hot77 Privacy Policy

hot77 ("hot77", "we", "us", "our") operates the online gaming and sports betting platform accessible at hot77.onl (the "Platform"). We take the privacy of our users ("you", "Player", "User") seriously and are committed to protecting your personal data in accordance with internationally recognised data protection standards.

This Privacy Policy describes the categories of personal data we collect from you, the purposes for which we process that data, the conditions under which we may share it, and the rights you have in relation to your personal data. It applies to all products and services available on hot77, including the sportsbook, live casino, slot games, account management functions, and customer support.

This Privacy Policy should be read alongside the hot77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By accessing or using the hot77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, hot77 acts as the data controller in respect of personal data collected and processed through the Platform. As data controller, hot77 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

Where hot77 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, or analytics platforms — those providers act as data processors and are contractually required to process data only on hot77's documented instructions, to maintain appropriate security measures, and not to engage any sub-processor without prior authorisation.

If you have any questions about how your personal data is handled by hot77, or wish to exercise any of your data rights, please contact our support team via the details provided in Section 16 of this Policy.

hot77 collects the following categories of personal data from registered users and Platform visitors. The specific data collected from you will depend on how you use the Platform and the features you access.

hot77 does not collect sensitive personal data categories beyond those listed above unless required by law or expressly consented to by you. We do not collect biometric data, health data, or religious or political beliefs.

hot77 collects personal data through the following mechanisms:

• Direct Submission: Data you provide during account registration, KYC verification, payment transactions, responsible gaming tool configuration, or when contacting customer support.
• Automated Collection: Technical and usage data collected automatically when you visit or interact with the Platform, including through cookies, session tracking technologies, and server logs. See Section 8 for cookie details.
• Payment Processors: Transactional data transmitted by payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processors — when you conduct deposit or withdrawal transactions.
• KYC Verification Providers: Identity verification data processed and returned by third-party KYC service providers engaged by hot77 to assist with document verification.
• Fraud Prevention Providers: Risk scores and device fingerprinting data generated by fraud prevention tools used to protect the Platform and its users from fraudulent activity.

hot77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process deposits and withdrawals, settle bets, and deliver gaming services as described in the Terms & Conditions.
• Legal Obligation: Processing necessary for hot77 to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and data retention mandates imposed by our licensing regime.
• Legitimate Interests: Processing in pursuit of legitimate interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, including for optional marketing communications. Where consent is the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

hot77 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your hot77 account, processing login sessions, managing account settings and preferences, and enabling account recovery.
• Identity & Age Verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years before permitting real-money activity or withdrawal processing.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method, verifying that withdrawal accounts match your verified identity, and maintaining accurate transaction records.
• Gaming Services: Providing access to sportsbook markets, live casino, slot games, and all other Platform features, including real-time bet settlement and game session management.
• Responsible Gaming: Monitoring gaming activity to identify patterns indicative of problem gambling, enforcing deposit and loss limits you have set, administering cooling-off periods and self-exclusion, and complying with responsible gaming obligations.
• Security & Fraud Prevention: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Regulatory Compliance: Meeting AML, KYC, and other regulatory obligations, including reporting requirements under applicable law.
• Customer Support: Responding to your queries, resolving complaints, and maintaining support interaction records for quality and dispute resolution purposes.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform, resolve technical issues, and develop new features aligned with player needs.
• Marketing (Consent-Based): Sending promotional communications about hot77 offers, new games, and platform updates where you have opted in to receive such communications.

7.1 We Do Not Sell Your Data. hot77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data sharing is limited to what is necessary for Platform operation, legal compliance, or fraud prevention.

7.2 Authorised Recipients. hot77 may share your personal data with the following categories of recipients:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processing partners — to the extent necessary to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party verification services engaged to assist with document review and identity confirmation during the KYC process.
• Fraud Prevention & Security Providers: Services that assist hot77 in detecting fraudulent activity, bot traffic, and account security threats.
• Game Providers: Certified third-party game studios and live casino providers who deliver game content through the hot77 Platform may receive session-level identifiers necessary for game delivery. Full identity data is not shared with game providers.
• Regulatory & Legal Authorities: Government agencies, law enforcement, financial intelligence units, and regulatory bodies where disclosure is required by law, court order, or as part of our licensing obligations.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by hot77, subject to confidentiality obligations.

7.3 Business Transfers. In the event of a merger, acquisition, asset sale, or restructuring involving hot77, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy implications via account notification and an updated Privacy Policy.

hot77 uses cookies and similar tracking technologies on the Platform to provide core functionality, improve performance, and — where consented — to deliver relevant content. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collect anonymised data about how visitors use the Platform — pages visited, time spent, errors encountered — to help hot77 improve the user experience. No personally identifiable information is collected.
• Functional Cookies: Remember your preferences such as language settings, lobby view configurations, and responsible gaming settings to provide a consistent experience across sessions.
• Security Cookies: Used by fraud prevention and security tools to identify suspicious device behaviour and protect against account takeover and automated attacks.

