ar777 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

This Privacy Policy applies to all personal data collected and processed by ar777 in connection with the operation of the ar777 online gaming and sports betting platform, accessible at ar777.bio. It covers all users of the ar777 platform, including registered account holders and visitors who browse the site without registering.

ar777 is committed to handling personal data responsibly, transparently, and in a manner consistent with established data protection principles. The ar777 platform is operated for the benefit of Pakistani players, and this Privacy Policy is specifically designed to address the data handling practices relevant to users based in Pakistan.

By registering an ar777 account or using any service on the ar777 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not register an account or continue to use the ar777 platform.

This Privacy Policy should be read in conjunction with ar777's Terms and Conditions. Defined terms used but not defined in this Policy carry the meanings ascribed to them in the Terms and Conditions.

ar777 collects personal data through several channels: information you provide directly during registration and account management, data generated automatically through your use of the platform, and information received from third-party service providers such as payment processors. The categories of personal data collected by ar777 are set out below.

2.1 Registration Data

When you register an ar777 account, we collect the following information:

• Full legal name (as it appears on your national identity documents);
• Pakistani mobile number (used as your primary account identifier and for two-factor authentication);
• Date of birth (for age verification purposes — all players must be 21 or above);
• Chosen username and account password (stored in encrypted form);
• Preferred payment method and associated account details (e.g., JazzCash account number, EasyPaisa mobile number, bank account information).

2.2 Identity Verification (KYC) Data

As part of ar777's Know Your Customer obligations, we may request:

• A copy of your Computerised National Identity Card (CNIC) or equivalent valid government-issued identification;
• A selfie or photograph for facial verification purposes;
• Proof of address documentation (e.g., a recent utility bill or bank statement issued in Pakistan);
• Source of funds documentation where required under responsible gaming or anti-money laundering procedures.

2.3 Transaction Data

ar777 maintains records of all financial transactions conducted through your account, including deposit amounts and methods, withdrawal requests and statuses, bonus credits and wagering activity, and bet history across all platform sections.

2.4 Technical and Usage Data

ar777 automatically collects certain technical data when you access the platform, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, login history, and pages visited;
• Mobile network operator (e.g., Jazz, Zong, Telenor, Ufone) where applicable;
• In-game activity data and betting patterns, used for responsible gaming monitoring.

2.5 Communications Data

ar777 retains records of all communications between you and ar777's support team, including live chat transcripts, complaint records, and any formal correspondence submitted via email.

ar777 uses the personal data it collects for specific, legitimate purposes. The table below sets out the primary purposes for which your data is processed:

ar777 does not process your personal data for any purpose other than those listed above without first obtaining your express consent or as otherwise required by applicable law.

ar777 processes personal data only where a valid legal basis exists. The legal bases on which ar777 relies are as follows:

• Contract Performance: Processing is necessary to fulfil ar777's obligations under the account agreement with you — including account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC obligations, anti-money laundering laws, responsible gaming regulations, and licensing conditions.
• Legitimate Interest: Processing is necessary for ar777's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — provided those interests do not override your fundamental privacy rights.
• Consent: Processing is based on your freely given, specific, and informed consent — primarily for marketing communications and optional features. Where consent is the legal basis, you may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

5.1 Who We Share Data With

ar777 does not sell or trade your personal data. We share personal data with third parties only to the extent necessary for the operation of the ar777 platform, and only with parties who are contractually bound to handle that data in a manner consistent with this Privacy Policy. Categories of third parties who may receive your data include:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, GrabPay, and Cash OTC processors receive the minimum transaction data necessary to process deposits and withdrawals on your behalf;
• Identity Verification Providers: Third-party KYC service providers who assist ar777 in verifying player identities and ages in accordance with regulatory requirements;
• Game Providers: Licensed casino game studios and sports data providers who supply game content and market data to the ar777 platform. These providers receive anonymised or pseudonymised player session data as necessary for game delivery;
• Fraud Prevention Services: Specialist providers who assist ar777 in detecting and preventing fraudulent account activity and payment fraud;
• Regulatory Authorities: Where required by law, ar777 may disclose personal data to regulatory bodies, law enforcement agencies, or courts in response to a lawful request or legal obligation.

5.2 No Unauthorised Third-Party Transfer

ar777 does not share your personal data with advertisers, data brokers, or any commercial third party for purposes unrelated to the operation of your ar777 account. Any data shared with third-party service providers is subject to contractual data processing agreements that require those parties to handle your data securely and in accordance with applicable data protection requirements.

6.1 Payment Data Handling

ar777 processes all financial transactions in Pakistani Rupees (PKR). When you make a deposit or withdrawal via JazzCash, EasyPaisa, Raast, or a bank transfer, the payment credentials you provide are transmitted directly to the relevant payment processor over an encrypted connection. ar777 does not store full payment credentials — only a tokenised reference sufficient to identify and link the payment method to your account for subsequent transactions and withdrawal verification.

6.2 Transaction Record Retention

ar777 maintains records of all financial transactions associated with your account for a minimum period of five years from the date of each transaction. This retention period is imposed by anti-money laundering and financial record-keeping requirements and cannot be shortened by a player data deletion request in respect of transaction records specifically.

6.3 Anti-Money Laundering

ar777 operates in compliance with anti-money laundering (AML) standards applicable to licensed online gaming operators. This means ar777 monitors transaction patterns for indicators of money laundering, fraud, or other financial crime. Where unusual activity is detected, ar777 may temporarily restrict account functions, request source-of-funds documentation, and — where legally required — report activity to the relevant financial intelligence authority. Player cooperation with AML-related requests is a condition of continued account operation.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website to store information about your session and preferences. ar777 uses cookies and similar tracking technologies to maintain your logged-in session, remember platform preferences, and collect anonymised usage analytics that help us improve the platform experience for Pakistani players.

