w677 Privacy Policy

This Privacy Policy ("Policy") is issued by w677 ("w677," "we," "us," or "our") and applies to all users of the w677 website located at https://w677.app and all associated services, including but not limited to sports betting, live casino, slot games, table games, and payment processing services.

This Policy describes how w677 collects, uses, stores, shares, and protects your personal information in connection with your use of the platform. It applies to all registered users, visitors, and individuals who interact with w677 through any channel, including the website, customer support, and promotional communications.

w677 is committed to handling your personal data responsibly and in compliance with applicable international data protection standards and the gaming regulatory framework under which w677 operates. Users based in Pakistan — including those in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities — are subject to this Policy in full.

This Policy should be read alongside w677's Terms & Conditions and Responsible Gaming Policy.

w677 collects personal data through several channels: directly from you during registration and use of the platform, automatically through your device and browser, and from third-party identity verification and payment service providers. The categories of personal data we collect are as follows:

w677 does not collect sensitive personal data such as religious beliefs, political opinions, or medical history unless expressly required for responsible gaming assessments and only with your explicit consent.

w677 processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are:

• Account Creation and Management: To register your account, verify your identity, maintain your account settings, and provide access to the w677 platform.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Bank Transfer, and to process withdrawal requests to your verified payment method in PKR.
• KYC and Regulatory Compliance: To verify your age (21+ requirement), confirm your identity, and meet anti-money laundering (AML) obligations under applicable international gaming regulations.
• Platform Personalisation: To tailor the w677 experience to your preferences, including game recommendations, preferred payment methods, and language settings.
• Responsible Gaming: To monitor gaming patterns, identify signs of problem gambling, enforce deposit limits, manage self-exclusion requests, and conduct responsible gaming interventions where necessary.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activities.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: To analyse anonymous usage patterns, identify technical issues, and improve w677's performance for Pakistani mobile users.
• Legal Obligations: To comply with court orders, regulatory requests, or other lawful demands from competent authorities.

w677 does not sell or rent your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: We share necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors to facilitate your deposits and withdrawals. These providers are contractually bound to use your data solely for payment processing purposes.
• Identity Verification Partners: We work with regulated KYC and AML service providers to verify your CNIC and identity documents. These partners operate under strict data processing agreements and are not permitted to use your data for any purpose other than verification.
• Game Software Providers: The third-party game studios whose titles appear on w677 may receive anonymised session data to support game performance and fairness auditing. No personally identifiable information is shared with game providers.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory authority, w677 will disclose relevant personal data. We will notify you of any such disclosure where legally permitted to do so.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or match-fixing, we may share relevant data with industry-wide fraud prevention organisations or gaming integrity bodies.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of w677's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer that materially affects this Policy.

All third parties with whom w677 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose.

w677 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with w677, plus a minimum of 5 years after account closure to satisfy AML and gaming regulatory record-keeping requirements.
• Transaction and Payment Records: Retained for a minimum of 7 years following the date of the transaction, in accordance with financial record-keeping standards applicable to international gaming operators.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the last support interaction, or longer if the matter relates to an unresolved dispute or legal claim.
• Marketing Preferences: Retained until you withdraw your consent or opt out of marketing communications, after which your preferences are updated immediately and confirmed by email.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely for platform improvement purposes. Identifiable technical data such as IP address logs is retained for no longer than 12 months.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

w677 takes the security of your personal data very seriously. We implement a layered security framework designed to protect your information against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• TLS 1.3 Encryption: All data transmitted between your device and w677's servers is protected using Transport Layer Security (TLS) 1.3, the current industry standard for secure web communications.
• Data Encryption at Rest: Sensitive personal data — including CNIC numbers, payment details, and account credentials — is encrypted at rest using AES-256 encryption on our servers.
• Two-Factor Authentication (2FA): w677 supports and strongly recommends 2FA for all user accounts, delivered via your registered Pakistani mobile number (PKT).
• Access Controls: Access to personal data within w677's systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and regularly audited.
• Penetration Testing: w677 conducts regular security assessments and third-party penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: w677 maintains a documented data breach response procedure. In the event of a significant data security incident affecting your personal data, we will notify you within the timeframe required by applicable regulations.

