at77 Privacy Policy

1. Overview

at77.asia ("at77", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who uses our online casino and sports betting platform. This Privacy Policy ("Policy") describes how at77 collects, processes, stores, and discloses personal information in connection with the at77 website, games, betting markets, account management tools, and all related services (the "Platform").

This Policy applies to all registered users of the at77 platform and to visitors who browse at77.asia without holding an account. It should be read in conjunction with at77's Terms & Conditions and Responsible Gaming Policy.

at77 processes personal data in compliance with applicable international data protection standards. Our data handling practices are designed to be transparent, proportionate, and consistent with the legitimate expectations of our players, the majority of whom access the at77 platform from Pakistan.

2. Personal Data We Collect

at77 collects personal data through several channels, including account registration, platform use, identity verification, and customer support interactions. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, and government-issued identity document details (CNIC number and document images for KYC purposes).
• Contact Data: Email address, Pakistani mobile number, and city or region of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi).
• Financial Data: Payment method details (JazzCash mobile wallet number, Easypaisa account, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard card details processed through our payment provider, USDT TRC20 wallet addresses). Note: at77 does not store full card numbers on its own servers; card data is handled by PCI-DSS compliant payment processors.
• Account & Transaction Data: Login history, session timestamps, deposit and withdrawal records, game play history, betting records, bonus activations, and balance information.
• Technical Data: IP address, browser type and version, device type and operating system, screen resolution, time zone, and referring URL.
• Communication Data: Records of support interactions via live chat and email, including content of correspondence and timestamps.
• Responsible Gaming Data: Any self-exclusion requests, deposit limit settings, session limit configurations, or cooling-off period activations you apply to your at77 account.

at77 collects only the minimum personal data necessary to deliver its Services and to comply with applicable regulatory and anti-money-laundering obligations. We do not collect sensitive categories of personal data (such as health data or biometric data beyond basic KYC selfies) unless specifically required for identity verification.

3. How We Use Your Personal Data

at77 uses the personal data it collects for the following purposes:

• Account Management: To create, verify, and maintain your at77 account, including processing registrations, authentication, and account recovery.
• Service Delivery: To provide access to casino games, sports betting markets, and all other at77 platform features; to process deposits and withdrawals; and to administer bonuses and promotions.
• Identity Verification (KYC/AML): To verify your identity and age (18+) in accordance with anti-money-laundering obligations and our licensing conditions. This includes processing CNIC documents and selfie photographs.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns, identify potential problem gambling behaviours, apply player-requested self-exclusions and limits, and comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve complaints, and communicate with you about your at77 account.
• Marketing Communications: Subject to your consent or where we have a legitimate interest, to send you promotional offers, bonus notifications, and relevant platform updates. You may opt out of marketing communications at any time via your account settings or by contacting support.
• Analytics & Platform Improvement: To analyse aggregate usage data and improve the at77 platform, game selection, payment options, and user experience.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, or lawful requests from competent authorities.

4. Legal Basis for Processing

at77 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to provide the Services you have contracted with at77 to receive, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering legislation, KYC regulatory requirements, and licensing conditions, including mandatory identity and age verification.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming interventions, where at77's legitimate interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where consent has been obtained and can be withdrawn at any time.

5. Sharing of Personal Data

at77 does not sell your personal data to third parties. We may share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard payment networks, and USDT TRC20 infrastructure providers, as necessary to process your transactions.
• Game Providers: Third-party game studios (Pragmatic Play, Evolution, JILI, PG Soft, Ezugi, etc.) receive the minimum technical session data required to deliver game functionality. Game providers do not receive your identity or financial information.
• KYC/Identity Verification Partners: Third-party identity verification services used to verify CNIC documents and selfie photographs during the KYC process.
• Technology Service Providers: Cloud infrastructure providers, security monitoring services, customer support platforms, and analytics providers operating under data processing agreements with at77.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory direction, at77 may disclose personal data to competent governmental or law enforcement authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of at77's business or assets, personal data held may be transferred to the successor entity, subject to equivalent data protection obligations.

