na77 Privacy Policy

01 Introduction

na77 is an internationally licensed online gaming operator offering casino games, sports betting, cricket betting, slots, jackpot fishing, and related entertainment services to eligible users. The na77 platform is built for Pakistani players and supports transactions in Pakistani Rupees (PKR) via local payment methods including JazzCash, EasyPaisa, HBL, and Meezan Bank.

In the course of providing these services, na77 collects and processes certain personal data about you. We take this responsibility seriously. This Privacy Policy sets out in plain, precise terms exactly what data we hold, why we hold it, how long we keep it, and how you can exercise control over it.

If you have any questions about this policy or wish to exercise any of your data rights, you may contact our support team via live chat on the platform or by email at the address provided in Section 14.

02 Personal Data We Collect

na77 collects personal data in the following categories:

2.1 Identity & Contact Data

• Full legal name
• Date of birth (for 21+ age verification purposes)
• Gender (optional, for account personalisation)
• Pakistani CNIC number or passport number (for KYC verification)
• Residential address (city and province, e.g. Karachi, Lahore, Faisalabad, Islamabad)
• Email address
• Mobile phone number (required for JazzCash and EasyPaisa payment verification)

2.2 Financial Data

• JazzCash or EasyPaisa mobile wallet number linked to your account
• Bank account details (where used for deposit or withdrawal via HBL, UBL, Allied Bank, or Meezan Bank)
• USDT TRC20 wallet address (where applicable)
• Transaction history including deposit amounts, withdrawal amounts, and dates

2.3 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration and login timestamps
• Pages visited within the na77 platform and features accessed
• Game history, bet history, and wagering patterns

2.4 Communications Data

• Records of live chat conversations with na77 support staff
• Email correspondence sent to or received from na77
• Responses to surveys or feedback requests, where voluntarily provided

03 How We Collect Your Data

na77 collects personal data through the following channels:

• Account Registration: When you create an na77 account, you directly provide your name, date of birth, email address, and mobile number.
• KYC Verification: When you submit identity documents as part of the verification process, we collect and store copies of those documents.
• Deposits & Withdrawals: Financial transaction data is collected each time you deposit or withdraw funds using JazzCash, EasyPaisa, or bank transfer.
• Platform Usage: Technical and usage data is collected automatically through server logs, cookies, and similar tracking technologies as you navigate the na77 platform.
• Support Interactions: When you contact na77 via live chat or email, the content of those communications is recorded and stored.
• Third-Party Providers: Certain data may be received from our payment processors, identity verification partners, or fraud detection service providers where these services are used in connection with your account.

04 How We Use Your Personal Data

na77 uses your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Identity data, contact data
Age and identity verification (KYC)	Identity data, CNIC/passport copies
Processing deposits and withdrawals in PKR	Financial data, identity data
Providing gaming and betting services	Usage data, game and bet history
Customer support and dispute resolution	Communications data, account data
Fraud prevention and security monitoring	Technical data, financial data, usage data
Anti-money laundering (AML) compliance	Financial data, identity data, transaction history
Responsible gaming monitoring	Usage data, wagering patterns, session data
Promotional communications (opted-in users only)	Contact data, usage preferences
Platform improvement and analytics	Technical data, aggregated usage data (anonymised)

05 Legal Basis for Processing

na77 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your data is required to fulfil our obligations to you under the na77 Terms & Conditions, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Certain data processing — particularly KYC, AML reporting, and responsible gaming monitoring — is required to comply with na77's international gaming licence obligations and applicable regulatory requirements.
• Legitimate interests: na77 processes certain technical and usage data to maintain platform security, detect fraud, prevent money laundering, and improve service quality. These interests do not override your fundamental privacy rights.
• Consent: Where processing is based on consent — for example, sending you promotional offers or bonus notifications — na77 will obtain your explicit opt-in before doing so. You may withdraw consent at any time.

06 Data Sharing & Third Parties

na77 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 network processors receive the minimum data required to process your financial transactions.
• Identity verification providers: Third-party KYC and AML compliance services that assist in verifying the identity and age of na77 account holders.
• Game providers: Certified third-party gaming software providers whose games are offered on the na77 platform. These providers receive anonymous session tokens rather than personally identifiable information where technically possible.
• Fraud detection and security services: External security partners who assist in monitoring for suspicious account activity, unauthorised access attempts, and bonus abuse patterns.
• Regulatory and law enforcement authorities: Where na77 is legally required to disclose data — for example, in response to a valid regulatory request, court order, or AML reporting obligation — we will comply with such requirements.

