CLAUSE 01
Definitions
In this Privacy Policy, the following terms shall have the meanings set out below unless the context requires otherwise:
- "ar777" / "we" / "us" / "our" refers to the ar777 online gaming platform and its operators, licensees, and affiliated entities operating the website at ar777.ws.
- "Player" / "you" / "your" refers to any individual who visits, registers on, or uses the ar777 platform, including prospective users who browse without registering.
- "Personal Data" refers to any information that directly or indirectly identifies a living individual, including name, CNIC number, contact details, IP address, device identifiers, and financial account information.
- "Processing" refers to any operation performed on personal data, including collection, storage, use, sharing, transfer, and deletion.
- "KYC" refers to Know Your Customer verification — the identity, age, and payment method verification process that ar777 conducts in accordance with its regulatory obligations.
- "Cookies" refers to small text files placed on your device by the ar777 platform to facilitate session management, analytics, and personalisation functions.
- "Third-Party Processors" refers to companies engaged by ar777 to perform specific data processing functions on ar777's behalf, such as payment processing, identity verification, and fraud detection services.
CLAUSE 02
Data We Collect
ar777 collects personal data from you through several channels: directly when you register and use the platform, automatically when you browse the site, and from third-party verification services during KYC. Below is a full breakdown of the categories of personal data we collect and the context in which each is gathered.
| Data Category |
Examples |
Collection Context |
| Identity Data |
Full name, date of birth, CNIC number, nationality |
Registration and KYC verification |
| Contact Data |
Mobile number, email address, city of residence |
Account registration and support interactions |
| Financial Data |
JazzCash / EasyPaisa account number, HBL / UBL / Meezan Bank account details, transaction history |
Deposit and withdrawal processing, AML compliance |
| Gaming Data |
Game sessions, bet history, wagering amounts, bonus usage, win/loss records |
Automatically recorded during platform use |
| Technical Data |
IP address, device type, browser, operating system, session timestamps |
Automatically collected via server logs and cookies |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
When you contact ar777 support |
| Responsible Gaming Data |
Deposit limits, loss limits, self-exclusion status, session time settings |
When you use ar777 responsible gaming tools |
Minimum Collection Principle: ar777 does not collect sensitive categories of personal data (such as health information, religious beliefs, or political opinions) unless specifically required by a regulatory obligation. We always aim to collect the minimum data necessary to provide our services securely and compliantly.
CLAUSE 03
How We Use Your Data
ar777 uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that would be incompatible with the purposes for which it was originally collected. The following are the primary purposes for which ar777 processes your personal data:
- Account Creation and Management: To register your ar777 account, verify your identity and age in compliance with our 21+ policy, and maintain accurate account records throughout your time as a player.
- Platform Services: To provide access to ar777's gaming products, including cricket betting, live casino, slots, and fishing games, and to record and settle all wagering activity on your account accurately.
- Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and to process withdrawal requests to your verified payment method following KYC approval.
- Regulatory Compliance: To fulfil our obligations under our international gaming licence, including KYC verification, anti-money laundering (AML) screening, responsible gaming monitoring, and age verification checks.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the ar777 platform.
- Customer Support: To respond to your support queries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
- Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit and loss limits you have set, process self-exclusion requests, and send responsible gaming communications where appropriate.
- Platform Improvement: To analyse aggregated, anonymised usage data to improve the ar777 platform experience, optimise game performance, and develop new features relevant to Pakistani players.
- Marketing Communications: To send you promotional offers, bonus notifications, PSL season updates, and platform news — but only where you have provided explicit consent to receive such communications, and only via channels you have opted into.
CLAUSE 04
Legal Basis for Processing
ar777 processes your personal data on one or more of the following lawful bases, in accordance with internationally recognised data protection standards:
- Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and ar777 — specifically, to provide you with access to our gaming platform, process your transactions, and manage your account in accordance with our Terms & Conditions.
- Legal Obligation: Certain processing activities are required by law or by the conditions of our international gaming licence — including KYC verification, AML transaction monitoring, age verification, and the enforcement of self-exclusion orders. We cannot waive these obligations even at your request.
- Legitimate Interests: ar777 processes some personal data on the basis of its legitimate business interests, including fraud prevention, platform security, abuse detection, and aggregated analytics. We always balance these interests against your privacy rights before relying on this basis.
