At cm77, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains exactly what personal data cm77 collects from Pakistani players, how that data is used, who it may be shared with, and what rights you have over it. We recommend reading this document in full before registering an account or making any deposit on the cm77 platform.
These six principles summarise how cm77 approaches data privacy for every registered player in Pakistan.
cm77 collects only the personal data that is genuinely necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for undefined future purposes.
cm77 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your name, contact details, payment information, and gaming history are never monetised by cm77 outside of the purposes described in this policy.
All personal data held by cm77 is stored with encryption at rest and in transit. SSL/TLS protocols protect all data exchanged between your device and the cm77 platform. Payment data is handled under PCI-DSS compliant infrastructure.
You have the right to access, correct, and request deletion of your personal data held by cm77, subject to our legal retention obligations. All data rights requests are handled within 30 days of receipt by the cm77 data team.
cm77 maintains clear records of what data is collected, why it is collected, how long it is retained, and with which third parties it may be shared. Nothing about our data processing is hidden — it is all set out in this policy.
cm77 recognises the legal and cultural context of Pakistani players. Payment data from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank is handled with the same rigour as any other payment method, and no unnecessary data is retained after transaction settlement.
This Privacy Policy ("Policy") describes how cm77 collects, processes, stores, and protects the personal data of all users of the cm77 platform at cm77.today. It applies to all registered players, prospective players who visit the site, and any individual who interacts with cm77 services. This Policy was last updated on 1 January 2026 and supersedes all prior versions.
cm77 is an online gaming platform operated by an internationally licensed gaming company ("cm77", "we", "us", or "our"). The platform is accessible at cm77.today and offers casino games, live dealer tables, sports betting including PSL and international cricket, slot games, and related gaming services to eligible players.
For the purposes of data protection, cm77 acts as the data controller in respect of personal data collected directly through the cm77 platform. Where cm77 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by data processing agreements that require them to handle your data only as instructed by cm77.
All data protection enquiries and rights requests should be directed to the cm77 data team via the contact details set out in Section 15 of this Policy.
cm77 collects the following categories of personal data from players and site visitors:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / Passport number, photograph | Registration & KYC verification |
| Contact Data | Email address, mobile number, city/province (e.g. Karachi, Lahore) | Registration |
| Financial Data | JazzCash / EasyPaisa mobile number, bank account details (HBL, UBL, Meezan), card details | Deposits & withdrawals |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, game history, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type, browser, operating system, session duration | Automatic collection on site visit |
| Usage Data | Pages visited, games played, search queries on platform, click patterns | Automatic collection on site use |
| Communications Data | Live chat transcripts, email correspondence, support tickets | When you contact support |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, cooling-off period records | When you use RG tools |
cm77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information. If such data is incidentally disclosed in a support communication, it will not be processed for any purpose beyond resolving the specific support request.
cm77 collects personal data through the following means:
cm77 uses your personal data for the following purposes:
cm77 processes your personal data on the following legal bases:
cm77 does not sell your personal data. We may share your data with the following categories of recipients where necessary and proportionate:
All third-party recipients are subject to data processing agreements or equivalent contractual protections. cm77 conducts due diligence on all data processors before engaging them.
In the event of a merger, acquisition, or sale of all or substantially all of cm77's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change in the applicable privacy policy with a minimum of 30 days' notice before the transfer takes effect.
The cm77 platform uses cookies and similar technologies to deliver, maintain, and improve platform functionality. The following categories of cookies are used:
You can manage your cookie preferences through your browser settings. Note that disabling cookies other than strictly necessary ones may affect some platform functionality. cm77 does not use cookies to track your activity on third-party websites outside of the cm77 platform.
cm77 retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by our regulatory and legal obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. cm77 conducts periodic data audits to ensure retention policies are being applied correctly.
As a cm77 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact the cm77 data team at the address in Section 15. All requests will be acknowledged within 5 business days and responded to within 30 days.
Request a copy of all personal data cm77 holds about you, including what it is, why it is held, and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data held about you. Corrections to identity data require supporting documentation.
Request deletion of your personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful. Subject to legal retention obligations.
Request that cm77 restricts processing of your data while a rectification request is pending or while you object to a particular processing activity.
Receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
Object to processing based on cm77's legitimate interests, including direct marketing. Marketing objections are honoured immediately and unconditionally.
Submit all data rights requests to cm77 via live chat from your account dashboard or by emailing [email protected] with the subject line "Data Rights Request". You will need to verify your identity before the request can be processed. cm77 does not charge a fee for processing data rights requests.
cm77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
Notwithstanding these measures, no internet-based platform can guarantee absolute security. You also play a role in protecting your data: use a strong, unique password for your cm77 account, enable two-factor authentication, and never share your login credentials with anyone.
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, cm77 will notify you without undue delay and in accordance with applicable notification obligations under our licensing framework.
The cm77 platform is strictly for individuals aged 21 and above. cm77 does not knowingly collect personal data from any person under the age of 21. The cm77 registration process includes age declaration and is supported by KYC age verification as a mandatory step before any real-money activity is permitted.
If cm77 discovers that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — the following steps will be taken immediately:
Parents and guardians are strongly encouraged to use available parental control software to prevent underage individuals from accessing online gambling platforms including cm77. If you believe a minor has registered on cm77, please contact us immediately at the address in Section 15.
As an internationally licensed platform, cm77 may transfer your personal data to service providers and partners located in jurisdictions outside Pakistan. Where such transfers occur, cm77 ensures that adequate data protection safeguards are in place, including:
For information about the specific international transfer mechanisms applicable to your data, please contact the cm77 data team using the details in Section 15.
The cm77 platform does not contain links to external third-party websites as a matter of policy. However, in the event that you access any external resource in connection with your use of cm77 — such as a payment provider's own portal — please be aware that those external platforms are governed by their own privacy policies and cm77 has no responsibility or liability for how those third parties process your data.
cm77 recommends reviewing the privacy policy of any third-party service you use in connection with your cm77 account, including JazzCash, EasyPaisa, and your banking provider.
cm77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, cm77 will notify registered players via their registered email address and/or by displaying a prominent notice on the cm77 platform before the updated policy takes effect.
Minor amendments — including typographical corrections, clarifications of existing language, and updates reflecting new data processor arrangements — may be made without individual notification, though the "Effective Date" at the top of this page will be updated to reflect the most recent revision.
Your continued use of the cm77 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. We recommend bookmarking this page and reviewing it each time you notice the effective date has changed.
This Privacy Policy is effective as of 1 January 2026. Previous versions are retained for a minimum of five years and are available upon written request to the cm77 data team.
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by cm77, please contact our data team through the following channels:
cm77 takes all privacy enquiries seriously and will acknowledge your contact within 5 business days. Formal data rights requests (access, erasure, portability, etc.) are processed within 30 days of receipt, with identity verification completed as a prerequisite.
If you are not satisfied with cm77's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under the jurisdiction of cm77's gaming license, details of which are available upon request from the cm77 data team.
cm77 combines cricket betting, live casino, PKR payments, and 24/7 support with a genuine commitment to keeping your personal data secure and private.
21+ cm77 is for players aged 21 and above. Gamble responsibly.