Privacy Policy

ar77 ("ar77", "we", "us", "our") operates the online gaming information platform accessible at ar77.cam. We are committed to protecting the privacy and personal data of all individuals who access or use our Platform. This Privacy Policy ("Policy") sets out in full how ar77 collects, uses, stores, discloses and protects personal information in connection with your use of the Platform.

ar77 is an English-language information and entertainment platform targeting Pakistani users. It does not operate as a licensed gambling operator in Pakistan, nor does it act as a bank, financial institution or payment processor. This Policy applies to information collected through the ar77 website, including any associated features, tools, content, forms and communication channels.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling guidelines, all of which form part of your agreement with ar77. If you do not agree with the terms of this Policy, please do not use the Platform.

ar77 does not claim to be licensed, approved, regulated or endorsed by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan (SBP), any provincial authority or any Pakistani financial institution. This Policy does not constitute legal advice on data protection law in Pakistan or any other jurisdiction.

In this Privacy Policy, the following terms carry the meanings defined below:

For the purposes of applicable data protection law, ar77 is the Data Controller of the Personal Data collected through the Platform. As Data Controller, ar77 determines the purposes for which and the means by which your Personal Data is processed.

Where ar77 engages third-party service providers — such as analytics platforms, cloud hosting providers, KYC verification services or customer support tools — those providers act as Data Processors under contractual instruction from ar77. ar77 remains responsible for ensuring that such processors handle your data in a manner consistent with this Policy and applicable data protection obligations.

Contact details for data-related enquiries are provided in Section 16 of this Policy. You may exercise any of your data rights set out in Section 12 by contacting us through those channels.

ar77 collects Personal Data through several channels depending on how you interact with the Platform. The categories of data we may collect are described below:

4.1 Registration Data

When you create an account on the Platform, we collect information you provide directly, which typically includes:

• Full legal name as it appears on your identity document.
• Date of birth (for age verification purposes).
• Email address.
• Username and password (stored in hashed/encrypted form).
• Country of residence and city (e.g., Karachi, Lahore, Islamabad).
• Contact telephone number where provided.

4.2 KYC & Identity Verification Data

For the purpose of identity verification, age confirmation and anti-money-laundering (AML) compliance, we may collect the following KYC Data:

• Scanned or photographed copy of a valid Pakistani CNIC (Computerised National Identity Card) or passport.
• Proof of address document (such as a utility bill or bank statement) where required at higher verification tiers.
• Selfie photograph or liveness-check video for biometric matching against the submitted identity document.

Important: KYC documents must be submitted exclusively through the Platform's secure HTTPS verification portal. ar77 will never request identity documents via WhatsApp, SMS, unverified email or any unsecured channel. If you receive such a request purportedly from ar77, do not comply and contact support immediately.

4.3 Financial & Transaction Data

Where the Platform provides information relating to deposit and withdrawal transactions, we may collect data relating to payment method references (such as the fact of a deposit via a particular method), transaction amounts in PKR and transaction timestamps. ar77 does not directly process financial transactions and is not a payment provider.

4.4 Usage & Technical Data

When you access the Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it.
• Browser type, version and operating system.
• Device type, screen resolution and connection type.
• Pages visited, time spent on pages and navigation paths through the Platform.
• Referring website or source of your visit.
• Error logs and crash reports where applicable.

4.5 Communications Data

If you contact ar77 support or submit a query through any communication channel, we retain a record of your correspondence, including the content of messages and your contact details, for the purpose of responding to your enquiry and maintaining a support history.

ar77 processes your Personal Data only where a valid legal basis exists. The legal bases on which we rely are described in the table below:

ar77 uses the Personal Data it collects for the following purposes:

• Account creation and management: To set up, maintain and administer your registered account on the Platform.
• Identity and age verification: To confirm that you meet the minimum age requirement of 18 years (or the higher minimum required by the applicable operator licence jurisdiction) and to verify your identity in compliance with KYC obligations.
• Platform security: To detect, prevent and investigate fraudulent activity, unauthorised access, money laundering and other prohibited conduct.
• Customer support: To respond to your queries, resolve disputes and maintain a support record for the purposes of service continuity and quality assurance.
• Platform analytics: To understand how users interact with the Platform — which pages are most visited, where users drop off, and how performance can be improved — using aggregated and anonymised data where possible.
• Legal and compliance obligations: To comply with applicable laws and regulations, including anti-money-laundering requirements, data retention obligations and law enforcement requests.
• Responsible gambling monitoring: To monitor account activity for indicators of problem gambling behaviour and to facilitate the application of responsible-gambling tools, including deposit limits and self-exclusion.
• Communications: To send you service-related communications, account notifications and, where you have consented, promotional information.

ar77 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects without human review. We do not create detailed personal profiles for advertising purposes or sell your data to data brokers or advertising networks.

ar77 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

7.1 Service Providers (Data Processors)

We engage trusted third-party service providers — including cloud hosting providers, KYC verification platforms, analytics services and customer support tools — who process data on our behalf under contractual data processing agreements. These providers are permitted to use your data only for the specific purpose for which they are engaged and are required to maintain appropriate security standards.

