sk77 Privacy Policy

sk77 is an online casino and sports betting platform accessible at sk77.bio ("the Platform"). For the purposes of this Privacy Policy, sk77 acts as the data controller in respect of the personal data collected from users who access, register with, or use the Platform.

sk77 operates under an international gaming license framework. As part of its licensing obligations, sk77 is required to collect, verify, and retain certain categories of personal data related to its users, including identity documents, payment information, and transaction records. These requirements are non-negotiable under licensing law and exist primarily to protect users, prevent fraud, and ensure the integrity of the gaming environment.

This Privacy Policy applies to all personal data collected in connection with your use of the sk77 Platform, including data collected during account registration, during gameplay, in connection with financial transactions, through customer support interactions, and via technical means such as cookies and session logs.

sk77 collects the following categories of personal data in connection with your use of the Platform:

Identity & Registration Data

When you register an sk77 account, we collect your Pakistani mobile number (used as your primary account identifier), a password (stored in hashed, non-reversible form), and any additional profile information you voluntarily provide. If your account reaches a threshold requiring Know Your Customer (KYC) verification, we will also collect your full legal name, date of birth, CNIC number, and copies of identity documents.

Financial & Transaction Data

We collect information related to all deposits, withdrawals, and wagers placed on the sk77 Platform. This includes the amounts transacted, payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT TRC20), timestamps, and transaction reference numbers. We do not store full payment account credentials — payment processing is conducted through encrypted connections with our licensed payment partners.

Gaming Activity Data

We maintain records of all gaming activity conducted through your sk77 account, including games played, bets placed, game outcomes, session durations, wagering totals, and bonus usage. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

Technical & Device Data

When you access sk77, our systems automatically collect technical data including your IP address, device type and operating system, browser type and version, session duration, pages visited, referral source, and approximate geographic location derived from IP address. This data is used for security monitoring, fraud detection, and platform performance optimisation.

Communication Data

We retain records of all communications between you and the sk77 support team, including live chat transcripts, support ticket content, and any documents or screenshots you submit in connection with a support request or dispute.

sk77 collects personal data through the following mechanisms:

• Direct submission: Data you provide voluntarily during account registration, KYC document submission, support interactions, and profile updates.
• Automated technical collection: Data collected automatically by our servers when you access the Platform, including IP addresses, browser characteristics, and session metadata.
• Cookie and tracking technologies: Data collected via browser cookies, local storage, and similar technologies as described in Section 9 of this Policy.
• Payment processing partners: Transaction confirmation data returned by our licensed payment partners (JazzCash, EasyPaisa, etc.) following completion of a deposit or withdrawal request. sk77 receives transaction status and reference information, not raw payment credentials.
• Identity verification services: Where required for KYC compliance, sk77 may use third-party identity verification services that process the documents you submit and return a verification outcome. These services are contractually bound to data protection standards consistent with this Policy.
• Fraud prevention services: sk77 may receive data from third-party fraud detection and anti-money laundering (AML) screening services for the purpose of protecting the Platform and its users.

sk77 processes personal data for the following specific purposes:

sk77 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to create and maintain your sk77 account, process financial transactions, and deliver gaming services pursuant to the agreement formed when you accept the Terms & Conditions.
• Legal obligation: Processing required to comply with sk77's obligations under its international gaming license, including KYC verification, AML screening, age verification (21+), and regulatory reporting.
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming oversight, and platform analytics where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as promotional SMS communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time from your account settings.

sk77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processing partners — solely for the purpose of facilitating financial transactions you initiate. These partners operate under their own privacy policies and are separately licensed financial service providers.
• Identity verification and KYC providers: Third-party KYC platforms that process identity documents on behalf of sk77 for the purpose of age and identity verification. These providers are contractually obligated to process data only for verification purposes and in accordance with applicable data protection standards.
• Game content providers: Game providers (PG Soft, Pragmatic Play, Jili, and others) may receive pseudonymised player identifiers and wagering data necessary to power game functionality. They do not receive your name, CNIC, or mobile number.
• Fraud prevention and AML screening services: Third-party services used to screen for fraudulent activity, problem gambling patterns, and compliance with anti-money laundering obligations.
• Regulatory and law enforcement authorities: Where required by law, court order, or binding regulatory direction from the authority responsible for sk77's gaming license, we may be required to disclose personal data. sk77 will challenge any request it believes to be disproportionate or unlawful.
• Professional advisers: Legal, accounting, and compliance advisers who are bound by professional confidentiality obligations and who assist sk77 in meeting its legal and regulatory requirements.

As sk77 operates under an international gaming license and works with global technology and payment partners, your personal data may be transferred to and processed in countries outside Pakistan. These transfers occur in connection with payment processing, game server hosting, KYC verification, and cloud infrastructure services.

sk77 ensures that any international transfer of personal data is subject to appropriate safeguards, including contractual data protection obligations consistent with applicable international standards. Where personal data is transferred to third parties in connection with regulatory compliance, those transfers are authorised by the applicable legal obligation.

