Privacy Policy — vk77 Platform

vk77 is committed to protecting the privacy of all users and to handling personal data with transparency, security and respect. This Policy is designed to help you understand what data we collect, why we collect it, how we use it and what rights you hold in relation to that data.

By registering an account or otherwise using the vk77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should refrain from using the Platform.

This Policy forms part of the overall agreement between you and vk77, alongside our Terms & Conditions and Responsible Gambling policy. In the event of a conflict between this Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

vk77 collects the following categories of personal data from users of the Platform:

We do not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs or biometric data — unless specifically required by applicable law or regulatory obligation, and with your explicit consent where required.

We collect personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, browser fingerprints and session logs gathered via cookies, log files and similar technologies;
• Third-party sources: Identity verification and fraud-screening data obtained from licensed KYC and AML service providers, in accordance with our regulatory obligations;
• Payment processors: Transaction confirmation data from payment intermediaries used to process your deposits and withdrawals. Payment provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar Pakistani payment references only; vk77 does not claim affiliation with or endorsement by these institutions.

vk77 processes your personal data for the following purposes:

• Account management: Creating, maintaining and administering your user account, including password resets, account settings and communication preferences;
• Identity and age verification (KYC): Confirming that you meet the minimum age requirement and that the information you have provided is accurate — a legal obligation under the operator's licensing conditions;
• Transaction processing: Facilitating deposits, withdrawals and refunds in PKR and other supported currencies;
• Fraud and anti-money laundering (AML) compliance: Monitoring account activity for suspicious patterns, screening against sanctions lists and fulfilling mandatory reporting obligations where applicable;
• Responsible gambling monitoring: Tracking gambling behaviour patterns to identify potential problem gambling indicators and enable intervention tools such as deposit limits and self-exclusion;
• Customer support: Responding to queries, complaints and account management requests;
• Platform improvement and analytics: Using anonymised or aggregated usage data to improve platform performance, user experience and game offering;
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful authority requests and maintaining audit trails.

Where applicable data protection law requires a legal basis for processing, vk77 relies on one or more of the following:

• Contractual necessity: Processing that is necessary to perform the contract between you and vk77 (e.g. operating your account, processing transactions);
• Legal obligation: Processing required to comply with applicable law, including KYC/AML obligations under the operator's licensing conditions;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring and business analytics, where such interests are not overridden by your privacy rights;
• Consent: Where we rely on your consent (e.g. for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

vk77 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. We may share your personal data with third parties only in the following limited circumstances:

• Service providers: Third-party companies that process data on our behalf to provide specific services — including KYC verification providers, payment processors, cloud hosting providers, fraud detection services and customer support platforms. These processors are contractually bound to process data only on our instructions and to maintain appropriate security standards;
• Regulatory and legal authorities: Disclosure to law enforcement, regulatory bodies or government authorities where required by applicable law, court order or valid legal process;
• AML and sanctions screening: Sharing with licensed compliance databases as required by the operator's anti-money laundering obligations;
• Business transfers: In the event of a merger, acquisition or sale of all or part of the Platform's business, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations;
• With your explicit consent: Where you have expressly authorised a specific sharing arrangement.

All third-party processors engaged by vk77 are selected on the basis of their ability to meet applicable data security and privacy standards. We do not permit third-party processors to use your data for their own independent purposes.

vk77 is an international platform and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction.

Where personal data is transferred internationally, vk77 implements appropriate safeguards to protect that data, which may include:

• Standard contractual clauses approved by a competent data protection authority;
• Data processing agreements with third-party processors incorporating appropriate privacy and security obligations;
• Transfer to jurisdictions that have been determined to provide an adequate level of data protection by the applicable regulatory authority.

Pakistani users should be aware that data may be processed and stored outside Pakistan. By using the Platform, you acknowledge and consent to such international transfers as described in this Policy.

vk77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for the duration required by applicable law and regulatory obligation, whichever is longer.

• Active account data: Retained for the duration of the active account relationship;
• KYC and AML records: Retained for a minimum of five (5) years following account closure, as required by standard anti-money laundering regulatory frameworks;
• Transaction records: Retained for a minimum of five (5) years, or longer where required by the operator's licensing jurisdiction;
• Support and communication records: Retained for up to three (3) years following account closure, or longer where required for dispute resolution or regulatory purposes;
• Anonymised analytics data: May be retained indefinitely as it no longer constitutes personal data.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

vk77 uses cookies and similar tracking technologies to operate the Platform, maintain session security, analyse usage patterns and improve the user experience. The following categories of cookies are used:

• Essential / strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that maintain your logged-in state. These cookies cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: Collect anonymised information about how users interact with the Platform — such as pages visited and session duration — to help us identify usability improvements;
• Functionality cookies: Remember your preferences such as language, display settings and responsible gambling tool configurations;
• Security cookies: Support fraud detection and account security monitoring functions.

You can manage cookie preferences through your web browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but some personalisation features may be affected. Note that essential session cookies cannot be disabled without preventing account login.

Subject to applicable data protection law and any legal retention obligations, you have the following rights in respect of your personal data held by vk77:

To exercise any of the above rights, please submit a request to [email protected] with your account username and the nature of your request. We will respond within a reasonable timeframe and no later than required under applicable law. We reserve the right to verify your identity before processing a data rights request.

vk77 does not knowingly collect personal data from individuals under the age of 18 — or the higher minimum age required by the operator or applicable license jurisdiction. The Platform is strictly for adults. Access by minors is prohibited.

Age verification is conducted as part of the registration and KYC process. Where we identify or receive credible notification that a minor has registered an account, we will immediately suspend the account, delete the associated personal data (subject to any mandatory retention obligations relating to the relevant transaction records), and return any funds deposited to the original payment method.

If you believe a minor has registered an account on vk77, please notify us immediately at [email protected].

vk77 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Hashing and salting of authentication credentials — passwords are never stored in plain text;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular penetration testing and security vulnerability assessments;
• Logging and monitoring of access to systems that hold personal data;
• Incident response procedures designed to contain and remediate security breaches promptly.

While we take data security seriously, no Internet-based platform can guarantee absolute security. You are responsible for keeping your account password confidential and for notifying us immediately at [email protected] if you believe your account has been compromised.

vk77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or regulatory requirements. Material changes will be communicated to registered users via the email address on file and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect, unless an immediate update is required by urgent legal obligation.

The "Last updated" date displayed at the top of this Policy reflects the most recent revision. We recommend reviewing this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the vk77 Data Protection team through the following channels:

• Email: [email protected] — for privacy enquiries, data rights requests and formal correspondence. Standard response time: within 48 hours. Complex data rights requests may take longer.
• Live chat: Available 24/7 through the Platform as per operator-provided information. Recommended for urgent account security matters.
• FAQ: General questions about account management and data handling are addressed in our FAQ section.

When submitting a privacy-related request, please include your registered account username and a clear description of your request to allow for efficient and accurate handling. We may need to verify your identity before processing certain data rights requests.