AT 77 Privacy Policy — How We Handle Your Personal Data

AT 77 is an online gaming and sports betting platform operating at at77.site, designed specifically for players in Pakistan. When this Privacy Policy refers to "AT 77", "we", "us", or "our", it means the company operating the AT 77 platform and its associated services.

AT 77 acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers — such as payment processors and identity verification companies — those parties act as data processors, handling your information only on our instructions and within the limits of their respective agreements with AT 77.

If you have any questions about this Privacy Policy or how your data is handled on AT 77, the primary contact for all privacy-related matters is support@at77.site. We aim to respond to all data-related enquiries within five business days.

AT 77 collects personal data through several channels — when you register, when you use the platform, when you contact support, and automatically as you browse. Here is a clear breakdown of what we collect and why.

Data We Do Not Collect

AT 77 does not collect or store your Easypaisa PIN, JazzCash password, internet banking credentials, or full payment card numbers. When you make a payment, you are directed to the payment provider's own interface — AT 77 only receives a confirmation token and transaction reference, not your payment credentials.

AT 77 uses your personal data for the following purposes:

• Account management: Creating and maintaining your AT 77 account, verifying your identity, and managing your profile and preferences.
• Platform operation: Processing bets, game sessions, deposits, withdrawals, and referral rewards.
• Customer support: Responding to your queries, resolving disputes, and communicating important account updates.
• Security and fraud prevention: Detecting and preventing fraudulent activity, duplicate accounts, bonus abuse, and unauthorised account access.
• Regulatory compliance: Fulfilling anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable legal obligations.
• Responsible gaming: Monitoring patterns of play that may indicate problematic gambling behaviour and proactively offering responsible gaming tools where appropriate.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how AT 77 can be improved for Pakistani players.
• Communications: Sending transactional emails (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional messages about AT 77 offers.

AT 77 only processes your personal data where there is a valid legal basis for doing so. The applicable bases for different types of processing are:

• Contract performance: Processing necessary to provide the services you signed up for — operating your account, processing transactions, settling bets.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, and any directions from competent authorities.
• Legitimate interests: Processing that serves AT 77's reasonable business interests without overriding your rights — such as fraud detection, platform security, and aggregate analytics. AT 77 has assessed that these interests are balanced and proportionate.
• Consent: Processing for optional purposes — such as marketing communications and non-essential cookies — where you have given specific, informed consent. You can withdraw consent at any time.

AT 77 does not sell your personal data. We share data with third parties only where necessary to operate the platform, comply with legal obligations, or protect players and the platform from harm. The categories of third parties who may access your data are:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard networks receive the minimum data necessary to process your transaction (name, account reference, transaction amount).
• Identity verification providers: Where KYC is required, your identity documents and biometric data are processed by our contracted verification partner under strict data processing agreements.
• Fraud and AML detection services: Aggregated behavioural data may be shared with specialist fraud prevention platforms to detect suspicious activity.
• IT and infrastructure providers: Companies that host, maintain, and secure the AT 77 platform infrastructure may have access to data as part of their service delivery, under contractual confidentiality obligations.
• Regulators and law enforcement: AT 77 will disclose personal data to regulatory authorities, law enforcement, or courts when required by law or a valid legal order.

International Transfers

Some of AT 77's technology partners and infrastructure providers operate servers outside Pakistan. Where your data is transferred internationally, AT 77 ensures appropriate safeguards are in place — including standard contractual clauses — to protect your data to a standard equivalent to what you would receive under Pakistani data protection principles.

AT 77 retains your personal data only for as long as necessary for the purposes it was collected and to fulfil our legal obligations. The retention periods that apply to different categories of data are:

When your data reaches the end of its retention period, AT 77 either securely deletes it or anonymises it so that it can no longer be associated with you personally. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

AT 77 uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work correctly and to understand how players use it. Here is a breakdown of the cookies AT 77 uses:

AT 77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.

• TLS/SSL encryption: All data transmitted between your device and AT 77 is encrypted using Transport Layer Security. Look for the padlock icon in your browser's address bar when on AT 77.
• Password hashing: Your AT 77 account password is never stored in plain text. It is hashed using a strong one-way algorithm so that even AT 77 employees cannot read your password.
• Two-factor authentication: AT 77 supports and recommends enabling 2FA on your account for an additional layer of login security.
• Access controls: AT 77 staff access to player data is restricted on a need-to-know basis. Database access is logged and audited.
• Penetration testing: AT 77's platform undergoes regular security assessments by independent security professionals to identify and remediate vulnerabilities.
• Data backups: Player account and transaction data is backed up regularly to secure, encrypted storage to ensure resilience against data loss events.

While AT 77 implements strong security measures, no digital platform can guarantee absolute security. In the unlikely event of a data breach that is likely to affect your rights or freedoms, AT 77 will notify affected players as quickly as practicable.

As a player on AT 77, you have a number of rights regarding your personal data. AT 77 is committed to honouring these rights promptly and without obstruction.

AT 77 is strictly a platform for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If AT 77 discovers that an account has been created by someone under 18, the account will be immediately suspended, all deposits returned where possible, and all data associated with the account deleted.

If you are a parent or guardian and believe your child has registered on AT 77 without your knowledge, please contact us immediately at support@at77.site with the account details you are aware of, and we will investigate and close the account promptly.

AT 77 uses age verification checks during registration and reserves the right to request proof-of-age documentation at any stage of the account lifecycle. This is both a platform policy and part of our commitment to responsible gaming.

The AT 77 platform may, in certain contexts, reference or link to third-party services — for example, payment provider websites or responsible gaming resources. This Privacy Policy applies only to the AT 77 platform itself. AT 77 is not responsible for the privacy practices of any third-party website or service that you access from AT 77.

When you click through to a payment provider such as Easypaisa or JazzCash to complete a transaction, you are subject to that provider's own privacy policy for the duration of that interaction. AT 77 recommends reviewing the privacy policies of any third-party services you use in connection with your AT 77 account.

AT 77 reviews and updates this Privacy Policy periodically to reflect changes in how we operate, improvements in our data practices, and applicable legal or regulatory changes. The "Effective" date shown at the top of this page is always updated when changes are made.

When significant changes are made — particularly those that affect your rights or how we use your data — AT 77 will notify registered players by email and display a prominent notice on the platform for a reasonable period before the updated policy takes effect. Minor corrections and clarifications that do not affect your rights materially may be made without separate notification.

We encourage you to review this Privacy Policy periodically. Continued use of AT 77 after any update constitutes acceptance of the revised policy. If you disagree with any material changes, you may close your account at any time by contacting support@at77.site.

If you have any questions, concerns, or complaints about how AT 77 handles your personal data, please get in touch using the details below:

• Email: support@at77.site (use "Privacy" in the subject line)
• Live Chat: Available 24/7 on the AT 77 platform after you log in
• Response target: All privacy-related enquiries are acknowledged within 24 hours and resolved within 30 calendar days

If you feel that AT 77 has not adequately addressed a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. AT 77 takes all complaints seriously and will cooperate fully with any such authority.

We find that most concerns are resolved quickly through direct communication — so please reach out to us first before escalating externally. Our team is ready to help and will treat your concern with the seriousness it deserves.