Privacy Policy – at777 Online Casino & Betting

1. Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by at777 in connection with the operation of the at777 online gaming and sports betting platform accessible at at777.biz. It covers all interactions with the at777 platform, including account registration, login, deposits, withdrawals, gameplay, sports betting, customer support communications, and general browsing of at777.biz.

By creating an at777 account or using the at777 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the at777 platform.

This Privacy Policy should be read in conjunction with the at777 Terms & Conditions and the Responsible Gaming Policy.

2. Data Controller

2.1 For the purposes of applicable data protection law, the data controller responsible for your personal information is at777, operating the platform at at777.biz.

2.2 All data protection enquiries, subject access requests, and requests to exercise your data rights should be directed to at777 using the contact information provided in Section 15 of this Policy.

3. Personal Data We Collect

at777 collects the following categories of personal data from Players:

3.1 Registration & Identity Data

• Full legal name (as it appears on your CNIC)
• Date of birth (for age verification — at777 is 18+ only)
• Email address (primary account identifier and communication channel)
• Pakistan contact phone number (used for two-factor authentication and account communications)
• Residential address (city and province; full address may be required for KYC)

3.2 Identity Verification (KYC) Data

• Computerised National Identity Card (CNIC) number and copy
• Selfie or identity verification photograph
• Proof of address documentation (where required)
• Source of funds documentation (where required for withdrawal compliance)

3.3 Financial & Transaction Data

• Easypaisa account number or JazzCash account number linked to your at777 account
• HBL, UBL, Meezan Bank, or Bank Alfalah account details provided for IBFT withdrawals
• USDT TRC20 wallet addresses where cryptocurrency transactions are used
• Complete transaction history: all deposits, withdrawals, bonus credits, and net gaming results

3.4 Gaming & Behavioural Data

• All bets placed: sport, market, stake, odds, settlement result, and timestamp
• Casino game sessions: game title, stake per round, result, session duration, and RTP data
• Session timestamps, login/logout times, and device session identifiers
• Responsible gaming settings set by the Player: deposit limits, session reminders, self-exclusion status

3.5 Technical & Device Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser version
• Referring URL and navigation path within at777.biz
• Cookie identifiers and session tokens

3.6 Communications Data

• Content of live chat and email support communications with the at777 support team
• Complaint and dispute correspondence
• Responses to at777 surveys or feedback requests (where voluntarily provided)

4. How We Collect Your Data

at777 collects personal data through the following means:

• Direct provision: Data you provide during registration, KYC submission, deposit/withdrawal requests, and communications with at777 support;
• Automated collection: Technical and device data collected automatically when you access and use at777.biz, including via cookies and server logs;
• Platform activity: Gaming and betting data generated by your use of at777's products;
• Third-party payment processors: Transaction confirmation data received from Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT payment processors in connection with your deposit and withdrawal activity;
• Identity verification providers: Data received from third-party KYC and identity verification service providers engaged by at777 to assist with CNIC verification.

5. How We Use Your Personal Data

at777 uses your personal data for the following purposes:

6. Legal Basis for Processing

at777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered Player, including operating your account, processing transactions, and providing gaming services;
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC/AML requirements, age verification mandates, and data retention laws;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where these interests do not override your fundamental rights;
• Consent: Processing for optional marketing communications, where you have given explicit consent. You may withdraw marketing consent at any time by contacting at777 support.

7. Sharing Your Data with Third Parties

7.1 at777 does not sell, rent, or trade your personal data to third parties for their commercial purposes.

7.2 at777 may share your personal data with the following categories of third parties, strictly for the purposes described:

• Payment processors: Easypaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT processors — solely to process your deposits and withdrawals;
• KYC / identity verification providers: Third-party verification services engaged to assist with CNIC and identity document verification;
• Gaming software providers: Casino game and sports betting data platform providers who require session-level data to deliver game results and settle bets;
• IT infrastructure providers: Cloud hosting and server providers operating under strict data processing agreements with at777;
• Regulatory and law enforcement authorities: Where at777 is required by applicable law, court order, or regulatory requirement to disclose your data;
• Anti-fraud and AML services: Specialist compliance services used to screen for suspicious activity, in accordance with at777's legal obligations.

