ar777 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by ar777 ("ar777", "Company", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who access, register, or use the ar777 platform located at ar777.lat, including all associated gaming services, sports betting markets, financial transaction features, promotional programmes, and customer support facilities.

ar777 is committed to protecting your privacy and processing your personal data in a lawful, fair, and transparent manner. This Policy describes the types of personal data ar777 collects, the purposes for which it is processed, the circumstances in which it may be shared with third parties, and the rights available to you in relation to your personal data.

This Policy should be read in conjunction with the ar777 Terms & Conditions and the ar777 Responsible Gaming Policy. By registering an account or using ar777's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection law, ar777 acts as the Data Controller in respect of personal data collected through ar777.lat. As Data Controller, ar777 determines the purposes for which and the means by which personal data is processed.

All data protection queries, subject access requests, and complaints regarding ar777's processing of personal data should be directed to ar777's Data Protection contact at: [email protected]. ar777 will acknowledge all data-related correspondence within 72 hours and respond substantively within 30 calendar days.

3. Personal Data We Collect

ar777 collects the following categories of personal data from its players:

ar777 does not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless voluntarily disclosed by a player in the context of a responsible gaming self-exclusion request, in which case such data is processed solely for the purpose of administering the exclusion.

4. How We Collect Your Data

4.1 Directly from You

The majority of personal data ar777 holds about you is provided directly by you during:

• Account registration on ar777.lat;
• KYC identity verification (CNIC submission);
• Deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank;
• Completion of responsible gaming tools such as deposit limits or self-exclusion requests;
• Communications with ar777's customer support team via live chat or email.

4.2 Automatically During Platform Use

ar777 automatically collects technical and behavioural data when you use the platform, including your IP address, device identifiers, browser type, and game session data. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

4.3 From Third Parties

In certain circumstances, ar777 may receive identity or fraud-related data from third-party identity verification services used during the KYC process, or from payment processors to confirm the status of transactions. All third-party data sources used by ar777 operate under legally binding data sharing agreements.

5. Purpose and Legal Basis for Processing

ar777 processes personal data only where a lawful legal basis exists for doing so. The following table sets out the primary purposes for which ar777 processes your data and the corresponding legal basis:

ar777 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where required by AML compliance obligations, in which case you have the right to request human review of any automated decision.

6. Data Sharing and Disclosure

ar777 does not sell your personal data to any third party. ar777 may share your personal data with the following categories of recipient only to the extent necessary for the purposes described in this Policy:

6.1 Payment Processors

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to process your deposits and withdrawals in PKR. Each payment processor operates under its own privacy policy and applicable Pakistani financial regulations.

6.2 Identity Verification Providers

CNIC and identity documentation submitted during KYC verification may be shared with ar777's third-party identity verification partner. This partner processes your data solely on ar777's instructions and under a binding data processing agreement.

6.3 Game Technology Providers

Gaming session data (not identity data) may be shared with ar777's game studio partners for the purpose of providing game services, resolving technical disputes, and ensuring game integrity. No identity-linked data is shared with game providers beyond what is necessary to manage your session.

6.4 Regulatory and Legal Authorities

ar777 may disclose personal data to government authorities, law enforcement agencies, or regulators where required to do so by applicable law, court order, or in connection with ar777's obligations under its international gaming licence. ar777 will, where legally permissible, notify affected players of such disclosure.

6.5 Professional Advisers

ar777 may share limited personal data with its legal advisers, auditors, and accountants where necessary for the provision of professional services, subject to binding confidentiality obligations.

7. International Data Transfers

As an internationally licensed online gaming operator, ar777 may process and store certain categories of player data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not offer the same level of data protection as Pakistan, ar777 implements appropriate safeguards to ensure your data remains protected to the same standard described in this Policy.

Safeguards used by ar777 for international data transfers include: contractual clauses in data processing agreements with all third-party service providers; technical measures including end-to-end encryption of data in transit and at rest; and access controls limiting who within any third-party organisation can interact with your personal data.

All payment data relating to JazzCash, EasyPaisa, and Pakistani bank transfers is processed through systems based within Pakistan's financial infrastructure and is not transferred internationally.

8. Data Retention

ar777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your ar777 account plus a minimum of 5 years following account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of 3 years from the date of each session for dispute resolution and responsible gaming compliance purposes.
• Customer Support Communications: Retained for 2 years from the date of resolution of the relevant support query.
• Technical and Behavioural Data: Retained in aggregated, anonymised form indefinitely for platform analytics. Identifiable technical data is retained for a maximum of 12 months.

