td7778 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how td7778 ("we," "us," "our," or "td7778") collects, processes, stores, and protects personal data relating to individuals ("you," "player," or "user") who access and use the td7778 website, mobile application, and all associated services (collectively, the "Platform").

This Policy applies to all td7778 users regardless of the device or method used to access the Platform, including players based in Pakistan accessing the service via mobile data, WiFi, or the td7778 downloadable application. By registering an account or using the td7778 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the td7778 Terms & Conditions, which govern the contractual relationship between you and td7778.

2. Data Controller Identity

For the purposes of applicable data protection legislation, td7778 is the data controller responsible for personal data collected through the Platform. The entity operating td7778 is responsible for determining the purposes and means of processing your personal information as described in this Policy.

If you have any questions regarding the identity of the data controller or wish to exercise your privacy rights, please contact td7778 using the details provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration and Account Data

When you create a td7778 account, we collect the information you provide during the registration process, which may include:

• Full legal name
• Date of birth (to verify the 18+ age requirement)
• Email address
• Pakistani mobile telephone number (used for login, OTP, and 2FA)
• Residential address
• Username and password (password stored in hashed form only – never in plain text)

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and age verification requirements, td7778 may request and collect:

• NADRA-issued National Identity Card (CNIC) or valid passport copy
• Proof of address (recent utility bill, bank statement, or equivalent)
• Payment method ownership evidence (e.g., JazzCash or Easypaisa account confirmation)
• Selfie photograph for identity matching where required

3.3 Financial Transaction Data

We record details of all deposits and withdrawals made through your td7778 account, including transaction amounts in PKR, payment method identifiers (masked account numbers), timestamps, and transaction reference numbers.

3.4 Gameplay and Betting Data

td7778 logs records of all bets placed, games played, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical and Device Data

When you access td7778, we automatically collect certain technical information including:

• IP address and approximate geolocation derived therefrom
• Device type, operating system version, and browser type
• Session timestamps and page interaction data
• Unique device identifiers where applicable

3.6 Communications Data

If you contact td7778 support via live chat or email, we retain records of those communications for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

td7778 collects personal data through the following primary channels:

• Direct submission: Information you actively enter during registration, KYC, deposit/withdrawal forms, and support interactions.
• Automated collection: Technical data collected automatically as a consequence of your device connecting to and interacting with the td7778 Platform.
• Payment processors: Transaction confirmation data received from JazzCash, Easypaisa, or other payment service providers when processing your deposits and withdrawals.
• Third-party identity verification services: Where td7778 uses external KYC partners to verify identity documents, relevant verification results are returned to us.

5. Purposes & Legal Basis for Processing

td7778 processes your personal data only where a lawful basis exists. The table below summarises the primary purposes for which we process data and the corresponding legal basis:

6. Sharing of Personal Data

td7778 does not sell your personal data to any third party. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers (JazzCash, Easypaisa, banks, card processors): To process your financial transactions.
• KYC and identity verification partners: To fulfil age verification and anti-money laundering obligations.
• Game software providers: To deliver game content and verify RNG outcomes. Game providers receive only pseudonymous player identifiers, not full personal data.
• IT infrastructure and hosting providers: Contracted service providers who host td7778 systems under strict data processing agreements.
• Regulatory and law enforcement authorities: Where td7778 is legally required to disclose information in response to a valid legal request or regulatory obligation.
• Fraud prevention services: To identify and prevent fraudulent activity that could harm players or td7778.

7. International Data Transfers

td7778 operates internationally, and your personal data may be processed on servers located outside Pakistan. Where personal data is transferred to jurisdictions that may not provide the same level of data protection as your home country, td7778 takes steps to ensure that appropriate safeguards are in place, including the use of standard contractual clauses or equivalent mechanisms with data processors.

8. Data Retention

td7778 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your account and for a period of up to five (5) years following account closure, to satisfy regulatory record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later, in accordance with anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years to support financial record-keeping and potential regulatory inquiry.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to evidence your consent history.
• Support communications: Retained for up to two (2) years from the date of the communication unless retention is required for an ongoing dispute.

9. Cookies & Tracking Technologies

td7778 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device that allow the Platform to recognise your session and preferences.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login session management, security token validation, and core navigation. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience on the td7778 Platform.
• Analytics Cookies: Used in aggregate, anonymised form to understand how players navigate the Platform so we can make improvements. No individual player profiles are created from analytics data.

You can manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging into td7778.

10. Security Measures

td7778 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• 256-bit TLS/SSL encryption for all data in transit between your device and td7778 servers
• Encrypted storage of passwords (bcrypt hashing – passwords are never stored or visible in plain text)
• Access controls restricting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for all td7778 administrative system access
• Regular security audits and penetration testing of the Platform infrastructure
• Intrusion detection systems and 24/7 security monitoring

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. td7778 cannot guarantee absolute security and encourages players to use strong, unique passwords and to enable two-factor authentication on their td7778 accounts.

11. Your Privacy Rights

Depending on the applicable laws of your jurisdiction, you may hold some or all of the following rights with respect to your personal data held by td7778:

• Right of Access: Request a copy of the personal data td7778 holds about you.
• Right of Rectification: Request correction of inaccurate or incomplete personal data.
• Right of Erasure ("Right to be Forgotten"): Request deletion of your personal data where no legitimate ground for continued retention exists. Note that regulatory retention obligations may limit this right in practice.
• Right to Restrict Processing: Request that td7778 pause processing of your data pending resolution of an accuracy dispute or legal claim.
• Right to Data Portability: Request your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: Object to processing based on legitimate interests, including profiling.

To exercise any of these rights, please contact td7778 support. td7778 will respond to verified requests within a reasonable timeframe, typically within 30 days. We may require identity verification before fulfilling a data access or deletion request.

12. Children's Privacy

td7778 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player is under 18, their account will be suspended immediately, all pending transactions will be reviewed, and the account will be closed. Any personal data relating to an under-age individual that is identified will be deleted in accordance with our data retention procedures.

If you believe a minor has registered on td7778, please contact our support team immediately so we can investigate and take appropriate action.

13. Links to Third-Party Services

The td7778 Platform may contain links to or integrate with third-party services such as payment processors (JazzCash, Easypaisa) and game software providers. td7778 is not responsible for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of any third-party services you interact with independently of td7778.

14. Changes to This Policy

td7778 reserves the right to update this Privacy Policy at any time. Where material changes are made, we will notify active account holders via the email address associated with their account or through a prominent notice on the Platform prior to the changes taking effect. The date of the most recent update is displayed at the top of this Policy. Continued use of the td7778 Platform following notification of changes constitutes acceptance of the revised Policy.

15. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint regarding the handling of your personal data, please contact td7778 using the following channels:

• Email: [email protected] (plain text only – not a clickable link)
• In-Platform Live Chat: Available when logged into your td7778 account
• FAQ: Visit our FAQ page for common privacy-related questions

td7778 takes all privacy-related complaints seriously and will acknowledge receipt of your complaint within a reasonable timeframe and work to resolve it promptly. If you are not satisfied with td7778's response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.