Privacy Policy —
How w677 Protects Your Data

Introduction

w677 is committed to protecting the privacy of every Pakistani player who uses our platform. We understand that trust is the foundation of any online gaming relationship, and we take our data protection obligations seriously. This Privacy Policy has been written in plain, readable English so that all w677 users — whether based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan — can clearly understand how their information is handled.

This document forms part of the overall agreement between you and w677, alongside the w677 Terms & Conditions and Responsible Gaming Policy. Together, these documents govern your relationship with the w677 platform. Where this Privacy Policy conflicts with any general terms, this Privacy Policy shall prevail in matters specifically relating to personal data.

The w677 platform collects only the information that is genuinely necessary to deliver a safe, fair, and properly regulated online gaming experience. We do not collect data for its own sake. Every category of data collected by w677 has a specific, documented purpose — and we explain each of those purposes transparently in this document.

Data We Collect

w677 collects personal data in several categories, depending on the nature of your interaction with the platform. The following table outlines the main categories of data we collect and typical examples within each category.

w677 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes under applicable KYC regulations.

How We Collect Data

w677 collects personal data through several distinct channels, depending on how you interact with the platform. Understanding these collection methods helps you make informed decisions about the information you provide.

• Direct Registration: When you create a w677 account, you voluntarily provide your name, date of birth, contact details, and chosen login credentials. This is the primary source of your identity and contact data.
• KYC Submission: When you submit identity verification documents — such as a copy of your CNIC or proof of address — w677 collects and stores these as part of the mandatory verification process.
• Transactions: Every deposit and withdrawal you make on w677 generates a transaction record that includes payment method details, amounts, timestamps, and processing status.
• Platform Usage: w677's systems automatically record technical data — including your IP address, device identifiers, and session activity — each time you access the platform.
• Cookies & Tracking Technologies: w677 uses first-party cookies and similar technologies to maintain session state, remember your preferences, and analyse platform performance. See Section 8 for full details.
• Customer Support Interactions: When you contact our support team by email or live chat, the content of those interactions is recorded and retained to maintain service quality and resolve disputes.
• Third-Party Verification Services: w677 may use third-party identity verification providers to confirm the authenticity of KYC documents. These providers act as data processors under contract with w677 and are bound by strict confidentiality obligations.

Why We Use Your Data

Every piece of data that w677 collects serves one or more specific operational, legal, or regulatory purposes. We do not process your personal data for any purpose that has not been disclosed to you in this Privacy Policy.

• Account Creation & Management: To register your w677 account, verify your identity, maintain your account balance, and process your gaming activity.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK accurately and securely.
• Regulatory Compliance (KYC/AML): To meet our obligations under international anti-money laundering (AML) and Know Your Customer (KYC) regulations, which require us to verify the identity of all players and monitor transactions for suspicious activity.
• Responsible Gaming: To monitor gambling behaviour and identify patterns that may indicate problem gambling, enabling us to reach out proactively and provide support tools where appropriate.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent account activity, unauthorised access, and misuse of the w677 platform.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of our communications with you.
• Platform Improvement: To analyse aggregated usage data and improve the technical performance, game selection, and user experience of the w677 platform.
• Marketing Communications: To send you promotional offers, bonus announcements, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

Legal Basis for Processing

w677 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between you and w677 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC, AML, and gaming licence requirements under international regulatory frameworks.
• Legitimate Interest: Processing is carried out in pursuit of w677's legitimate business interests — including fraud prevention, platform security, and service improvement — provided those interests do not override your fundamental rights and freedoms.
• Consent: For optional data processing activities such as marketing communications, w677 relies on your explicit, freely given consent. You may withdraw consent at any time by contacting support or updating your account preferences.

Data Sharing & Disclosure

w677 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to deliver our services effectively and comply with our legal obligations, we do share certain data with trusted third-party service providers who act as data processors on our behalf.

Categories of third parties with whom w677 may share your data include:

• Payment Processors: JazzCash, EasyPaisa, Raast, and banking partners (HBL, UBL, Meezan, 1LINK) receive transaction-level data necessary to process your PKR deposits and withdrawals.
• Identity Verification Providers: Third-party KYC/AML service providers who assist w677 in verifying the authenticity of identity documents.
• Gaming Software Providers: Game studios and platform providers whose software powers w677 casino games may receive anonymised or pseudonymised session data for technical and audit purposes.
• Regulatory Authorities: Where required by law or our gaming licence conditions, w677 may disclose player data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• IT & Security Providers: Hosting, cloud infrastructure, and cybersecurity service providers who maintain the technical environment in which w677 operates.