By registering an sk77 account, you acknowledge and consent to the international transfer of your personal data as described in this Policy, to the extent such consent is required under applicable law.

sk77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention requirements imposed by applicable law or licensing obligations. The following general retention principles apply:

• Account and KYC data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required under standard AML and gaming license compliance frameworks.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations under the applicable gaming license.
• Gaming activity records: Retained for five (5) years from the date of each game session, for purposes of dispute resolution and regulatory reporting.
• Communication and support records: Retained for three (3) years from the date of the communication, unless they are directly related to an open dispute or investigation, in which case they are retained until the matter is fully resolved.
• Technical and device data: Retained in identifiable form for a maximum of twelve (12) months; aggregated and anonymised data may be retained indefinitely for analytics purposes.
• Marketing consent records: Retained for the duration of your account and for one (1) year following any opt-out, for the purpose of demonstrating compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is deleted or permanently anonymised. Where anonymisation is technically not possible for a specific data category, the data is securely archived with access restrictions until deletion is feasible.

The sk77 platform uses browser cookies and similar local storage technologies to enable certain essential functions and to improve the user experience. The following categories of cookies are used:

sk77 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with advertisers. You may manage optional cookies through your browser settings. Disabling essential cookies will prevent the sk77 platform from functioning correctly and may result in loss of your session.

sk77 implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption on all platform connections.
• Passwords stored using one-way cryptographic hashing — sk77 cannot retrieve your plaintext password.
• Two-Factor Authentication (2FA) available for all accounts via SMS OTP to your registered Pakistani mobile number.
• Automated login anomaly detection and account lockout after repeated failed attempts.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing conducted by qualified third-party security specialists.
• Encrypted storage of KYC documents with restricted access.
• Session timeout mechanisms that automatically terminate inactive authenticated sessions.

While sk77 implements robust security measures, no digital platform can guarantee absolute security against all possible threats. You also bear responsibility for maintaining the security of your account credentials and for reporting any suspected unauthorised access to sk77 support immediately.

Subject to applicable law and the regulatory retention obligations sk77 is subject to under its gaming license, you have the following rights in relation to your personal data held by sk77:

To exercise any of the above rights, submit your request to the sk77 support team via live chat on sk77.bio. sk77 will respond within 30 calendar days. Requests that involve complex data extractions or that require regulatory consultation may take up to 60 days, in which case you will be notified of the extension and the reason.

sk77 employs CNIC-based age verification for all accounts that reach the withdrawal threshold. The CNIC system, issued by NADRA to Pakistani citizens, provides reliable date-of-birth verification and serves as the primary age confirmation mechanism for the sk77 platform.

Parents and guardians who believe a minor may have accessed or registered on the sk77 platform should contact our support team immediately via live chat. sk77 will investigate and take immediate action, including account closure and data deletion, upon receiving a substantiated report.

The sk77 platform integrates game content from third-party providers including PG Soft, Pragmatic Play, Jili, Red Tiger, and others. These game providers operate their own game servers and may process technical game data (such as bet amounts and game outcomes) using their own systems. While sk77 controls what data is shared with these providers — limiting it to pseudonymised identifiers and game-related transaction data — each provider operates under its own privacy practices as a licensed game supplier.

sk77 does not control the privacy practices of third-party payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast. When you initiate a transaction using any of these services, you are also subject to that service provider's own privacy policy. sk77 recommends that you familiarise yourself with the privacy practices of any payment service you use in connection with your sk77 account.

sk77 reserves the right to update this Privacy Policy at any time. Where changes are material — particularly changes that expand the categories of data collected or introduce new processing purposes — sk77 will notify registered users via an SMS notification to their registered mobile number at least 7 days before the changes take effect.

Non-material updates, such as clarifications of existing language or corrections of typographical errors, may be made without advance notice. The effective date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the sk77 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the revised terms, you must cease using the Platform and request account closure before the revised policy takes effect.

For all privacy-related queries, data subject rights requests, or complaints regarding sk77's data processing practices, please contact the sk77 Data Protection team through the following channels:

• Live Chat: Available 24/7 on sk77.bio. Ideal for urgent data breach notifications or immediate account security concerns.
• Email: support at sk77.bio — mark your message with "Privacy Request" in the subject line for priority routing to the data protection team.

When submitting a data rights request, please include your registered mobile number, a description of the specific data or processing activity your request concerns, and any relevant dates. This enables sk77 to locate your records efficiently and respond within the required timeframe.

If you are not satisfied with sk77's response to a privacy complaint, you have the right to escalate the matter through the independent dispute resolution mechanism available under sk77's international gaming license framework. Details of this mechanism are available in the compliance section of your sk77 account dashboard.