Privacy Policy

This Privacy Policy ("Policy") is issued by 677cx ("the Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of the website located at https://677cx.cam and any associated mobile or software applications (collectively, "the Platform").

677cx is committed to processing personal data responsibly, transparently, and in accordance with the data protection standards applicable under the operator's licensing jurisdiction. We recognise that users accessing this Platform from Pakistan have specific expectations regarding their personal information, and we have designed this Policy to address those expectations clearly and honestly.

By registering an account, making a deposit, or otherwise using the 677cx Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you must not use the Platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Data Controller" means 677cx, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third party that processes personal data on behalf of 677cx under a data processing agreement.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
• "User" / "you" means any natural person who accesses or registers on the 677cx Platform.
• "KYC" means Know Your Customer — identity verification procedures required for regulatory compliance.
• "AML" means Anti-Money Laundering — controls applied to detect and prevent financial crime.
• "Cookies" means small data files placed on your device by the Platform for functional, analytical, or marketing purposes.
• "Sensitive Data" means special categories of personal data, such as biometric identifiers or financial information, that warrant enhanced protection.

677cx collects personal data in the following categories, depending on your level of interaction with the Platform:

We collect personal data through the following methods:

• Direct Submission: Data you provide during registration, KYC verification, deposit/withdrawal requests, support interactions, or when completing surveys or feedback forms.
• Automated Technologies: Technical and usage data collected automatically as you browse and interact with the Platform, including via cookies, server logs, and analytics tools.
• Third-Party Sources: Identity verification data from KYC/AML service providers; fraud-score data from security vendors; payment confirmation data from payment processors. All third-party sources operate under data processing agreements with 677cx.
• Publicly Available Sources: In limited circumstances, we may cross-reference data against publicly available databases as part of AML or sanctions screening obligations.

We process your personal data only where a valid legal basis exists. The applicable bases under our operator's licensing jurisdiction include:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with KYC, AML, licensing, and regulatory requirements imposed on the operator by its license jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics — where these interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given explicit, freely withdrawable consent.

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time by contacting our support team or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

677cx uses your personal data for the following purposes:

1. Account Management: To create, verify, maintain, and close your account in accordance with the Terms & Conditions.
2. Transaction Processing: To process deposits, withdrawals, and bonus settlements, and to maintain accurate financial records in PKR and other applicable currencies.
3. KYC & AML Compliance: To verify your identity, screen against sanctions lists, and fulfil the operator's regulatory obligations under its license terms.
4. Customer Support: To respond to your enquiries, resolve disputes, and provide assistance across English-language and Urdu-language support channels.
5. Security & Fraud Prevention: To detect, investigate, and prevent unauthorised access, fraud, money laundering, bonus abuse, and other prohibited conduct.
6. Responsible Gambling: To monitor betting patterns and account activity that may indicate problem gambling behaviour, and to apply limits or interventions where appropriate.
7. Platform Improvement: To analyse usage patterns, identify technical issues, and improve the functionality, content, and performance of the Platform.
8. Marketing Communications: To send promotional offers, bonus notifications, and Platform updates where you have consented to receive such communications. You may opt out at any time.
9. Legal Compliance: To comply with applicable legal obligations, court orders, regulatory requests, or law enforcement requirements.

677cx does not sell your personal data to third parties. We may share personal data in the following limited circumstances:

• Service Providers (Data Processors): Third-party vendors who assist us in operating the Platform — including KYC/identity verification providers, payment processors, hosting and cloud infrastructure providers, analytics vendors, and customer support software providers. All processors operate under contractual data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted service.
• Game Content Providers: Where you play games supplied by third-party studios integrated into the 677cx lobby, limited technical data (such as session tokens and bet records) is shared with those providers for the purpose of game delivery and RNG/audit integrity. No more personal data than is necessary for game delivery is shared.
• Regulatory & Legal Authorities: Where required by applicable law, a valid court order, a regulatory request from the operator's licensing authority, or a law enforcement request backed by appropriate legal process.
• AML/Fraud Screening: Identity and transaction data may be shared with specialist AML, sanctions screening, and fraud detection services as part of our compliance obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving 677cx, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy.

As an online platform serving users globally, including users in Pakistan, personal data processed by 677cx may be transferred to and stored on servers located outside your country of residence. Such transfers may include countries that do not have data protection laws equivalent to those in the operator's license jurisdiction.