PKR Payment Data

Given the specific payment landscape in Pakistan, w677 handles financial data from local payment providers — including JazzCash mobile wallet numbers, EasyPaisa account details, Raast IDs, and bank account information for HBL, UBL, Meezan Bank, and 1LINK — with a particularly high standard of care.

Payment data is used exclusively for the processing of your w677 deposits and withdrawals. w677 does not store full bank account numbers or complete mobile wallet credentials on our own servers in plaintext. All financial data at rest is encrypted using industry-standard AES-256 encryption.

• Payment method details are stored only in tokenised or encrypted form.
• Full financial account numbers are never visible to w677 customer support staff.
• Transaction records are retained for a minimum of five (5) years in line with AML regulatory requirements.
• Payment data is never shared with any third party other than the relevant payment provider processing your specific transaction.

Cookies & Tracking Technologies

w677 uses cookies and similar browser-based tracking technologies to operate the platform effectively. Cookies are small text files stored in your browser that allow w677 to recognise your device across sessions, maintain your login state, and remember your account preferences.

w677 does not use third-party advertising cookies or cross-site tracking technologies. All cookies placed by w677 are first-party cookies tied directly to the w677.vip domain. You can manage or clear cookies at any time through your browser settings, though disabling essential cookies will prevent you from logging in to your w677 account.

Data Retention

w677 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your w677 account being open, plus a minimum of five (5) years following account closure — in line with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, regardless of account status.
• KYC Documents: Retained for a minimum of five (5) years following account closure, or longer if required by applicable law.
• Support Communications: Retained for three (3) years from the date of the interaction, or longer if the communication relates to a dispute or ongoing investigation.
• Marketing Preferences: Retained until you withdraw consent or close your account, plus a brief suppression period to prevent accidental re-subscription.
• Technical & Log Data: Retained for up to twelve (12) months from collection, unless required to be retained longer for security investigation purposes.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Data Security

w677 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following core measures:

• TLS/SSL Encryption: All connections between your browser and the w677 platform are encrypted using TLS 1.2 or higher with 256-bit SSL certificates. The padlock in your browser confirms this protection is active.
• Data Encryption at Rest: All sensitive personal and financial data stored in w677's systems is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data within w677's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to background checks and confidentiality agreements.
• Two-Factor Authentication (2FA): w677 supports 2FA on player accounts and requires 2FA for all internal administrative access to systems holding personal data.
• Penetration Testing: w677's platform undergoes regular independent security assessments and penetration tests to identify and address vulnerabilities before they can be exploited.
• Incident Response: w677 maintains a formal data breach response procedure. In the event of a data breach that poses a risk to your rights, w677 will notify affected players without undue delay.

Your Rights

As a w677 user, you hold a number of rights with respect to your personal data. w677 is committed to honouring these rights promptly and without unnecessary bureaucracy. The following rights are available to all w677 players:

• Right of Access: You may request a copy of all personal data that w677 holds about you. We will provide this within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections — such as updating your contact number — can be made directly through your w677 account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that certain data — particularly transaction records and KYC documents — must be retained for regulatory compliance and cannot be deleted on request during the mandatory retention period.
• Right to Restrict Processing: You may request that w677 restricts the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: You may request that w677 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receiving such an objection, w677 will immediately cease processing your data for marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact the w677 Data Privacy team by emailing [email protected] with the subject line "Data Rights Request". Please include your registered account email address and a description of the right you wish to exercise. We may require identity verification before processing your request.

Children & Minors

w677 is an adults-only platform. Our services are strictly intended for users who are 21 years of age or older. w677 does not knowingly collect, process, or retain the personal data of any individual under the age of 21.

If you are a parent or guardian and believe that a minor may have registered a w677 account using false information, please contact us immediately at [email protected]. w677 will prioritise the investigation and take immediate protective action.

Policy Updates

w677 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, platform functionality, or our internal data handling practices. The "Last Updated" date at the top of this document will always reflect the most recent revision.

Where a material change is made to this Privacy Policy — one that significantly affects how we collect, use, or share your personal data — w677 will notify registered players via the email address associated with their account at least 14 days before the change takes effect. Continued use of the w677 platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage all w677 users to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way w677 handles your personal data, our Data Privacy team is available to assist you. All privacy-related enquiries are handled with the utmost confidentiality and responded to within five (5) business days.

Please do not include sensitive account passwords or full financial account numbers in any email you send to w677. Our team will never ask for this information and it is not necessary for us to handle your privacy request.