at77 Privacy Policy

1 Who We Are — The Data Controller

For the purposes of this Privacy Policy, at77 ("we", "us", "our", "the Platform") is the data controller responsible for the personal information of all registered players. at77 operates the online betting and casino platform available at at77.one, including cricket betting, live dealer casino, slot games, and all associated account and payment services targeted primarily at players in Pakistan.

Any questions about how at77 processes your personal data, or requests to exercise your data rights, can be directed to the at77 Data Protection team at [email protected]. at77's support team is available 24/7 in English and is familiar with the context of Pakistani players' data queries.

2 Personal Data We Collect

at77 collects personal data through several channels, including account registration, identity verification, gameplay, payment transactions, device and browser interactions, and customer support communications. The categories of personal data at77 may collect and hold are set out below.

at77 does not collect sensitive personal data categories (such as racial or ethnic origin, religious beliefs, or health data) as part of standard platform operations, unless specifically required for regulatory compliance or responsible gaming investigations.

3 How at77 Uses Your Personal Data

at77 uses the personal data it collects for the following purposes:

• Account creation and management: Processing your at77 registration, authenticating your login via SMS OTP, maintaining your account settings and PKR wallet, and communicating essential account notifications.
• Service delivery: Enabling cricket betting, casino gaming, slot play, and all other at77 platform features that require personalised account access.
• Payment processing: Facilitating PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and other supported methods; maintaining transaction records for your review.
• Identity verification and KYC: Verifying your identity in accordance with applicable anti-money-laundering and Know Your Customer obligations; confirming you are 18+ and eligible to hold an at77 account.
• Responsible gambling monitoring: Monitoring gameplay patterns to identify potential indicators of problem gambling; administering deposit limits, session reminders, and self-exclusion periods set by you or triggered by at77's responsible gambling team.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised login attempts, bonus abuse, collusion, and financial fraud.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance for your at77 account.
• Legal and regulatory compliance: Fulfilling at77's obligations under applicable laws and regulations, including retention of financial and identity records as required by law.
• Platform improvement: Analysing aggregated, anonymised usage data to improve at77's products, fix technical issues, and optimise the experience for Pakistani players on Android and mobile browsers.

4 Legal Basis for Processing

at77 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to perform the contract between you and at77 — including operating your account, processing bets, and handling PKR deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money-laundering record-keeping, and responsible gambling obligations.
• Legitimate interests: Processing for at77's legitimate business interests where these are not overridden by your fundamental rights — including fraud detection, platform security, and service improvement using anonymised analytics.
• Consent: Where at77 sends you promotional communications about bonuses, new games, or PSL betting offers, this is based on your consent at registration. You may withdraw this consent at any time via account settings or by contacting support.

5 KYC Identity Verification & Anti-Money-Laundering

at77 is required to conduct Know Your Customer (KYC) verification for all players who request a withdrawal. KYC at at77 typically requires submission of a valid Pakistani CNIC (Computerised National Identity Card) or a valid passport. at77 may also request additional documentation — such as proof of residential address in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad or elsewhere in Pakistan — in specific circumstances.

KYC documents submitted to at77 are:

• Stored on secured, access-restricted servers with encryption at rest.
• Accessed only by authorised at77 compliance personnel for the purpose of identity verification.
• Retained for the minimum period required by applicable anti-money-laundering regulations — typically 5–7 years from the date of account closure or last transaction, whichever is later.
• Not shared with third parties except where required by law or a valid regulatory request from a competent authority.

6 Payment Data & Financial Information

at77 processes your payment data — including JazzCash account numbers, Easypaisa wallet identifiers, and Pakistani bank account details — solely for the purpose of facilitating deposits and withdrawals in PKR. at77 does not store full card numbers or full bank account credentials on its own servers; payment credentials are handled by at77's regulated payment processing partners who maintain their own applicable security standards.

Transaction records — including deposit amounts, withdrawal requests, and bonus-related fund movements in your at77 PKR wallet — are retained as part of your at77 account history and for regulatory compliance purposes. You can access your full transaction history via the at77 account dashboard after login.

7 Data Sharing & Third Parties

at77 does not sell or rent your personal data to any third party. at77 may share your personal data with third parties only in the following limited circumstances:

• Payment service providers: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Skrill, and USDT TRC20 processors, solely to facilitate your PKR transactions on at77.
• KYC and identity verification providers: Third-party services engaged by at77 to assist with CNIC and document verification as part of the KYC process.
• Game software providers: at77's licensed casino game providers receive gameplay session data necessary to operate the games you play on the platform.
• Fraud and security services: Third-party fraud prevention tools that help at77 detect suspicious activity, bonus abuse, and unauthorised account access.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies, or regulatory bodies where at77 is legally required to disclose information — for example, in response to a valid court order or anti-money-laundering investigation.
• Professional advisers: Lawyers, auditors, and accountants engaged by at77 on a confidential basis where necessary for business operations.

