at777 Privacy
Policy

at777 is an internationally licensed online gaming and sports betting platform operating at at777.ws. We offer cricket betting, live dealer casino games, video slots, and instant win games to registered users primarily based in Pakistan and other eligible markets.

For the purposes of this Privacy Policy, at777 acts as the data controller in respect of the personal information you provide when registering an account, making deposits or withdrawals, placing bets, contacting support, or simply browsing the Platform. As data controller, at777 determines the purposes and means by which your personal data is processed.

Our Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from anyone under this age threshold. If you believe a minor has registered on the at777 Platform, please notify us immediately at [email protected].

at777 collects only the personal data that is necessary to operate a licensed online gaming platform, comply with our regulatory obligations, and deliver a high-quality experience to our players. The categories of personal data we collect are set out in the table below:

at777 does not collect special category data (e.g., health information, religious beliefs, political opinions) except where you voluntarily disclose such information in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for the purpose of delivering that service.

at777 collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, use live chat support, submit a complaint, or contact us by email at [email protected].
• Automatically — when you browse or use the at777 Platform, our servers automatically record technical and usage data including your IP address, device identifiers, and session activity via cookies and server logs.
• From third-party payment providers — when you initiate a transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, we receive transaction confirmation data from these providers sufficient to credit or debit your at777 account balance.
• From identity verification providers — where at777 employs third-party KYC/AML service providers to verify your identity documents, those providers may share verification outcomes and risk scores with us.
• From fraud prevention services — at777 uses reputable fraud detection tools that may cross-reference your registration details against known fraud databases and return risk indicators to us.

at777 uses the personal data we collect for the following purposes. We will never use your data in a manner inconsistent with the purpose for which it was collected without first obtaining your consent or establishing a separate lawful basis:

• Account management — creating, maintaining, and securing your at777 account, including password resets, session management, and multi-factor authentication.
• Identity and age verification — confirming that you are at least 21 years of age and that your identity documents are genuine, as required under our licensing obligations.
• Payment processing — processing your deposits and withdrawals via your chosen local payment method, and reconciling transaction records for financial accuracy.
• Game provision — delivering cricket betting, live casino, slot, and instant game services to your account and maintaining accurate records of your gaming activity.
• Responsible gaming — monitoring gaming patterns for signs of potentially harmful behaviour, enforcing your voluntary deposit and loss limits, processing self-exclusion requests, and sending responsible gaming alerts where appropriate.
• Legal and regulatory compliance — fulfilling our obligations under our international gaming licence, applicable anti-money laundering laws, and any lawful requests from regulatory authorities or law enforcement.
• Fraud and security — detecting, preventing, and investigating fraudulent activity, account compromise, bonus abuse, and any other misuse of the at777 Platform.
• Customer support — responding to your support requests, resolving disputes, and maintaining records of correspondence for quality assurance purposes.
• Marketing communications — sending you promotional offers, bonus notifications, and platform updates by email or SMS, but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Platform improvement — analysing aggregated and anonymised usage data to improve the design, functionality, and performance of the at777 Platform.

at777 processes your personal data only where a valid lawful basis exists. The primary legal bases on which we rely are:

• Contractual necessity — processing required to perform the contract between you and at777, including account management, game provision, and payment processing. Without this processing, at777 cannot provide its services to you.
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC/AML obligations, regulatory reporting requirements, and responses to lawful authority requests.
• Legitimate interests — processing undertaken in pursuit of at777's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing undertaken on the basis of your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

at777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive only the data necessary to process your specific transaction. These providers are bound by their own data protection obligations.
• Identity verification and KYC providers — third-party providers engaged by at777 to perform document verification and AML screening receive identity data strictly for that purpose and are contractually bound to process it only on at777's instructions.
• Game content providers — game software providers whose titles are available on the at777 Platform may receive your player ID and session data for the purpose of delivering their games and calculating RTP outcomes. They do not receive your full identity or financial data.
• Regulatory authorities and law enforcement — at777 will disclose your personal data to competent regulatory bodies, licensing authorities, or law enforcement agencies where required to do so by law or by a valid legal order, without prior notice to you where the law prohibits such notification.
• Fraud prevention networks — at777 may share fraud indicators (not full personal profiles) with reputable fraud prevention services to protect the Platform and other users from fraudulent activity.
• Professional advisors — at777's legal, accounting, and auditing advisors may access personal data to the extent necessary to provide professional services, subject to strict confidentiality obligations.
• Business transfers — in the event that at777 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

As an internationally licensed gaming operator, at777 may process and store your personal data on servers located outside Pakistan. Where your data is transferred to or accessed from jurisdictions that may not offer the same level of data protection as your home country, at777 implements the following safeguards:

• Where applicable, at777 relies on Standard Contractual Clauses (SCCs) or equivalent contractual mechanisms approved by relevant data protection authorities to govern transfers of personal data to third-country processors.
• at777 conducts transfer impact assessments where required, to evaluate whether the laws of the recipient jurisdiction undermine the effectiveness of the safeguards in place.
• All third-party processors engaged by at777 are required to maintain confidentiality and security obligations at least equivalent to those at777 applies to its own data processing activities.