7.2 Legal & Regulatory Disclosure

ar77 may disclose your Personal Data to law enforcement authorities, regulatory bodies or other third parties where required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights and property of ar77; (c) prevent or investigate possible wrongdoing in connection with the Platform; or (d) protect the safety of users or the public.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of ar77's business, your Personal Data may be transferred to the relevant successor entity. You will be notified of any such transfer and any material change to this Policy that may result from it.

7.4 Payment References

References to payment methods on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as familiar contextual references for Pakistani users only. ar77 does not share your Personal Data with these providers and does not claim any affiliation or data-sharing relationship with them.

ar77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns and support certain Platform functionality. Cookies are small text files stored on your device by your browser when you visit a website.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling certain cookies may affect the functionality of the Platform. Where applicable, ar77 will present a cookie consent notice on your first visit, through which you may manage your preferences for non-essential cookies.

ar77 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Account data: Retained for the duration of your account and for a period thereafter as required by legal, regulatory or compliance obligations.
• KYC documents: Retained in accordance with applicable anti-money-laundering record-keeping requirements, which typically require retention for a minimum of five years following the end of the business relationship.
• Transaction records: Retained for the period required under applicable financial regulation.
• Support communications: Retained for a reasonable period to support quality assurance and dispute resolution, typically up to three years unless a longer period is required.
• Analytics data: Anonymised or aggregated usage data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes Personal Data once anonymised.

Upon account closure, ar77 will delete or anonymise Personal Data that is no longer required for legal or compliance purposes. You may request erasure of your data subject to the conditions set out in Section 12.

ar77 implements industry-standard technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and ar77's servers is encrypted using Transport Layer Security (TLS). Users should always verify the padlock indicator in their browser's address bar before entering personal information.
• Password security: Account passwords are stored in hashed form using modern cryptographic standards. ar77 does not store passwords in plain text.
• Access controls: Access to Personal Data within ar77's systems is restricted to authorised personnel on a need-to-know basis.
• Secure document handling: KYC documents are processed through a dedicated secure HTTPS verification portal. ar77 will never request such documents through unsecured channels.
• Regular security reviews: ar77 conducts periodic reviews of its data security practices and infrastructure to identify and address vulnerabilities.

While ar77 takes data security seriously, no method of electronic transmission or storage is completely secure. If you become aware of any security breach or suspect that your account has been compromised, please contact ar77 support immediately.

ar77 may use service providers — including cloud hosting, analytics and KYC verification providers — whose infrastructure is located outside Pakistan. Where Personal Data is transferred to countries that may not provide the same level of data protection as your home country, ar77 will implement appropriate safeguards to ensure your data is protected to a comparable standard.

Such safeguards may include contractual data processing agreements incorporating internationally recognised data protection clauses, ensuring that recipient service providers are bound by data protection obligations equivalent to those set out in this Policy.

By using the ar77 Platform, you acknowledge that your Personal Data may be transferred to, stored and processed in countries outside Pakistan. ar77 does not transfer your data to third parties for their own independent purposes in connection with international transfers.

As a user of the ar77 Platform, you have the following rights in respect of your Personal Data. The availability and scope of these rights may vary depending on the applicable data protection law in your jurisdiction. ar77 will respond to verified requests within a reasonable timeframe.

To exercise any of these rights, please contact ar77 using the contact details in Section 16. We may ask you to verify your identity before processing a request. We will not discriminate against you for exercising your rights under this Policy.

Where you have provided consent for a specific processing activity, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The ar77 Platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the applicable operator licence jurisdiction. ar77 does not knowingly collect Personal Data from individuals under the age of 18.

If ar77 becomes aware that Personal Data has been collected from an individual below the minimum age, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that your child has created an account on ar77 or provided Personal Data without your consent, please contact us immediately using the details in Section 16.

The ar77 Platform may contain references to, or provide contextual information about, third-party services — including online gaming operators, payment providers and sports leagues. ar77 is not responsible for the privacy practices, data handling policies or content of any third-party services.

References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as familiar Pakistani payment references only and do not constitute endorsements, affiliations or data-sharing relationships with those institutions. ar77 does not share your Personal Data with these providers.

We recommend that you review the privacy policies of any third-party services you access in connection with your use of the ar77 Platform. ar77 has no control over third-party data practices and accepts no liability for them.

ar77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory obligations. The most current version of this Policy will always be accessible at ar77.cam/privacy-policy, with the effective date updated accordingly.

Where material changes are made to this Policy — particularly those that affect how your Personal Data is used or your rights as a user — ar77 will take reasonable steps to notify you. This may include displaying a prominent notice on the Platform or sending a notification to your registered email address. Your continued use of the Platform following notification of changes will constitute your acceptance of the revised Policy.

If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy, the processing of your Personal Data, or the exercise of any of your data rights, please contact the ar77 data team using the details below. We aim to acknowledge all data-related requests within 72 hours and to provide a substantive response within 30 days, or sooner where required by applicable law.