at777 Privacy Policy — How We Protect Your Data

at777 is committed to protecting the privacy and personal data of all players who register, deposit, and engage with the at777 online casino and sports betting platform. This Privacy Policy sets out clearly and transparently how at777 collects, processes, stores, shares, and protects your personal information in connection with your use of the at777 platform.

This Policy applies to all personal data processed by at777 in connection with the platform accessible at at777.bio, including data collected during account registration, KYC verification, payment processing, customer support interactions, and platform usage. By registering an account on at777 or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

at777 handles data collected from Pakistani players with a particular awareness of the sensitivity of financial and identity data in the Pakistani context. We apply the same rigorous data protection standards to all player data regardless of geographic origin, and we do not apply differential treatment to Pakistani players in any manner that reduces their data privacy protections.

For the purposes of applicable data protection legislation, at777 acts as the data controller in respect of personal data collected from players using the at777 platform. As data controller, at777 determines the purposes for which and the means by which personal data is processed, and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

at777 operates the platform under an internationally recognised gaming licence. Contact details for the at777 data controller are set out in Section 16 of this Policy. Players wishing to exercise their data rights or raise concerns about the processing of their personal data should address correspondence to the contact information provided in that section.

at777 collects the following categories of personal data in connection with your use of the platform. All data collection is proportionate to the purpose for which it is collected and is limited to what is genuinely necessary.

at777 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an at777 account, completing KYC verification, making a deposit, requesting a withdrawal, contacting support, or participating in surveys or promotions.
• Automated Technical Collection: Data collected automatically when you access the at777 platform, including IP address, device information, browser type, pages visited, time spent on pages, and session data — collected via server logs and first-party cookies.
• Payment Providers: Transaction confirmations and payment method verification data shared by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as part of deposit and withdrawal processing.
• Identity Verification Partners: Results and documentation from KYC/AML verification checks performed by regulated identity verification service providers engaged by at777.
• Responsible Gaming Systems: Data generated by your interaction with responsible gaming tools — deposit limits set, self-exclusion requests, session duration records — used to monitor player welfare and support effective responsible gaming interventions.

at777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between at777 and the player — including account creation, game provision, payment processing, and support delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification requirements, and gaming licence conditions.
• Legitimate Interests: Processing necessary for at777's legitimate interests, including fraud detection, security monitoring, platform improvement, and responsible gaming monitoring — balanced against the player's interests and fundamental rights.
• Consent: Processing carried out on the basis of the player's explicit consent — including marketing communications and optional personalisation features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

at777 uses personal data collected from players for the following specific purposes, each of which is aligned to the legal bases described in Section 5:

• To create and manage your at777 Account, including authenticating your identity during login and verifying your age eligibility (21+) at registration.
• To process deposits made through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank and to facilitate withdrawals to your registered payment method in PKR.
• To conduct KYC (Know Your Customer) and AML (Anti-Money Laundering) checks as required under at777's international gaming licence conditions.
• To provide customer support and respond to queries, complaints, and disputes raised by players through live chat, email, or any other support channel.
• To monitor for and prevent fraudulent, collusive, or otherwise prohibited activity on the at777 platform — including detection of multi-account registrations and bonus abuse patterns.
• To provide responsible gaming tools and to monitor gaming behaviour for indicators of problem gambling, enabling appropriate welfare interventions where at777 has a duty of care obligation.
• To send transactional notifications — deposit confirmations, withdrawal approvals, account security alerts, and bonus credit notifications — which are not marketing communications and cannot be opted out of while an account is active.
• To send marketing and promotional communications where the player has explicitly opted in to receive them.
• To improve the at777 platform through analysis of aggregated, anonymised usage data — identifying popular game categories, optimising page load performance, and identifying friction points in user journeys.
• To fulfil regulatory reporting obligations — including providing transaction records and player data to licensing authorities, financial intelligence units, or law enforcement agencies when lawfully required to do so.

at777 does not sell, rent, or trade personal data to any third party for their own commercial or marketing use. Data is shared only with the following categories of recipients, strictly for the purposes necessary to operate the at777 platform and fulfil our legal obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — for the processing of deposits and withdrawals in PKR. These entities receive only the minimum data necessary to execute and confirm the relevant transaction.
• Identity Verification Providers: Regulated third-party KYC and AML service providers that perform identity and document verification on behalf of at777 as part of our compliance programme.
• Game Technology Providers: Licensed game software providers whose titles are featured on the at777 platform. Providers may receive aggregated or pseudonymised data relevant to game operation; player identity is not shared with game providers for their independent use.
• IT and Security Service Providers: Infrastructure, cloud hosting, and cybersecurity providers engaged to operate and secure the at777 platform. All such providers are bound by data processing agreements obligating them to process data only as instructed by at777 and to maintain equivalent security standards.
• Regulatory and Legal Authorities: Gaming regulators, financial intelligence units, law enforcement agencies, and courts where at777 is legally required or compelled to disclose player data. at777 will inform the relevant player of such disclosure where legally permitted to do so.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by at777, subject to professional confidentiality obligations.

at777 uses first-party cookies and similar tracking technologies on the platform. Cookies are small data files placed on your device when you access at777.bio. They enable the platform to function correctly, maintain your session, and gather usage information.

