at77 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy applies to all players, visitors and registered account holders of at77, accessible at https://at77.online. at77 is an online gaming and cricket betting platform built for players in Pakistan. This document explains how at77 collects, uses, stores and protects your personal data in connection with your use of the platform.

At at77, we understand that privacy matters. When you share your information with us — whether to create an account, process a PKR withdrawal or verify your identity — you're trusting us to handle it responsibly. That is a responsibility we take seriously. We collect only what we genuinely need, we keep it only as long as necessary, and we never sell it to third parties for marketing purposes.

This Policy should be read alongside the at77 Terms and Conditions, which govern the broader relationship between you and at77 as a platform user.

2. Personal Data We Collect

at77 collects personal data through different points of interaction — when you register, when you make a transaction, when you contact support and when you use the platform in general. Here is a breakdown of the categories of data we collect:

2.1 Registration Data

• Full name as it appears on your CNIC
• Email address
• Mobile number registered to your name
• Date of birth (for age verification)
• Username and encrypted password
• City or region within Pakistan

2.2 Identity Verification (KYC) Data

• CNIC number and a copy of your CNIC document
• Selfie or photograph submitted for identity confirmation
• Proof of address documents (utility bill, bank statement) when required
• Screenshots or records confirming ownership of Easypaisa, JazzCash, NayaPay or bank accounts used for transactions

2.3 Financial Transaction Data

• Deposit and withdrawal amounts in PKR
• Payment method identifiers (masked mobile wallet numbers, partial bank account references)
• Transaction timestamps and confirmation references
• Complete betting and gaming history on at77

2.4 Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system and browser information
• Session duration, pages visited and features used within at77
• Log files generated during platform access
• Cookie identifiers (see Section 6)

2.5 Communications Data

If you contact at77 support — via live chat, WhatsApp, Telegram or email — we retain records of those conversations. This allows us to track the resolution of your query and review interactions for quality and compliance purposes.

3. How We Use Your Personal Data

at77 uses your personal data only for legitimate purposes directly related to the operation of the platform and our relationship with you as a player. The table below outlines the main uses:

4. Legal Basis for Processing

at77 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered player — account management, transaction processing, bet settlement.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and platform improvement, where these interests do not override your rights.
• Consent: Marketing communications and the use of non-essential cookies — you may withdraw consent at any time without affecting your account.
• Legal obligation: KYC verification, retention of transaction records and cooperation with lawful requests from authorities where required.

5. Data Sharing with Third Parties

at77 does not sell your personal data to third parties. We share your data only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors and card payment gateways receive the minimum data required to process your transactions. These providers operate under their own privacy policies and security standards.
• KYC and identity verification providers: If at77 uses a third-party service to verify CNIC documents or conduct age checks, only the minimum data required for verification is shared under data processing agreements.
• Game software providers: Casino game providers (live casino, slots, Teen Patti) may receive anonymised player session data necessary for game operation. Full personal identification is not passed to game providers.
• Legal authorities: at77 will share data with law enforcement or regulatory bodies only when legally required and to the minimum extent necessary to comply with the request.
• Internal group entities: Where at77 operates through related entities, data may be shared internally for the purposes described in this Policy, under equivalent data protection standards.

6. Cookies and Tracking Technologies

at77 uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help the platform remember your preferences, keep you logged in and collect usage analytics.

6.1 Types of Cookies Used

• Essential cookies: Required for the platform to function — session management, login state, security tokens. Cannot be disabled without breaking core functionality.
• Analytics cookies: Collect anonymised data about how players use at77 — pages visited, features accessed, session lengths. Used to improve the platform.
• Preference cookies: Remember your settings, language preferences and display choices across sessions.
• Marketing cookies: Used to show you relevant at77 promotions on and off the platform, based on your usage patterns. Only used with your consent.

You can also manage cookies through your browser settings. Disabling essential cookies will prevent at77 from functioning correctly. Disabling analytics or marketing cookies will not affect your ability to play or make transactions.

