AT77 Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction

AT77 ("we," "us," "the Platform") operates the online gaming and sports betting service available at at77.world. We understand that for Pakistani players, trusting a platform with personal data is a significant matter — and we take that responsibility seriously. This Privacy Policy describes in plain terms how AT77 collects, uses, protects, and shares your personal information when you register, deposit, play, or otherwise interact with the platform.

This policy applies to all AT77 users based in Pakistan and covers data collected through the AT77 website, mobile browser interface, and any communication channels operated by AT77 including live chat, email, and SMS. By registering an account or continuing to use AT77, you confirm that you have read and understood this Privacy Policy. If you do not agree with how AT77 handles personal data as described here, please do not use the platform and contact us to close your account.

This Privacy Policy should be read alongside the AT77 Terms and Conditions. Where the two documents overlap, the Terms and Conditions govern the legal relationship between you and AT77, while this policy governs data specifically. Both documents together form your full agreement with AT77 as a registered player.

2. Data We Collect

AT77 collects different types of personal data depending on how you use the platform. Below is a comprehensive breakdown of what we collect and at what point in your interaction with AT77 each category of data is generated or provided.

AT77 does not collect sensitive personal data such as biometric identifiers, health information, or religious beliefs unless directly required for a legally mandated verification process. We do not collect data about minors and will delete any data we discover relates to a person under 18 immediately upon discovery.

3. Why We Collect Your Data

AT77 collects personal data only for specific, legitimate purposes. We do not collect data speculatively or hold information we have no clear reason to process. The purposes for which AT77 uses your personal data are:

• Account management: Creating and maintaining your AT77 player account, processing login authentication, and managing account settings and preferences.
• Payment processing: Facilitating PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments, and processing withdrawal requests to your registered payment methods.
• Identity verification (KYC): Confirming that you are who you say you are, that you meet the 18+ age requirement, and that your payment methods belong to you — as required for anti-money laundering compliance.
• Game provision and betting: Enabling gameplay across AT77's full catalogue — card games, crash games, fishing games, slots, PSL betting, virtual sports, and Ludo — and accurately recording all bet placements and outcomes in your account history.
• Fraud prevention and security: Detecting and preventing unauthorised account access, payment fraud, bonus abuse, money laundering, and other prohibited activities.
• Customer support: Responding to your queries, resolving complaints, and providing assistance across all AT77 communication channels.
• Legal compliance: Meeting AT77's obligations under applicable financial regulations, anti-money laundering requirements, and other relevant legal frameworks.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use AT77 and improve the platform experience, game selection, and payment flows.
• Marketing communications: Sending you relevant promotional offers, bonus notifications, and platform updates by SMS or email — but only where you have opted in to receive such communications, and always with a clear opt-out mechanism.

4. Legal Basis for Processing

AT77 processes your personal data under the following legal bases, depending on the type of data and the purpose of processing:

• Contractual necessity: Processing required to fulfil the AT77 player agreement — account creation, payment processing, game provision, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated platform analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, promotional messages, and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw this consent at any time without affecting any other aspect of your AT77 account.

5. Data Sharing with Third Parties

AT77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Full stop. Your data is shared only in the following tightly controlled circumstances:

5.1 Payment Processors

To process PKR deposits and withdrawals, AT77 shares necessary financial data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and card processing networks. Each of these providers handles data under their own privacy policies and applicable Pakistani financial regulations. AT77 shares the minimum data necessary to complete each transaction.

5.2 Identity Verification (KYC) Providers

AT77 uses third-party KYC verification services to validate identity documents and confirm player eligibility. These providers process your identity data solely for the purposes of verification on behalf of AT77 and are contractually prohibited from using your data for any other purpose.

5.3 Game Technology Providers

Some AT77 games are provided by licensed third-party game studios. These providers may receive technical session data necessary to deliver the game — such as session tokens and bet records — but do not receive identifying personal data beyond what is strictly necessary for game delivery and dispute resolution.

5.4 Legal and Regulatory Authorities

AT77 will disclose personal data to competent legal or regulatory authorities when required by law, court order, or legitimate law enforcement request. We will notify you of any such disclosure where we are legally permitted to do so.