- Consent: Where ar777 relies on your consent as the legal basis for processing — most notably for marketing communications — you have the right to withdraw that consent at any time by contacting our support team or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
CLAUSE 05
Data Sharing and Third Parties
ar777 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose. All third-party processors engaged by ar777 are contractually bound to process your data solely on ar777's instructions and to maintain appropriate security standards.
- Payment Processors: ar777 shares the financial account details necessary to process your deposits and withdrawals with our approved payment partners, including JazzCash, EasyPaisa, and participating Pakistani banks. These partners process your data strictly to execute the requested transaction.
- Identity Verification Providers: ar777 engages accredited third-party KYC and identity verification services to validate CNIC documents, confirm date of birth, and screen against sanction and politically exposed persons (PEP) lists, as required by our licensing obligations.
- Fraud Detection Services: ar777 uses specialist third-party fraud detection and device fingerprinting tools to identify multi-accounting, bonus abuse, and suspicious financial activity. These tools process IP addresses, device identifiers, and behavioural data.
- Game Content Providers: The third-party game studios whose content is available on ar777 may receive anonymised session data necessary to resolve technical disputes or verify game round outcomes. No personally identifiable data is shared with game providers beyond what is technically necessary.
- Regulatory and Legal Authorities: ar777 will disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law or a valid legal order. ar777 is not required to notify you of such disclosures where prohibited by law.
- Self-Exclusion Registers: Where required by our licensing conditions or responsible gaming obligations, ar777 may share your self-exclusion status with shared self-exclusion schemes to prevent access to other platforms during your exclusion period.
No Third-Party Marketing: ar777 does not share your personal data with any third-party organisation for that organisation's own marketing purposes. If you receive unsolicited marketing from a third party claiming to be associated with ar777, please report it to us immediately at [email protected].
CLAUSE 06
Cookies and Tracking Technologies
ar777 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to collect anonymised analytics data that helps us improve the platform. The following categories of cookies are used on the ar777 platform:
- Strictly Necessary Cookies: These cookies are essential for the ar777 platform to function. They manage your login session, maintain your account authentication state, and enable core platform features such as the game lobby, deposit flow, and account settings. These cookies cannot be disabled without impairing platform functionality.
- Performance and Analytics Cookies: ar777 uses anonymised analytics cookies to understand how players navigate the platform, which game categories are most popular, and where technical issues occur. This data is aggregated and does not identify individual players.
- Functionality Cookies: These cookies remember your platform preferences — such as your preferred language, notification settings, and display options — so that you do not need to reconfigure them on every visit.
- Fraud Prevention Cookies: ar777 uses device fingerprinting and session integrity cookies to detect and prevent multi-accounting, bonus abuse, and other forms of fraudulent activity. These cookies are active during all platform sessions.
Managing Cookies: You can control non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your ar777 account and accessing gaming products. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.
CLAUSE 07
Data Retention
ar777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply to the main categories of personal data we hold:
- Account and Identity Data: Retained for the duration of your active account and for a minimum of five years following account closure, in accordance with our international gaming licence's AML record-keeping requirements.
- Financial Transaction Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of five years from the date of the transaction, as required by applicable financial regulations and our licensing conditions.
- KYC Documentation: Identity and address verification documents are retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
- Customer Support Records: Live chat transcripts, email correspondence, and support ticket records are retained for two years from the date of the interaction, or for the duration of any unresolved dispute.
- Responsible Gaming Records: Self-exclusion records, deposit limit settings, and responsible gaming correspondence are retained for five years following the end of any exclusion period to prevent re-registration during an active exclusion and to support regulatory audit requirements.
- Technical and Analytics Data: Anonymised analytics data and server log data are retained for up to 13 months for platform optimisation purposes, after which they are deleted or further anonymised.
Upon the expiry of the applicable retention period, ar777 will securely delete or anonymise your personal data so that it can no longer be linked back to you. Where anonymisation is not technically feasible, we will restrict the data to prevent its further use.
CLAUSE 08
Your Privacy Rights
As an ar777 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or email. ar777 will respond to all verified requests within 30 calendar days.
- Right of Access: You have the right to request a copy of all personal data ar777 holds about you. We will provide this in a structured, commonly used format. Note that certain data held for AML or fraud prevention purposes may be withheld where disclosure would prejudice a regulatory investigation.
- Right to Rectification: If any personal data ar777 holds about you is inaccurate or incomplete, you have the right to request that we correct it. Please note that corrections to identity or financial data will require re-verification through our KYC process.
- Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to override where ar777 is required to retain your data by law — for example, under AML record-keeping obligations. We cannot delete data that we are legally required to retain.
- Right to Restriction: You may request that ar777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interests objection is being assessed.
- Right to Object: You have the right to object to ar777 processing your personal data on the basis of legitimate interests, including for profiling purposes. You also have an unconditional right to object to the use of your data for direct marketing at any time.
- Right to Data Portability: Where ar777 processes your data on the basis of consent or contractual necessity, you may request a machine-readable copy of your data to transfer to another service provider.
- Right to Withdraw Consent: Where ar777 relies on your consent to process your data (most commonly for marketing communications), you may withdraw that consent at any time with immediate effect by contacting our support team or updating your account notification preferences.
How to Submit a Request: To exercise any of the rights listed above, contact ar777 via live chat (available 24/7 in English and Urdu) or send a written request to [email protected]. We may need to verify your identity before processing your request to protect your data from unauthorised access.
CLAUSE 09
Data Security
ar777 maintains a comprehensive information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include the following:
- TLS Encryption in Transit: All data transmitted between your device and ar777's servers is encrypted using TLS 1.3. We do not operate any non-HTTPS endpoints on the ar777 platform.
- AES-256 Encryption at Rest: Personal data, KYC documents, and financial records stored on ar777 servers are encrypted at rest using AES-256 encryption, preventing unauthorised access even in the event of a physical breach of server infrastructure.
- Access Controls: Access to personal data within ar777's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role, and all access is logged and audited.
- Multi-Factor Authentication: ar777's administrative systems require multi-factor authentication for all staff access. We also offer two-factor authentication to players for their individual accounts.
- Regular Security Audits: ar777's platform and security infrastructure undergo regular penetration testing and security audits conducted by accredited third-party security firms. Identified vulnerabilities are remediated according to a prioritised risk-based schedule.
- Data Breach Response: ar777 maintains a data breach response plan. In the event of a breach that is likely to result in a risk to players' rights, we will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the breach, in accordance with our licensing obligations.
Your Responsibility: The security of your ar777 account also depends on you. You are responsible for keeping your password confidential, not sharing your login credentials, and logging out of your account when using shared devices. If you suspect your account has been compromised, contact ar777 support immediately via live chat.
CLAUSE 10
Children's Privacy
The ar777 platform is strictly intended for individuals who are 21 years of age or older. ar777 does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of the ar777 registration process and KYC verification procedure.
If ar777 becomes aware that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the affected account, forfeit all balances in accordance with our Terms & Conditions, and delete all personal data associated with the account as soon as practicable, subject to any regulatory data retention requirements that cannot be waived.
If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to ar777, please contact our support team immediately via live chat or at [email protected]. We take underage gambling extremely seriously and will act on such notifications without delay.
21+ Strictly Enforced: ar777 uses automated age verification tools and manual document review during KYC to enforce our 21+ age restriction. Accounts that cannot be verified as belonging to a player aged 21 or older will not be permitted to make deposits, place wagers, or process withdrawals.
CLAUSE 11
Changes to This Privacy Policy
ar777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, platform features, regulatory obligations, or applicable law. When we make material changes to this policy, we will notify registered players via their registered email address and display a prominent notice on the ar777 platform.
The effective date of the current version of this Privacy Policy is clearly stated at the top of this document. Your continued use of the ar777 platform following the effective date of any update constitutes your acknowledgment of the revised policy. We encourage you to review this page periodically to stay informed of how ar777 protects your personal data.
If any amendment to this Privacy Policy materially reduces your privacy rights or changes the purposes for which ar777 processes your data in a way that requires fresh consent, we will seek that consent from you before the new processing begins.
CLAUSE 12
Contact and Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please contact the ar777 Data Support team through the following channels:
- Live Chat: Available 24/7 in both English and Urdu directly through the ar777 platform. Live chat is the fastest channel for urgent privacy concerns, account data requests, and breach reports.
- Email: Non-urgent data requests, formal complaints, and document submissions may be directed to [email protected]. Please include "Privacy Request" in your subject line and provide your registered username to allow us to locate and verify your account.
This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the ar777 Privacy Policy. Players who registered prior to this date are subject to this updated policy from its effective date. A copy of this policy is always available via the footer of every page on the ar777 website.