Upon expiry of the applicable retention period, ar777 will securely delete or anonymise your personal data in a manner that prevents restoration or re-identification. Requests for early deletion of personal data may be made to ar777's Data Protection contact, subject to ar777's ability to fulfil its ongoing legal and regulatory obligations.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. ar777 uses cookies and similar technologies (including pixel tags and session tokens) to operate the platform, maintain your login session, detect fraud, and improve user experience.

9.2 Types of Cookies Used by ar777

• Essential Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings and last-used game category. These improve your experience but are not strictly necessary.
• Analytics Cookies: Collect anonymised data about how players navigate ar777.lat to help ar777 identify areas for improvement. No personally identifiable information is sent to analytics providers.
• Security Cookies: Used by ar777's fraud detection systems to identify unusual access patterns and protect your account from unauthorised use.

9.3 Cookie Control

You can control non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to ar777 or accessing any real-money features. ar777 does not use third-party advertising cookies or behavioural targeting cookies.

10. Security Measures

ar777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ar777's servers;
• AES-256 encryption for all personal data stored in ar777's databases;
• Two-factor authentication (OTP via SMS) available for all ar777 account logins;
• Role-based access controls ensuring that ar777 staff can only access the specific data categories required for their role;
• Regular penetration testing and vulnerability assessments by independent third-party security specialists;
• Automated intrusion detection and suspicious login alerting systems;
• Mandatory security training for all ar777 personnel with access to player data.

Despite these measures, no online platform can guarantee absolute security. ar777 strongly recommends that you use a strong, unique password for your ar777 account and enable two-factor authentication. If you suspect that your ar777 account has been compromised, contact ar777's support team immediately.

11. Your Data Rights

Subject to applicable law and ar777's ability to fulfil its regulatory obligations, you have the following rights in relation to your personal data held by ar777:

• Right of Access: You may request a copy of all personal data ar777 holds about you. ar777 will provide this within 30 days of a valid request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Updates to name, mobile number, or payment details may require supporting documentation for security and compliance reasons.
• Right to Erasure: You may request deletion of your personal data. ar777 will comply where no legal obligation requires continued retention, such as AML record-keeping requirements.
• Right to Restriction: You may request that ar777 restrict processing of your data in certain circumstances, such as while a dispute regarding data accuracy is under investigation.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format where technically feasible and where processing is based on your consent.
• Right to Object: You may object to processing of your personal data where ar777 relies on legitimate interests as the legal basis, including objecting to receipt of promotional communications.
• Right to Withdraw Consent: Where ar777 processes your data on the basis of your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact ar777's Data Protection contact at [email protected] with your full name and registered mobile number, and a description of the right you wish to exercise. ar777 may ask for identity verification before processing certain requests to protect your account security.

12. Minors and Age Restriction

ar777's services are strictly restricted to individuals aged 21 years and older. ar777 does not knowingly collect personal data from individuals under the age of 21. If ar777 becomes aware that personal data has been collected from a minor, it will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on ar777, please contact ar777's support team immediately at [email protected] or via live chat. ar777 will take immediate action to investigate and, where confirmed, close the account and delete all associated personal data.

13. Third-Party Links

ar777.lat may contain links to third-party websites, such as payment provider portals (JazzCash, EasyPaisa) or information pages related to responsible gaming. These third-party sites operate independently of ar777 and are governed by their own privacy policies. ar777 does not accept responsibility or liability for the privacy practices of any third-party website. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

14. Changes to This Privacy Policy

ar777 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ar777's data processing practices. Where changes are material, ar777 will notify registered players via SMS or in-platform notification at least 7 days before the updated Policy takes effect.

The date of the most recent update is displayed at the top of this page. Your continued use of ar777's services following the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically. The current version will always be accessible at ar777.lat/privacy-policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or ar777's processing of your personal data, please contact ar777's Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 within your ar777 account dashboard

All privacy-related queries are handled in both English and Urdu. ar777 acknowledges all written data protection correspondence within 72 hours and provides a substantive response within 30 calendar days. Where a request is particularly complex or ar777 receives a large number of simultaneous requests, this period may be extended by up to a further 60 days, in which case ar777 will notify you of the extension and the reason for it.