At mg77, we take the privacy and security of your personal information seriously. This Privacy Policy explains exactly what data we collect from Pakistani players, why we collect it, how it is used, how long it is kept, and what rights you have over it. Reading this document in full is time well spent.
These cards highlight the most important aspects of how mg77 handles your data. They supplement — but do not replace — the full Privacy Policy document below.
mg77 operates on a data minimisation principle. We collect only the personal information genuinely required to deliver our services — account registration, payments, KYC compliance, and customer support. We do not collect data speculatively or for sale to third parties.
mg77 does not sell, rent, or trade your personal data to any third-party advertiser, data broker, or unrelated commercial entity. When data is shared with third parties — such as payment processors handling your JazzCash or EasyPaisa transactions — it is done only to deliver the service you requested.
All data transmitted between your device and mg77's servers — including login credentials, CNIC documents, and payment details — is protected with 256-bit SSL encryption. Sensitive fields like passwords are stored using bcrypt hashing; they are never stored or transmitted in plain text.
Pakistani players on mg77 have the right to access, correct, export, and request deletion of their personal data — subject to legal retention requirements. These rights can be exercised at any time by contacting mg77 support. We respond to all valid data requests within 30 days.
mg77 uses cookies and similar tracking technologies to keep you logged in, remember your game preferences, and understand how players navigate the platform. These cookies are technical necessities and analytics tools — not advertising surveillance instruments.
In the unlikely event of a data breach affecting your personal information, mg77 commits to notifying affected users within 72 hours of becoming aware of the breach, in accordance with our obligations under applicable data protection standards. We will explain what was affected and what steps we have taken.
mg77 ("we," "us," "our," or "the Platform") is committed to protecting the personal data of all users who access or register on mg77.app ("the Platform"). This Privacy Policy sets out a transparent account of the types of personal data we collect from Pakistani players and others who interact with mg77, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject.
This Policy applies to all personal data collected through: the mg77 website at mg77.app; account registration and login processes; payment and transaction activities, including JazzCash and EasyPaisa processing; KYC and identity verification submissions; customer support interactions; and the use of cookies and similar technologies on the Platform.
This Privacy Policy should be read alongside the mg77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. Capitalised terms not otherwise defined in this Policy have the meanings given to them in the mg77 Terms & Conditions.
For the purposes of this Privacy Policy, the data controller responsible for the personal data of mg77 users is the operator of the mg77 platform, operating under its international gaming licence. The data controller is responsible for determining the purposes and means by which your personal data is processed.
The Platform's designated data protection contact is reachable via the contact details provided in Section 15 of this Policy. All formal data protection queries, subject access requests, and complaints should be directed to this contact in the first instance.
mg77 collects and processes the following categories of personal data, depending on the nature of your interaction with the Platform:
mg77 collects personal data through the following primary channels:
The table below summarises the purposes for which mg77 processes your personal data and the legal basis on which each processing activity rests:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, mobile number, password | Performance of contract |
| Age verification and KYC compliance | CNIC, DOB, selfie photograph | Legal obligation / Regulatory compliance |
| Processing deposits and withdrawals | Payment identifiers, transaction data | Performance of contract |
| Fraud detection and prevention | IP address, device data, behaviour patterns | Legitimate interests / Legal obligation |
| Responsible gaming monitoring | Deposit limits, session data, exclusion records | Legal obligation / Legitimate interests |
| Customer support delivery | Support conversation content, account data | Performance of contract |
| Platform analytics and improvement | Usage data, session data, game preferences | Legitimate interests |
| Marketing communications (where consented) | Mobile number, game history | Consent (withdrawable at any time) |
| Regulatory reporting and audit | Transaction records, KYC documents | Legal obligation |
Where processing is based on your consent — specifically for marketing communications — you may withdraw that consent at any time by adjusting your notification preferences in the mg77 account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
mg77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:
Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast for the sole purpose of processing your deposit and withdrawal instructions. These processors are contractually bound to use your data exclusively for payment processing and to maintain appropriate security standards.
KYC document data — including your CNIC images and selfie photographs — may be processed by contracted third-party identity verification services operating on our behalf. These providers are subject to strict data processing agreements and are not permitted to use your data for any purpose other than completing the verification for mg77.
mg77 may disclose personal data to its regulatory licensing authority, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made only to the extent legally required and, where permitted, we will attempt to notify you before making such a disclosure.
To protect Pakistani players and the integrity of the Platform, mg77 may share data with fraud prevention agencies and shared industry fraud detection databases. Information about confirmed fraudulent activity may be shared to prevent that individual from committing fraud on other platforms.
mg77's servers and some of our third-party service providers may be located outside Pakistan. Where your personal data is transferred to countries outside your home jurisdiction, mg77 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections afforded within Pakistan.
