28x777 Privacy Policy
At 28x777, we take the privacy of our players seriously. This Privacy Policy explains exactly what personal information 28x777 collects from Pakistani players, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own data. Please read this document in full before creating or continuing to use your 28x777 account.
Our Core Privacy Commitments — Summary Only, Not a Substitute for Full Policy
End-to-End Encryption
All data transmitted between your device and 28x777 is encrypted using industry-standard SSL/TLS technology. Your CNIC details, payment information, and account credentials are never transmitted or stored in plain text on the 28x777 platform.
CNIC Data Handled Securely
28x777 collects CNIC data solely for mandatory identity verification and age confirmation (21+). CNIC documents are handled in accordance with applicable KYC regulations and are never shared with third parties outside of legally mandated compliance obligations.
No Data Sold to Third Parties
28x777 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing or commercial purposes. Data shared with service partners (payment processors, game providers) is strictly limited to what is necessary for the delivery of 28x777 services.
Transparent Data Use
28x777 only collects personal data that is necessary for operating the platform, verifying player identity, processing PKR transactions, and complying with regulatory requirements. We do not collect data beyond what is described in this Privacy Policy.
Your Rights Are Respected
As a 28x777 player, you have rights over your personal data — including the right to access, correct, and in certain circumstances request deletion of your data. These rights are described in full within this Privacy Policy and can be exercised by contacting 28x777 support.
Defined Retention Periods
28x777 does not retain personal data indefinitely. Retention periods are set based on operational necessity and applicable legal requirements. When data is no longer required for the purpose for which it was collected, it is securely deleted or anonymised.
Important: This Privacy Policy applies to all personal data collected and processed by 28x777 in connection with your use of the platform at 28x777.org, including all associated products and services. By using 28x777, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
28x777 is an internationally licensed online gaming and sports betting platform operating at 28x777.org. The platform offers cricket betting, live casino games, slot games, fishing games, lottery products, and the 28x777 VIP Programme — all denominated in Pakistani Rupees (PKR) and accessible to verified Pakistani players aged 21 and above.
For the purposes of this Privacy Policy, "28x777", "we", "us", or "our" refers to the operator of the 28x777 platform. "You" or "your" refers to any individual who accesses, registers on, or otherwise uses the 28x777 platform in any capacity.
28x777 acts as the data controller in respect of personal data collected through the platform. This means 28x777 determines the purposes for which and the means by which your personal data is processed. Where 28x777 engages third-party processors (such as payment providers or KYC verification services), those parties act strictly on 28x777's instructions and are bound by appropriate data processing agreements.
2. Personal Data We Collect
28x777 collects the following categories of personal data from players:
2.1 Identity Data
- Full legal name (as it appears on your CNIC)
- CNIC number and a copy of your Computerised National Identity Card issued by NADRA
- Date of birth (used to verify the mandatory 21+ age requirement)
- Photograph (where provided as part of identity verification)
- Gender
2.2 Contact Data
- Email address registered to your 28x777 account
- Mobile phone number (used for account verification and two-factor authentication)
- City and province of residence within Pakistan (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)
2.3 Financial Data
- Payment method details used for deposits and withdrawals (JazzCash account number, EasyPaisa account number, HBL account details, UBL account details, or Meezan Bank account details)
- Transaction history, including deposit amounts, withdrawal amounts, and dates of transactions — all denominated in PKR
- Bonus credits received and wagering activity relating to those credits
2.4 Technical Data
- IP address at the time of registration and each subsequent login
- Device type, operating system, and browser information
- Session duration and timestamps
- Geolocation data (city or region level, derived from IP address)
2.5 Usage & Behavioural Data
- Betting and gaming history, including markets wagered on, stake amounts (PKR), and outcomes
- Game preferences and session activity patterns
- Pages visited within the 28x777 platform and navigation behaviour
- Customer support interactions, including chat logs and email correspondence
2.6 Responsible Gaming Data
- Self-exclusion requests and status
- Deposit limit settings and any modifications made to those limits
- Any responsible gaming assessments conducted at your request or as part of 28x777's proactive monitoring obligations
28x777 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC photograph for identity purposes), or health data, unless you voluntarily provide health-related information in the context of a responsible gaming request.
3. How We Collect Your Data
28x777 collects personal data through the following means:
- Direct Submission: Data you provide when registering your 28x777 account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
- Automated Collection: Technical and usage data collected automatically when you access or use the 28x777 platform, including through cookies, server logs, and analytics tools embedded in the platform.
- Third-Party Sources: Identity verification data confirmed through KYC service providers; fraud screening data from anti-fraud partners; payment verification data from payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.