6. Data Retention Periods

AT77 retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are determined by the type of data and the applicable legal requirements:

• Account identity and contact data: Retained for the duration of your AT77 account and for five years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, as required by financial regulation.
• KYC documents: Retained for five years from account closure or from the date of the most recent verification, whichever is later.
• Customer support communications: Retained for three years from the date of correspondence, to support dispute resolution and quality assurance.
• Technical and usage data: Retained for up to 24 months in identifiable form, then anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for two years following withdrawal, to demonstrate compliance.

When the applicable retention period expires, AT77 securely deletes or anonymises the relevant data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

7. Security Measures

AT77 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the AT77 platform.
• AES-256 encryption for sensitive personal data stored in AT77's databases.
• Role-based access controls ensuring that staff members can only access personal data relevant to their specific job functions.
• Multi-factor authentication for staff accessing systems that process player data.
• Regular security audits and penetration testing by independent security professionals.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review.
• Secure data backup procedures with encrypted off-site storage.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If AT77 becomes aware of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and relevant authorities as required by applicable law without undue delay.

You play an important role in account security too. Use a strong, unique password for your AT77 account, do not share your login credentials with anyone, and contact AT77 support immediately if you suspect unauthorised access to your account.

8. Cookies and Tracking Technologies

AT77 uses cookies and similar tracking technologies to operate the platform, improve the player experience, and — where you have consented — to deliver relevant promotional content. A cookie is a small text file placed on your device when you visit AT77. The types of cookies AT77 uses are:

• Essential cookies: Required for the platform to function — login session management, account security tokens, and payment flow cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your platform preferences such as language settings, game display preferences, and bet size defaults. Disabling these means you will need to reset your preferences on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players use AT77 — which games are most popular, where users drop off in the registration flow, and which features are most used. This data helps AT77 improve the platform. Used only with your consent.
• Marketing cookies: Track your AT77 session to help us understand which promotions are relevant to you and measure the effectiveness of AT77 marketing. Used only with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through the AT77 cookie settings panel accessible from the platform footer. You can also control cookies through your browser settings, though disabling essential cookies will affect your ability to use the platform. AT77 does not use third-party advertising networks to serve ads on external websites.

9. Your Data Rights

As an AT77 player, you have rights over the personal data AT77 holds about you. These rights can be exercised by contacting support@at77.world at any time. AT77 will respond to all data rights requests within 30 days.

10. Protection of Minors

AT77 operates a strict 18+ policy. The platform is not intended for, and does not knowingly collect personal data from, persons under the age of 18. Registration requires confirmation of age, and AT77's KYC process is designed to identify and remove any accounts held by minors.

If AT77 discovers that personal data has been collected from a person under 18, that account will be suspended immediately, all funds held in the account will be frozen pending investigation, and the personal data will be deleted in accordance with our data deletion procedures. Any winnings accumulated while underage will be forfeited as described in the Terms and Conditions.

If you are a parent or guardian and believe your child has registered an AT77 account, please contact support@at77.world immediately. AT77 will treat all such reports with urgency and confidentiality.

11. International Data Transfers

Some AT77 service providers — including cloud infrastructure providers, game studios, and security monitoring services — may be located outside Pakistan. Where personal data is transferred outside of Pakistan, AT77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan. These safeguards include contractual data protection clauses with all international service providers.

AT77 does not transfer personal data to jurisdictions with inadequate data protection frameworks without implementing additional technical and contractual protections. If you wish to know which international transfers affect your personal data, please contact our privacy team.

12. Updates to This Privacy Policy

AT77 reviews this Privacy Policy regularly and updates it when necessary to reflect changes in our data practices, applicable law, or platform functionality. The "Effective Date" at the top of this policy reflects the most recent revision.

When AT77 makes material changes to this Privacy Policy — those that meaningfully affect how your personal data is collected, used, or shared — we will notify you via SMS to your registered Pakistani mobile number or via a prominent in-platform notification at least 14 days before the changes take effect. Non-material changes such as clarifications, formatting updates, or minor rewording may be made without notification.

Continued use of AT77 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept an updated Privacy Policy, you should stop using AT77 and contact support to arrange account closure.

13. Contact Our Privacy Team

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact AT77's privacy team directly: