AR77 Privacy Policy – How We Protect Your Personal Data

AR77 is an online gaming platform operating at ar77.click, designed and built specifically for Pakistani players. AR77 provides sports betting — with a particular focus on cricket — live dealer casino games, crash games, jackpot slots, virtual sports and a tiered VIP loyalty programme, all denominated in Pakistani Rupees.

For the purposes of this Privacy Policy, AR77 is the data controller in respect of the personal information collected from users of the platform. This means AR77 is responsible for deciding what personal data is collected, for what purposes, how it is processed and how it is protected. If you have any questions about this policy or how your data is handled, AR77 is your primary point of contact.

This Privacy Policy applies to all personal data collected through the AR77 website, any associated mobile interface, customer support channels and any other service through which AR77 interacts with its members.

AR77 collects personal data in three main ways: data you provide directly when registering or using the platform, data generated automatically through your use of the platform, and data received from trusted third-party service providers such as payment processors and identity verification services.

AR77 applies the principle of data minimisation — we only collect personal data that is genuinely necessary for the purposes described in this policy. We do not collect personal data speculatively or for purposes that are not clearly identified.

AR77 uses the personal data it collects for clearly defined purposes. We do not use your data for anything that has not been disclosed to you in this policy. The main ways AR77 uses your data are:

• Account creation and management: Setting up your AR77 account, verifying your identity and age, managing your profile and preferences and maintaining your account security.
• Processing transactions: Handling PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, processing withdrawals to your registered method and maintaining accurate financial records.
• Delivering our services: Providing access to sports betting, live casino, crash games, jackpot slots, virtual sports and the AR77 VIP Club, including personalising your experience based on your preferences and history.
• Bonuses and promotions: Administering AR77 promotional offers, verifying eligibility, calculating wagering progress and crediting bonus rewards to your account.
• Customer support: Responding to your queries, resolving complaints, processing responsible gaming requests (such as deposit limits or self-exclusion) and maintaining records of interactions.
• Legal and compliance obligations: Verifying your age, conducting anti-money laundering (AML) checks, complying with requests from law enforcement or regulatory authorities and maintaining records required by applicable law.
• Responsible gaming: Monitoring usage patterns to identify indicators of problem gambling behaviour and, where appropriate, reaching out to offer support or apply protective measures.
• Platform improvement: Analysing how players use AR77 to identify bugs, improve performance, develop new features and ensure the overall quality of the service.
• Security: Detecting and preventing fraudulent activity, unauthorised account access, multi-accounting, bonus abuse and other prohibited conduct.

AR77 processes personal data on the following legal bases, depending on the specific processing activity involved:

• Performance of a contract: The majority of AR77's data processing is necessary to deliver the services you have signed up for — account management, transaction processing, game access, VIP rewards and customer support. Without this processing, AR77 could not provide its services to you.
• Legal obligation: Certain processing activities — particularly age and identity verification, AML checks and record-keeping — are required by applicable law. AR77 has no discretion about whether to conduct this processing.
• Legitimate interests: AR77 processes some data on the basis of its legitimate interests, including fraud prevention, security monitoring, platform improvement and responsible gaming monitoring. AR77 balances these interests against your privacy rights and applies appropriate safeguards.
• Consent: Where AR77 sends optional marketing communications, this is based on your consent. You may withdraw consent at any time by contacting support.

AR77 does not sell, rent or trade your personal data. We share personal data with third parties only where it is necessary to deliver our services or comply with legal obligations. The categories of third parties with whom AR77 may share data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the minimum data necessary to process your PKR deposits and withdrawals. These partners are required to handle your data securely and in compliance with applicable payment regulations.
• Identity verification providers: When AR77 is required to verify your identity or age — for example, during enhanced KYC (Know Your Customer) checks — data may be shared with specialist identity verification services. These providers process data solely for the verification purpose and are contractually bound to strict confidentiality and security standards.
• Game providers: Game suppliers such as Evolution Gaming, Pragmatic Play and Microgaming receive data necessary to deliver the specific games you play, including your account identifier and session information. Game providers do not receive your full identity information.
• IT and security service providers: AR77 uses trusted cloud infrastructure, security monitoring and analytics providers. These providers act as data processors under strict contractual obligations and may only process your data on AR77's instructions.
• Regulatory and law enforcement authorities: Where required by applicable law or by instruction from a competent authority, AR77 may disclose personal data. AR77 will only disclose the minimum data required and will inform you of such disclosure where legally permitted to do so.

All third parties who receive AR77 member data are subject to contractual obligations that require them to protect that data to at least the same standard as AR77 itself.

