Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how a1777 ("Platform", "we", "us", "our") collects, uses, stores, shares and protects personal data in connection with your use of the a1777 website and associated services (collectively, the "Service"). This Policy applies to all users of the Service regardless of their location, including users accessing the platform from Pakistan and other jurisdictions.

a1777 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection standards. By accessing or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you must discontinue use of the Service.

This Policy should be read alongside the a1777 Terms & Conditions, which govern your overall use of the platform. Capitalised terms used but not defined in this Policy carry the meanings assigned to them in the Terms & Conditions.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, deletion or any combination thereof.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, a1777 acts as the Data Controller in relation to the personal data of its registered users.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a binding contractual arrangement.
• "KYC" — Know Your Customer — the identity and age verification process conducted before enabling full account functionality or processing withdrawals.
• "Cookies" — Small text files placed on your device by the platform to facilitate session management, analytics and user experience personalisation.
• "Sensitive Personal Data" — A subset of personal data warranting enhanced protection, including government-issued identification numbers (such as a Pakistani CNIC), financial account details and data revealing a user's identity for compliance purposes.

03 Data We Collect

a1777 collects the following categories of personal data in connection with the provision of the Service:

3.1 Registration & Account Data

Collected during the account registration process. This data is required to create and maintain your account and to confirm your eligibility to use the Service.

3.2 Identity Verification (KYC) Data

Collected to satisfy identity verification and age-checking obligations. KYC documents are processed with heightened security controls and are used solely for verification purposes.

3.3 Financial & Transaction Data

Collected to process deposits, withdrawals and the display of account balances. Full payment card or bank account numbers are not stored by a1777 — these are handled directly by the relevant payment processor. References to Pakistani payment methods (such as Easypaisa, JazzCash, Raast or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah) are processed by the respective payment providers under their own privacy terms.

3.4 Usage & Technical Data

Collected automatically as you use the platform. This data supports security monitoring, responsible gambling assessments, platform performance optimisation and fraud prevention.

3.5 Communication Data

Collected when you contact our support team. This data is retained to facilitate issue resolution and to maintain a record of service interactions.

04 How Data Is Collected

Personal data is collected through the following means:

• Directly from you — when you register, complete KYC, make deposits or withdrawals, submit support requests or interact with any feature of the Service that involves data entry.
• Automatically — through cookies, server logs, session tracking tools and analytics systems as you navigate and use the platform.
• From third-party service providers — KYC verification partners may return verification results and associated data to a1777 as part of the identity-check workflow. Payment processors may share transaction confirmation data.
• From publicly available sources — in limited circumstances, where required for fraud prevention or compliance screening purposes.

05 Legal Basis for Processing

a1777 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

06 Purposes of Processing

a1777 processes personal data for the following purposes:

• Creating and managing your user account and enabling access to the Service.
• Processing deposits, withdrawals and transaction records, including displaying PKR-denominated balances.
• Conducting identity and age verification (KYC) as required by the operator's licensing obligations.
• Detecting, investigating and preventing fraud, money laundering, bonus abuse and other prohibited conduct.
• Assessing responsible gambling indicators and, where applicable, applying protective measures such as deposit limits or self-exclusion.
• Providing customer support through Live Chat, the Help Center and email.
• Sending service communications — including account notifications, security alerts and policy updates — which are necessary for account operation and cannot be unsubscribed from while your account is active.
• Sending optional marketing communications (only where you have provided consent or where permitted under applicable law), including information about promotions, new features and sports events coverage such as PSL or ICC tournaments.
• Complying with applicable legal obligations, including regulatory reporting requirements under the operator's governing licence.
• Improving the platform through analytics, performance monitoring and user behaviour analysis conducted on aggregated or pseudonymised data.

07 Data Sharing

a1777 does not sell personal data to third parties. Personal data may be disclosed to the following categories of recipients only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: Third-party services engaged to validate identity documents and confirm age eligibility as part of the regulatory KYC process.
• Payment Processors: Entities involved in facilitating deposits and withdrawals. These processors operate under their own privacy policies and data-handling frameworks. a1777 shares only the transaction-specific data required to complete a payment instruction.
• Fraud Prevention & AML Services: Specialist third-party screening services used to detect financial crime, sanctioned individuals or other risk indicators. Data shared is limited to that required for screening purposes.
• Customer Support Infrastructure: Platform providers that support the delivery of Live Chat and Help Center functionality may process interaction data on a1777's behalf under applicable data processing agreements.
• Regulatory & Legal Authorities: Where required by law, court order or a regulatory authority with jurisdiction over the operator, personal data may be disclosed to competent authorities. a1777 will notify affected users where legally permissible to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets, personal data held by a1777 may transfer to the successor entity, subject to the same privacy protections described in this Policy.

