5) business days and will provide a substantive response within thirty (30) calendar days.
If you are not satisfied with pb77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or to the independent dispute resolution mechanism available under pb77's international gaming licence.