hmm77 Privacy Policy

1. About This Policy

This Privacy Policy explains how hmm77 — operating through hmm77.app — collects, processes, stores and protects the personal data of players who register, deposit funds, place bets, or interact with any part of our online gaming and betting platform.

By creating an account on hmm77, you acknowledge that you have read and understood this policy and agree to the collection and use of your information as described here. This policy should be read alongside the Terms and Conditions, which govern the rules of using the platform.

We are committed to handling your personal data responsibly. We collect only what is necessary to run the platform, verify your identity, process PKR transactions and keep your account secure. We do not collect data for collection's sake, and we do not monetise it by selling it to external parties.

2. Information We Collect

We collect personal information at different stages of your interaction with hmm77. The table below summarises the main categories of data we collect and when that collection occurs.

Where identity verification documents are requested — such as a copy of your CNIC or proof of address — these are collected through a secure upload process and stored separately from your general account data with additional access controls applied.

3. How We Use Your Data

Every piece of data we hold has a specific purpose. We do not process your information beyond what is necessary for that purpose. The main uses of your personal data are as follows:

• Account administration: Creating and managing your player account, verifying your identity and ensuring only authorised access to your balance.
• Payment processing: Handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and cards. Your payment details are used solely to complete transactions you initiate.
• Fraud prevention and security: Monitoring for unusual account activity, multiple account creation, bonus abuse and any signs of fraudulent behaviour. Device and IP data assists with this process.
• Customer support: Using your account history and communication records to resolve disputes, answer queries and process requests accurately.
• Platform improvement: Aggregated and anonymised usage data helps us understand how the platform is used and what improvements to prioritise — whether that is cricket betting markets, slot performance or app loading speed.
• Promotional communications: Sending bonus offers, game launch notifications and platform news to players who have not opted out of marketing communications.
• Responsible gaming: Monitoring gaming patterns to identify potential problem behaviour and facilitate access to tools like deposit limits and self-exclusion where relevant.

4. Payment Data & PKR Transactions

All financial transactions on hmm77 are conducted in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer or a card, we process the payment details you provide to complete that transaction.

Payment data is handled with the following protections in place:

• Card details are tokenised — the actual card number is never stored on our servers in full. We retain only the token and last four digits for reference.
• Mobile wallet account numbers (JazzCash, Easypaisa) are stored in encrypted form and linked to your verified account. They are not accessible to support staff in plain text.
• Bank account details provided for Raast or direct bank transfer are encrypted and used only for the withdrawal method on record.
• Transaction records — amounts, dates, methods — are retained as part of your financial history and are accessible by you through your account dashboard.

We do not share payment details with third parties except where required to process the transaction itself — meaning the payment gateway or banking partner involved in completing the transfer. These partners are bound by confidentiality obligations and process data only as instructed.

5. Sharing & Third Parties

hmm77 does not sell, rent, or trade your personal information to third parties for their own commercial use. Data is shared only in the following limited circumstances:

• Payment processors: Your payment details are passed to the relevant payment gateway (JazzCash, Easypaisa, Raast, banking partners) solely to complete the transaction you have initiated.
• Identity verification providers: When KYC verification is required, your identity documents may be processed by a third-party verification service operating under a strict data processing agreement.
• Game software providers: Live casino, slots and other games are provided by third-party studios. These providers receive session data necessary to run the game but do not receive your full account profile or payment details.
• Analytics providers: Aggregated and anonymised platform usage data may be shared with analytics tools to help us understand platform performance. This data cannot be used to identify individual players.
• Legal requirements: If required by applicable law or a valid legal request from an authority, we may disclose account information to the extent required. We will not volunteer data beyond what is legally required.

All third-party service providers engaged by hmm77 are required to maintain the confidentiality of the data they access and to process it only for the specific purpose for which it was shared. They are not permitted to use your data for their own marketing or commercial purposes.

6. Data Security

We take the security of your personal information seriously. The following technical and organisational measures are in place to protect data held by hmm77:

• SSL/TLS encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard SSL/TLS protocols. The padlock you see in your browser confirms an active encrypted connection.
• Encrypted storage: Personal and financial data stored on our servers is encrypted at rest. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data is restricted to staff members who genuinely need it to carry out their role. Access logs are maintained and reviewed regularly.
• Intrusion monitoring: Systems are monitored continuously for unauthorised access attempts, unusual traffic patterns and other indicators of compromise.
• Account-level security: You can further protect your account by using a strong, unique password. Two-factor authentication options may be available in account settings.

