at777com Privacy Policy —
How We Handle Your Personal Data

1 Overview & Scope

This Privacy Policy ("Policy") is issued by at777com ("we", "us", "at777com") and governs the collection, use, storage, and disclosure of personal data relating to players ("you", "the Player") who access or use the at777com platform — including the website at at777com.app and the at777com mobile application for Android and iOS.

at777com is an online casino and sports betting platform designed and operated primarily for Pakistani players. Our services include jackpot slots, live casino, cricket betting, Cockfighting markets, and a PKR digital wallet. The collection and processing of personal data is integral to the delivery of these services — particularly for account security, PKR payment processing, KYC compliance, and responsible gaming enforcement.

This Policy should be read in conjunction with at777com's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to data handling in specific contexts.

2 Data We Collect & How We Collect It

at777com collects personal data through the following means:

Data you provide directly:

• Registration data: Full name, date of birth, email address, Pakistani mobile number, username, and password when you create your at777com account;
• KYC documents: A copy of your valid Pakistani CNIC (front and back), proof of payment method (Easypaisa/JazzCash account confirmation or bank statement), and selfie verification where requested;
• Payment data: PKR payment method details — Easypaisa wallet number, JazzCash account number, SadaPay account, Raast identifier, or bank account details — provided for deposit and withdrawal processing;
• Support communications: Any personal information contained in messages, emails, or chat transcripts you send to at777com's support team.

Data collected automatically:

• Technical data: IP address, browser type and version, operating system, device model, screen resolution, and referral source collected when you access at777com;
• Usage data: Pages visited, games played, bets placed, session start and end times, in-game actions, deposit and withdrawal timestamps;
• Cookie data: Preference settings, session identifiers, and analytics data collected via cookies and similar tracking technologies — see Section 9.

Data from third parties:

• Identity verification results from third-party KYC service providers;
• Payment confirmation and transaction reference data from Easypaisa, JazzCash, and other payment processors;
• Fraud and risk signals from third-party security and AML monitoring services.

3 How at777com Uses Your Personal Data

at777com uses personal data for the following purposes:

• Account management: Creating, verifying, securing, and maintaining your at777com account;
• Identity verification: Confirming your identity in accordance with KYC requirements and verifying that you meet the 18+ age requirement;
• Payment processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, and other approved Pakistani payment methods;
• Service delivery: Providing access to at777com's casino games, sports betting markets, live tables, jackpot slots, Cockfighting, and all other platform products;
• Security & fraud prevention: Detecting and preventing unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activities;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and enforcing self-exclusion and deposit limit requests;
• Customer support: Responding to support requests, resolving disputes, and communicating account-related notices;
• Legal compliance: Meeting AML obligations, responding to lawful requests from competent authorities, and maintaining records as required by law;
• Service improvement: Analysing aggregated usage data to improve platform performance, game selection, and user experience for Pakistani players;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to marketing communications — with clear opt-out options in every communication.

at777com does not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or significant effects on Players without appropriate human oversight.

4 Legal Basis for Processing

at777com processes personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services set out in the at777com Terms & Conditions — including account management, payment processing, and game access;
• Legal obligation: Processing required to comply with applicable KYC/AML legal requirements, tax reporting obligations, and lawful data requests from competent authorities;
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming enforcement, and platform improvement — where those interests are not overridden by the Player's data protection rights;
• Consent: Marketing communications and optional analytics are processed on the basis of explicit consent, which may be withdrawn at any time without affecting other processing.

5 Data Sharing & Third Parties

at777com does not sell, rent, or trade personal data. We may share personal data with the following categories of third parties in limited, necessary circumstances:

• Payment processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB Bank, and other approved Pakistani payment providers — who receive transaction data necessary to process PKR deposits and withdrawals;
• KYC/identity verification providers: Third-party services used to verify player identity and CNIC documents — who receive only the data necessary for the specific verification task;
• AML and fraud screening services: Third-party risk intelligence platforms that help at777com identify suspicious transaction patterns — who receive transaction reference data in anonymised or pseudonymised form where possible;
• Game providers: Software providers whose games are offered on at777com (such as Evolution Gaming, Pragmatic Play, JILI, PG Soft) — who may receive a pseudonymous player identifier and bet data for game delivery and fairness certification purposes;
• Legal and regulatory authorities: Pakistani law enforcement, financial intelligence units, or other competent authorities where at777com is legally required to disclose information;
• Professional advisors: Lawyers, accountants, and auditors — under confidentiality obligations — where disclosure is necessary for legitimate professional purposes.

All third-party data processors engaged by at777com are bound by contractual obligations requiring them to use Player data solely for the specific purpose for which it was shared and to maintain appropriate data security standards.

6 International Data Transfers

at777com's primary servers are maintained in data centres applying enterprise-grade security standards. Some third-party service providers engaged by at777com — including game providers and technology infrastructure partners — may process data in jurisdictions outside Pakistan.

Where personal data is transferred outside Pakistan, at777com ensures that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the receiving party to apply data protection standards equivalent to those observed by at777com;
• Transfers to jurisdictions that offer an adequate level of data protection under internationally recognised frameworks;
• Specific consent from the Player where required by applicable law.