All third parties with whom at77 shares personal data are required to handle that data securely and only for the specified purpose. at77 does not authorise third parties to use your data for their own marketing or any purpose beyond the defined scope of the engagement.

8 Cookies & Tracking Technologies

at77 uses cookies and similar tracking technologies on the at77.one website and Android application to provide a functional and personalised platform experience. The types of cookies at77 uses are as follows:

• Essential cookies: Required for core platform functionality — maintaining your logged-in session, remembering your PKR wallet state, and enabling the login and navigation systems. These cannot be disabled without impairing your use of at77.
• Performance cookies: Collect anonymised data on how Pakistani players use at77 — which pages are visited most, where errors occur, and how long sessions last. This data is used solely to improve the platform and is never linked to individual identities.
• Functional cookies: Remember your preferences — such as display settings on the at77 cricket betting lobby or default language — to improve your experience on return visits.
• Security cookies: Support at77's fraud detection and session security systems, including detection of unusual login patterns and CSRF protection.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using at77 but may affect certain personalisation features. Note that essential cookies cannot be disabled as they are required for the platform to function.

9 Data Security

at77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and at77's servers.
• One-way cryptographic hashing of all account passwords — at77 staff cannot see your password in any form.
• SMS-based two-factor authentication for login from new or unrecognised devices.
• Role-based access controls limiting at77 staff access to personal data on a strict need-to-know basis.
• Regular security reviews, penetration testing, and vulnerability assessments of at77's platform infrastructure.
• Automatic session timeout for inactive at77 sessions to protect players who leave the platform open on shared devices.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, at77 will notify affected players without undue delay via the contact details registered on their at77 account.

10 Data Retention

at77 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your active at77 account plus any post-closure retention period required by law.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of account closure or the date of the last transaction, in compliance with anti-money-laundering regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Responsible gaming records: Self-exclusion records and problem gambling interaction logs are retained for the period of exclusion plus a minimum of 5 years thereafter.
• Support communications: Customer support transcripts are retained for up to 3 years from the date of the interaction.
• Technical and analytics data: Anonymised performance and usage data is retained in aggregate form for up to 3 years for platform improvement purposes.

Upon expiry of the applicable retention period, at77 will securely delete or anonymise your personal data in a manner that prevents reconstruction of the original information.

11 Your Data Rights

Subject to applicable law and at77's legal obligations, you have the following rights in relation to your personal data held by at77:

• Right of access: You may request a copy of the personal data at77 holds about you. at77 will respond to verified access requests within a reasonable timeframe.
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your at77 account. Some corrections (e.g., mobile number changes) require identity re-verification.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to at77's legal obligations to retain certain records (see Section 10).
• Right to restrict processing: You may request that at77 restricts processing of your personal data in specific circumstances, such as where you contest the accuracy of the data.
• Right to object: You may object to at77's processing of your personal data where that processing is based on legitimate interests, including profiling for platform personalisation.
• Right to withdraw consent: Where at77 processes your data based on consent (e.g., promotional SMS), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact at77 at [email protected] with the subject line "Data Rights Request". at77 will verify your identity before processing any data rights request and will respond within a reasonable timeframe.

12 Responsible Gaming & Personal Data

at77's responsible gambling system processes certain personal data — including betting history, deposit patterns, session frequency, and self-exclusion status — specifically to protect players' wellbeing. This processing is conducted on the basis of legitimate interests (player protection) and, where applicable, legal obligation.

Responsible gaming data held by at77 includes:

• Deposit and loss limits set by you on your at77 account.
• Session time reminders and reality check interactions.
• Self-exclusion status and exclusion period dates.
• Flags raised by at77's responsible gambling monitoring systems based on gameplay pattern analysis.
• Communications between you and at77's safer gambling team.

This data is retained for the period of any active exclusion or restriction plus a minimum of 5 years thereafter, to ensure that at77 can honour its responsible gambling commitments and prevent reinstatement of excluded accounts. Full details of at77's responsible gambling tools are available on the Responsible Gaming page.

13 Children & Minors

The at77 platform is strictly intended for adults aged 18 years and over. at77 does not knowingly collect, store, or process the personal data of anyone under the age of 18. If at77 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed and all personal data associated with that account will be deleted, subject to any applicable legal retention requirements for the purposes of preventing future underage access.

If you believe that a minor has registered an at77 account, please contact at77 immediately at [email protected] so that appropriate action can be taken without delay.

14 Changes to This Privacy Policy

at77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or platform features. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material — for example, involving a new category of data collection or a new sharing arrangement — at77 will endeavour to notify registered players via SMS to their registered Pakistani mobile number or via an in-platform notification upon next login. Continued use of the at77 platform following publication of an updated Privacy Policy constitutes acceptance of the revised policy.

15 Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or to how at77 processes your personal data, please contact at77 through the following channel:

For responsible gaming concerns, please visit the Responsible Gaming page. For terms of use, please refer to the Terms & Conditions.