mt77 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how mt77 ("mt77", "we", "us", "our") collects, processes, stores, and protects personal data about individuals ("you", "Player", "User") who interact with the mt77 online casino and sports entertainment platform accessible at https://mt77.onl ("Platform").

mt77 is committed to protecting the personal information of all players in Pakistan and handling it with transparency, care, and respect. We process personal data in accordance with applicable data protection principles and the obligations we hold toward our users.

By registering an account on the mt77 Platform, logging in, making a PKR deposit, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Capitalised terms used in this Policy but not defined here carry the meaning given to them in the mt77 Terms & Conditions.

Data Controller

For the purposes of this Privacy Policy, mt77 acts as the data controller in respect of the personal data collected from players who access the Platform. As data controller, mt77 is responsible for determining the purposes for which and the manner in which your personal data is processed.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data subject rights as described in Section 11 of this Policy, you may contact our data protection team using the contact details provided in Section 14.

Personal Data We Collect

mt77 collects the following categories of personal data from Players:

3.1 Identity Data

• Full legal name as it appears on your CNIC.
• Date of birth (used to verify that you meet the 18+ age requirement).
• CNIC number (collected as part of KYC verification).
• Photograph or scan of identity documents submitted for verification.
• Username and account nickname chosen during registration.

3.2 Contact Data

• Email address registered on the mt77 account.
• Pakistan mobile phone number.
• Residential address (city, district, and postal code — for example, Karachi, Lahore, or Islamabad).

3.3 Financial Data

• Easypaisa or JazzCash mobile wallet account details used for PKR transactions.
• Bank account details (HBL, UBL, or other Pakistani banks) where bank transfer is used.
• USDT wallet address where cryptocurrency deposits or withdrawals are made.
• Transaction history including deposit amounts in PKR, withdrawal amounts in PKR, and game wager history.

3.4 Technical Data

• IP address and geolocation data at the time of login and during active sessions.
• Device type, browser type, and operating system.
• Session timestamps and duration.
• Cookie and tracking data as described in Section 8.

3.5 Gaming Activity Data

• Game titles played, bet sizes, and game session durations.
• Bonus redemptions, wagering progress, and promotional activity.
• VIP Club tier status and loyalty point accumulation.
• Responsible gaming tool settings including active deposit limits, cooling-off periods, and self-exclusion status.

3.6 Communications Data

• Records of live chat conversations with the mt77 support team.
• Email correspondence sent to or received from [email protected].
• Feedback, complaints, and dispute records.

How We Collect Personal Data

mt77 collects personal data through the following channels:

4.1 Direct Collection

The majority of the personal data we hold is provided directly by you during account registration, KYC verification, deposit and withdrawal processes, completion of responsible gaming tool settings, and communications with our support team.

4.2 Automated Collection

When you access and interact with the mt77 Platform, our systems automatically collect technical data including your IP address, device identifiers, browser configuration, and gaming session data. This collection is facilitated through cookies, web beacons, and server log files as described in Section 8.

4.3 Third-Party Sources

mt77 may receive identity verification data from accredited KYC service providers used to cross-check the accuracy of the information you provide during registration. We may also receive fraud-related data from payment processors and responsible gaming registries where such data sharing is necessary to protect players or the integrity of the Platform.

How We Use Your Personal Data

mt77 uses the personal data we collect for the following purposes:

5.1 Marketing Communications

Where you have provided your consent during registration or through your account settings, mt77 may send you promotional communications about new games, bonus offers, VIP Club updates, and Platform features. You may withdraw your consent at any time by updating your communication preferences in the account settings section of the mt77 Platform or by contacting our support team.

Legal Basis for Processing

mt77 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity — processing required to register your account, accept your bets, and process your PKR withdrawals in fulfilment of our contractual obligations to you as a player.
• Legal obligation — processing required to comply with KYC, anti-money laundering, age verification, responsible gaming, and other applicable regulatory requirements.
• Legitimate interests — processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming analysis where these interests are not overridden by your privacy rights.
• Consent — processing for marketing communications and non-essential cookies where you have given explicit consent. You may withdraw this consent at any time.

Data Sharing & Third Parties

mt77 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

7.1 Service Providers

mt77 engages third-party service providers to assist with specific operational functions including payment processing (Easypaisa, JazzCash, Raast, HBL, UBL, USDT processors), KYC and identity verification, game software provision, customer support infrastructure, and platform hosting and security services. Each service provider is bound by contractual data processing agreements that restrict their use of your data to the specific service they provide on mt77's behalf.