7 Data Retention

at777com retains personal data for the following periods:

• Account data: Retained for the duration of the account's active status and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements;
• KYC documents: Retained for a minimum of 5 years from the date of submission, as required by applicable anti-money laundering regulations;
• Transaction records: PKR deposit, withdrawal, and bet records are retained for a minimum of 5 years from the date of each transaction;
• Support correspondence: Retained for 2 years following the resolution of the relevant support case, unless longer retention is required for dispute resolution;
• Marketing data: Retained until consent is withdrawn or the player opts out of marketing communications, at which point marketing data is deleted or anonymised within 30 days;
• Cookie and analytics data: Retained in accordance with the specific cookie duration stated in Section 9 below.

Upon expiry of the applicable retention period, at777com will securely delete or anonymise personal data so that it can no longer be attributed to any identifiable individual.

8 Data Security

at777com's security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and at777com's servers;
• Encryption at rest for all stored personal data including CNIC documents and payment method details;
• Role-based access controls ensuring at777com staff can only access personal data that is necessary for their specific job function;
• Two-factor authentication for at777com staff accessing internal systems containing player data;
• Audit logging of all access to personal data records by at777com personnel;
• Penetration testing and security reviews conducted periodically by independent security specialists;
• Incident response procedures for identifying, containing, and notifying affected parties in the event of a data breach.

While at777com takes all reasonable steps to protect personal data, no internet-based system can guarantee absolute security. Players are responsible for maintaining the security of their own at777com login credentials and should enable two-factor authentication on their account.

9 Cookies & Tracking Technologies

at777com uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device when you visit at777com. at777com uses the following categories of cookies:

Essential cookies are required for at777com to function and cannot be disabled. Analytics, functional, and marketing cookies are optional — you can manage your cookie preferences through the Cookie Settings panel accessible in your at777com account settings, or through your browser settings. Disabling non-essential cookies will not prevent you from using at777com's core services.

10 KYC, AML & Responsible Gaming Data

at777com is required to collect and process certain personal data for the purposes of Know Your Customer (KYC) verification and Anti-Money Laundering (AML) compliance. This processing is mandatory — at777com cannot lawfully process PKR withdrawals without completing KYC verification for the relevant account.

KYC data processing: CNIC copies, selfie verification images, and payment method confirmation documents are processed exclusively for identity verification purposes. This data is stored securely and is not shared with any party except licensed KYC verification service providers and, where legally required, competent authorities.

AML monitoring: at777com's AML systems analyse transaction patterns, deposit and withdrawal volumes, and account behaviour to identify potential money laundering indicators. Where suspicious activity is detected, at777com is legally required to report this to relevant financial intelligence authorities — in such cases, at777com is prohibited by law from notifying the affected player that a report has been made.

Responsible gaming data: Gaming behaviour data — including bet history, session lengths, and deposit frequency — is monitored by at777com's responsible gaming systems to identify patterns that may indicate problem gambling. This data is used only for player protection purposes and is not shared for marketing or commercial profiling. Pakistani players who have activated self-exclusion or deposit limits have those settings enforced across all at777com products.

11 Minors & Age Restriction

at777com uses date-of-birth verification at registration and KYC-based age verification using CNIC documents to enforce the 18+ restriction. Any account where the age verification process reveals the holder to be under 18 at the time of registration will be treated as a prohibited account and closed accordingly.

12 Your Data Rights

Pakistani players on at777com hold the following rights in respect of their personal data. These rights may be exercised by contacting at777com at [email protected] with the subject "Data Rights Request":

at777com will respond to data rights requests within 30 days of receipt. Some requests — particularly erasure requests — may be subject to legal retention requirements that limit at777com's ability to delete certain records (such as KYC documents and transaction records required under AML law) within the applicable retention period.

The right to withdraw consent from marketing communications can be exercised at any time via the unsubscribe link in any at777com marketing email or by updating your communication preferences in your account settings. Withdrawal of marketing consent does not affect other data processing operations.

13 Changes to This Privacy Policy

at777com may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, at777com will:

• Publish the updated Policy at at777com.app/privacy-policy with a revised "Last Updated" date;
• Send a notification to your registered email address summarising the key changes;
• Display an in-platform banner or notification on your next at777com login prompting you to review the updated Policy.

Continued use of at777com following notification of changes constitutes acceptance of the revised Privacy Policy. If you disagree with any changes, you should cease using at777com and contact support to request account closure and data deletion in accordance with your rights under Section 12.

14 Contact Us — Privacy Enquiries

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by at777com, please contact us using the following details:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for privacy-related correspondence;
• Data Rights Requests: Email [email protected] with the subject "Data Rights Request" — responses are provided within 30 days;
• Live Chat: at777com's 24/7 live chat support team can handle general privacy enquiries and will escalate data rights requests to the appropriate team;
• Responsible Gaming & Self-Exclusion: Email [email protected] with the subject "Responsible Gaming" for priority handling of self-exclusion or problem gambling-related data requests.

at777com is committed to resolving privacy concerns promptly and transparently. Our support team operates in English and is available to Pakistani players across Karachi, Lahore, Islamabad, and all other regions 24 hours a day, every day of the year.