677cx Privacy Policy 2026

677cx ("we", "us", "our") is committed to protecting the privacy and personal data of every player who accesses our online casino and sports betting platform at 677cx.net. This Privacy Policy has been prepared in accordance with internationally recognised data protection standards and reflects our obligations as an internationally licensed online gaming operator serving players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and beyond.

This Privacy Policy applies to all personal data collected, processed, stored, and transmitted through the 677cx Platform — whether you access it via desktop browser, mobile-optimised site, or any associated application. It covers data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications.

By creating a 677cx Account or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact us to request Account closure.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is 677cx, operating under an international gaming licence. As data controller, 677cx determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and requests to exercise your data rights should be directed to our Data Protection team via:

• Email: [email protected] — please mark your subject line "Data Protection Request"
• Live Chat: Available 24/7 on the 677cx Platform

We aim to acknowledge all data-related requests within 48 hours and to provide a substantive response within 30 calendar days of receipt. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

677cx collects only the personal data that is necessary and proportionate for the specific purposes set out in Section 5 of this Policy. The categories of personal data we may collect include:

We do not collect special categories of sensitive personal data (such as health information, religious beliefs, or biometric data) unless specifically required by applicable law or regulation and only with your explicit prior consent.

677cx collects your personal data through the following channels and methods:

• Direct Provision: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to promotional surveys.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar tracking technologies. See Section 7 for full cookie details.
• Payment Processors: Transaction confirmation data shared by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Visa, Mastercard, and USDT TRC20 network records when you initiate a deposit or withdrawal.
• Identity Verification Services: During the KYC process, 677cx may use third-party identity verification providers to validate documents such as CNIC or passport. These providers process your document data strictly in accordance with their own privacy policies and our data processing agreements.
• Game Providers: Round-level gameplay data (bet amount, outcome, timestamp) received from third-party game providers whose titles are hosted on the 677cx Platform.
• Anti-Fraud Systems: Behavioural and technical signals collected by our fraud detection systems to identify unusual account activity, bonus abuse, or unauthorised access attempts.

677cx processes your personal data only where we have a valid legal basis to do so. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where we rely on legitimate interest as the legal basis, we have assessed that our legitimate interest is not overridden by your privacy rights and interests. You have the right to object to processing based on legitimate interest — see Section 10 for details on how to exercise this right.

677cx does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of third parties strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Visa, Mastercard, and USDT TRC20 network processors receive the minimum data required to execute your deposit or withdrawal transaction.
• KYC & Identity Verification Providers: Third-party identity verification services that validate your CNIC, passport, or other documents during the account verification process. These providers operate under strict data processing agreements with 677cx.
• Game Providers: Casino and live dealer game providers receive a session token and stake data necessary to deliver gameplay. They do not receive your full identity or payment details.
• Fraud Prevention & Security Services: Anti-fraud platforms and cybersecurity providers who assist in monitoring the Platform for unauthorised access, collusion, and suspicious betting patterns.
• Regulatory & Legal Authorities: We may disclose your data to our licensing authority, law enforcement agencies, or financial intelligence units where required by applicable law, court order, or regulatory direction — including in the context of anti-money laundering compliance.
• Professional Advisors: Lawyers, auditors, and accountants engaged by 677cx on a confidential basis in connection with legal proceedings, audits, or regulatory enquiries.

All third-party data processors engaged by 677cx are contractually obligated to process your data only on our documented instructions, to maintain appropriate security standards, and to not process your data for any independent purpose of their own.

677cx uses cookies and similar tracking technologies on the Platform to deliver core functionality, improve user experience, and gather analytical data about how Pakistani players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, anti-CSRF tokens, and load-balancing cookies. These cookies cannot be disabled without affecting Platform functionality. No consent is required for strictly necessary cookies.
• Functional Cookies: Used to remember your preferences such as language settings, preferred lobby view, and responsible gaming limits you have set. Disabling these cookies may affect your experience but will not prevent access to the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about page visits, session durations, and navigation paths on the Platform. This data helps 677cx improve content quality, identify technical issues, and optimise game lobby layouts.
• Security & Fraud Detection Cookies: Used by our fraud prevention systems to detect bot activity, multiple account creation attempts, and unusual login patterns. These cookies contribute to the overall security of all players' accounts on the Platform.

You may manage your cookie preferences through your browser settings at any time. Please note that blocking all cookies may prevent certain Platform features from operating correctly. 677cx does not use third-party advertising or behavioural targeting cookies.