• Strictly Necessary Cookies: Required for the platform to operate — session management, login state persistence, load balancing. These cannot be disabled without preventing core platform functions from working.
• Functional Cookies: Remember preferences such as language, last selected game category, and display settings to improve your at777 experience across sessions.
• Analytics Cookies: Collect anonymised usage data — pages visited, time on page, game categories accessed — used to understand how players interact with the platform and to identify optimisation opportunities. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Support fraud detection and account security monitoring by tracking session consistency and flagging suspicious access patterns.

at777 does not use third-party advertising cookies or allow external advertising networks to place cookies on the at777 platform. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair platform functionality. Continued use of at777 following acknowledgement of this Policy constitutes consent to the use of cookies described above.

at777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our principal security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between players' devices and the at777 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to every page of the platform, not only login and payment screens.
• Encrypted Data Storage: Sensitive personal data — including CNIC details and financial information — is stored in encrypted form within at777's secure server environment. Encryption keys are stored separately from encrypted data.
• Access Controls: Access to personal data within at777's internal systems is restricted on a strict need-to-know basis. Employee access is logged, audited, and subject to regular review.
• Two-Factor Authentication: at777 offers 2FA for player accounts and mandates it for internal staff accessing systems containing player personal data.
• Regular Security Audits: at777's platform undergoes regular independent security penetration testing and vulnerability assessments to identify and remediate potential weaknesses proactively.
• Incident Response: at777 maintains a data breach incident response plan. In the event of a personal data breach that poses a risk to players, at777 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

at777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by regulatory and legal obligations, and as reasonably necessary to protect at777's legal rights. The following general retention parameters apply:

• Active Account Data: Retained for the duration of the player's account and for a minimum period of five (5) years following account closure, as required by gaming licence AML record-keeping obligations.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years following the end of the business relationship, in accordance with applicable AML regulations.
• Transaction Records: Deposit and withdrawal records retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes.
• Customer Support Records: Retained for two (2) years following resolution of the relevant query or complaint, or longer where required by an ongoing dispute or regulatory investigation.
• Marketing Preference Records: Retained for the duration of consent and for one (1) year following withdrawal of consent, as evidence of the marketing permissions granted and revoked.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical analysis and platform improvement purposes.

Subject to applicable data protection law, you hold the following rights in relation to personal data held about you by at777. Requests to exercise any of the rights listed below should be submitted to at777 support at the contact details in Section 16. at777 will respond to all valid requests within thirty (30) calendar days.

The at777 platform is strictly prohibited to persons under the age of 21. at777 does not knowingly collect personal data from any individual under 21 years of age. If at777 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account closed.

at777 verifies the age of all registrants as part of the mandatory KYC process. Where there is any uncertainty about a player's age, access to real-money features of the platform will be restricted pending successful age verification. Parents or guardians who believe their child may have accessed or registered on at777 should contact at777 support immediately at the contact details in Section 16.

at777 will send marketing and promotional communications — including bonus offers, new game announcements, VIP programme updates, and special event promotions — only to players who have explicitly opted in to receive such communications. Opt-in is available at registration and may be adjusted at any time through the Account Communication Preferences section of your at777 account settings.

at777 does not share player contact information with third parties for the purpose of sending third-party marketing. You will only receive marketing from at777 itself, and only in categories you have opted in to receive. To opt out of all marketing communications, update your communication preferences in Account Settings or contact at777 support. Opt-out requests are actioned within 24 hours.

Please note that opting out of marketing communications does not affect transactional notifications — such as deposit confirmations, withdrawal updates, account security alerts, and responsible gaming notifications — which are a mandatory part of account operation and cannot be suppressed while your account is active.

In the course of operating the at777 platform, personal data may be transferred to and processed in jurisdictions outside of Pakistan — for example, where at777's infrastructure providers or game technology partners operate servers or processing facilities in other countries. at777 ensures that all such international transfers are carried out in accordance with appropriate safeguards, including:

• Standard contractual clauses binding the recipient to data protection obligations equivalent to those applied by at777.
• Transfer only to jurisdictions or entities assessed to provide an adequate level of personal data protection.
• Technical measures — including encryption in transit and at rest — applied regardless of where data is located geographically.

By registering on at777 and consenting to this Privacy Policy, you acknowledge and agree to the international transfer of your personal data subject to the safeguards described above.

at777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Material changes will be communicated to registered players through a notification on the at777 platform or via the contact method registered to their account.

Your continued use of the at777 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any revised terms, you must discontinue use of the platform and may request closure of your account by contacting at777 support at the details provided in Section 16.

For any queries, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by at777, please contact the at777 data team through the following channel:

• Email: [email protected]
• Subject Line (for data requests): PRIVACY REQUEST – [Your Registered Username]
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu
• Response Commitment: All privacy-related requests acknowledged within 5 business days; substantive response within 30 calendar days.

When submitting a data rights request, please include your registered at777 username, a description of the right you wish to exercise, and sufficient information to verify your identity. This is necessary to ensure that personal data is disclosed only to the player it belongs to and not to any unauthorised third party.