You may control non-essential cookie settings through your browser preferences. Note that disabling certain cookies may affect Platform performance or feature availability. hot77 does not use third-party advertising cookies or behavioural tracking cookies for advertising purposes on external platforms.

hot77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to legal and regulatory retention requirements. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by AML regulations applicable to our licensing regime.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of document submission, whichever is later.
• Gaming Activity Logs: Retained for a minimum of three (3) years for operational and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless the matter involves an unresolved dispute.
• Technical & Usage Data: Aggregated or anonymised after thirteen (13) months. Raw technical logs are retained for up to ninety (90) days for security purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data categories subject to the limitations described in Section 11.

hot77 operates as an international platform. In the course of providing services, your personal data may be transferred to and processed in jurisdictions outside Pakistan. This may occur where our KYC providers, payment processors, or game content servers are based outside Pakistan.

Where personal data is transferred internationally, hot77 takes steps to ensure that appropriate safeguards are in place to protect your data in accordance with the standards described in this Privacy Policy. These safeguards include contractual data protection clauses with recipients and selection of service providers that operate under recognised international data protection frameworks.

Subject to applicable law and certain limitations, you have the following rights in relation to your personal data held by hot77:

• Right of Access: You may request a copy of the personal data hot77 holds about you, along with information about how it is used and shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Minor account detail changes (e.g., email address, mobile number) can be made directly in your account settings. Changes to identity or KYC data must be submitted with supporting documentation.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purpose it was collected. This right is subject to legal retention requirements; data required by AML law cannot be deleted before the mandatory retention period expires.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances, for example while a correction request is being reviewed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You may also opt out of marketing communications at any time via account settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact hot77 support via live chat or email at [email protected]. We will respond within a reasonable period and in any event within thirty (30) days of receiving a valid request. We may require identity verification before processing a data rights request.

hot77 is strictly prohibited to persons under the age of 21 years. We do not knowingly collect, process, or retain personal data from individuals under this age. If hot77 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered or attempted to use the hot77 Platform, please notify us immediately via the support channel. We treat all such reports as high-priority and will act promptly.

hot77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption: All data transmitted between your device and the hot77 Platform is encrypted using TLS (Transport Layer Security). Personal data and KYC documents stored on our infrastructure are encrypted at rest.
• Access Controls: Access to personal data within hot77's operational systems is restricted to personnel with a legitimate need to access it, enforced through role-based access controls and audit logging.
• Infrastructure Security: hot77's platform infrastructure is hosted on secured cloud environments with firewall protection, intrusion detection, and continuous monitoring.
• Password Security: Account passwords are stored using strong one-way hashing algorithms. hot77 does not store passwords in recoverable form and strongly recommends the use of unique, complex passwords for your account.
• Incident Response: hot77 maintains a documented incident response process to detect, contain, and remediate security incidents promptly. Affected users will be notified in the event of a breach affecting their personal data.

Whilst hot77 takes reasonable and appropriate steps to protect your data, no online system is unconditionally immune to security risks. You are also responsible for maintaining the security of your account credentials and for reporting any suspected unauthorised access promptly.

The hot77 Platform does not contain links to external third-party websites. All navigation and content on hot77.onl is internal to the Platform. This Privacy Policy therefore governs all data processing activities connected with your use of hot77 without the complication of third-party site interactions.

Game content provided by third-party studios is delivered through integrated frames within the hot77 Platform environment. While game mechanics are provided by certified third-party providers, the session data generated during your play at hot77 is processed under the terms of this Privacy Policy.

15.1 Right to Amend. hot77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The updated Policy will be published on this page with a revised effective date.

15.2 Notification of Material Changes. Where a change to this Policy is material — meaning it significantly affects your rights or how we use your data — hot77 will endeavour to notify registered users via email or account notification prior to the change taking effect.

15.3 Continued Use. Your continued use of the hot77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account in accordance with the account closure process described in the Terms & Conditions.

15.4 Previous Versions. Previous versions of this Privacy Policy are available upon request by contacting hot77 support.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hot77, please contact us through the following channels:

• Live Chat: Available 24/7 on the hot77 Platform. This is the fastest method for account-specific queries including data access requests and marketing opt-outs.
• Email: [email protected] — for formal written data rights requests, complaints, and correspondence related to this Privacy Policy. Please allow up to 48 hours for email responses. For data rights requests, we will respond within 30 days.

When submitting a data rights request, please include your registered account mobile number or email address and a clear description of the right you wish to exercise. We may require you to verify your identity before processing the request.