- Publicly Available Sources: In limited circumstances, 28x777 may cross-reference publicly available information (such as sanctions lists or regulatory databases) as part of its compliance obligations.
4. How 28x777 Uses Your Personal Data
The following table summarises the primary purposes for which 28x777 processes your personal data:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract performance |
| Age and identity verification (21+ KYC) | Identity (CNIC) | Legal obligation |
| Processing PKR deposits and withdrawals | Financial, Identity | Contract performance |
| Providing betting and gaming services | Identity, Usage, Financial | Contract performance |
| Anti-money laundering (AML) compliance | Identity, Financial, Technical | Legal obligation |
| Fraud prevention and security monitoring | Technical, Identity, Financial | Legitimate interest |
| Responsible gaming monitoring and tools | Usage, Financial, RG Data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Identity, Contact, Usage | Contract performance |
| Marketing communications (with consent) | Contact, Usage | Consent |
| Platform analytics and improvement | Technical, Usage | Legitimate interest |
28x777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.
5. Legal Bases for Processing
28x777 processes personal data only where a valid legal basis exists. The legal bases relied upon by 28x777 are:
- Contract Performance: Processing necessary to deliver the 28x777 services you have signed up for, including account management, betting services, and financial transactions in PKR.
- Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering obligations, and responsible gaming regulatory requirements.
- Legitimate Interest: Processing carried out for the legitimate operational interests of 28x777, including fraud prevention, platform security, abuse detection, and improving the quality of the platform — provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to direct marketing communications. You may withdraw consent at any time by contacting 28x777 support at [email protected] or using the unsubscribe function in any marketing communication.
6. Data Sharing & Disclosure
28x777 does not sell your personal data. We share personal data only in the following limited circumstances:
6.1 Service Providers & Data Processors
28x777 engages carefully selected third-party service providers who process data on our behalf, strictly under written data processing agreements. These include:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, to facilitate PKR deposits and withdrawals.
- KYC and identity verification providers: To validate CNIC documents and confirm player eligibility.
- Game content providers: Who supply casino, slot, and fishing game software integrated into the 28x777 platform. Game providers receive only the minimum data necessary for session management.
- IT infrastructure and hosting providers: Who provide the server and cloud infrastructure on which the 28x777 platform operates.
- Analytics and fraud prevention tools: Used to protect the platform and improve service quality.
6.2 Regulatory and Legal Disclosures
28x777 may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or in connection with the investigation of criminal activity including fraud or money laundering. Such disclosures are made only to the extent legally required and 28x777 will, where permitted by law, notify you of any such disclosure.
6.3 Business Transfers
In the event of a merger, acquisition, asset sale, or other business restructuring involving 28x777, your personal data may be transferred to the acquiring entity as part of that transaction. 28x777 will notify you prior to any such transfer and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.
28x777 will never share your CNIC details, financial data, or betting history with advertisers, data brokers, or any commercial third party for marketing purposes. Any request purporting to be from 28x777 asking you to share your credentials with a third party should be treated as fraudulent.
7. International Data Transfers
28x777 operates under an international regulatory framework and some of its service providers and infrastructure partners may be located outside Pakistan. Where personal data is transferred internationally, 28x777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.
Safeguards for international transfers include: contractual data protection clauses binding the recipient to appropriate data handling standards; transfers only to jurisdictions with recognised adequate data protection frameworks; and technical security controls (encryption, access controls) applied regardless of the processing location.
You may request information about the specific safeguards applied to any international transfer of your personal data by contacting 28x777 support at [email protected].
8. Data Retention
28x777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or regulation. The following general retention principles apply:
- Active Account Data: Retained for the duration of your active 28x777 account relationship and for a period thereafter as required by AML and gaming regulatory obligations.
- KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required by applicable anti-money laundering regulations.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping obligations.
- Customer Support Correspondence: Retained for three (3) years from the date of the interaction, unless the subject matter relates to a legal dispute, in which case records are retained until the dispute is fully resolved.
- Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.
- Anonymised Analytics Data: May be retained indefinitely as it no longer constitutes personal data once anonymised.
When personal data is no longer required, 28x777 securely deletes or anonymises it using industry-standard data destruction methods.
9. Security Measures
28x777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS Encryption: All data transmitted between your device and 28x777 is encrypted in transit using industry-standard SSL/TLS protocols.
- Encryption at Rest: Sensitive data fields — including CNIC numbers and payment account details — are encrypted in the 28x777 database.
- Access Controls: Access to personal data within 28x777's systems is restricted on a need-to-know basis. Staff members are granted only the minimum level of access required to perform their role.
- Two-Factor Authentication: Available to all 28x777 players for account login, and required for certain high-risk account actions.