7.2 Legal and Regulatory Authorities

mt77 may disclose personal data to relevant authorities, regulators, or law enforcement bodies where required to do so by applicable law, a court order, or a lawful regulatory instruction. This includes disclosures made in connection with anti-money laundering and counter-terrorism financing obligations.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mt77's business, personal data held by mt77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via email and by a notice posted on the Platform.

7.4 No Cross-Border Transfers Without Safeguards

Where personal data is transferred to a service provider or processor located outside Pakistan, mt77 ensures that appropriate contractual safeguards are in place to maintain a level of data protection consistent with this Policy.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit the mt77 Platform. They help us recognise your browser, remember your preferences, keep your session active while you are logged in, and understand how players interact with the Platform.

8.2 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function. These include session cookies that keep you logged in during your gaming session. They cannot be disabled.
• Functional cookies — remember your preferences such as language settings, default game lobby view, and responsible gaming reminders.
• Analytics cookies — help mt77 understand how players navigate the Platform so we can improve performance and user experience. Analytics data is aggregated and does not identify individual players.
• Marketing cookies — used only with your consent to personalise promotional communications and track the effectiveness of marketing campaigns associated with the mt77 Platform.

8.3 Managing Cookies

You may control non-essential cookies through your account settings on the mt77 Platform or through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Platform.

Data Retention

mt77 retains personal data for defined periods appropriate to the purpose for which it was collected and in accordance with applicable legal retention obligations:

• Account data — retained for the duration of your active mt77 account plus five years following account closure to comply with anti-money laundering record-keeping obligations.
• KYC and identity documents — retained for five years from the date of verification or the date of account closure, whichever is later.
• Financial transaction records — retained for seven years from the date of each transaction in line with standard financial record-keeping requirements.
• Customer support communications — retained for three years from the date of each interaction.
• Technical and session data — retained for 13 months from the date of collection.
• Marketing consent records — retained for three years from the date consent was granted or until consent is withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

Data Security

mt77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS encryption for all data in transit between your device and the mt77 Platform.
• AES-256 encryption for sensitive data stored at rest, including CNIC details and payment information.
• Two-factor authentication options for player accounts.
• Strict access controls limiting internal access to personal data to authorised personnel only on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Automated fraud detection and anomaly monitoring systems operating around the clock.
• Incident response procedures in place for rapid containment and assessment in the event of a security breach.

While mt77 takes every reasonable precaution to protect your personal data, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Please ensure you use a strong, unique password for your mt77 account and enable two-factor authentication where available.

Your Data Rights

As a player whose personal data is processed by mt77, you hold the following rights in relation to your personal information. To exercise any of these rights, please contact us using the details in Section 14. We will respond to all verified data rights requests within 30 days.

Right of Access

You have the right to request a copy of all personal data that mt77 holds about you. We will provide this in a structured, commonly used format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For identity and KYC data, updated documentation may be required.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent was the basis for processing). Please note that erasure requests are subject to our legal retention obligations — data that must be retained under applicable law cannot be deleted on request during the mandatory retention period.

Right to Restrict Processing

You may request that mt77 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a machine-readable format for transfer to another controller.

Right to Object

You have the right to object to processing carried out on the basis of mt77's legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.

Right to Withdraw Consent

Where mt77 processes your personal data on the basis of your consent (for example, marketing emails), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Minors & Child Protection

The mt77 Platform is strictly for adults aged 18 and over. mt77 does not knowingly collect personal data from individuals under the age of 18. Age verification is applied during the registration process and prior to withdrawal processing.

If mt77 becomes aware that personal data has been submitted by a person under the age of 18, that account will be immediately suspended and the data will be deleted without undue delay in accordance with our data retention procedures.

If you are a parent or guardian and you believe that your child has registered an account on mt77, please contact our support team immediately so we can take appropriate action. mt77 takes child protection very seriously and will act swiftly on any such report.

Changes to This Privacy Policy

mt77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When material changes are made to this Policy, mt77 will notify registered players via email to the address on file and post a notice on the Platform.

The updated Privacy Policy will be published on this page with a revised effective date at the top of the document. Your continued use of the mt77 Platform following the notification of any amendment constitutes your acceptance of the updated Policy.

If you do not agree with any material change to this Privacy Policy, you may close your mt77 account as described in the Terms & Conditions and request deletion of your personal data in accordance with Section 11 of this Policy.

Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mt77 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly from any page within the mt77 Platform once you are logged in to your account.
• Data Enquiries Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" so our team can route your message correctly.

mt77's support team operates on Pakistan Standard Time (PKT, UTC+5) and aims to respond to all privacy-related email enquiries within 2 business days. Formal data rights requests will receive a substantive response within 30 calendar days of identity verification being completed.