While w677 takes all reasonable steps to protect your personal data, no system is completely immune to security risks. You are responsible for maintaining the security of your own account credentials and must notify w677 immediately at [email protected] if you suspect your account has been compromised.

w677 uses cookies and similar tracking technologies on the w677.app website to ensure the platform functions correctly, to maintain your login session securely, and to gather anonymous analytics data. The following categories of cookies are used:

• Essential Cookies: These cookies are strictly necessary for the w677 platform to function. They manage your login session, remember your security preferences, and maintain the integrity of your account during active use. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: We use anonymised, first-party analytics to understand how Pakistani users interact with w677 — which pages are visited most, how long sessions last, and which features are most used. This data helps us improve the platform. No personally identifiable information is included in analytics data.
• Preference Cookies: These cookies remember your settings such as preferred language, currency display (PKR), and notification preferences so you do not need to re-enter them on every visit.
• Security Cookies: Short-lived cookies used to support fraud detection mechanisms, CSRF protection, and rate-limiting systems that protect your account from automated attacks.

w677 does not use third-party advertising cookies, cross-site tracking pixels, or any cookies that build profiles of your browsing activity outside of w677.app. You may manage your cookie preferences through your browser settings, though disabling essential cookies will affect your ability to use the platform.

w677 respects your rights in relation to your personal data. You have the following rights, exercisable by contacting our support team at [email protected]:

• Right of Access: You have the right to request a copy of all personal data w677 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account information directly from your account settings.
• Right to Erasure: You may request that w677 delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent, or where no legitimate overriding interest exists. Note that certain data must be retained for legal and regulatory compliance even following an erasure request.
• Right to Restrict Processing: You may request that w677 restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on w677's legitimate interests where your interests, rights, or freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

All data rights requests will be acknowledged within 72 hours and substantively addressed within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, of which you will be notified in advance.

Given that w677 processes financial transactions in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Bank Transfer, the handling of payment-related data deserves specific attention:

• Payment Credentials: w677 does not store full JazzCash PINs, bank account passwords, or complete card numbers on our servers. Payment sessions are handled via encrypted, tokenised connections to our payment service providers.
• Transaction Records: w677 maintains detailed records of all deposits and withdrawals for AML compliance, dispute resolution, and regulatory reporting purposes. These records include transaction amounts in PKR, timestamps, payment method references, and account identifiers.
• AML Monitoring: w677 applies automated and manual monitoring to transaction patterns to detect potential money laundering activity. Unusual transaction volumes may trigger enhanced due diligence processes, which may include requests for source-of-funds documentation.
• Currency: All financial data is recorded and processed in Pakistani Rupees (PKR). Where currency conversion is involved in any internal process, this is handled by w677's systems and does not expose your payment credentials to additional third parties.

If you have any concerns about the security of a payment transaction or notice an unauthorised charge on your JazzCash or EasyPaisa account linked to w677, contact our support team immediately at [email protected].

The w677 platform is strictly for users aged 21 and above. w677 does not knowingly collect, store, or process personal data from any individual under the age of 21 under any circumstances.

During the registration process, all users are required to confirm they are 21 or older. This declaration is reinforced through our KYC verification process, which cross-references CNIC data to confirm date of birth before any withdrawal is processed.

If w677 discovers or is notified that personal data has been collected from a user under the age of 21, the following actions will be taken immediately:

• The account will be suspended pending investigation;
• All personal data associated with the account will be deleted or rendered inaccessible as quickly as technically feasible;
• Any deposited funds will be returned to the verified source payment method;
• Any winnings derived from gameplay while underage will be forfeited.

Parents or guardians who believe a minor has registered on w677 should contact us immediately at [email protected] with relevant details so we can act without delay.

w677 may send you marketing communications about promotions, bonuses, new games, PSL cricket betting markets, and platform updates via SMS (to your registered Pakistani mobile number) or email. We will only send marketing communications where:

• You have given explicit consent during registration or through your account settings; or
• You are an existing w677 user and the communication relates to similar products and services to those you have already used, and you have not opted out.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from w677;
• Replying STOP to any marketing SMS;
• Updating your communication preferences in your w677 account settings; or
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect essential account communications — we will still contact you regarding your account security, transaction confirmations, KYC requirements, and support responses as these are necessary for the operation of your account.

w677 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When changes are made, we will update the "Last Updated" date at the top of this document.

Where changes to this Policy are material — meaning they substantively affect how we collect, use, or share your personal data — we will provide you with at least 14 days' advance notice by displaying a prominent notice on the w677 platform and, where practicable, by sending a notification to your registered contact details.

For minor amendments — such as typographical corrections, clarifications that do not alter the substantive meaning, or updates required to comply with new legal obligations — we may update the Policy without advance notice beyond updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of w677 after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure in accordance with w677's Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by w677, please contact our dedicated privacy support team:

• Email: [email protected]
• Support Hours: 8:00 AM – 2:00 AM PKT, 7 days a week
• Response Time: Privacy enquiries are acknowledged within 72 hours and substantively addressed within 30 days
• Subject Line: Please use the subject line "Privacy Request – [Your Username]" for faster routing to our privacy team

For data rights requests (access, rectification, erasure, portability), please include your registered email address, w677 username, and a clear description of your request. We may need to verify your identity before processing certain requests to ensure the security of your account data.

This Privacy Policy was last reviewed and updated on 1 January 2026.