ar77 Privacy Policy

1. Data Controller

ar77 (referred to in this Policy as "ar77", "we", "us", or "our") is the data controller responsible for the personal information collected through the ar77 platform accessible at ar77.win. As data controller, ar77 determines the purposes and means by which your personal data is processed.

For all privacy-related queries or requests, please contact us at [email protected]. This is a plain-text address — please do not treat it as a clickable link.

2. Information We Collect

ar77 collects the following categories of personal data from users:

2.1 Identity & Contact Data

• Full legal name
• Date of birth (required for age verification)
• Pakistani CNIC number or equivalent government-issued identity document number (collected during KYC verification)
• Registered mobile number (Pakistani +92 format supported)
• Email address
• Residential address (city, province, postal code)

2.2 Financial Data

• JazzCash or Easypaisa account numbers associated with transactions
• Bank account details (HBL, UBL, Meezan Bank, Bank Alfalah, or other institutions) where provided for withdrawals
• Cryptocurrency wallet addresses (USDT TRC20 or similar) where applicable
• Partial card numbers and card type (Visa/Mastercard) — full card numbers are not stored by ar77
• Transaction history including deposits, withdrawals, bonuses, and bet settlements

2.3 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session logs including login timestamps, duration, and activity within the platform
• Game history, bet records, and wagering activity
• Pages visited, features accessed, and navigation patterns within ar77

2.4 Communications Data

• Records of correspondence with the ar77 support team via chat, email, or any other channel
• Survey responses and voluntary feedback submitted to ar77

3. How We Collect Your Data

ar77 collects personal data through the following means:

• Account registration: Information provided when you create an ar77 account, including name, date of birth, mobile number, and email.
• KYC verification: Identity documents uploaded to verify your age and identity in compliance with anti-money laundering (AML) requirements.
• Deposits and withdrawals: Payment method details provided when conducting financial transactions on the platform.
• Platform use: Automatically collected technical and usage data as you navigate the ar77 website and mobile interface.
• Cookies and tracking: Data collected via first-party cookies and similar technologies as described in Section 9.
• Support interactions: Information shared when you contact ar77 support or submit a complaint.
• Third parties: Identity verification and fraud prevention data obtained from third-party KYC service providers where applicable.

4. Purposes of Processing

ar77 processes your personal data for the following purposes:

• Account management: Creating, verifying, and maintaining your ar77 account.
• Service delivery: Enabling access to cricket betting, casino games, slots, live dealer tables, and all other platform features.
• Payment processing: Processing deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods.
• Age and identity verification: Verifying that you are 18 or older and confirming your identity as required by our operating standards.
• Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Responsible gaming: Monitoring account activity to identify problem gambling patterns and delivering self-exclusion and limit-setting features where requested.
• Customer support: Responding to your queries, complaints, and requests.
• Platform improvement: Analysing usage data to improve platform performance, user experience, and game offerings.
• Marketing and promotions: Sending you relevant promotions, bonuses, and cricket-related offers — only where you have given your consent or where we have a legitimate interest in doing so.
• Legal obligations: Complying with applicable legal, regulatory, and reporting obligations.

5. Legal Basis for Processing

ar77 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing necessary to provide the services you have requested when creating an account and using the platform.
• Legal obligation: Processing required to comply with applicable AML, KYC, and other regulatory requirements.
• Legitimate interests: Processing carried out for fraud prevention, platform security, and improving the quality of our services, where your rights do not override our legitimate interests.
• Consent: Processing for direct marketing communications, where you have provided explicit consent, which you may withdraw at any time by contacting [email protected].

6. Data Sharing & Disclosure

ar77 does not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers: Third-party vendors who assist ar77 in operating the platform, including payment processors (JazzCash, Easypaisa, Visa/Mastercard networks, Skrill, Neteller), KYC verification providers, cloud hosting providers, and customer support software vendors. All such providers are bound by data processing agreements requiring equivalent data protection standards.
• Game studios: Game providers such as Pragmatic Play, PG Soft, and Jili may receive limited technical session data necessary to operate their games within the ar77 platform.
• Law enforcement and regulatory bodies: Where required by law, court order, or regulatory authority, ar77 may disclose personal data to competent authorities. ar77 will endeavour to notify affected users where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving ar77, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. International Data Transfers

ar77 may transfer personal data to servers or processors located outside Pakistan. Where such transfers occur, ar77 takes appropriate steps to ensure that your data receives a level of protection consistent with the principles set out in this Privacy Policy, including the use of contractual safeguards and data processing agreements with receiving parties.

8. Data Retention

ar77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Active account data: Retained for the duration of your account plus a minimum of 5 years following account closure, in line with standard AML retention requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Support correspondence: Retained for 3 years from the date of the interaction.
• Marketing preferences: Retained until you withdraw consent or request erasure.

Where data is no longer required for any lawful purpose, ar77 will securely delete or anonymise it.

9. Cookies & Tracking Technologies

ar77 uses first-party cookies and similar tracking technologies to operate the platform and improve the user experience. The categories of cookies used include:

• Essential cookies: Required for the platform to function, including session management and login state. These cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how users interact with the platform to help ar77 identify areas for improvement.
• Preference cookies: Store your language, currency, and display preferences so they persist between sessions.

ar77 does not use third-party advertising cookies or sell cookie data to advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to log in and use the platform.

10. Your Rights

Subject to applicable law and verification of your identity, you have the following rights in relation to your personal data held by ar77:

• Right of access: Request a copy of the personal data ar77 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ar77's legal retention obligations.
• Right to restrict processing: Request that ar77 limits how it uses your data in certain circumstances.
• Right to data portability: Request that ar77 provides your data in a structured, machine-readable format where technically feasible.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact ar77 at [email protected]. ar77 will respond within 30 days of receiving a verified request.

11. Children's Privacy

ar77 does not knowingly collect personal data from individuals under the age of 18. All services are strictly restricted to adults. If ar77 becomes aware that a minor has registered an account or submitted personal data, that account will be closed immediately and all associated data deleted without delay. If you believe that a minor has accessed ar77, please notify us at [email protected] immediately.

12. Security Measures

ar77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ar77 servers
• Encrypted storage of sensitive personal data at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Two-factor authentication options for player accounts (mobile OTP)
• Regular security audits and vulnerability assessments of the ar77 platform
• Incident response procedures for investigating and reporting data breaches where legally required

Notwithstanding the above, no system is entirely immune to security risks. ar77 cannot guarantee absolute security of data transmitted over the internet and users are encouraged to maintain strong, unique passwords and enable OTP login for their ar77 accounts.

13. Changes to This Policy

ar77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered users via email or a notice on the platform no less than 7 days prior to the change taking effect. Continued use of the ar77 platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the ar77 privacy team:

• Email: [email protected]
• Response time: Acknowledgement within 48 hours; full response within 30 days
• Availability: Support team available 24/7

For matters related to responsible gaming, self-exclusion, or account deposit limits, please also visit our Responsible Gaming page.