677win Privacy Policy

1 Who We Are

1.1 677win is an internationally licensed online gaming operator providing casino, sports betting, and related gaming services to adult players through the website accessible at 677win.org (the "Platform"). In this Privacy Policy, references to "677win," "we," "us," or "our" refer to the operator of the 677win Platform.

1.2 677win is the data controller in respect of personal data collected from players who register accounts on or otherwise interact with the 677win Platform. As data controller, 677win determines the purposes and means by which personal data is processed.

1.3 677win operates under a recognized international gaming license that imposes obligations relating to player data collection, retention, and security. Our data practices are shaped by both our licensing obligations and our genuine commitment to the privacy of Pakistani players who trust us with their personal information.

2 Scope of This Privacy Policy

2.1 This Privacy Policy applies to all personal data collected by 677win in connection with the operation of the 677win Platform, including data collected through account registration, identity verification, deposits and withdrawals, gaming activity, customer support interactions, and marketing communications.

2.2 This Policy applies to all individuals who access or use the 677win Platform, regardless of how they access it — including via desktop browser, mobile browser, or any other interface made available by 677win.

2.3 This Policy does not apply to third-party websites or services that may be referenced or linked from the 677win Platform. 677win is not responsible for the privacy practices of third parties and encourages you to review the privacy policies of any third-party services you use.

2.4 This Privacy Policy should be read alongside the 677win Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how 677win handles player information.

3 Personal Data We Collect

3.1 677win collects personal data across several categories, as set out in the table below. We collect only what is genuinely necessary for the stated purpose.

3.2 677win does not collect special category personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where a player voluntarily discloses health information in the context of a responsible gaming interaction, in which case that information is processed solely for the purpose of providing appropriate responsible gaming support.

4 How We Collect Your Data

4.1 677win collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, respond to a survey, or interact with any feature of the 677win Platform;
• Automatically — through cookies, server logs, and similar tracking technologies when you access and navigate the 677win website (see Section 8 for details);
• From third-party verification providers — where 677win uses third-party KYC or identity verification services to confirm information you have provided, those providers may share verification results and related data with 677win;
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors may share transaction reference data with 677win to facilitate deposit and withdrawal processing;
• From fraud prevention and risk management services — 677win may receive data from third-party fraud detection services used to identify and prevent fraudulent account activity.

5 Why We Use Your Personal Data

5.1 677win processes your personal data for the following purposes:

• Account registration and management: To create and maintain your 677win player account, authenticate your identity at login, and manage your account settings and preferences;
• Identity verification and KYC compliance: To verify your identity, confirm that you meet the 21+ age requirement, and fulfill our ongoing obligations as a licensed gaming operator to conduct Know Your Customer checks;
• Processing deposits and withdrawals: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency, and to process withdrawal requests to your verified payment accounts;
• Providing gaming services: To make the full 677win game library — including live casino, slots, cricket betting, and Lucky Piggy — available to you and to accurately record and settle your bets and gaming sessions;
• Bonus and promotion administration: To credit, track, and administer bonus funds, free bets, cashback, and other promotional offers in accordance with applicable promotion terms;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, unauthorized account access, and other security threats;
• Responsible gaming: To monitor gaming activity for signs of problem gambling, apply player-requested responsible gaming tools, and fulfill our regulatory obligations in respect of player protection;
• Customer support: To respond to your queries, investigate and resolve complaints, and maintain records of support interactions for quality assurance purposes;
• Legal and regulatory compliance: To comply with the requirements of 677win's gaming license, applicable anti-money laundering regulations, and any lawful requests from regulatory or law enforcement authorities;
• Platform improvement: To analyze aggregated, anonymized usage data to understand how players interact with the 677win Platform and to inform product development decisions;
• Marketing communications: Where you have given your consent, to send you information about 677win promotions, new games, and special offers via email or SMS.

