Privacy Policy — ah77 Data Practices

ah77 is an online casino and sports betting platform accessible at ah77.im. For the purposes of this Privacy Policy, ah77 acts as the data controller in respect of all personal data collected from users who access and use the platform. As data controller, ah77 is responsible for determining the purposes and means of processing your personal information.

ah77 serves players primarily across Pakistan, including major cities such as Karachi, Lahore, Faisalabad, and Islamabad, and operates under an international gaming licence. Our platform offers cricket betting, live casino, slots, dice games, and esports wagering. In the course of providing these services, we necessarily collect and process certain personal data about our users.

ah77 collects a range of personal data categories depending on how you interact with our platform. The table below summarises the main categories of personal data we process:

We do not intentionally collect sensitive special category data such as racial or ethnic origin, religious beliefs, or health information unless specifically required for responsible gaming assessments requested by or consented to by you.

ah77 collects personal data through the following channels:

Direct Interactions

When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings, you directly provide us with personal data. You are responsible for ensuring that the information you provide is accurate and up to date.

Automated Technologies

When you access and use the ah77 platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, session duration, pages visited, and device characteristics. See Section 9 for full details on our cookie practices.

Third-Party Sources

We may receive personal data about you from third-party identity verification providers (used for KYC), payment processors such as JazzCash, EasyPaisa, HBL, and Meezan Bank, fraud prevention agencies, and where permitted by law, publicly available sources and credit reference agencies. Data received from third parties is handled in accordance with this Privacy Policy.

ah77 uses your personal data only for legitimate, specified purposes. We do not process your data in a manner that is incompatible with the purposes for which it was originally collected. Our primary processing purposes are:

• Account creation and management: To register you as a user, verify your identity, and maintain your account in good standing.
• Service delivery: To enable you to place bets, play casino games, make deposits and withdrawals, and access all platform features.
• KYC and AML compliance: To verify your identity, age (21+), and the legitimacy of your funding sources, as required under our international gaming licence.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast, Visa, and Mastercard in Pakistani Rupees (PKR).
• Responsible gaming: To monitor gaming behaviour, enforce self-imposed limits, identify potentially problematic gambling patterns, and apply protective interventions where necessary.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeovers, and other security threats.
• Customer support: To respond to your enquiries, resolve complaints, and improve our support services.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features and improvements to the ah77 experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory obligations: To comply with applicable laws, respond to regulatory requests, and cooperate with law enforcement where legally required.

ah77 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to fulfil our agreement with you as a registered user, including account management, payment processing, and service delivery.
• Legal obligation: Processing required for ah77 to comply with its legal obligations under gaming regulations, anti-money-laundering laws, and financial reporting requirements.
• Legitimate interests: Processing necessary for the legitimate business interests of ah77 — including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent as the legal basis (for example, for marketing communications or optional responsible gaming assessments), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

ah77 does not sell your personal data. We may, however, share your data with carefully selected third parties in the following circumstances:

Service Providers

We engage third-party companies to perform specific functions on our behalf, including identity verification (KYC) providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa, Mastercard), IT infrastructure and hosting providers, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on ah77's instructions and in accordance with applicable data protection standards.

Regulatory and Legal Authorities

ah77 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where we are legally required or permitted to do so. This includes disclosures required under anti-money-laundering regulations or in response to a valid court order or regulatory investigation.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of ah77's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity before your data is processed under materially different terms.

ah77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with our legal, regulatory, and contractual obligations. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML and gaming licence requirements.
• Financial and transaction data: Retained for a minimum of five years from the date of the transaction, as required by financial regulations.
• Gaming activity data: Retained for a minimum of three years for responsible gaming monitoring purposes and regulatory compliance.
• Customer support communications: Retained for up to two years following the resolution of the relevant query or complaint.
• Marketing preferences and consent records: Retained until you withdraw consent or for up to three years from your last interaction with ah77, whichever is earlier.
• Technical and log data: Ordinarily retained for up to 12 months, unless a longer period is required for security investigations.

When retention periods expire, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained indefinitely for statistical and analytical purposes.

ah77 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and the ah77 platform.
• Encryption at rest for stored personal data, financial records, and KYC documentation.
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate business need.
• Regular security audits, vulnerability assessments, and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Formal data breach response procedures, including timely notification to affected users and relevant authorities where required by law.

ah77 uses cookies and similar technologies (such as web beacons, pixel tags, and local storage objects) to operate the platform, remember your preferences, analyse usage patterns, and detect security threats. The main categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function correctly — for example, maintaining your logged-in session, storing your currency preference (PKR), and enabling secure payment flows. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect aggregate, anonymised information about how users interact with the ah77 platform, helping us identify areas for improvement. These do not identify you personally.
• Functionality cookies: Used to remember your preferences, such as your preferred language, notification settings, and responsible gaming limit configurations.
• Security cookies: Used to detect and prevent fraudulent account activity, including bot detection and device fingerprinting for anomaly detection purposes.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the performance or availability of some platform features. ah77 does not use third-party advertising or social media tracking cookies on its platform.

Subject to applicable law and the nature of the processing involved, you have the following rights in relation to your personal data held by ah77:

• Right of access: You may request a copy of the personal data ah77 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request that ah77 delete your personal data. Note that this right is subject to our legal obligations to retain data for regulatory purposes.
• Right to restriction: You may request that ah77 restrict processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another provider.
• Right to object: You may object to processing based on ah77's legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the legality of prior processing.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all data rights requests within 30 days of receipt. We may need to verify your identity before fulfilling a request.

ah77 operates a strict 21+ age policy. The platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 21. Age verification is a mandatory component of the ah77 KYC process and is completed before any real-money gaming activity is permitted.

If ah77 discovers or has reason to believe that personal data has been submitted by a user under the age of 21, we will immediately suspend the account, investigate the matter, withhold any associated funds pending the outcome of the investigation, and delete the personal data of the underage user to the extent permitted by our legal obligations.

If you have reason to believe that a person under 21 has registered with ah77, please notify us immediately at [email protected] so that we may take appropriate action without delay.

ah77 reserves the right to update or modify this Privacy Policy at any time. When material changes are made to this policy, we will notify registered users via the email address on file and/or through a prominent notice on the ah77 platform prior to the changes taking effect. The effective date at the top of this document will be updated accordingly.

Your continued use of the ah77 platform following notification of changes to this Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how ah77 protects your data. If you disagree with any changes to this policy, you may request account closure in accordance with our Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or ah77's handling of your personal data, please contact our dedicated privacy support team. We are committed to addressing all data protection queries in a timely, transparent, and helpful manner.

All privacy-related correspondence should be directed in writing to:

Please include your registered account username and a clear description of your request or concern to help us process your query as efficiently as possible. For data rights requests (see Section 10), we may ask you to verify your identity before proceeding.