677cx retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by our international gaming licence obligations, applicable anti-money laundering regulations, and other legal requirements. Our standard retention periods are as follows:

• Account Data (identity, contact, KYC documents): Retained for the duration of your active Account plus a minimum of five years following Account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction & Bet History: Retained for a minimum of five years from the date of the transaction or bet, for regulatory audit and dispute resolution purposes.
• Customer Support Communications: Retained for two years from the date of the last interaction, to support quality assurance and complaint resolution.
• Technical & Usage Data (logs, IP records): Retained for 12 months, after which they are anonymised or deleted. Fraud investigation logs may be retained longer where an active investigation is ongoing.
• Marketing Preference Records: Retained for the life of the Account and for three years following Account closure, to maintain an auditable record of consent and opt-out requests.

When retention periods expire and there is no legal basis to retain data further, 677cx securely destroys or permanently anonymises the relevant personal data. Anonymised data may be retained indefinitely for statistical and platform improvement purposes.

677cx implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, and destruction. Our security infrastructure includes:

• Enterprise-Grade SSL/TLS Encryption: All data transmitted between your device and 677cx servers is encrypted using industry-standard TLS 1.2 or higher — the same encryption protocol used by Pakistan's major commercial banks for internet banking.
• Data Encryption at Rest: Sensitive personal data, including identity documents, financial account references, and KYC records, are stored in encrypted form on 677cx servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 677cx employees access only the data required for their specific role. All data access events are logged and monitored.
• Multi-Factor Authentication: Internal systems holding player data are protected by multi-factor authentication to prevent unauthorised staff access.
• Regular Security Audits: 677cx conducts regular penetration testing and security audits of its Platform infrastructure, carried out by independent third-party cybersecurity specialists.
• Incident Response: 677cx maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

While 677cx takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is entirely infallible. You also have a responsibility to keep your Account credentials secure — see Section 4 of our Terms & Conditions for your obligations in this regard.

677cx recognises and respects your rights over your personal data. Depending on the circumstances, you may be entitled to exercise the following rights:

• Right of Access: You may request a copy of all personal data that 677cx holds about you. This is commonly known as a Subject Access Request (SAR). We will provide a response within 30 calendar days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update many details directly within your Account settings; for other corrections, contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that legal and regulatory retention obligations (such as anti-money laundering requirements) may prevent immediate deletion of certain data.
• Right to Restriction of Processing: You may request that 677cx restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 677cx in a structured, commonly used, machine-readable format, and to request that this data be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your data where we rely on legitimate interest as the legal basis. You also have an absolute right to opt out of marketing communications at any time, free of charge.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, contact our Data Protection team at [email protected] with the subject line "Data Rights Request", providing your registered name and Account email address for verification purposes. We will not charge a fee for exercising your data rights unless a request is manifestly unfounded or excessive.

The 677cx Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the 677cx KYC process, and we will not process any real-money transactions for any Account that cannot demonstrate the holder is at least 21 years of age.

If 677cx becomes aware that personal data has been collected from a person under the age of 21 — whether through our own detection systems or as a result of a report from a parent or guardian — we will immediately:

• Suspend the Account and freeze all associated balances pending investigation.
• Delete all personal data associated with the Account to the extent permitted by applicable legal obligations.
• Notify the parent or guardian where contact information is available.
• Report the matter to relevant authorities where required by law.

Parents and guardians who believe their child may have accessed the 677cx Platform are urged to contact us immediately at [email protected]. We also strongly recommend the use of parental control software to prevent underage access to online gaming platforms.

The 677cx Platform may from time to time contain references to or integrations with third-party services, including payment processors and game providers. While 677cx takes reasonable steps to work only with reputable third parties, we have no control over the privacy practices of external organisations and are not responsible for the content or privacy policies of any third-party service.

When you interact with a third-party payment processor — for example, completing a JazzCash deposit via the JazzCash gateway — you are subject to that provider's own privacy policy and terms of service in addition to this Policy. We encourage you to review the privacy policies of any third-party service with which you interact through or in connection with the 677cx Platform.

This Privacy Policy applies solely to data collected and processed directly by 677cx through the 677cx Platform. It does not apply to any data collected by third-party operators, payment networks, or telecommunications providers.

677cx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Post the revised Privacy Policy on the 677cx Platform with a clearly updated "Last Updated" date at the top of this page.
• Send a notification to your registered email address summarising the key changes, at least 14 days before the updated Policy takes effect.
• Where required by law, seek fresh consent for any new processing activities that are materially different from those described in the prior version of this Policy.

Your continued use of the 677cx Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to any update, you should cease using the Platform and request Account closure prior to the effective date of the change.

We recommend bookmarking this page and reviewing it periodically, particularly at the start of major PSL seasons or other promotional periods when new data processing activities may be introduced.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 677cx handles your personal data, please reach out to our Data Protection team through any of the following channels:

• Email: [email protected] — Subject line: "Privacy / Data Protection"
• Live Chat: Available 24/7 on the 677cx Platform — average response under two minutes

We are committed to resolving all privacy-related enquiries promptly and transparently. Our support team is fully familiar with the Pakistani banking and identity verification context and can assist you in plain, accessible English.