6 Legal Basis for Processing

6.1 677win processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the services you have requested — including operating your account, processing deposits and withdrawals, and settling bets — is carried out on the basis that it is necessary for the performance of our contract with you as a 677win player;
• Legal obligation: Processing required by 677win's gaming license, anti-money laundering regulations, or other applicable law — including KYC verification, transaction record keeping, and responsible gaming compliance — is carried out on the basis of a legal obligation;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement is carried out where 677win has a legitimate interest in maintaining the integrity and security of the Platform, provided that interest is not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies is carried out on the basis of your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Data Sharing & Third Parties

7.1 677win does not sell, rent, or trade your personal data to third parties. We share personal data with third parties only where it is necessary for the operation of the 677win Platform or where we are required to do so by law.

7.2 The categories of third parties with whom 677win shares personal data include:

• Identity verification and KYC providers: Third-party services used to verify player identity, age, and source of funds. These providers process personal data strictly as data processors acting on 677win's behalf and are bound by data processing agreements;
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency networks receive the minimum data necessary to process your deposit or withdrawal transaction;
• Licensed game suppliers: Game studios and live dealer providers whose content is available through 677win Casino. These suppliers may receive anonymized session data for game performance monitoring purposes, but do not receive personal identity data unless strictly necessary;
• Fraud prevention and risk services: Third-party services used to identify and prevent fraudulent activity, bonus abuse, and money laundering on the Platform;
• Regulatory and law enforcement authorities: 677win's licensing authority and any competent regulatory or law enforcement body where disclosure is required by applicable law or as part of a lawful investigation;
• Professional advisers: Legal, accounting, and compliance advisers engaged by 677win on a confidential basis where access to player data is necessary for the relevant professional engagement.

7.3 All third parties with whom 677win shares personal data are required to handle that data in a manner consistent with this Privacy Policy and are bound by contractual data protection obligations. 677win does not permit third-party processors to use player data for their own independent purposes.

8 Cookies & Tracking Technologies

8.1 677win uses cookies and similar tracking technologies on the Platform to provide a functional, secure, and personalized gaming experience. A "cookie" is a small data file stored on your device by your web browser when you visit a website.

8.2 677win uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of the Platform — including session management, login authentication, and security functions. These cookies cannot be disabled without materially affecting Platform functionality;
• Functional cookies: Enable the Platform to remember your preferences — such as your preferred language, game lobby settings, and responsible gaming tool configurations — to provide a more personalized experience;
• Analytics cookies: Used to collect anonymized data about how players navigate and use the Platform, enabling 677win to identify usability issues and prioritize product improvements. Analytics data is aggregated and does not identify individual players;
• Security and fraud prevention cookies: Used to identify suspicious access patterns, detect potential fraud, and protect player accounts from unauthorized access.

8.3 677win does not use third-party advertising cookies or permit third-party advertisers to place cookies on the 677win Platform. We do not build advertising profiles based on your gaming behavior or sell cookie-derived data to advertisers.

8.4 You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 677win Platform. For analytics and functional cookies, you may opt out through your browser or via the cookie preferences tool available on the Platform.

9 Data Security

9.1 The technical security measures implemented by 677win include, without limitation:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and 677win servers;
• Encryption of sensitive personal data — including CNIC details, financial account references, and passwords — at rest in 677win's secure database infrastructure;
• Two-factor authentication (2FA) available on all player accounts to provide an additional layer of login security;
• Role-based access controls ensuring that 677win staff can only access personal data relevant to their specific job function;
• Continuous automated monitoring of platform infrastructure for unauthorized access attempts and anomalous activity patterns;
• Regular penetration testing and security audits by qualified third-party security specialists;
• Secure, access-controlled data centers with physical security measures and redundant infrastructure.

9.2 Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. While 677win takes robust steps to protect your data, you should also take reasonable precautions to protect your own account — including using a strong, unique password for your 677win account and not sharing your login credentials with anyone.

9.3 If you believe your 677win account has been compromised or that your personal data has been accessed without authorization, you should contact 677win support immediately via live chat at [email protected].