7.3 All third parties who receive personal data from at777 are contractually obligated to process that data only for the specified purpose, to maintain appropriate security standards, and not to further disclose it without at777's authorisation.

8. International Data Transfers

8.1 at777's servers and some of its third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, at777 ensures that appropriate safeguards are in place, including contractual data protection clauses equivalent to internationally recognised standards.

8.2 By using the at777 platform, you acknowledge that your data may be transferred to, stored in, and processed in countries other than Pakistan, including countries whose data protection laws may differ from Pakistan's. at777 takes steps to ensure such transfers comply with applicable requirements and that your data remains adequately protected.

9. Data Retention

9.1 at777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, as follows:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with standard AML and financial record-keeping obligations;
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by applicable anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Support communications: Retained for three (3) years from the date of the final communication in each case;
• Technical logs: Retained for twelve (12) months from collection unless required longer for a specific security investigation;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance records.

9.2 Where at777 is required by law or regulatory mandate to retain data for a longer period, that mandatory period will take precedence over the above.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the at777 website. They allow at777.biz to recognise your browser, maintain your logged-in session, remember your preferences, and gather anonymised usage data.

10.2 Cookies Used by at777

• Essential cookies: Required for the at777 platform to function. These maintain your login session, store your currency preference, and handle security tokens. They cannot be disabled without breaking core functionality.
• Analytics cookies: Anonymised data on page visits, navigation paths, and device types — used to improve at777.biz performance and content. No personally identifiable information is transmitted.
• Preference cookies: Store your language and display settings across sessions so you do not need to re-select them on each visit to at777.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from logging in to your at777 account and using the platform's core features.

11. Your Data Rights

Subject to applicable law and to at777's legal obligations (including AML data retention requirements), you have the following rights regarding your personal data held by at777:

• Right of access: You may request a copy of the personal data at777 holds about you;
• Right to rectification: You may request correction of inaccurate personal data. Note that KYC data must match your official CNIC — contact support to initiate a KYC correction;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data, subject to at777's legal obligations to retain certain data under AML and financial record-keeping rules;
• Right to restriction: You may request that at777 restrict processing of your data in certain circumstances;
• Right to data portability: You may request your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on at777's legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact at777 support. at777 will respond to all data rights requests within 30 days of receipt. Complex requests may require up to an additional 60 days, in which case at777 will notify you of the extension within the initial 30-day period.

12. Children & Minors

12.1 at777 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. All registrations require confirmation that the Player is 18 or older, and age verification (KYC) is conducted before withdrawals are processed.

12.2 If at777 discovers that an account has been registered by or used by a person under 18, the account will be immediately closed, all balances forfeited, and any personal data associated with the account deleted, subject to applicable legal retention obligations.

12.3 Parents and guardians who believe a minor may have registered on at777 are asked to contact at777 support immediately at [email protected] so the matter can be investigated and resolved promptly.

13. Security Measures

at777 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and at777's servers;
• Encrypted storage for all sensitive personal data at rest;
• Password hashing using industry-standard salted cryptographic algorithms — passwords are never stored in plain text;
• Role-based access controls limiting at777 staff access to personal data strictly to those with a job-related need;
• Two-factor authentication (2FA) available for all at777 accounts — strongly recommended for all Pakistani players;
• Regular penetration testing and security audits of at777's infrastructure;
• Intrusion detection systems monitoring for unusual access patterns on at777's servers;
• Automated account lockout after repeated failed at777 login attempts.

Despite these measures, no internet-based system can guarantee absolute security. at777 cannot warrant that unauthorised third parties will never be able to circumvent these measures. In the event of a data breach affecting your personal data, at777 will notify affected Players without undue delay in accordance with applicable legal requirements.

14. Updates to This Privacy Policy

14.1 at777 reserves the right to update this Privacy Policy at any time. Material changes that affect how your personal data is used will be communicated to registered Players via email to the address associated with your at777 account at least seven (7) days before the changes take effect.

14.2 The date of the most recent revision is displayed at the top of this Privacy Policy. We recommend checking this page periodically. Continued use of the at777 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to report a privacy concern, please contact at777 using the following details:

Please include your registered at777 email address in all privacy-related correspondence so we can locate your account records efficiently.