08 International Transfers of Personal Data

a1777 operates internationally and may transfer personal data to countries outside your country of residence — including countries outside Pakistan — in connection with the operation of the Service, the use of cloud infrastructure and engagement with third-party service providers.

Where personal data is transferred internationally, a1777 takes steps to ensure that an appropriate level of data protection is in place, commensurate with the protections afforded under the laws of the operator's governing jurisdiction. This may include the use of contractual clauses, data processing agreements or other recognised transfer mechanisms.

Users in Pakistan should be aware that data protection law in Pakistan is evolving. The Personal Data Protection Bill (or any enacted successor legislation) may apply to cross-border transfers of Pakistani residents' personal data. a1777 monitors applicable developments and updates its practices accordingly.

09 Data Retention

a1777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data — retained for the duration of the account relationship plus a minimum post-closure retention period required for regulatory compliance.
• KYC and identity documents — retained for the period required by the operator's governing licence jurisdiction AML regulations, typically a minimum of five years from the date of the last transaction or account closure, whichever is later.
• Transaction records — retained for the legally required period applicable under the operator's licensing obligations, typically a minimum of five years.
• Support interaction records — retained for a period sufficient to resolve disputes and for internal audit purposes, typically two to three years from the date of the interaction.
• Marketing consent records — retained until consent is withdrawn, plus a reasonable period to evidence the withdrawal and any related suppression.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identified individual.

10 Your Rights

Subject to applicable law and the operator's governing jurisdiction data protection framework, you may hold the following rights in relation to your personal data held by a1777:

To exercise any of these rights, please submit a request through the Help Center or by contacting our support team via Live Chat. a1777 will respond to verifiable requests within a reasonable timeframe and in accordance with applicable law. Identity verification may be required before a request can be actioned to ensure the security of your account data.

11 Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit the a1777 platform. They are used to maintain session state, remember your preferences and collect anonymous usage analytics. Cookies do not contain your passwords or payment information.

11.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens and load balancing. These cannot be disabled without disrupting core platform functionality.
• Functional Cookies: Retain your preferences — such as display settings and session-length configurations — to improve your experience on subsequent visits.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform to support performance improvements and feature development.
• Responsible Gambling Cookies: Track session duration and activity thresholds to support the delivery of session-time reminders and responsible gambling prompts where configured.

11.3 Managing Cookies

Most browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality and user experience of the a1777 platform. For detailed guidance on cookie management, refer to your browser's help documentation. Note that strictly necessary cookies cannot be disabled via browser settings without impairing access to the Service.

12 Security Measures

a1777 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include, without limitation:

• TLS/SSL encryption for all data in transit between users and the platform.
• Encryption of sensitive stored data including identity documents and financial references.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Two-factor authentication (2FA) options available to users for account security.
• Regular security assessments and monitoring of the platform infrastructure.
• Incident response procedures for identifying, containing and notifying stakeholders of data security incidents.

While a1777 applies reasonable technical safeguards, no online system is completely immune from risk. You are responsible for maintaining the confidentiality of your account credentials. Notify the support team immediately if you believe your account has been accessed without your authorisation.

13 Minors

The a1777 Service is strictly intended for adults aged 18 or older — or the higher minimum age required by the operator's licence jurisdiction. a1777 does not knowingly collect personal data from individuals below the applicable minimum age.

If we become aware that personal data has been collected from a minor, we will promptly delete the relevant account and associated data. If you believe a minor has registered an account on the platform, please notify us immediately through the Help Center or via Live Chat.

14 Changes to This Policy

a1777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operator's regulatory environment. When material changes are made, we will update the "Last Reviewed" date at the top of this Policy and, where appropriate, notify registered users through the platform or by email.

Your continued use of the Service after the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. We recommend reviewing this Policy periodically to stay informed of how a1777 handles your personal data.

15 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by a1777, please contact our support team through the following channels:

• Live Chat: Available on the platform 24 hours a day, 7 days a week — the fastest route for urgent privacy queries.
• Help Center: Accessible via the Support section of the platform for structured query submission and tracking.
• Email: [email protected] (plain text — not a clickable link)

When submitting a data rights request, please include your registered account username or the email address associated with your account so that your identity can be verified before any action is taken on your request.