AR777 Privacy Policy – How We Protect Your Data in Pakistan

AR777 operates the online gaming and sports betting platform accessible at ar777.im. In the course of providing these services to Pakistani players, AR777 collects and processes certain personal information about you. This Privacy Policy is our commitment to you that we handle your data responsibly, lawfully, and transparently.

We understand that Pakistani players — like users everywhere — want to know exactly what happens to their personal information when they sign up for a service. Too many platforms bury their privacy practices in dense legal text that nobody reads. We have deliberately avoided that approach. Every section of this policy is written in plain English, and if anything is still unclear, you can ask our support team directly in English or Urdu.

AR777 acts as the data controller for all personal data collected through the platform. This means we are responsible for deciding how your data is used and ensuring it is handled in accordance with applicable privacy standards. We take that responsibility seriously — not because we are required to say that, but because the trust of our players is genuinely important to us and to the long-term health of this platform.

AR777 collects personal data in two ways: information you provide directly, and information collected automatically when you use the platform. Here is a complete breakdown of both categories.

Information you provide to us directly:

• Registration data: Full legal name, date of birth, Pakistani mobile number, email address, and the username and password you choose for your account.
• Verification documents: CNIC (National Identity Card), passport, or other government-issued identity documents submitted during KYC verification, plus proof of address where required.
• Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, and partial card details processed through our certified payment gateways. AR777 does not store full card numbers on its own servers.
• Support communications: The content of emails, live chat messages, and any other communications you send to AR777 customer support.
• Responsible gaming preferences: Deposit limits, self-exclusion settings, and session time limits you configure in your account dashboard.

Information collected automatically when you use AR777:

• Device and connection data: IP address, device type, operating system, browser type and version, and mobile network operator.
• Session and usage data: Pages visited, games played, bet history, login and logout times, session duration, and navigation patterns within the platform.
• Transaction data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and their outcomes.
• Cookie and tracking data: See Section 8 for full details on cookies and how you can manage them.

Every piece of data AR777 collects has a specific, documented purpose. We do not collect data speculatively or "just in case." The table below shows the main data types and the purposes they serve.

AR777 also uses aggregated, anonymised data — meaning data stripped of any personal identifiers — to analyse platform-wide trends, improve game offerings, and understand how Pakistani players use the service. This aggregate data cannot be used to identify any individual player and is not subject to the same restrictions as personal data.

AR777 processes your personal data on one or more of the following legal bases, depending on the type of data and its purpose:

• Contractual necessity: Much of the data we process is necessary to fulfil our contract with you — running your account, processing deposits and withdrawals, settling bets, and providing customer support. Without this data, we cannot provide the service.
• Legal obligation: AR777 is required to collect and retain certain data for compliance purposes, including identity verification (KYC), transaction records for anti-money-laundering compliance, and age verification to prevent underage gaming.
• Legitimate interest: AR777 has a legitimate interest in detecting and preventing fraud, maintaining platform security, and improving its services — provided this interest does not override your rights. We have assessed these legitimate interests and applied proportionate data practices accordingly.
• Consent: For optional data uses such as marketing communications and certain non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the validity of any prior processing.

AR777 does not sell your personal data to third parties under any circumstances. We do not share your information with advertisers or data brokers. Data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways receive the payment details necessary to process your deposits and withdrawals. Each processor is contractually bound to handle your data securely and not use it for any other purpose.
• Identity verification providers: Third-party KYC services that verify the identity documents you submit. These providers are certified and operate under strict data security agreements with AR777.
• Game software providers: The certified game studios that supply AR777's casino and live dealer games may receive necessary session identifiers to enable gameplay. They do not receive your name, payment details, or contact information.
• Fraud and security services: Specialised security firms that assist AR777 in detecting and investigating fraud, account takeovers, and irregular betting patterns. Data shared is limited to what is needed for the specific investigation.
• Legal authorities: Where AR777 is required by law, court order, or regulatory authority to disclose data, we will comply. Where permitted, we will notify you of such a disclosure in advance.

Data security is not a checkbox exercise at AR777 — it is an ongoing operational priority. The following measures are in place to protect your personal information:

• 256-bit SSL encryption: All data transmitted between your device and AR777's servers is encrypted using Transport Layer Security (TLS 1.3), the same standard used by Pakistani banks and major financial institutions. Your data in transit cannot be read by third parties.
• Secure data storage: Personal data at rest is stored on encrypted servers with strict access controls. Only authorised AR777 personnel with a documented operational need can access personal data, and all such access is logged.
• Payment security: Card payments are processed through certified gateways. AR777 does not store full card numbers, CVV codes, or bank passwords on its own systems.
• Account security: Player accounts are protected by hashed passwords. AR777 staff cannot see your password in any form. Failed login attempt monitoring and automatic account lockouts are in place to prevent brute-force attacks.
• Regular security assessments: AR777 conducts regular reviews of its security practices and responds to emerging threats. Third-party security testing is performed periodically to identify and remediate vulnerabilities.
• Data breach response: In the unlikely event of a data breach affecting your personal information, AR777 will notify affected players promptly and take immediate steps to contain and remediate the breach.

