mh77 Privacy Policy

This Privacy Policy ("Policy") is published by mh77 ("mh77", "we", "us", "our"), the operator of the online gambling platform accessible at https://mh77.cam ("Platform"). This Policy explains how mh77 collects, uses, stores, shares and protects the personal data of individuals ("User", "you", "your") who access or use the Platform.

mh77 is an English-language online gambling information and platform portal targeting Pakistani users. We understand that players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and across Pakistan place considerable trust in us when they submit personal and financial information. We take that responsibility seriously.

This Policy should be read alongside our Terms & Conditions, which govern the overall legal relationship between mh77 and its users. By registering an Account or using the Platform in any capacity, you acknowledge that you have read this Policy and consent to the processing activities described herein.

mh77 collects the following categories of Personal Data:

mh77 collects Personal Data through the following means:

• Direct submission: information you provide when registering an account, completing KYC verification, contacting support, submitting feedback or updating your profile;
• Automated collection: technical and behavioural data collected automatically through your use of the Platform, including via cookies, server logs and analytics tools;
• Third-party sources: identity verification and fraud screening data received from KYC/AML service providers, payment processors and, where applicable, public records or credit reference agencies;
• Device and browser signals: device identifiers, IP addresses and browser metadata collected at the point of access.

Where you choose to use payment methods familiar to Pakistani users — such as bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah, or digital wallet references such as Easypaisa, JazzCash and Raast — the transaction reference data associated with those methods may be stored for financial record-keeping and AML purposes. The payment providers themselves are not affiliated with mh77 and this reference does not imply their endorsement of gambling activity.

mh77 processes Personal Data on the following legal bases, consistent with applicable data protection law in the jurisdiction of our operating license:

• Contractual necessity: processing required to perform the contract between mh77 and the User — including account management, payment processing, KYC verification and delivery of gambling services;
• Legal obligation: processing required to comply with applicable law, including AML obligations, licensing conditions, regulatory reporting requirements and court orders;
• Legitimate interests: processing carried out in the legitimate interests of mh77, including fraud prevention, security monitoring, responsible gambling oversight and platform analytics — where such interests are not overridden by the User's rights and interests;
• Consent: processing carried out on the basis of your freely given, specific and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by updating your preferences in your account settings or contacting support.

mh77 uses the Personal Data it collects for the following purposes:

• Account creation and management: to register, verify and maintain your mh77 account, including processing KYC documentation and maintaining account security;
• Payment processing: to process deposits and withdrawals, verify the source of funds and maintain complete financial transaction records;
• Fraud and AML compliance: to detect, investigate and prevent fraudulent activity, money laundering and any other prohibited conduct as defined in the Terms & Conditions;
• Responsible gambling: to monitor betting patterns for signs of problem gambling, enforce self-exclusion requests, apply account limits and communicate responsible gambling information where appropriate;
• Platform delivery and improvement: to operate and maintain the Platform, diagnose technical issues, conduct analytics and develop new features;
• Customer support: to respond to enquiries, process complaints and maintain correspondence records;
• Legal and regulatory compliance: to fulfil obligations under applicable law and to respond to lawful requests from regulatory authorities, courts and law enforcement agencies;
• Marketing communications (consent only): to send promotional offers, bonus notifications and platform updates where you have expressly opted in. You may opt out at any time.

mh77 does not sell your Personal Data. We may share it with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and identity verification providers: specialist third-party services that verify your identity and age using the documentation you submit during the verification process;
• Payment processors: financial institutions and payment intermediaries through whom deposits and withdrawals are facilitated. Transaction data is shared only as required to process the payment;
• Fraud prevention and AML screening services: third-party compliance tools used to screen transactions and account activity against watchlists and risk databases;
• Regulatory and licensing authorities: where mh77 is required by law or its operating license to disclose User data to a competent regulatory body;
• Law enforcement and courts: where mh77 is compelled by a valid legal order, court judgment or equivalent process;
• Technology and infrastructure providers: cloud hosting, cybersecurity and platform development partners bound by confidentiality obligations and data processing agreements;
• Group entities: affiliated entities within the mh77 corporate group, where such sharing is necessary for centralised operational functions, subject to the same data protection standards.

mh77 retains Personal Data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law or regulation. The following general retention principles apply:

• Active account data: retained for the duration of the account relationship plus a minimum post-closure period as required by the operating license jurisdiction (typically five to seven years for KYC, AML and financial records);
• Transaction records: retained for the period required under applicable financial services and anti-money laundering regulations, typically a minimum of five years from the date of the transaction;
• Support and correspondence records: retained for a minimum of two years from the date of the last interaction, or longer where the subject matter involves an unresolved dispute or regulatory matter;
• Marketing consent records: retained for the duration of the consent, plus a reasonable administrative period thereafter to demonstrate compliance;
• Technical and analytical data: typically retained in aggregated or anonymised form for platform improvement purposes, with personally identifiable elements deleted after 12–24 months.