AR77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration or disclosure. The security measures AR77 applies include:

• TLS encryption: All data transmitted between your device and the AR77 platform is protected by Transport Layer Security (TLS) encryption. This means your login details, financial information and personal data cannot be intercepted during transmission.
• Encryption at rest: Personal data stored in AR77's databases is encrypted at rest, so that even in the unlikely event of unauthorised physical access to storage systems, your data is protected.
• Access controls: Access to personal data within AR77 is restricted on a strict need-to-know basis. Only employees and systems that require access to specific data to perform their function are granted that access.
• Two-factor authentication: AR77 supports and encourages the use of two-factor authentication on player accounts. Internal systems that process personal data require multi-factor authentication for all staff.
• Regular security assessments: AR77 conducts regular reviews of its security practices and responds promptly to identified vulnerabilities.
• Incident response: AR77 maintains an incident response procedure. In the unlikely event of a data breach that affects your personal data, AR77 will notify you promptly and take all reasonable steps to contain and mitigate the breach.

AR77 retains personal data for as long as it is necessary for the purposes for which it was collected and for as long as AR77 has a legal basis for retaining it. The following retention principles apply:

• Active accounts: Personal data associated with an active AR77 account is retained for the duration of the account relationship. Usage data, betting history and transaction records are retained to support account management, dispute resolution and responsible gaming monitoring.
• Closed accounts: When an account is closed — whether voluntarily or by AR77 — certain data is retained for a period after closure. Financial transaction records and identity verification data are typically retained for a minimum of five years following account closure to satisfy AML and record-keeping obligations under applicable law.
• Self-excluded accounts: Where a player has requested self-exclusion, AR77 retains the data necessary to enforce the self-exclusion and prevent re-registration. This data is not used for any other purpose during the exclusion period.
• Inactive accounts: Accounts that have had no activity for an extended period may be flagged for review. AR77 will contact registered members before taking any action on inactive accounts.

When data is no longer required to be retained, AR77 securely deletes or anonymises it in accordance with its data disposal procedures.

As an AR77 member, you have rights in relation to the personal data AR77 holds about you. AR77 is committed to respecting and facilitating these rights. Your rights are set out below along with a plain explanation of what each means in practice.

AR77 uses cookies and similar technologies to provide, maintain and improve the platform. Cookies are small files placed on your device that allow the platform to recognise you between sessions and store certain preferences. AR77 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account security and ensure that the correct version of the platform is delivered to your device. These cookies cannot be disabled without breaking core platform functions.
• Functional cookies: These remember your preferences — such as language settings, display preferences and game history — to personalise your AR77 experience. They are not strictly necessary but improve the quality of the service significantly.
• Analytics cookies: AR77 uses privacy-respecting analytics tools to understand how players use the platform. This data helps AR77 identify popular features, detect performance issues and make improvements. Analytics data is aggregated and does not identify individual players.
• Security cookies: Certain cookies are used specifically for fraud detection and security purposes, including detecting unusual login patterns or potentially automated interactions.

AR77 does not use third-party advertising cookies or allow third-party advertisers to place cookies on the AR77 platform. You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the AR77 platform.

AR77 is strictly an 18+ platform. The AR77 services are not directed at, intended for or available to persons under 18 years of age. AR77 does not knowingly collect personal data from anyone under 18.

AR77 takes age verification seriously and uses a combination of self-declaration at registration and document-based verification procedures to enforce this requirement. Where AR77 has reasonable grounds to believe that an account has been opened by a person under 18, the account will be suspended immediately pending verification and any winnings generated on that account will be forfeited.

AR77 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or changes to the services we provide. The date at the top of this policy indicates when it was last updated.

When AR77 makes material changes to this policy — changes that significantly affect how your data is processed or your rights as a data subject — AR77 will notify registered members via the platform, by email or by SMS to the registered mobile number. Material changes will not take effect until you have been notified and have had a reasonable opportunity to review them.

For minor or administrative changes — such as updating contact details or clarifying existing practices without changing their substance — AR77 will update the policy and the last-updated date without prior individual notification.

Your continued use of the AR77 platform after being notified of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated policy, you have the right to close your AR77 account as described in the Terms and Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the way AR77 handles your personal data, please get in touch using any of the following channels:

• Email: support@ar77.click — please include "Privacy" or "Privacy Request" in the subject line for faster routing to the relevant team.
• Live Chat: Available 24/7 within the AR77 platform after logging in. Our support team can handle most privacy queries directly or escalate to the privacy team where needed.
• FAQ: Common questions about accounts, data and security are covered on the AR77 FAQ page.

AR77 aims to acknowledge all privacy-related communications within 24 hours and to provide a substantive response within 30 days. For complex requests — such as Subject Access Requests — AR77 may request identity verification before processing.