AR777 retains personal data only for as long as necessary for the purposes described in this policy or as required by applicable legal and compliance obligations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years after account closure to comply with anti-money-laundering record-keeping requirements.
• Transaction and betting history: Retained for a minimum of 5 years from the date of the transaction for compliance and dispute resolution purposes.
• Identity verification documents: Retained for a minimum of 5 years after your most recent transaction or account closure, whichever is later.
• Customer support communications: Retained for up to 2 years from the date of the last communication in the relevant support thread.
• Marketing data (where consent was given): Retained until you withdraw consent or request deletion, whichever comes first.
• Session and technical logs: Retained for up to 12 months for security and fraud prevention purposes, then deleted or anonymised.

When data is no longer required to be retained, it is securely deleted from AR777's systems. Anonymised, aggregated data derived from personal data may be retained indefinitely as it cannot be used to identify individuals.

AR777 uses cookies and similar tracking technologies on its website. Cookies are small text files placed on your device that help the platform remember you and improve your experience. Here is a breakdown of the cookies AR777 uses and what each type does.

You can manage cookie settings through your browser at any time. Most modern mobile browsers on Android and iOS provide cookie management options in their Privacy or Settings sections. Clearing cookies will log you out of your AR777 session and reset your preferences, but will not delete your account or balance.

You have the following rights over your personal data held by AR777. These rights can be exercised by contacting our support team at any time. We will respond to valid requests within 30 days.

• Right of Access: You can request a copy of all personal data AR777 holds about you. We will provide this in a readable format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete — for example, a misspelled name or outdated phone number — you have the right to request a correction.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that legal retention obligations (such as KYC and transaction records) may mean some data cannot be fully deleted.
• Right to Restrict Processing: You may request that we temporarily stop processing your data while a dispute about its accuracy or our right to use it is resolved.
• Right to Data Portability: For data processed based on your consent or contractual necessity, you may request that it be provided in a structured, machine-readable format so you can transfer it elsewhere.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

AR777 is strictly an adult platform and is not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is conducted during the registration process and again before withdrawals are processed.

If AR777 becomes aware that personal data has been collected from a person under 18 without parental consent, that data will be deleted and the associated account will be permanently closed. Parents or guardians who believe their child may have registered with AR777 are encouraged to contact support immediately at support@ar777.im. We take underage access seriously and will act on any valid report promptly.

AR777 sends promotional emails, SMS notifications, and in-platform messages to players who have opted in to receive them. These communications may include information about new games, promotions, enhanced odds on cricket matches, and bonus offers.

Marketing communications are entirely opt-in. You will not receive them unless you actively tick the relevant box during registration or subsequently enable them in your account settings. If you have opted in and later change your mind, you can unsubscribe at any time by:

• Clicking the unsubscribe link in any AR777 marketing email.
• Updating your notification preferences in your AR777 account settings under "Communications."
• Contacting support at support@ar777.im and requesting removal from all marketing lists.

Unsubscribing from marketing communications does not affect essential account communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of your marketing preferences because they are operationally necessary.

AR777 may update this Privacy Policy from time to time to reflect changes in our data practices, updates to applicable privacy standards, or new service features that involve the processing of personal data in new ways. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to registered players by email at least 14 days before the changes take effect, unless immediate changes are required for legal or security reasons.
• Display a prominent notice on the AR777 platform until the updated policy has been in effect for at least 30 days.

Your continued use of AR777 after the effective date of any policy update constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and may request account closure through customer support.

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact the AR777 privacy team. We are responsive, we are helpful, and we take privacy queries seriously.

• Email: support@ar777.im — use the subject line "Privacy Query" or "Privacy Rights Request" for fastest routing. We respond to privacy emails within 24 hours on business days and within 48 hours at weekends.
• Live Chat: Available 24/7 via your AR777 account dashboard. For privacy rights requests, email is preferred as it creates a written record, but live chat can help with general privacy questions immediately.
• Language: You may contact us in English or Urdu. Both are fully supported by our team.

For formal data rights requests (access, erasure, portability etc.), please contact us by email with your account username and a clear description of your request. We will verify your identity before processing and aim to complete all rights requests within 30 days of receipt.