7. Data Retention

at77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of your active at77 account plus 5 years following account closure.
• KYC documents: Retained for a minimum of 5 years following account closure in line with financial compliance requirements.
• Transaction records: Financial transaction history in PKR is retained for a minimum of 5 years for compliance and dispute resolution purposes.
• Customer support conversations: Retained for 3 years from the date of the last interaction, or longer if the conversation relates to a formal complaint or legal matter.
• Marketing consent records: Retained for as long as you hold an at77 account or until you withdraw consent, whichever comes first.
• Technical log data: Retained for 12 months unless required for longer in connection with a security investigation.

After retention periods expire, data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

8. Data Security

at77 applies a layered approach to data security. The following measures are in place to protect your personal information:

• Encryption in transit: All data passing between your device and at77's servers is encrypted using TLS 1.3 — the current industry standard for secure web communications.
• Encryption at rest: Sensitive data fields — including CNIC references, KYC documents and payment identifiers — are encrypted in at77's database systems.
• Access controls: Access to personal player data within at77 is restricted on a need-to-know basis. Staff with access to sensitive data undergo privacy and security training.
• Password security: Your at77 account password is stored as a salted cryptographic hash — at77 staff cannot read your password in plain text.
• Security monitoring: at77's technical systems are monitored continuously for unusual access patterns, potential intrusions and security events.
• Vulnerability management: at77 conducts regular security reviews of its platform and third-party integrations.

While at77 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal information, at77 will notify affected players as quickly as reasonably possible and will take immediate remedial action.

9. Your Rights Over Your Personal Data

As an at77 player, you have the following rights regarding your personal data. at77 will respond to all valid data rights requests within 30 days of receipt:

To exercise any of these rights, contact at77 support as described in Section 14. Please include your registered email address and a clear description of your request. at77 may need to verify your identity before processing a data rights request.

10. Children's Privacy

at77 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and KYC checks confirm age via CNIC before any withdrawal is processed.

If at77 discovers that a player under 18 has registered an account, the account will be closed immediately. Any deposited funds will be returned to the original payment method. No winnings generated on an under-age account will be paid out under any circumstances.

If you are a parent or guardian and believe your child may have accessed at77 and created an account, please contact us immediately at the details provided in Section 14. We will act on all such reports without delay.

11. Marketing Communications

at77 may send you promotional communications — bonus offers, PSL betting promotions, new game announcements, deposit match notifications — via email, SMS or push notification. We will only do so if you have provided consent during registration or subsequently opted in through your account settings.

You can withdraw consent for marketing at any time by:

• Updating your communication preferences in your at77 account settings
• Clicking the "unsubscribe" link in any marketing email from at77
• Contacting at77 support and requesting removal from marketing lists

Withdrawing marketing consent will not affect your account, your ability to play or make transactions, or your access to any bonuses you have already claimed. at77 will continue to send you account-related communications (transaction confirmations, security alerts, responsible gaming notices) regardless of marketing preferences, as these are not marketing messages — they are necessary service communications.

12. Third-Party Services

The at77 platform integrates with third-party services including payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT) and casino game providers. When you interact with these services through at77, you may be subject to their own privacy policies in addition to this one.

at77 does not control how third-party services handle your data once it has been passed to them for the purposes described in this Policy. We recommend reviewing the privacy policies of payment providers you use for transactions. at77 selects third-party partners that maintain appropriate data security standards, but cannot guarantee the practices of external platforms.

13. Changes to This Privacy Policy

at77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

For material changes that significantly affect how we handle your personal data, at77 will notify registered players via email or via a notice displayed on the platform before the changes take effect. Your continued use of at77 after an update constitutes acceptance of the revised Policy. If you disagree with any change, you may close your account by contacting support.

14. Contact and Privacy Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how at77 handles your personal data, you can reach our team through the following channels. Privacy queries are treated with full confidentiality.

• Email: support@at77.online — mark your subject as "Privacy Request" for fastest routing
• Live Chat: Available within the at77 platform 24/7 after logging in
• WhatsApp: Available — number listed in the at77 Help section
• FAQ: Visit the at77 FAQ for answers to common privacy questions

at77 will acknowledge all privacy requests within 48 hours and provide a substantive response within 30 days. For complex requests involving large volumes of data, we may extend this period by up to a further 30 days and will notify you of the extension in advance.

If you are not satisfied with at77's response to a privacy concern, you have the right to escalate your complaint through at77's internal escalation process by requesting a review from our senior compliance team. Details of the escalation process are provided in the at77 Terms and Conditions.