dk77 Privacy Policy – How We Handle Your Personal Data

dk77 ("we", "us", "our", "the platform") operates the online gaming platform accessible at dk77.win. As part of operating this platform, dk77 collects and processes personal data about users ("you", "the User") in accordance with applicable data protection principles.

This Privacy Policy sets out in clear terms what personal data dk77 collects, the purposes for which it is processed, the legal basis for that processing, how long it is retained, and what rights you have in relation to your personal data. This Policy applies to all registered users of the dk77 platform globally, with particular relevance to users based in Pakistan.

dk77 is committed to handling personal data responsibly, transparently, and securely. If you have any questions about this Policy or about how dk77 handles your data, please contact our support team at the details provided in Section 13.

dk77 collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data

• Full name as provided during account creation
• Email address
• Date of birth (for age verification purposes)
• Username and encrypted password
• Country of residence (Pakistan or other)
• Mobile number where provided

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (CNIC, passport, or equivalent)
• Proof of address documents
• Selfie or liveness verification image where required
• Source of funds information for high-value accounts as required by compliance obligations

2.3 Financial Transaction Data

• JazzCash, Easypaisa, bank account, or payment card details used for deposits and withdrawals
• Transaction amounts, dates, and method identifiers
• Cryptocurrency wallet addresses where USDT TRC20 is used

2.4 Gaming Activity Data

• Game history, bet amounts, outcomes, and session durations
• Bonus usage and wagering activity
• Sports betting selections and stake history

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session timestamps and platform navigation logs
• Cookie identifiers and similar tracking data

dk77 processes your personal data only for specified, legitimate purposes. The primary purposes for which your data is used include:

• Account management: Creating, maintaining, and securing your dk77 account, processing your login, and communicating account-related information to you.
• Payment processing: Processing deposits and withdrawals via JazzCash, Easypaisa, bank transfer, and other supported PKR payment methods.
• Identity and age verification: Confirming that you meet the 18+ age requirement and verifying your identity as part of our KYC compliance obligations.
• Game delivery: Providing access to casino games, live tables, cricket betting markets, fishing games, and other dk77 gaming products.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, multi-accounting, and other prohibited activities.
• Responsible gaming: Monitoring gaming patterns to identify indicators of problem gambling and applying responsible gaming tools where appropriate.
• Customer support: Responding to support queries, complaints, and dispute resolution requests submitted through live chat or support tickets.
• Legal and regulatory compliance: Meeting obligations under applicable laws and regulations, including AML (Anti-Money Laundering) and CTF (Counter-Terrorism Financing) requirements.
• Platform improvement: Analysing aggregated usage data to improve the dk77 platform, game selection, and user experience.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, and news relevant to dk77 where you have explicitly opted in to marketing communications.

dk77 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the dk77 platform service contract with you — account management, payment processing, game delivery.
• Legal obligation: Processing required to comply with applicable AML, KYC, CTF, and other regulatory requirements applicable to online gaming operators.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, where you have given explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before withdrawal.

dk77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared with the following categories of recipients only where necessary and proportionate:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and USDT TRC20 network processors receive transaction data necessary to process your deposits and withdrawals.
• KYC verification providers: Third-party identity verification services may receive your identity documents to facilitate age and identity verification on behalf of dk77.
• Game providers: Licensed third-party game suppliers who provide live casino tables, RNG slots, and other games may receive session data required to operate their games.
• Security and fraud prevention services: Anti-fraud and cybersecurity providers may receive technical data to help detect and prevent unauthorised access and fraudulent activity.
• Regulatory and law enforcement authorities: dk77 will disclose data to competent regulatory bodies, courts, or law enforcement agencies where required by applicable law or where compelled by lawful authority.

dk77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Indicative retention periods are as follows:

• Account registration data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required by AML regulations.
• KYC and identity documents: Retained for a minimum of five (5) years after the last transaction associated with the verified account, in accordance with applicable compliance requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of activity.
• Customer support communications: Retained for two (2) years from the date of resolution.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for record-keeping purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with dk77's data destruction procedures.

dk77 uses cookies and similar tracking technologies on its platform to deliver a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — maintaining your login session, preventing CSRF attacks, and enabling secure transactions. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency display, and game lobby layout between sessions.
• Analytics cookies: Collect aggregated data on how users navigate the dk77 platform to help us identify areas for improvement. This data does not identify individual users.
• Security cookies: Help detect and prevent bot activity, unauthorised login attempts, and fraudulent transactions.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the dk77 platform. dk77 does not use third-party advertising cookies or tracker networks.

dk77 implements comprehensive technical and organisational security measures to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and dk77 servers is encrypted using 256-bit SSL/TLS.
• Passwords are stored exclusively as cryptographic hashes — they are never stored in or accessible as plain text.
• Access to personal data is restricted to authorised dk77 personnel on a strict need-to-know basis.
• KYC documents are stored in encrypted, access-controlled storage environments.
• Regular security audits and penetration testing are conducted on dk77 infrastructure.
• Two-factor authentication is available for all user accounts and is mandatory for administrative access.

Subject to applicable law, you have the following rights in relation to your personal data held by dk77:

• Right of access: You may request a copy of the personal data dk77 holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by dk77.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to dk77's legal retention obligations — data required for regulatory compliance cannot be deleted before the applicable retention period expires.
• Right to restriction of processing: You may request that dk77 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on your consent or a contract, you may request that dk77 provide your personal data in a machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including profiling, subject to dk77's overriding legitimate grounds.

To exercise any of these rights, please contact the dk77 support team. dk77 will respond to data requests within thirty (30) calendar days of receipt. Identity verification may be required before processing a data request.

The dk77 platform is strictly intended for users aged 18 years and over. dk77 does not knowingly collect, process, or retain personal data from individuals under the age of 18. If dk77 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed and the data deleted in accordance with our data destruction procedures.

If you are aware of a minor who has accessed the dk77 platform, please notify us immediately via the support contact details in Section 13.

The dk77 platform integrates third-party services including game providers, payment processors, and identity verification services. These third parties operate under their own privacy policies and data processing agreements with dk77. dk77 ensures that all third-party data processors who handle dk77 user data are bound by appropriate contractual data protection obligations.

The dk77 platform does not contain links to external third-party websites other than as required to process payments or operate integrated game services. dk77 is not responsible for the privacy practices of third-party services accessed independently by users outside the dk77 platform.

dk77 may update this Privacy Policy periodically to reflect changes in data practices, legal requirements, or platform operations. Where changes are material, dk77 will notify registered users via their registered email address or through a prominent notice on the platform prior to the effective date of the change.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the dk77 platform following a policy update constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by dk77, please contact our team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 on the dk77 platform after account login
• Support Tickets: Accessible from your dk77 account dashboard

dk77 aims to acknowledge all privacy-related queries within 48 hours and to provide a full response within 30 calendar days. For complex data access or deletion requests, we may extend the response period by a further 30 days where necessary, and will inform you of any such extension.