07 Cookies & Tracking Technologies

The na77 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. The following categories of cookies are used:

• Essential cookies: Required for core platform functionality including login sessions, security tokens, and payment processing flows. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data on how users navigate the platform. This helps na77 identify which features are most used and where improvements can be made. No personally identifiable information is included in analytics data sets.
• Preference cookies: Store your platform preferences such as language settings, display options, and notification preferences between sessions.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts on the na77 platform.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect your ability to log in or use certain features of the na77 platform. na77 does not use third-party advertising cookies or behavioural targeting technologies.

08 Data Retention

na77 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention periods:

• Active account data: Retained for the full duration of your account's active status on the na77 platform.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by international gaming licence and AML obligations.
• Financial transaction records: Retained for a minimum of five (5) years following the transaction date for compliance and audit purposes.
• Support communications: Retained for three (3) years following the closure of each support interaction, to support dispute resolution.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing preferences and consent records: Retained for the duration of your account plus three (3) years, to evidence consent or opt-out decisions.

When personal data is no longer required, na77 securely deletes or anonymises it in accordance with our internal data destruction procedures.

09 Data Security

na77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and na77 servers
• Encryption at rest for all databases containing personal and financial data
• Role-based access controls ensuring that only authorised na77 personnel can access personal data, and only to the extent required for their specific role
• Regular penetration testing and security audits of the na77 platform infrastructure
• Multi-factor authentication requirements for internal system access by na77 staff
• Secure, geographically redundant server infrastructure with automated intrusion detection

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, na77 will notify affected users promptly in accordance with our breach notification obligations.

10 Your Data Rights

As an na77 user, you have the following rights in relation to your personal data. To exercise any of these rights, contact na77 support via live chat or email (see Section 14). All requests will be acknowledged within 72 hours and resolved within 30 days.

• Right of Access: You may request a copy of all personal data that na77 holds about you, including your account data, transaction history, and communications records.
• Right to Rectification: If any personal data na77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that na77 delete your personal data. Please note that this right is subject to our legal obligations to retain certain data (such as KYC and financial records) under gaming licence and AML requirements. Where deletion cannot be completed in full, na77 will explain which data must be retained and why.
• Right to Restrict Processing: In certain circumstances, you may request that na77 restrict the processing of your data — for example, while the accuracy of data is being contested.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service provider.
• Right to Object: You may object to the processing of your personal data where that processing is based on na77's legitimate interests, including profiling for responsible gaming purposes or direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

11 Children's Privacy

The na77 platform is strictly for users who are 21 years of age or older. na77 does not knowingly collect personal data from any person under the age of 21. If you believe that a minor has registered on the na77 platform or provided personal data to na77, please contact us immediately at the details in Section 14 so that the account can be closed and the data deleted without delay.

na77 employs age verification checks during the registration process and may require documentary proof of age at any stage. Any account found to belong to a person under the age of 21 will be permanently closed and all associated data deleted, with the exception of records required to be retained for compliance purposes.

12 Third-Party Services & External Links

The na77 platform may reference or integrate with third-party services including payment processors (JazzCash, EasyPaisa, HBL, etc.) and game software providers. These third parties operate under their own privacy policies and data handling practices, which are independent of na77. na77 is not responsible for the privacy practices of any third-party service provider.

Where na77 shares your data with third-party service providers, it does so under contractual data processing agreements that require those providers to handle your data securely and in compliance with applicable data protection standards. These agreements prohibit third parties from using your data for any purpose other than providing the specific service they have been contracted to deliver.

13 Changes to This Privacy Policy

na77 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, na77 will notify registered users via a notice on the platform or by email to the address associated with your account. The date of the most recent update is displayed at the top of this page.

Your continued use of the na77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact support to close your account.

14 Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may reach the na77 privacy team through the following channels:

• Live Chat: Available 24/7 directly on the na77 platform after login — the fastest way to reach us
• Email: [email protected] (plain text — not a clickable link)

na77 targets a first response to all privacy-related written enquiries within 24 hours and full resolution of data rights requests within 30 calendar days. Where a request is particularly complex or involves a large volume of data, na77 may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.