AR77 Privacy Policy — How We Handle Your Data

1Who We Are

AR77 is an online gaming and sports betting platform operating at ar77.vu. The platform serves players in Pakistan with slots, casino games, sports betting covering cricket — including PSL and T20 series — football, esports and bingo, all in PKR.

For the purposes of this Privacy Policy, "AR77", "we", "us" and "our" refer to the operator of the ar77.vu platform. "You" and "your" refer to any individual who registers an account, visits the platform or uses any service provided through ar77.vu.

If you have any questions about this policy or how AR77 handles your personal data, you can contact the AR77 support team through the contact details provided in Section 14 of this policy.

2Data We Collect

AR77 collects personal data in several ways — directly from you when you register or use the platform, automatically when you interact with the site, and from third parties such as payment providers and identity verification services.

Data you provide directly:

• Full legal name as it appears on your CNIC or government-issued ID
• Date of birth (used to confirm you are 18 or older)
• Email address
• Mobile number registered in your name
• Username and password (password is stored in encrypted form)
• Identity documents submitted for verification — such as a copy of your CNIC or passport
• Payment information you provide when depositing or withdrawing, including JazzCash or Easypaisa mobile numbers, bank account details or card details
• Any communications you send to AR77 support, including chat messages and emails

Data collected automatically:

• IP address and approximate location derived from it
• Device type, operating system and browser version
• Pages visited, time spent on pages, clicks and navigation patterns within the platform
• Session start and end times
• Games played, bets placed, amounts staked and game history
• Cookies and similar tracking technologies (see Section 7)

Data from third parties:

• Identity verification results from the third-party verification provider AR77 uses to confirm your identity documents
• Transaction confirmation data from JazzCash, Easypaisa, Raast and other payment providers
• Fraud and risk signals from financial compliance tools used to protect the platform from fraudulent activity

3How We Use Your Data

The personal data AR77 collects is used for specific, defined purposes. The table below summarises the main uses:

AR77 does not use your personal data for automated decision-making that produces significant legal effects on you, other than standard fraud and risk screening processes that are a necessary part of operating a secure financial platform.

4Legal Basis for Processing

AR77 processes your personal data on one or more of the following legal bases depending on the specific purpose:

• Contract performance: Processing that is necessary to provide the AR77 service you have signed up for. This includes account management, processing your PKR deposits and withdrawals, and delivering the games and betting features you use.
• Legal obligation: Processing that AR77 is required to carry out to comply with applicable legal obligations, including identity verification requirements and fraud prevention.
• Legitimate interests: Processing carried out for AR77's legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security, abuse prevention and platform analytics to improve the service.
• Consent: Where AR77 relies on your consent for a specific type of processing — such as sending you marketing messages — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect processing that took place before the consent was withdrawn.

5Data Sharing

AR77 does not sell, rent or trade your personal data to any third party. We share data only in the following limited circumstances:

• Payment providers: When you make a deposit or request a withdrawal, your payment details are shared with the relevant payment provider — JazzCash, Easypaisa, Raast, your bank or card network — as necessary to process that transaction. These providers have their own privacy policies that govern how they handle your data.
• Identity verification providers: When you go through the KYC process, your identity documents and personal details are shared with the third-party identity verification service AR77 uses. This provider processes your data solely for verification purposes.
• Fraud prevention services: AR77 uses third-party tools to screen transactions and account activity for fraud and financial crime risk. These services receive limited data necessary for risk scoring.
• Platform infrastructure providers: AR77 uses cloud hosting and technical infrastructure services to run the platform. These providers may process data as part of delivering that infrastructure, under strict data processing agreements.
• Legal requirements: AR77 may disclose personal data if required to do so by applicable law or a valid legal process. We will not disclose more data than is required and will take steps to protect your interests where possible.

6Payment Data

All financial transactions on AR77 are conducted in PKR. When you deposit or withdraw funds, AR77 handles the payment information required to process that transaction. This includes mobile wallet numbers for JazzCash and Easypaisa, bank account details for Raast and bank transfer, and card details where applicable.

AR77 does not store full card numbers or CVV codes on its own servers. Card payment processing is handled by a third-party payment gateway that is responsible for the secure handling of full card data. AR77 retains only a tokenised reference to your payment method for the purpose of processing future withdrawals to the same method.

Transaction records — including deposit and withdrawal amounts, dates and payment methods used — are retained as part of your account history. These records are used for account management, dispute resolution and compliance purposes.

If you believe a transaction on your account was not authorised by you, contact AR77 support immediately. The AR77 team will investigate and, where the transaction is confirmed as unauthorised, take appropriate action including escalating the matter to the relevant payment provider.

7Cookies & Tracking Technologies

AR77 uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you visit a website. Cookies help the platform function correctly, keep you logged in and allow AR77 to understand how the platform is being used.