You also play a role in keeping your account secure. Do not share your password with anyone, do not use the same password across multiple platforms, and contact support immediately if you believe your account has been accessed without your authorisation.

7. Cookies & Tracking

hmm77 uses cookies and similar tracking technologies to deliver a functional and personalised experience on the platform. The following types of cookies are in use:

You can manage or delete cookies through your browser settings. Note that disabling essential or security cookies will affect your ability to use the platform normally — login sessions may not persist and certain features may not function as expected.

We do not use cookies to serve third-party advertising or to build personal profiles for sale to advertising networks.

8. Data Retention

We retain your personal data for as long as your account is active and for a period after closure to meet legal and operational requirements. The retention schedule below gives an overview:

• Active account data: Retained for the full duration your account is open. Identity, contact and gaming data are kept current and accessible to you through your account dashboard.
• Transaction records: PKR deposit and withdrawal records are retained for a minimum period following account closure to satisfy financial record-keeping requirements. These records are not accessible for marketing purposes during the retention period.
• KYC documents: Identity verification documents are retained for the period required to support the transaction history they verify. After the retention period, documents are securely deleted.
• Support communications: Chat and email records are retained for a period sufficient to resolve any follow-up disputes and then deleted or anonymised.
• Closed or self-excluded accounts: Basic account records may be retained to prevent re-registration during a self-exclusion period and to support fraud prevention. Full personal data is reduced to minimum necessary details once the retention obligation is met.

9. Your Rights

As an hmm77 player, you have certain rights regarding your personal data. These rights can be exercised by contacting the support team through live chat or by email.

• Right to access: You can request a summary of the personal data we hold about you, including your account details, transaction history and communication records.
• Right to rectification: If any of the information we hold is inaccurate or out of date, you have the right to request that it is corrected. Some corrections — such as changes to your registered name — require identity verification before they can be applied.
• Right to deletion: You can request that your personal data is deleted, subject to any legal retention obligations that require us to hold certain records. See Section 8 for details on retention periods.
• Right to restrict processing: In certain circumstances you can request that we limit how your data is processed while a concern or dispute is being resolved.
• Right to opt out of marketing: You can withdraw consent for promotional communications at any time through your account notification settings or by contacting support. Transactional messages — deposit confirmations, withdrawal notices, security alerts — cannot be disabled.
• Right to account closure: You can request that your account be closed at any time. On closure, your balance (if verified) will be returned to the payment method on record and your data will enter the retention and deletion schedule described in Section 8.

Requests are typically acknowledged within a few business days. Complex requests — such as full data exports — may take longer. We will communicate a realistic timeframe when the request is received.

10. Children's Privacy

hmm77 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation of age, and identity verification during the KYC process is used to confirm that players meet the minimum age requirement.

If we discover that an account has been created by or on behalf of a minor, the account will be closed immediately and any deposited funds returned to the payment method on record. Personal data associated with the account will be deleted promptly.

11. Changes to This Policy

hmm77 may update this Privacy Policy from time to time. Changes may reflect updates to platform features, adjustments to data handling practices, or evolving requirements. When material changes are made, registered players will be notified via email or through an in-platform notification before the changes take effect.

The updated policy will be published on this page with a revised effective date shown at the top. Your continued use of hmm77 after the effective date of any update constitutes your acceptance of the revised privacy terms. If you do not agree with the updated policy, you should cease using the platform and request account closure through support.

We recommend reviewing this page periodically so you are always aware of how your information is being handled. Minor clarifications — such as correcting a typo or adding a more detailed explanation of an existing practice — may be made without formal notification.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise any of the rights described in Section 9, or have a concern about how your personal data has been handled, you can reach the hmm77 support team through the following channels:

• Live chat: Available around the clock through the platform. For privacy-related queries, select the relevant category when starting the chat so your request is routed appropriately.
• Email: Send your query to [email protected]. Include your registered username (not your password) so we can locate your account. Privacy and data requests are handled by the relevant team and typically acknowledged within a few business days.

Related documents you may also want to review: Terms and Conditions and Responsible Gaming.