By registering an account with at777, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan in connection with the provision of at777's services.

at777 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with us and for a reasonable period thereafter to satisfy our legal, regulatory, and operational obligations. Specific retention periods are as follows:

• Account and identity data — retained for the lifetime of your account plus a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
• Transaction and financial data — retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping and AML compliance obligations.
• Gaming history — retained for a minimum of 3 years to support dispute resolution, regulatory audits, and responsible gaming monitoring.
• Support communications — retained for 2 years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Marketing consent records — retained for the duration of the consent plus 1 year as evidence of the consent having been obtained.
• Cookies and technical data — session cookies are deleted when you close your browser; persistent cookies are retained for up to 12 months unless deleted earlier by you.

When personal data is no longer required for any legitimate purpose, at777 securely destroys or permanently anonymises it in accordance with our data disposal procedures.

at777 uses cookies and similar tracking technologies on the Platform to provide core functionality, remember your preferences, and analyse how the Platform is used. The categories of cookies we use are:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens that keep you logged in and security cookies that detect fraudulent activity. These cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences such as language settings, game lobby filters, and responsible gaming limit configurations. Disabling these cookies may result in a degraded experience.
• Analytics cookies — used to collect aggregated, anonymised data about how users navigate and interact with the at777 Platform, helping us identify areas for improvement. at777 uses analytics data internally and does not share it in identifiable form with third parties.
• Performance cookies — used to monitor Platform load times, error rates, and server performance to ensure a smooth gaming experience for all users.

You may manage or delete cookies at any time via your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your at777 account. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

Subject to applicable law and certain limited exceptions (including where processing is required for AML compliance or fraud prevention), you have the following rights in respect of the personal data at777 holds about you:

• Right of access — you may request a copy of all personal data at777 holds about you, along with information about how it is being processed.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held by at777.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction — you may request that at777 restricts the processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to data portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object — you may object to the processing of your personal data where at777 relies on legitimate interests as its legal basis, including profiling for responsible gaming purposes.
• Right to withdraw consent — where at777 processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected].

To exercise any of the above rights, please contact at777 at [email protected] with the subject line "Data Rights Request" and your registered account username. at777 will respond to all valid requests within 30 days of receipt. Where a request is particularly complex or involves a large volume of data, at777 may extend this period by a further 60 days, of which you will be notified.

The at777 Platform is strictly for users who are 21 years of age or older. at777 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Our KYC verification process is designed to detect and reject registrations from underage individuals.

If at777 discovers or has reason to believe that an account has been registered by a person under 21 years of age, we will:

• Immediately suspend the account and block all access to the Platform.
• Retain the data only for the minimum period necessary to comply with our regulatory reporting obligations in respect of the underage access event.
• Return any deposited funds to the source payment method after deducting any amounts won using those funds, in accordance with our Terms & Conditions.
• Delete all remaining personal data associated with the account once our legal obligations in respect of the incident have been fulfilled.

Parents and guardians who believe their child has accessed the at777 Platform should contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

at777 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption is enforced on all connections to the at777 Platform. Data transmitted between your device and our servers is encrypted end-to-end.
• Segregated data storage — player personal data and financial records are stored in separate, access-controlled database environments with restricted internal access.
• Access controls — at777 staff access to personal data is governed by role-based access controls on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Regular security audits — at777 engages independent third-party security specialists to conduct periodic penetration testing and vulnerability assessments of our Platform infrastructure.
• Incident response — at777 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, at777 will notify affected users by email within a reasonable timeframe following discovery of the breach.
• Staff training — all at777 personnel with access to personal data receive regular data protection and security awareness training.

While at777 takes all reasonable precautions, no security system is impenetrable. You are also responsible for maintaining the security of your own account credentials as described in the at777 Terms & Conditions.

The at777 Platform may contain references to or integrations with third-party services, including payment gateways and game content providers. While at777 selects its third-party partners carefully and requires them to maintain adequate data protection standards, at777 is not responsible for the privacy practices of any third-party service.

When you interact with a third-party payment gateway (such as JazzCash or EasyPaisa) to complete a transaction, you are subject to that provider's own privacy policy and terms of service in addition to this Privacy Policy. We encourage you to review the privacy documentation of any third-party service you use in connection with at777.

at777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, at777 will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Notify registered users by email at the address on file, where the changes are significant enough to warrant direct notification.
• Display a prominent notice on the at777 Platform for a reasonable period following the update.

Your continued use of the at777 Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, please discontinue use of the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or the way at777 handles your personal data, please contact our support team:

• Email: [email protected] — responses within 2 business hours on average, 24/7.
• Subject line: Use "Privacy Query" or "Data Rights Request" to ensure your message is routed to our data protection team promptly.
• Live Chat: Available directly on the at777 Platform for immediate assistance during any session.

at777 will acknowledge all privacy-related complaints within 3 business days and aim to resolve them within 30 days. If you are unsatisfied with at777's response to your complaint, you may escalate the matter to the relevant data protection supervisory authority in the jurisdiction in which at777 holds its gaming licence.