The types of cookies AR77 uses are:

• Essential cookies: These are necessary for the platform to work. They keep you logged into your account, maintain your session security and enable core platform functions. Without these cookies, the platform cannot function properly and they cannot be disabled.
• Functional cookies: These remember your preferences — such as your language settings or last-used deposit method — so you do not have to re-enter them every time you visit.
• Analytics cookies: These help AR77 understand how users navigate the platform — which pages are visited most, where users click and how long sessions last. This data is used in aggregated, anonymised form to improve the platform experience. AR77 does not use analytics cookies to build individual user profiles for advertising.
• Security cookies: These are used as part of AR77's fraud detection and account security processes. They help identify unusual login patterns and protect your account from unauthorised access.

You can manage or block cookies through your browser settings. Note that blocking essential cookies will prevent you from using the platform properly, as session management and login functions rely on them.

8Data Retention

AR77 keeps your personal data for as long as it is necessary for the purpose it was collected. When data is no longer needed, it is securely deleted or anonymised.

The general retention approach for the main data categories is:

• Account data: Retained for the duration of your account and for a period after account closure to handle any post-closure queries, disputes or compliance requirements.
• Transaction records: Financial transaction records including deposit and withdrawal history are retained for an extended period as required for financial record-keeping and fraud prevention purposes.
• Identity verification documents: KYC documents are retained for the period required to fulfil identity verification obligations. After that period, documents are deleted.
• Support communications: Records of support interactions are retained for a reasonable period after resolution to handle follow-up queries and for quality and training purposes.
• Usage and analytics data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer constitutes personal data once anonymised. Individual session data is retained for a shorter period.

9Data Security

AR77 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction.

Security measures in place include:

• Encryption of sensitive data in storage and in transit using standard encryption protocols
• Access controls that limit which AR77 personnel can access personal data and on what basis
• Secure password storage using one-way hashing — AR77 cannot see your password in plain text
• Session security measures including automatic timeout after periods of inactivity
• Monitoring of account activity for signs of unauthorised access or unusual patterns

While AR77 takes all reasonable steps to protect your data, no platform can guarantee absolute security. You also play an important role in keeping your account secure. Use a strong, unique password for your AR77 account, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been accessed without your permission.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, AR77 will notify affected users in a timely manner with information about what happened and the steps being taken.

10Your Rights

You have the following rights in relation to your personal data held by AR77. To exercise any of these rights, contact AR77 support with your request and account details.

AR77 will respond to data rights requests within a reasonable timeframe. In some cases, AR77 may need to verify your identity before processing a request to ensure we do not disclose or alter data in response to a fraudulent request.

11Children's Privacy

The AR77 platform is strictly for adults aged 18 and over. AR77 does not knowingly collect personal data from anyone under the age of 18. Age verification is a required part of the account registration and KYC process.

If AR77 becomes aware that an account has been registered by someone under 18, that account will be closed immediately and any personal data associated with it will be deleted, except where retention is required by law to handle the matter appropriately.

If you are a parent or guardian and believe a minor has registered an account on AR77, please contact support immediately with the details so the situation can be addressed without delay.

12Marketing Communications

AR77 may send you promotional communications about bonuses, new games, cricket and PSL betting promotions and other platform offers. These communications are sent by email or SMS to the contact details on your account.

You can opt out of marketing communications at any time by:

• Using the unsubscribe link included in any marketing email
• Contacting AR77 support and requesting to be removed from marketing lists
• Updating your communication preferences in your account settings where this option is available

Opting out of marketing communications does not affect service communications — AR77 will still send you essential messages related to your account, transactions, security and platform changes. These service communications cannot be opted out of as they are necessary to operate your account.

AR77 does not share your contact details with third parties for their own marketing purposes.

13Changes to This Policy

AR77 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer or changes in applicable law. When this policy is updated, the revised version will be published on this page with an updated effective date.

Where a change is material — meaning it significantly affects how your data is used or your rights in relation to it — AR77 will make reasonable efforts to notify active users through the platform or by email before the change takes effect.

Your continued use of the AR77 platform after an updated Privacy Policy has been published constitutes acceptance of the updated policy. If you do not agree with a change, you should stop using the platform and contact support to discuss your account options.

We recommend checking this page periodically for updates. The date shown at the top of this policy reflects when it was last revised.

14Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how AR77 is handling your personal data, please get in touch through AR77's support channels.

For general platform questions, the FAQ page covers common topics and is a good starting point. For account-specific privacy requests or data rights enquiries, contact AR77 support directly.

AR77 aims to acknowledge privacy-related requests promptly and to resolve them within a reasonable timeframe. For complex data rights requests, additional time may be required and AR77 will keep you informed of progress.