All third-party service providers who process personal data on at77's behalf are required to process that data in accordance with at77's instructions and applicable data protection standards.

6. Cookies & Tracking Technologies

at77 uses cookies and similar tracking technologies to operate the platform and analyse usage. The categories of cookies used on at77.asia include:

• Strictly Necessary Cookies: Essential to platform operation — session authentication, security tokens, load balancing. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your language preferences, remembered login state, and selected game lobby view. Enhance platform usability without tracking behaviour across third-party sites.
• Analytics Cookies: Aggregate, anonymised data about page visits, session durations, and feature engagement used to improve at77's platform. No personal identification is possible from analytics data alone.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You may withdraw consent and clear marketing cookies via your browser settings at any time.

You may configure your browser to reject non-essential cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your at77 account.

7. Data Retention

at77 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. Specific retention periods include:

• Account and transaction records: retained for a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC documents (CNIC copies, selfies): retained for the minimum period required under applicable AML and licensing regulations.
• Customer support correspondence: retained for three years following resolution of the relevant enquiry or complaint.
• Marketing consent records: retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.
• Technical and session data: retained for up to twelve months for security and fraud detection purposes.

Upon expiry of the applicable retention period, at77 will securely delete or anonymise personal data in accordance with its data lifecycle management procedures.

8. Data Security

at77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and at77.asia.
• Encryption at rest for sensitive data fields including identity documents and financial records.
• Role-based access controls ensuring that at77 staff access personal data only to the extent required for their specific job functions.
• Two-factor authentication for all at77 administrative systems.
• Continuous security monitoring and intrusion detection on all production infrastructure.
• Regular third-party security audits and penetration testing.

While at77 takes all reasonable precautions, no data transmission over the internet or data storage system is guaranteed to be 100% secure. You are responsible for maintaining the security of your at77 account credentials.

9. Your Data Protection Rights

Subject to applicable law and the constraints of at77's regulatory obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data at77 holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of personal data in certain circumstances. Note that at77 may be legally required to retain certain data (e.g., AML records) notwithstanding an erasure request.
• Right to Restrict Processing: You may request that at77 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to at77 for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact at77 at [email protected]. at77 will respond within 30 days of receiving a verifiable request.

10. Minors

The at77 platform is strictly intended for adults aged 18 and above. at77 does not knowingly collect personal data from individuals under the age of 18. If at77 discovers that personal data has been collected from a person under 18, that account will be immediately suspended and the relevant data deleted. If you believe a minor has registered on the at77 platform, please contact [email protected] immediately.

Age verification via CNIC is mandatory prior to processing any withdrawal. This verification also serves as at77's primary safeguard against underage access to gambling services.

11. Third-Party Services

The at77 platform integrates with third-party game studios, payment processors, and technology providers. These third parties operate their own privacy practices which at77 does not control. at77 selects service partners whose data protection standards are consistent with at77's own obligations, and maintains data processing agreements with all providers who process personal data on at77's behalf. at77 is not responsible for the independent privacy practices of third-party game studios or payment networks.

12. Changes to This Policy

at77 may update this Privacy Policy at any time. When material changes are made, at77 will update the "Last updated" date at the top of this page. For significant changes affecting how we process your personal data, at77 will endeavour to notify registered users by email. Continued use of the at77 platform after the updated Policy has been posted constitutes acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using the at77 platform and contact support to close your account.

13. Contact & Data Queries

For all privacy-related queries, data subject access requests, or concerns about at77's handling of your personal data, please contact us:

• Email: [email protected] — subject line: "Privacy Query"
• Live Chat: 24/7 within your at77 account dashboard.

at77 is committed to resolving privacy concerns promptly and transparently. All data subject requests will receive an initial response within five business days and a substantive response within 30 days.