7.2 Types of Cookies Used by ar777

• Essential Cookies: Required for the ar777 platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without affecting your ability to use ar777.
• Functional Cookies: Store your platform preferences such as language settings, preferred game lobby view, and notification preferences. Disabling these cookies may result in a degraded platform experience.
• Analytics Cookies: Collect anonymised data about how players navigate the ar777 platform, which sections are most visited, and where players encounter friction. This data is used to improve the platform and is not linked to individual account identities.
• Security Cookies: Support ar777's fraud prevention and account security functions by identifying suspicious session patterns or unusual access behaviour.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers — including Chrome on Android and Safari on iOS — allow you to view, block, or delete cookies from specific websites. However, blocking essential cookies will prevent you from maintaining an authenticated session at ar777 and will significantly impair your ability to use the platform. ar777's cookie settings panel is accessible from the footer of the platform for players who wish to review and adjust their cookie preferences.

ar777 implements a layered security architecture to protect the personal data of Pakistani players against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and ar777 servers is encrypted using TLS 1.3 with AES-256 cipher suites. The ar777 platform does not accept unencrypted connections;
• Encryption at Rest: Sensitive personal data held in ar777's databases — including identity documents and payment reference data — is encrypted at rest using industry-standard encryption;
• Access Controls: Access to personal data within ar777's internal systems is restricted on a strict need-to-know basis. Staff who do not require access to player data to perform their roles do not have it;
• Two-Factor Authentication: ar777 offers and recommends two-factor authentication (2FA) for all account holders, adding an additional layer of protection beyond the username-and-password login;
• Intrusion Detection: ar777's systems are monitored for indicators of unauthorised access, with automated alerts and response procedures in place for potential security incidents;
• Regular Security Audits: ar777's platform and data handling practices are subject to periodic security assessments to identify and remediate potential vulnerabilities.

ar777 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal, regulatory, and contractual obligations. The key retention periods are:

• Account Data: Retained for the duration of your ar777 account and for a minimum of five years following permanent account closure, in accordance with gaming licence and anti-money laundering record-keeping requirements;
• Transaction Records: Retained for a minimum of five years from the date of each transaction. This retention obligation cannot be shortened by a deletion request in respect of transaction data specifically;
• KYC Documents: Identity and verification documents are retained for the duration of your account and for a minimum of five years following account closure. In some circumstances, applicable law may require a longer retention period;
• Communications Records: Support chat transcripts and formal complaint records are retained for three years from the date of the communication;
• Cookie and Usage Data: Anonymised analytics data is aggregated and retained indefinitely in anonymised form; identifiable usage data is retained for 12 months.

At the end of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

ar777 respects your rights over your personal data. The rights available to you as an ar777 account holder are described below. To exercise any of these rights, contact ar777's support team via live chat or email.

The ar777 platform is strictly intended for adults aged 21 years and above. ar777 does not knowingly collect, process, or store personal data relating to any person under the age of 21. The registration process includes a mandatory date-of-birth field and age verification procedures specifically designed to prevent underage access.

If ar777 becomes aware that personal data has been collected from a person under the age of 21 — through misrepresentation of age or any other means — that data will be deleted immediately, the associated account will be terminated, and any deposits made to the account will be returned to the payment method of record following identity verification of the legitimate account holder.

If you believe that ar777 may have inadvertently collected data relating to an underage individual, please contact ar777 support immediately via live chat so that the matter can be investigated and remediated without delay.

12.1 Opt-In Marketing

ar777 sends promotional communications — including information about bonuses, new games, PSL cricket betting promotions, and platform updates — only to players who have opted in to receive such communications. Opt-in consent is collected during the registration process and can be managed at any time from your ar777 account notification settings.

12.2 Opting Out

You may opt out of ar777 marketing communications at any time by:

• Updating your notification preferences in the ar777 account settings menu;
• Clicking the unsubscribe link included in every ar777 marketing SMS or email;
• Contacting ar777 support via live chat and requesting removal from marketing lists.

Opting out of marketing communications does not affect service communications — ar777 will continue to send you transactional messages related to your account, such as deposit confirmations, withdrawal notifications, and security alerts, regardless of your marketing opt-out status.

12.3 No Third-Party Marketing

ar777 does not share your contact details with third-party marketers or permit third parties to send marketing communications to ar777 players on the basis of data obtained from ar777. All marketing communications you receive in connection with ar777 will come directly from ar777.

ar777 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in data processing practices, changes in applicable law, new platform features that involve additional data processing, or improvements in how we communicate our privacy commitments to Pakistani players.

When material changes are made to this Policy, ar777 will notify registered account holders via SMS to their registered mobile number or through a platform notification displayed upon login. The "Effective Date" at the top of this document will be updated to reflect the date on which the revised Policy takes effect.

Your continued use of the ar777 platform following the notification of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised terms, you should close your account and cease using the ar777 platform before the revised Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data ar777 holds about you, please contact us through the following channels:

ar777 is committed to responding to all privacy-related enquiries promptly and in good faith. Data subject access requests will be fulfilled within 30 calendar days of receipt. Where additional time is required, ar777 will notify you of the delay and the expected resolution date.

This Privacy Policy was last reviewed and updated on 1 January 2026. Thank you for taking the time to read and understand how ar777 handles your personal data. Your privacy is a genuine priority for us — not a compliance box to tick.