Safeguards used for international transfers may include: contractual clauses requiring the receiving party to protect the data; transfer to countries recognised as providing an adequate level of data protection; and technical measures including encryption during transit and at rest.
If you would like further information about the specific safeguards applied to international data transfers involving your personal data, please contact mg77's data protection contact using the details provided in Section 15.
mg77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory retention obligations. The following retention periods apply:
When data is no longer required and no legal retention obligation applies, mg77 securely destroys or anonymises it in accordance with our data deletion procedures.
mg77 uses cookies and similar technologies — including local storage, session storage, and device fingerprinting — to deliver and improve the Platform experience. The following categories of cookies are used:
These cookies are essential to the operation of mg77 and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect your account from cross-site request forgery, and cookies that store your active game session state. The Platform cannot function correctly without these cookies.
Functional cookies remember your preferences — such as your last-played game, your chosen language settings, and your bet history filter preferences — so that you do not have to re-enter them on every visit. These are set by mg77 only and are not shared with third parties.
mg77 uses analytics tools to understand how Pakistani players navigate the Platform — which pages are most visited, where users drop off during the registration process, and which game categories generate the most engagement. This data is collected in aggregate and anonymised form and is used exclusively for Platform improvement purposes.
You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling certain cookies — particularly strictly necessary cookies — may significantly impair your ability to use mg77. Detailed instructions for managing cookies in Chrome, Firefox, Safari, and other major browsers are available in those browsers' help documentation.
If mg77 discovers or has reason to believe that personal data has been collected from an individual under 21 years of age — whether through a fraudulent registration or otherwise — the following actions will be taken immediately:
Parents and guardians are strongly advised to supervise access to devices used by household members under 21 and to use parental control software to restrict access to online gambling platforms including mg77. mg77 accepts no liability for underage access resulting from failures of parental supervision.
If you suspect that an individual under 21 has registered on mg77, please contact our support team immediately. We will investigate all such reports promptly and without delay.
As a user of mg77, you have the following rights with respect to your personal data. These rights can be exercised by contacting mg77 support using the details in Section 15. mg77 will respond to all valid requests within 30 calendar days:
You have the right to request a copy of all personal data mg77 holds about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
If any personal data mg77 holds about you is inaccurate or incomplete, you have the right to request correction. Contact support with the updated information and supporting evidence.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations — particularly the 5–7 year regulatory retention requirements described in Section 8.
You may object to processing of your personal data carried out on the basis of legitimate interests. Where your objection relates to marketing communications, we will cease all such processing immediately upon receipt of your objection.
Where processing is based on your consent or on a contract, you have the right to receive your personal data in a portable, machine-readable format and to transmit it to another controller if you choose.
You may request that mg77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified or while an objection to processing is being considered.
mg77 will not charge a fee for processing straightforward data subject requests. If a request is manifestly unfounded, repetitive, or excessive, mg77 reserves the right to charge a reasonable administrative fee or decline to act on the request, explaining the reason for doing so.
mg77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
mg77 uses certain categories of your personal data specifically to fulfil its responsible gaming obligations — both regulatory and ethical. This processing is carried out in the genuine interest of protecting Pakistani players and is not used for any commercial purpose.
Specifically, mg77 processes the following data for responsible gaming purposes:
Responsible gaming data is processed under our regulatory legal obligation and our legitimate interest in protecting the wellbeing of our players. This data is not shared with third parties except where required by our regulatory authority. For more information about mg77's responsible gaming tools and resources, please visit our Responsible Gaming page.
mg77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new Platform features, changes in applicable law or regulatory requirements, or operational changes within the mg77 organisation.
Where changes to this Policy are material — meaning they significantly affect how your personal data is processed or the rights available to you — mg77 will provide advance notice of at least 14 calendar days via a prominent notice on the Platform or by notification to your registered mobile number. Continued use of mg77 following such notice constitutes your acceptance of the revised Privacy Policy.
Where changes are non-material — such as editorial corrections or clarifications that do not alter the substance of the Policy — they may be made without advance notice. The "Last Updated" date at the top of this document will always reflect the most recent revision date.
For all privacy-related queries, data subject access requests, complaints about how mg77 handles your personal data, or requests to exercise any of the rights described in Section 11, please use the following contact channels:
If you are not satisfied with mg77's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority under whose jurisdiction mg77's gaming licence operates. Details of the applicable authority are available on request from our support team.
Now that you understand how mg77 handles your personal data, you can enjoy the full platform experience — live casino, PSL cricket betting, 500+ slots — knowing your information is in safe hands. 21+ only.