ar77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Who We Are

1.1 This Privacy Policy is issued by the operator of the ar77 online gaming platform, accessible at ar77.bio ("ar77," "we," "us," or "the Company"). ar77 is a licensed online gaming operator regulated by an international gaming authority.

1.2 For the purposes of this Privacy Policy, ar77 acts as the data controller in respect of the personal data of all registered Players and visitors to the ar77 Platform.

1.3 This Privacy Policy applies to all personal data collected from individuals who register for an ar77 Account, visit ar77.bio, use any feature or service offered through the Platform, or communicate with ar77 via any channel including live chat and email.

1.4 If you have questions about how ar77 handles your personal data, contact details for our data enquiries team are provided in Section 16 of this Policy.

2. Personal Data We Collect

2.1 ar77 collects the following categories of personal data from Pakistani players and Platform visitors. We collect only data that is necessary for a specified, lawful purpose.

2.1 Identity & Contact Data

• Full legal name (as per CNIC)
• Date of birth (for age verification, minimum 21 years)
• Pakistani National Identity Card (CNIC) number and document image
• Residential address (city, province, postal code)
• Mobile phone number (Pakistan format, e.g. 03XX-XXXXXXX)
• Email address
• Username selected at registration

2.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet number associated with your account
• Bank account details (HBL, UBL, Meezan Bank, or other accepted banks) where applicable
• Deposit amounts, dates, and transaction reference numbers
• Withdrawal requests and processing status
• Account wallet balance history in Pakistani Rupees (PKR)
• Payment method verification documentation where required

2.3 Gaming Activity Data

• Game session history including games played, bets placed, wins and losses
• Sports betting selections, odds accepted, and bet settlement records
• Bonus claims, wagering progress, and promotional participation records
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)
• Account login history including date, time, and device type

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Browser type and version
• Device type, operating system, and screen resolution
• Pages visited on ar77.bio, session duration, and navigation path
• Referral source (the URL or channel that led you to ar77.bio)
• Cookie data and similar tracking technologies (see Section 8)

2.5 Communication Data

• Live chat transcripts with ar77 support agents
• Email correspondence with ar77
• Feedback, complaint records, and dispute documentation

3. How We Collect Your Data

3.1 ar77 collects your personal data through the following means:

• Direct collection at registration: When you create an ar77 account, you provide identity, contact, and age information directly through the registration form.
• KYC verification submissions: When you submit documents for identity verification (CNIC, proof of address, payment method confirmation), ar77 collects and processes those documents.
• Deposit and withdrawal transactions: Payment data is collected automatically when you initiate a financial transaction through JazzCash, EasyPaisa, or bank transfer.
• Platform usage: Technical and gaming activity data is collected automatically as you use the ar77 Platform through server logs, session tracking, and game event records.
• Cookies and tracking technologies: ar77 uses cookies and similar technologies to collect usage data from visitors to ar77.bio. See Section 8 for details.
• Support communications: When you contact ar77 via live chat or email, the content of that communication is recorded and stored.

4. How We Use Your Personal Data

4.1 ar77 uses your personal data for the following specific purposes:

4.2 ar77 does not use your personal data to make automated decisions that have legally significant effects on you without human review. Automated processes such as fraud detection flags are always subject to manual review before account action is taken.

5. Legal Basis for Processing

5.1 ar77 processes personal data only where a lawful basis exists. The primary legal bases ar77 relies upon are:

• Contract performance: Processing your identity, contact, and financial data is necessary to fulfil ar77's obligations under the user agreement you enter into when creating an account — including processing deposits, settling bets, and paying withdrawals.
• Legal obligation: ar77 is required by its international gaming license to conduct age verification, KYC, and AML screening. These processing activities are mandatory compliance obligations, not optional.
• Legitimate interests: ar77 processes technical and usage data for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Where ar77 sends you marketing emails or promotional SMS messages, this is based on your consent given at registration or in Account Settings. You may withdraw consent at any time.