Where personal data is transferred internationally, we implement appropriate safeguards to protect it, which may include:

• Standard contractual clauses approved by the relevant data protection authority.
• Binding corporate rules between affiliated entities.
• Data processing agreements with receiving parties that impose equivalent data protection obligations.

By using the 677cx Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan in the manner described above.

677cx uses cookies and similar tracking technologies on the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — enabling login sessions, security tokens, and cashier functionality. These cookies cannot be disabled without preventing Platform access.
• Analytical / Performance Cookies: Used to understand how users navigate the Platform, which pages are visited most frequently, and where technical issues occur. This data is aggregated and anonymised where possible. Deployment of these cookies requires your consent where required by applicable law.
• Functional Cookies: Used to remember your preferences — such as language settings, game lobby filters, and deposit limit reminders — so that your experience is personalised to your previous choices.
• Marketing Cookies: Used to deliver relevant promotional content based on your Platform activity and, where applicable, to measure the effectiveness of marketing campaigns. These cookies are deployed only with your explicit consent.

You may manage your cookie preferences through your browser settings or through the cookie consent tool on the Platform. Please note that disabling certain cookies may affect the functionality and performance of the Platform.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by the operator's license obligations and applicable legal retention periods. The general retention principles we apply are as follows:

• Account Data: Retained for the duration of your account and for a defined period following account closure, as required by the operator's licensing and AML obligations (typically five to seven years from account closure).
• KYC Documents: Retained in accordance with the operator's license requirements and applicable AML regulations, which typically mandate retention for a minimum of five years from the date of the last transaction.
• Transaction Records: Financial and betting transaction records are retained for the period required by the operator's license, typically five years from the date of each transaction.
• Support Communications: Retained for a reasonable period following resolution of the relevant matter, typically two years, to assist with future queries and dispute resolution.
• Marketing Consent Records: Retained for as long as consent remains active and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Where data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

677cx implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest in our database systems.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Routine penetration testing and vulnerability assessments conducted by qualified security professionals.
• Audit logging of access to sensitive data systems.
• Multi-factor authentication requirements for administrative and privileged system access.

While we apply industry-standard security measures, no system is completely immune from breach. You are responsible for maintaining the security of your account credentials and for reporting any suspected unauthorised access to our support team immediately.

Subject to the laws applicable in the operator's license jurisdiction and any overriding legal obligations, you may have the following rights in respect of your personal data:

• Right of Access: You may request confirmation of whether we hold personal data about you and, if so, a copy of that data along with supplementary information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by us. You may also update certain account details directly through your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal obligations — for example, we are required to retain transaction records for AML compliance and cannot delete them on request where the retention period has not expired.
• Right to Restriction: You may request that we restrict processing of your personal data in specific circumstances, such as while a correction request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of the personal data you provided to us.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The 677cx Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

Age verification is conducted as part of the KYC process. If we become aware that an account has been registered by, or personal data has been collected from, a person under the minimum age threshold, we will suspend that account immediately, delete all associated personal data to the extent permitted by our legal obligations, and retain only the minimum records required to prevent re-registration by that individual.

If you believe that a minor has provided personal data to 677cx, please contact our support team immediately at [email protected] so that we may take appropriate action.

The 677cx Platform may reference or display content from third-party game providers or service integrations. This Privacy Policy applies only to data processed by 677cx directly. Third-party services integrated into the Platform operate under their own privacy policies, and 677cx is not responsible for the data practices of those third parties beyond the data processing agreements we hold with them.

The Platform does not contain outbound links to external third-party websites for general browsing purposes. Where a payment method reference is displayed in the cashier, clicking through to complete a transaction may involve a third-party payment interface. Your interaction with that interface is subject to the privacy policy of the relevant payment provider. 677cx does not receive your full payment credentials from those providers.

677cx reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the operator's licensing obligations. The "Last Updated" date at the top of this page will be revised accordingly whenever a material change is made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — we will endeavour to notify registered users via the email address on file or through a prominent notice on the Platform prior to the change taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the Platform interface — the fastest route for data access requests or urgent privacy concerns.
• Email: [email protected] — for written data subject requests, please include "Data Privacy Request" in the subject line. We aim to respond within 30 days of receipt.
• Help Centre: Self-service articles on account management, data privacy, and security settings are available on the Platform at all times.

Support is available in English. Urdu-language assistance can be requested through designated support channels.