rc77 Privacy Policy

rc77 ("we", "us", "our", "the Platform") operates the online casino and sports betting services available at rc77.asia. We take the privacy and security of our Players' personal data seriously — not simply as a regulatory obligation, but as a fundamental part of the trust our Pakistani players place in us every time they deposit funds, place a cricket bet, or spin a slot on our platform.

This Privacy Policy applies to all personal data collected from individuals ("you", "the Player", "the User") who visit, register on, or use the rc77 platform in any capacity. It covers the data collected through the rc77.asia website, associated sub-domains, and any mobile browser interface through which rc77 services are delivered.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with rc77. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions in respect of data handling, this Privacy Policy shall prevail.

For the purposes of applicable data protection legislation, rc77 acts as the data controller in respect of the personal data collected from Players through the rc77 platform. As data controller, rc77 determines the purposes for which and the means by which personal data is processed.

Where rc77 engages third-party service providers to process personal data on its behalf — including payment processors, identity verification providers, and game content providers — those providers act as data processors under contractual arrangements that require them to process your data only in accordance with rc77's instructions and this Privacy Policy.

Any formal data protection enquiries, subject access requests, or requests to exercise your data rights under applicable law should be directed to rc77's support team via the contact details provided in Section 16 of this Policy.

rc77 collects only the personal data that is necessary for the purposes set out in this Policy. The categories of personal data we collect include:

rc77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. Where any such data is incidentally included in documents submitted for KYC purposes, it will not be processed for any purpose beyond the minimum required for identity verification.

rc77 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or opting into a promotion.
• Automated technical collection: Technical and usage data collected automatically when you access the rc77 platform, including through cookies, session tracking, and server logs. See Section 11 for full details of our cookie usage.
• Payment processors: Confirmation and reference data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when processing your deposits and withdrawals. rc77 does not receive or store your full banking credentials directly — these are handled by the respective payment processors under their own security frameworks.
• Identity verification providers: Verification outcomes and risk scores from third-party KYC providers engaged to confirm the validity of identity documents submitted during account opening or withdrawal processing.
• Game providers: Session data and game result records from Ezugi, Evolution Gaming, and other certified game providers integrated into the rc77 platform.

rc77 processes your personal data only for the purposes listed below. We do not process your data for any purpose incompatible with this list without first obtaining your explicit consent:

• Account management: Creating, maintaining, and administering your rc77 account, including processing your registration, updating your account details, and managing account security.
• Age and identity verification: Confirming that you meet the strict 21+ age requirement and that your identity matches the details provided at registration, in accordance with our KYC obligations.
• Payment processing: Processing PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) and maintaining accurate transaction records.
• Legal and regulatory compliance: Fulfilling obligations under our international gaming licence, including anti-money laundering (AML) checks, transaction monitoring, and regulatory reporting to licencing authorities.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, multiple account registrations, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring wagering patterns to identify indicators of problem gambling and triggering responsible gaming interventions, including deposit limit reminders and proactive support outreach, in accordance with our Responsible Gaming Policy.
• Customer support: Responding to your queries, resolving disputes, and processing complaints submitted via live chat or email.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, layout, and game offering of the rc77 platform.
• Promotions and communications: Sending promotional communications (where you have consented to receive them), including PSL season offers, cricket betting bonuses, and platform update notifications.

rc77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our contract with you — including operating your account, processing payments, and delivering gaming services — is conducted on the basis that it is necessary for the performance of the contract between you and rc77.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML checks, KYC verification, age verification, and regulatory reporting under our international gaming licence.
• Legitimate interests: Processing conducted on the basis of rc77's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your data protection rights.
• Consent: Where rc77 relies on your consent as the legal basis for processing — for example, for the delivery of optional promotional communications — you have the right to withdraw that consent at any time by contacting support via live chat or email.

rc77 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your personal data only in the following circumstances, and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transactional data necessary to process your deposits and withdrawals. Each of these processors handles your data under their own privacy frameworks and applicable Pakistani banking regulations.
• Identity verification providers: Third-party KYC and identity verification services receive copies of identity documents and verification data solely for the purpose of confirming your age, identity, and payment method ownership.
• Game content providers: Ezugi, Evolution Gaming, and other certified game providers receive session identifiers and bet data necessary to deliver their games and maintain game integrity. These providers do not receive your full profile or payment data.
• Regulatory and law enforcement authorities: Where required by our gaming licence conditions, applicable law, court order, or the lawful direction of a competent authority, rc77 may disclose personal data to regulatory bodies or law enforcement agencies. rc77 will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Legal, accounting, and audit advisers engaged by rc77 may access personal data on a strictly need-to-know basis and under binding confidentiality obligations.

rc77 operates under an international gaming licence and engages service providers located in various jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, rc77 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the laws applicable to rc77's gaming licence.