10 Data Retention

10.1 677win retains personal data for as long as it is necessary for the purpose for which it was collected, subject to the following minimum retention periods imposed by our licensing obligations and applicable law:

• Account and identity data: Retained for a minimum of five (5) years following the date of account closure, in accordance with anti-money laundering regulations applicable to licensed gaming operators;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial recordkeeping requirements;
• Gaming activity records: Retained for a minimum of three (3) years following account closure for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for a minimum of two (2) years from the date of the relevant interaction;
• Responsible gaming records: Retained for the duration of any self-exclusion period plus a minimum of two (2) years thereafter, to support enforcement of self-exclusion commitments and regulatory reporting;
• Marketing consent records: Retained for as long as you maintain a 677win account, or until you withdraw your marketing consent, whichever is earlier.

10.2 Following the expiry of applicable retention periods, personal data will be securely deleted or anonymized. Anonymized data that can no longer be linked to an individual may be retained indefinitely for aggregate analytics purposes.

11 Your Data Rights

11.1 As a 677win player, you have the following rights in respect of your personal data:

11.2 To exercise any of the above rights, contact 677win by emailing [email protected] or via the 24/7 live chat feature on the Platform. Please state clearly which right you wish to exercise and provide sufficient information to allow us to identify your account. 677win will respond to all rights requests within 30 calendar days, and will notify you if a longer period is required due to the complexity of the request.

11.3 677win will not charge a fee for handling rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied.

12 Children, Minors & Age Verification

12.1 The 677win Platform is strictly for adults aged 21 and above. 677win does not knowingly collect or process personal data from individuals under the age of 21 . If 677win becomes aware that it has collected personal data from a person under the age of 21, that data will be deleted without delay and the associated account will be permanently closed.

12.2 677win uses CNIC-based identity verification as its primary age verification mechanism, as the CNIC is issued by NADRA only to Pakistani citizens aged 18 and above and includes the holder's date of birth. Where CNIC verification is inconclusive or unavailable, 677win may request additional age verification documentation before permitting account activation.

12.3 If you are a parent or guardian and have reason to believe that a minor in your care has registered a 677win account or accessed the Platform, please contact 677win support immediately via live chat or at [email protected]. We will investigate and take appropriate action promptly.

12.4 677win strongly encourages parents and guardians to use parental control software to prevent minors from accessing online gaming platforms. Information about available parental control tools is referenced on the 677win Responsible Gaming page.

13 Marketing Communications

13.1 Where you have given your consent at registration or subsequently through your account settings, 677win may send you marketing communications by email or SMS. These communications may include information about new games, promotional offers, deposit bonus opportunities, PSL cricket betting specials, and platform news.

13.2 You may withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email sent by 677win;
• Updating your communication preferences in the Notifications section of your account dashboard;
• Contacting 677win support via live chat or at [email protected] and requesting removal from marketing lists.

13.3 Withdrawal of marketing consent will take effect within 72 hours and will not affect your ability to continue using the 677win Platform. Please note that 677win will continue to send you transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — regardless of your marketing preferences, as these are necessary for the operation of your account.

13.4 677win does not share player contact data with third-party marketers or permit third parties to send marketing communications to 677win players on their own behalf.

14 Changes to This Privacy Policy

14.1 677win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. The most current version of this Policy, with its effective date clearly stated, will always be accessible on the 677win website.

14.2 Where changes to this Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — 677win will notify registered players by email and/or by a prominent in-platform notification at least 14 days before the changes take effect.

14.3 For non-material changes, such as clarifications of existing language or administrative updates, 677win will update the "Last Updated" date at the top of this Policy and the revised version will take effect immediately upon publication.

14.4 Your continued use of the 677win Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Policy, you may request account closure and withdrawal of your remaining balance by contacting 677win support.

15 Contact Us

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way 677win handles your personal data, please contact the 677win Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly on the 677win Platform

15.2 When contacting us about a data protection matter, please include your registered account username or email address and a clear description of your query or request. This will allow us to locate your account and respond efficiently.

15.3 677win aims to acknowledge all data protection enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex requests, we will notify you within the initial 30-day period if additional time is required, along with an explanation of the reason for the extension.