Privacy Policy — How w677 Protects Your Data

w677 (referred to in this policy as "w677", "we", "us", or "our") is an internationally licensed online gaming and sports betting platform operating at w677.org. The platform offers cricket betting, live casino games, slot games, and fishing games to adult players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, and Faisalabad.

For the purposes of this Privacy Policy, w677 is the data controller responsible for the personal information collected from registered players and website visitors. This policy applies to all data processing activities carried out in connection with the w677 website, account portal, mobile browser interface, and any related communications.

w677 collects personal data across several categories depending on how you interact with the platform. The categories of data collected are as follows:

w677 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification purposes under KYC obligations.

Personal data collected by w677 is processed for the following specific purposes only. No data is used for any purpose not listed below without prior notification and, where required, your explicit consent.

• Account creation and management: To register your account, verify your identity, and maintain your player profile throughout your time with w677.
• Payment processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT, and to maintain an accurate transaction record.
• KYC and AML compliance: To verify your identity and source of funds as required under our international gaming licence obligations and applicable anti-money laundering standards.
• Service delivery: To provide access to cricket betting markets, live casino tables, slot games, fishing games, and promotional offers.
• Responsible gaming monitoring: To track gaming behaviour patterns, identify potential indicators of problem gambling, and enforce deposit limits, session reminders, and self-exclusion requests in accordance with our Responsible Gaming commitments.
• Customer support: To respond to account queries, payment issues, complaints, and general enquiries via live chat and email.
• Fraud prevention and security: To detect and prevent unauthorised access, account fraud, bonus abuse, and other prohibited activities outlined in the Terms and Conditions.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the platform's performance, user experience, and game selection.
• Marketing communications: Where you have opted in, to send promotional offers, bonus notifications, and platform updates via email or SMS. You may opt out at any time.

w677 processes personal data under one or more of the following lawful bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including account registration, payment processing, and game access.
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and record-keeping requirements under our international gaming licence.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and service improvement where our interests do not override your fundamental privacy rights.
• Consent: Processing of your data for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

w677 does not sell, rent, or commercially share your personal data with third parties. Data is disclosed only to the categories of recipients listed below, and only to the extent necessary to fulfil the stated purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive the minimum financial data required to process your transactions securely.
• Identity verification services: Third-party KYC providers who verify identity documents and screen against international sanctions and PEP (Politically Exposed Persons) lists as required under our licence.
• Gaming software providers: Licensed game developers and live dealer studios who supply games to the w677 platform. These providers receive only the session and stake data necessary to deliver the game experience.
• Fraud and security platforms: Specialist services used to detect and prevent account fraud, bonus abuse, and suspicious betting patterns.
• Regulatory and licensing authorities: Our licensing authority and any other regulatory body with a legitimate legal right to request player account or transaction data.
• Law enforcement: Pakistani or international law enforcement agencies where we are legally required to disclose information in connection with a formal investigation or court order.

The w677 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised gaming experience. Cookies are small text files stored on your device when you visit the platform.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into or using the w677 platform. Responsible gaming cookies cannot be disabled as they form part of our licence-mandated player protection obligations.

w677 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

• Active accounts: Personal and gaming data is retained for the full duration of your active account relationship with w677.
• Closed accounts: Following account closure, identity and transaction records are retained for a minimum of five (5) years in accordance with AML and gaming licence record-keeping requirements.
• Self-excluded players: Self-exclusion records are retained indefinitely to prevent re-registration during or after the exclusion period.
• Marketing data: Where consent for marketing has been withdrawn, contact data used solely for marketing purposes is removed from active marketing lists within 30 days of the opt-out request.
• Support communications: Live chat transcripts and support emails are retained for up to three (3) years for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.

w677 implements a comprehensive set of technical and organisational security measures designed to protect player data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption: All data in transit between your browser and the w677 platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption at rest: Sensitive stored data, including financial identifiers and identity documents, is encrypted at rest using AES-256 grade encryption.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff with data access rights are subject to confidentiality obligations and regular security training.
• Intrusion detection: The platform operates continuous monitoring systems designed to detect and respond to unauthorised access attempts in real time.
• Penetration testing: Regular third-party security audits and penetration tests are conducted to identify and remediate vulnerabilities before they can be exploited.
• Incident response: w677 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected individuals and the relevant regulatory authority will be notified in accordance with applicable requirements.

As a w677 account holder, you hold the following rights in relation to your personal data. All rights requests should be submitted through the live chat support function or by email to the address provided in Section 13.

• Right of access: You may request a copy of all personal data held about you by w677, along with information on how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to w677.
• Right to object: You may object to processing of your data where it is based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting prior lawful processing.

w677 will acknowledge all data rights requests within 5 business days and aim to resolve them within 30 calendar days. In complex cases, this period may be extended by a further 30 days with notification to the requesting player.

w677 may send you promotional communications — including bonus offers, PSL betting promotions, new game announcements, and seasonal campaigns — only where you have given explicit opt-in consent during registration or through your account settings.

Marketing communications may be delivered via email or SMS to the contact details registered on your account. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from w677.
• Updating your communication preferences in your account settings dashboard.
• Contacting the w677 support team via live chat and requesting removal from all marketing lists.

Opting out of marketing does not affect transactional communications such as account verification emails, deposit confirmations, withdrawal notifications, or security alerts. These communications are sent on the basis of contractual necessity and cannot be unsubscribed from while your account remains active.

The w677 platform is strictly restricted to individuals aged 21 years and above. The platform does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If w677 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be closed immediately, any balance will be returned via the original payment method (subject to verification), and all associated personal data will be deleted from our systems without undue delay.

w677 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, licensing obligations, or platform services. The date of the most recent revision is displayed at the top of this document.

Where changes to this policy are material — meaning they meaningfully affect how we collect, use, or share your personal data — w677 will provide reasonable advance notice via a notification on the platform or by email to your registered address. Continued use of the platform following the effective date of a revised policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how w677 protects your information. Historical versions of this policy are available on request through the support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how w677 has handled your personal information, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the w677 platform. This is the fastest way to reach the support team.
• Email: [email protected] — for formal data rights requests and privacy complaints. Please include your registered account username and a brief description of your request.

w677 takes all privacy complaints seriously. Upon receipt of a formal complaint, we will acknowledge it within 2 business days and provide a substantive response within 14 calendar days. Where a complaint relates to a potential data breach or serious misuse of personal data, it will be escalated to senior management immediately.

If you are not satisfied with the outcome of your complaint following our internal review, you may escalate the matter to the relevant supervisory authority under w677's international gaming licence jurisdiction.