6. Who We Share Your Data With

6.1 ar77 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. Data sharing occurs only in the circumstances described below:

• Payment processors: Your financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK as necessary to execute deposit and withdrawal transactions. These providers process data under their own published privacy terms and are bound by applicable financial data protection obligations.
• Game content providers: Anonymised or pseudonymised gaming session data (bet amounts, game outcomes) may be shared with licensed game software providers for technical audit and integrity monitoring purposes. Personal identity data is not shared with game providers.
• Identity verification services: KYC documents may be processed by licensed third-party identity verification services operating under strict data processing agreements with ar77.
• Regulatory and licensing authorities: ar77 may be required to disclose player data to its gaming regulator, relevant financial intelligence units, or law enforcement agencies as mandated by applicable law or licensing requirements. ar77 will comply with all lawful data disclosure requests.
• Analytics and security providers: Aggregated, anonymised usage data may be processed by platform analytics and cybersecurity service providers operating under data processing agreements with ar77.
• Legal and professional advisors: In the context of legal proceedings or regulatory matters, ar77 may share relevant data with legal counsel, auditors, or other professional advisors under strict confidentiality obligations.

7. Third-Party Services

7.1 The ar77 Platform may reference or link to third-party services including payment gateway portals (such as JazzCash and EasyPaisa apps). When you access these third-party services, you leave the ar77 Platform and your data is subject to the third party's own privacy policy, not this ar77 Privacy Policy.

7.2 ar77 is not responsible for the data practices of third-party services accessed via payment or verification flows. We recommend reviewing the privacy terms of JazzCash, EasyPaisa, and any bank whose mobile app or portal you use in connection with ar77 transactions.

7.3 ar77 embeds game content from licensed game software providers directly within the ar77 Platform. In those embedded sessions, the game provider may collect anonymised gameplay telemetry data as described in Section 6. Provider identities are available from ar77 support on request.

8. Cookies & Tracking Technologies

8.1 ar77 uses cookies and similar tracking technologies on ar77.bio. A cookie is a small text file stored on your device by your browser when you visit a website. ar77 uses the following types of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your ar77 account, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and previously selected game categories. These improve your experience but are not essential.
• Analytical Cookies: Help ar77 understand how visitors use the Platform — which pages are visited most, how long sessions last, and where navigation issues occur. Data collected via analytical cookies is aggregated and anonymised. ar77 uses these insights to improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent access attempts, detect unusual login patterns, and support two-factor authentication flows.

8.2 On your first visit to ar77.bio, you will be presented with a cookie consent notice. Strictly necessary and security cookies are active by default. You may accept or decline functional and analytical cookies through the cookie preference panel.

8.3 You may also manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from using ar77 account features including logging in.

9. Data Retention

9.1 ar77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and KYC data: Retained for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations under ar77's gaming license.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction for AML and regulatory audit purposes.
• Gaming activity logs: Retained for 3 years following last account activity, or longer if required by regulatory authority.
• Support communications: Retained for 2 years from the date of last communication unless a dispute or regulatory matter requires longer retention.
• Marketing consent records: Retained for as long as your consent is valid or for 3 years from last interaction where consent has been withdrawn, as evidence of compliance.
• Technical / analytical data: Typically retained in anonymised or aggregated form for up to 12 months.

9.2 Where a legal hold applies (for example, in connection with an ongoing legal dispute, regulatory investigation, or law enforcement request), relevant data will be retained for the duration of that hold regardless of standard retention periods.

10. Data Security

10.1 ar77 implements technical and organisational security measures commensurate with the sensitivity of personal data held and the risks posed by unauthorised access, disclosure, alteration, or loss. These measures include:

• SSL / TLS encryption for all data transmitted between your device and ar77 servers — the same standard used by banks and major financial institutions;
• Encryption of sensitive stored data including password hashes and KYC document files;
• Segregation of player funds from operational funds in accordance with ar77's licensing requirements;
• Access control systems restricting internal access to personal data to authorised personnel only, on a need-to-know basis;
• Regular third-party security audits and penetration testing of ar77's infrastructure;
• Intrusion detection and real-time security monitoring systems;
• Staff data protection training as part of onboarding and ongoing compliance programmes.

10.2 Despite these measures, no digital transmission or storage system is completely immune to security risk. If you have reason to believe that your ar77 Account has been compromised, contact ar77's 24/7 support team immediately via live chat to initiate an account security review.

10.3 In the event of a personal data breach that poses a high risk to your rights and freedoms, ar77 will notify affected Players and the relevant regulatory authority within the timeframes required under applicable law.

11. Your Data Rights

11.1 As an ar77 player, you have the following rights in respect of your personal data. Requests to exercise these rights should be submitted in writing via the contact details in Section 16. ar77 will respond within 30 calendar days of receipt.