- Security Monitoring: 28x777's systems are continuously monitored for suspicious activity, unauthorised access attempts, and anomalous transaction patterns.
- Regular Security Assessments: 28x777 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
Notwithstanding these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own 28x777 account credentials. If you suspect your account has been compromised, contact 28x777 support immediately at [email protected].
10. Cookies & Tracking Technologies
28x777 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and detect fraudulent activity. The categories of cookies used by 28x777 are as follows:
10.1 Strictly Necessary Cookies
These cookies are essential for the 28x777 platform to function. They enable core features such as session management, secure login, and the shopping cart functionality in the deposit flow. These cookies cannot be disabled as the platform would not function without them.
10.2 Functional Cookies
Functional cookies remember your preferences — such as language settings, preferred payment method, and display preferences — to provide a more personalised experience on 28x777. These cookies do not track your activity across other websites.
10.3 Analytics Cookies
28x777 uses analytics cookies to understand how players use the platform — which pages are most visited, where players encounter difficulties, and how navigation patterns flow. This data is used in aggregate and anonymised form to improve the 28x777 platform experience. You may opt out of analytics cookies without affecting the core functionality of 28x777.
10.4 Security & Fraud Prevention Cookies
These cookies help 28x777 detect and prevent fraudulent activity, identify bot traffic, and protect the security of all players on the platform. They are considered necessary for the safe operation of 28x777 and cannot be disabled.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 28x777 platform. Detailed cookie settings are also available within your 28x777 account preferences.
11. Your Data Rights
As a 28x777 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact 28x777 support at [email protected] with the subject line "Data Rights Request":
Right of Access
You have the right to request a copy of all personal data that 28x777 holds about you, along with information about how that data is being used. 28x777 will respond to verified access requests within a reasonable timeframe.
Right to Rectification
If any personal data held by 28x777 about you is inaccurate or incomplete, you have the right to request its correction. Some corrections (such as changes to your registered name) may require additional identity verification documentation.
Right to Erasure
In certain circumstances, you may request that 28x777 delete your personal data. This right is subject to limitations — for example, 28x777 is legally required to retain KYC and financial transaction records for a minimum of five years and cannot delete these at your request.
Right to Restriction
You may request that 28x777 restrict the processing of your personal data in specific circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing based on legitimate interest grounds.
Right to Data Portability
Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
Right to Object
You have the right to object to the processing of your personal data where 28x777 relies on legitimate interest as its legal basis. You also have an absolute right to object to the use of your personal data for direct marketing purposes at any time.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any 28x777 marketing email or contact support directly.
28x777 will acknowledge all data rights requests within 5 business days and will endeavour to fully respond within 30 calendar days. Complex requests may require additional time, in which case 28x777 will notify you of the extended timeframe. All requests must be submitted from the email address registered to your 28x777 account for identity verification purposes.
12. Children & Minors
The 28x777 platform is strictly restricted to individuals aged 21 years and above. 28x777 does not knowingly collect personal data from any individual under the age of 21. CNIC verification is mandatory for all players prior to real-money play, and this process is specifically designed to confirm that no player is below the minimum age threshold.
If 28x777 becomes aware or has reasonable grounds to believe that a person under the age of 21 has registered an account or provided personal data, 28x777 will immediately:
- Suspend and permanently close the account;
- Forfeit any balance held in the account;
- Delete all personal data associated with the underage account as far as legally permissible; and
- Where appropriate, report the matter to relevant regulatory or child protection authorities.
If you are a parent or guardian and believe that a minor may have accessed or registered on 28x777, please contact us immediately at [email protected] with the subject line "Underage Account" so that we can investigate and take immediate action.
13. Policy Updates
28x777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, 28x777 will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the 28x777 platform prior to the changes taking effect.
The effective date displayed at the top of this document will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how 28x777 protects your data. Continued use of the 28x777 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 28x777 handles your personal data, please contact our support team using the details below:
- Email: [email protected]
- Subject Line for Data Requests: Data Rights Request
- Subject Line for Underage Concerns: Underage Account
- Support Hours: 24 hours a day, 7 days a week
- Primary Time Zone: Pakistan Standard Time (PKT, UTC+5)
All privacy-related requests submitted to 28x777 are handled with strict confidentiality. Requests must be submitted from the email address registered to your 28x777 account so that we can verify your identity before processing the request. We aim to acknowledge all privacy enquiries within 5 business days.
Play with Confidence on 28x777
Your privacy is a priority at 28x777. With SSL encryption, strict CNIC verification, and no data sold to third parties, you can focus on cricket betting, slots, and live casino — all in PKR via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank. For players aged 21 and above only.