Where retention is required beyond these periods by a specific legal obligation, mh77 will retain only the minimum data necessary to satisfy that obligation and will apply additional access controls during the extended retention period.

Subject to applicable data protection law, you may have the following rights in relation to your Personal Data held by mh77:

• Right of Access: the right to request a copy of the Personal Data mh77 holds about you and information about how it is being processed;
• Right to Rectification: the right to request correction of inaccurate or incomplete Personal Data without undue delay;
• Right to Erasure: the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies) or where processing is unlawful — subject to legal retention obligations;
• Right to Restriction: the right to request that mh77 restricts processing of your data in certain circumstances, such as while a rectification request is being assessed;
• Right to Data Portability: the right to receive your Personal Data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible and where processing is based on consent or contract;
• Right to Object: the right to object to processing carried out on the basis of legitimate interests, including profiling, where you have grounds relating to your particular situation;
• Right to Withdraw Consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mh77 may request verification of your identity before processing a data rights request in order to protect against unauthorised access to another person's data.

mh77 uses cookies and similar tracking technologies on the Platform. The following categories of cookies may be used:

• Strictly necessary cookies: essential for the Platform to function, including session authentication, security tokens and fraud prevention signals. These cookies cannot be disabled without significantly impairing Platform functionality;
• Performance and analytics cookies: used to collect anonymised or pseudonymised data about how Users interact with the Platform, helping mh77 identify areas for improvement and measure feature adoption;
• Functionality cookies: used to remember your preferences, such as language settings or responsible gambling limit configurations, to provide a more consistent experience;
• Marketing and targeting cookies (consent only): used to deliver personalised promotional content within the Platform where you have expressly consented. These cookies are not activated by default.

You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent certain Platform features from functioning correctly. mh77 does not place third-party advertising cookies that track your behaviour across external websites.

mh77 implements and maintains appropriate technical and organisational security measures designed to protect Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between Users and the Platform;
• AES-256 encryption for sensitive data at rest, including identity documents and financial records;
• Multi-factor authentication options for User accounts;
• Role-based access controls limiting internal access to Personal Data to authorised personnel with a documented business need;
• Regular security assessments and penetration testing;
• Incident response procedures including breach notification processes consistent with applicable law.

In the event of a personal data breach that is likely to result in a high risk to your rights, mh77 will notify affected Users without undue delay in accordance with applicable regulatory requirements.

mh77 operates under an international licensing framework. As a result, your Personal Data may be transferred to, stored and processed in countries outside Pakistan, including the country in which mh77 holds its operating license and countries where its technical infrastructure providers are located.

Where such transfers occur, mh77 takes steps to ensure that an appropriate level of protection is maintained, including through the use of contractual safeguards with Data Processors and by selecting service providers that operate under data protection regimes providing a standard of protection broadly equivalent to applicable international best practice.

By registering an Account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your Personal Data to the jurisdictions described above, to the extent necessary for the purposes described in this Policy.

mh77 is strictly an adults-only platform. The Platform is not directed at, and mh77 does not knowingly collect Personal Data from, any individual under the age of 18 years — or the higher minimum age required by the applicable operator license jurisdiction.

If mh77 becomes aware that it has collected Personal Data from an individual who does not meet the minimum eligibility age, it will promptly delete that data, close the associated account and take appropriate steps consistent with its responsible gambling obligations and applicable legal requirements.

If you have reason to believe that a minor has registered an account on the Platform, please notify us immediately at [email protected].

The Platform does not currently include links to external third-party websites. Where third-party services are integrated into the Platform — such as KYC verification tools, payment processing interfaces and analytics providers — these services operate under their own privacy policies and data processing terms.

mh77 enters into data processing agreements with all third-party processors to ensure that your Personal Data is handled in accordance with standards consistent with this Policy. However, mh77 does not control the privacy practices of independent third-party operators and is not responsible for their conduct beyond the scope of the data processing agreement.

mh77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, operational practices or Platform features. Where amendments are material, mh77 will notify registered Users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and request account closure.

Users are encouraged to review this Policy periodically to remain informed about how mh77 protects their data.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact mh77 using the details below. All data-related enquiries are handled by our support team in coordination with our data compliance function.

Please note: do not include copies of your identity documents in unsolicited email correspondence. If document submission is required to process your request, our team will provide a secure upload link.