• Right of Access: You may request a copy of the personal data ar77 holds about you, along with information about how it is used.
• Right to Rectification: If any personal data ar77 holds about you is inaccurate or incomplete, you may request correction or completion. Some data (such as registered CNIC details) can only be corrected through the KYC re-verification process.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing was unlawful. This right is subject to ar77's legal retention obligations — data required for AML compliance, regulatory audit, or active dispute resolution cannot be erased before the applicable retention period.
• Right to Restriction of Processing: You may request that ar77 restrict processing of your data in certain circumstances, such as while the accuracy of data is contested or while an objection is being considered.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request that ar77 provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of ar77's legitimate interests, including profiling. ar77 will cease such processing unless it can demonstrate compelling legitimate grounds. You may also object to direct marketing at any time (see Section 13).

11.2 To exercise any of the above rights, contact ar77 in writing at [email protected] or via 24/7 live chat. ar77 may request identity verification before processing a data rights request to protect against unauthorised access to personal data.

12. Children & Minors

12.1 ar77 enforces a strict 21+ age policy. The Platform is not intended for, and does not knowingly collect personal data from, individuals under the age of 21. Age verification is required at registration and again through CNIC-based KYC before any withdrawal is processed.

12.2 If ar77 discovers or has reason to believe that a Player is under the age of 21, the account will be suspended immediately, all pending transactions will be halted, and any winnings generated during the period of underage access may be voided in accordance with ar77's Terms & Conditions.

12.3 Any personal data collected from an individual subsequently confirmed to be under 21 will be deleted from ar77's systems as soon as reasonably practicable following identification, subject to any legal retention obligations.

12.4 If you believe a minor has accessed ar77 using falsified information, please contact ar77 support via live chat immediately so that the account can be investigated and suspended pending review.

13. Marketing Communications

13.1 Where you have provided consent at registration or through Account Settings, ar77 may send you promotional communications about new games, bonuses, PSL betting promotions, deposit offers, and other ar77 platform features, via email or SMS to your registered contact details.

13.2 You may withdraw your consent to receive marketing communications from ar77 at any time by:

• Updating your communication preferences in the Notifications section of your ar77 Account Settings;
• Clicking the "Unsubscribe" link included at the bottom of any ar77 marketing email;
• Contacting ar77 support via live chat or at [email protected] and requesting removal from marketing lists.

13.3 Withdrawal of marketing consent does not affect your ability to continue using your ar77 Account. Transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming messages — will continue to be sent regardless of marketing preferences as they are necessary for account operation.

13.4 ar77 does not engage in unsolicited cold marketing to individuals who have not registered an Account and provided consent. If you receive unsolicited marketing claiming to be from ar77, please report it to [email protected] as it may be an impersonation or phishing attempt.

14. International Data Transfers

14.1 As an internationally licensed operator, ar77 may store or process some categories of personal data on servers located outside of Pakistan. Where such transfers occur, ar77 ensures appropriate safeguards are in place to protect transferred data to a standard consistent with our data protection obligations under our gaming license.

14.2 Safeguards for international data transfers may include contractual data protection clauses with the receiving entity, processing within jurisdictions that maintain adequate data protection standards, or other appropriate technical and organisational measures.

14.3 Data transfers to payment processors such as JazzCash and EasyPaisa take place within Pakistani infrastructure in accordance with applicable Pakistani financial regulations and the State Bank of Pakistan's data localisation requirements for local payment system operators.

15. Updates to This Privacy Policy

15.1 ar77 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, regulatory requirements, or applicable law. The effective date and last updated date displayed at the top of this Policy will be revised accordingly.

15.2 Where changes are material — meaning they significantly affect how ar77 processes your personal data or alter your rights — ar77 will notify registered Players via email and/or a prominent notice on the Platform at least 14 days before the changes take effect.

15.3 Your continued use of the ar77 Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you should close your Account before the effective date of the changes.

16. Contact & Data Enquiries

16.1 For any questions, concerns, or requests relating to this Privacy Policy or ar77's handling of your personal data, you may contact ar77 through the following channels:

• Email: [email protected] — Please include "Privacy Enquiry" in your subject line
• Live Chat: Available 24/7 via ar77.bio — typical response time under 2 minutes

16.2 When submitting a data rights request or privacy complaint, please include your registered Account username and a clear description of your request or concern. ar77 may ask for identity verification before disclosing or modifying personal data.

16.3 If you are unsatisfied with ar77's response to a privacy complaint, you may escalate the matter to ar77's licensing authority, which maintains oversight of player data protection practices as part of its regulatory mandate.