TD777 Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy applies to TD777 and covers all services accessible at td777.link — including sports betting, live casino, baccarat, virtual sports, online casino games, and the TD777 VIP Club. When this policy refers to "TD777", "we", "us", or "our", it means the operator of the TD777 platform. When it refers to "you" or "your", it means any person who registers a TD777 account, visits the website, or uses any part of the service.

TD777 operates as the data controller for personal information collected through the platform. This means we determine the purposes for which your data is collected and the means by which it is processed. If you have questions about this policy or about how TD777 handles your personal data, please contact us using the details in Section 13.

TD777 collects personal data through three channels: information you provide directly when registering and using the platform, data generated automatically by your use of the service, and verification data you submit when we need to confirm your identity or payment methods.

TD777 does not collect sensitive personal data such as biometric identifiers, health information, political opinions, or religious beliefs. The CNIC and passport copies collected for identity verification are used solely for that purpose and are not processed for any other reason.

TD777 uses personal data for specific, defined purposes. We do not use data beyond what is necessary for running the platform and serving you as a player. The main purposes are listed below.

• Account management: Your registration data is used to create and maintain your TD777 account, verify your identity, manage your balance, and communicate account-related information to you.
• Processing transactions: Payment data is used to process deposits, withdrawals, and the settlement of bets and bonuses in PKR. Transaction records are maintained for financial reconciliation and audit purposes.
• Fraud prevention and security: Device data, IP addresses, and activity patterns are used to detect and prevent fraudulent activity — including duplicate account creation, stolen payment credential use, and bonus abuse. This processing protects both TD777 and genuine players.
• Responsible gaming compliance: Betting activity data is used to monitor for patterns consistent with problem gambling behaviour, to enforce self-exclusion and deposit limits, and to comply with responsible gaming obligations.
• Customer support: Communication data is used to resolve support queries, investigate complaints, and improve the quality of our support service.
• Service improvement: Aggregated, anonymised usage data is used to understand how players interact with the TD777 platform, which features are most used, and where improvements are needed. This data cannot be linked back to individual users.
• Marketing communications: If you have opted in, we may send you promotional emails or in-account notifications about TD777 offers, new game launches, and seasonal promotions. You can opt out at any time through your account settings or by emailing support@td777.link.

TD777 processes personal data under the following legal bases, depending on the purpose of processing.

TD777 accepts deposits and processes withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard. The handling of your financial credentials deserves special attention because it is an area where trust is particularly important.

When you initiate a deposit or withdrawal, your payment credentials — mobile wallet account number, bank account details, or card information — are transmitted to the relevant payment gateway using TLS encryption. TD777 does not store full card numbers, CVV codes, or mobile wallet PINs on its servers at any point. What TD777 retains is a transaction reference number, the masked last four digits of a card or wallet number where relevant, the amount in PKR, and the timestamp. This is sufficient for our records and dispute resolution purposes but cannot be used to initiate a payment without your authorisation.

Financial transaction records are retained for a minimum of five years for compliance with AML and financial record-keeping requirements. These records are stored securely and are only accessible to authorised TD777 personnel with a legitimate operational reason to review them.

TD777 does not sell, rent, or trade your personal data to third parties for their own commercial use. Your data is only shared with external parties where it is necessary to operate the platform, comply with legal obligations, or protect the platform and its users from fraud.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our card payment gateway providers receive payment transaction data strictly for the purpose of processing your deposit or withdrawal. Each payment processor handles your data under their own privacy policy and security standards.
• Game providers: Live casino and virtual sports providers receive a session token to authenticate your game session. They do not receive your full account details, payment information, or identity documents.
• Identity verification services: Where automated identity verification is used, your submitted documents may be processed by a third-party verification service. This service is contractually bound to use your data only for the verification purpose and to delete it after the verification is complete.
• Law enforcement and regulatory authorities: TD777 will disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law or a valid legal order. We will only disclose the minimum data necessary to satisfy the legal requirement.
• Fraud prevention networks: If an account is found to be engaged in fraud or bonus abuse, relevant account identifiers may be shared with industry fraud prevention networks to protect other operators and players.

All third-party service providers used by TD777 are subject to data processing agreements that require them to handle your data securely, use it only for the agreed purpose, and not share it further without TD777's authorisation.

TD777 uses cookies and similar tracking technologies to make the platform work correctly and to understand how it is being used. When you first visit td777.link, you will be shown a cookie consent banner explaining the categories of cookies in use. You can manage your cookie preferences at any time through the settings accessible from the banner.

TD777 does not use third-party advertising cookies or cross-site tracking cookies that follow your activity outside of td777.link. Analytics data collected is aggregated and cannot be used to identify individual users.

TD777 retains personal data for as long as is necessary for the purpose it was collected, or as required by applicable law. The main retention periods are set out below.

When the retention period for a data category expires, TD777 securely deletes or anonymises that data so that it can no longer be linked to any individual. If you request deletion of your account before the end of a mandatory retention period, TD777 will close your account and restrict access to your data while retaining only the minimum information required by law until the retention period expires.

TD777 takes the security of your personal data seriously. The measures below are in place across the platform at all times. While no system is completely immune to all threats, TD777 maintains security standards consistent with industry best practice for online gaming platforms.

You have the following rights regarding your personal data held by TD777. To exercise any of these rights, contact us at support@td777.link with the subject line "Data Rights Request". TD777 will respond within 30 days and will not charge a fee for standard requests.

• Right of Access — You can request a copy of the personal data TD777 holds about you. We will provide this in a structured, readable format within 30 days of your request.
• Right to Correction — If any personal data TD777 holds about you is inaccurate or incomplete, you can ask us to correct it. You can update basic account details — name, mobile number — directly from your account settings.
• Right to Deletion — You can request deletion of your personal data. TD777 will delete data that is no longer required while retaining records that must be kept for legal compliance as described in Section 8. Account deletion requests will also close your TD777 account.
• Right to Withdraw Consent — Where TD777 processes your data based on consent — marketing communications and non-essential cookies — you can withdraw that consent at any time. Withdrawal does not affect processing that took place before you withdrew consent.
• Right to Data Portability — You can request a copy of your personal data in a portable, machine-readable format (JSON or CSV) so that you can transfer it to another service if you choose.
• Right to Object — You can object to processing that is based on TD777's legitimate interests. TD777 will consider whether the legitimate interest is compelling enough to override your objection and will inform you of the outcome.

TD777 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. Our registration process includes a date of birth field and age verification controls designed to prevent under-18 registration. If TD777 discovers that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be closed.

If you believe a person under 18 has registered a TD777 account, please contact us at support@td777.link with the relevant information. We take this seriously and will investigate promptly.

TD777 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or changes in applicable law. When the policy is updated, the "Last Updated" date at the top of this page will be revised. For material changes — those that significantly affect your rights or the way your data is used — TD777 will notify registered players via email or an in-account notification before the change takes effect.

Continued use of the TD777 platform after an update to this policy has been notified constitutes your acknowledgement of the updated terms. If you disagree with any update, you have the right to close your account and request deletion of your data as described in Section 10.

For any questions about this Privacy Policy, or to exercise any of your data rights, contact the TD777 support team. We aim to respond to all privacy-related enquiries within 5 business days, and to complete formal data rights requests within 30 days.