Applicable safeguards for international transfers may include: contractual clauses that require recipient processors to maintain data protection standards equivalent to those described in this Policy; processing only by service providers operating under recognised regulatory frameworks in their own jurisdictions; and where required, seeking explicit consent for specific international transfers that do not fall within an established adequacy framework.

rc77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable minimum retention periods imposed by legal and regulatory obligations.

Specific retention periods applicable to rc77 data categories:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy AML and gaming licence reporting obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• KYC documents: Retained for the duration of your account plus a minimum of five (5) years following account closure.
• Support communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an ongoing dispute or regulatory investigation.
• Technical and usage data: Retained for a rolling period of twenty-four (24) months, after which data is anonymised or deleted unless required for an ongoing investigation.
• Marketing consent records: Retained for the duration of your consent plus three (3) years following withdrawal of consent, to demonstrate compliance with consent requirements.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

rc77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser and the rc77 platform, covering login sessions, payment flows, and account management pages.
• Two-factor authentication (2FA) available to all account holders, providing an additional layer of login security beyond username and password.
• Access controls restricting access to personal data within rc77's operational infrastructure to authorised personnel only, on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities in the platform infrastructure.
• Session monitoring to detect and flag unusual login patterns, IP address anomalies, and behaviour consistent with account takeover attempts.
• Encrypted storage for all KYC documents and sensitive identity data at rest, with access logging for all retrieval events.

rc77 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit a website. The following categories of cookies are used by rc77:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how Players use the rc77 platform — which pages are visited most frequently, how long sessions last, and which features are used most. This data is used exclusively for platform improvement and is not linked to individual Player identities.
• Functional cookies: Store optional preferences such as your preferred lobby view, recent game history display settings, and notification preferences. Disabling these cookies may result in some features not operating as expected.
• Fraud prevention and security cookies: Used to identify and block suspicious access patterns, including rapid repeated login attempts and IP address spoofing behaviour.

rc77 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent access to core platform features.

Subject to applicable law and the limitations described in this section, you have the following rights in respect of the personal data rc77 holds about you:

To exercise any of the above rights, contact rc77 support via live chat or at the support email address in Section 16. rc77 will respond to verified requests within a reasonable timeframe and in any case within 30 days. We may require identity verification before processing any data rights request to prevent unauthorised access to personal data.

rc77 implements mandatory age verification as part of the KYC process applied to all new accounts. Any account found to be registered by or operated on behalf of a person under the age of 21 will be immediately suspended. Any real-money balance associated with such an account will be returned to the payment source used for deposit, net of any bonus funds, and the account will be permanently closed.

If you become aware that a person under 21 has registered an rc77 account or has access to an rc77 account operated by an adult, please notify rc77 support immediately via live chat. Such reports are treated with priority and strict confidentiality. rc77 will take immediate action to investigate and, where confirmed, close the relevant account.

The rc77 platform integrates with third-party game providers and payment processors as described in this Policy. While rc77 takes steps to ensure that its third-party processors maintain appropriate data protection standards under contractual arrangements, rc77 is not responsible for the privacy practices of third parties in respect of data processing that falls outside rc77's contractual instructions.

The rc77 platform does not contain links to external third-party websites for advertising or affiliate purposes. All navigation within rc77.asia remains within the rc77 platform domain. Where integration with a payment provider's own interface is required to complete a transaction, you will be subject to that provider's terms and privacy policy during the relevant transaction session.

rc77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the features of the platform. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where changes are material — meaning they affect the nature of data collected, the purposes for which it is used, or your rights as a data subject — rc77 will endeavour to notify registered Players by displaying a prominent notice on the platform at the time of their next login following the change. Continued use of the rc77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

It is your responsibility to review this Privacy Policy periodically. rc77 recommends reviewing this Policy whenever you receive a platform notification about an update, or at least once every six months for active account holders.

For all privacy-related enquiries, subject access requests, or data rights requests, please contact the rc77 support team through the following channels. rc77 support is available 24 hours a day, 7 days a week.

Live Chat: Available directly on rc77.asia — the fastest channel for all enquiries. For data rights requests, please state "Data Rights Request" clearly in your opening message. Average response time under 5 minutes.

Support Email: [email protected] — for formal written data rights requests and legal notices. Email responses within one business day. Please include "Privacy Policy Enquiry" in your subject line.

All data rights requests are handled with strict confidentiality. Before processing any request to access, correct, or delete account data, rc77 may require you to verify your identity to protect against unauthorised access to another Player's data.