ATT77 Privacy Policy – How We Handle Your Data in Pakistan

1 Who We Are

ATT77 ("we", "us", "the platform") operates the att77 website and mobile applications as an online entertainment platform offering sports betting, casino games, slots, and related services to players in Pakistan. For the purposes of data handling, ATT77 is the data controller responsible for personal information collected through the platform.

This Privacy Policy applies to all users of the att77 platform — including visitors who have not registered and registered players with active accounts. By using the platform in any capacity, you acknowledge that your information will be handled as described in this policy.

This policy should be read alongside the att77 Terms and Conditions and Responsible Gaming page, both of which contain additional information relevant to your account and data.

2 Personal Data We Collect

The specific data we collect depends on how you interact with the att77 platform. Below is an overview of the main categories of information we gather and the context in which each is collected.

3 Why We Collect and Use Your Data

ATT77 collects personal data only for specific, legitimate purposes. We do not collect information simply because we can — every data point we hold has a defined reason for being there. The main purposes are as follows.

• Account management: Your name, contact details, and login credentials are required to create and maintain your att77 account, authenticate your identity at login, and send you essential account communications such as deposit confirmations and security alerts.
• Processing PKR transactions: Financial data is required to process deposits via JazzCash, Easypaisa, Raast, bank cards, and bank transfer, and to handle withdrawals back to your verified payment method. Transaction records are retained for audit and compliance purposes.
• Identity verification (KYC): Before processing withdrawals, att77 may require identity documents to verify that the account belongs to the person requesting the payout and that the account holder meets the 18+ age requirement.
• Responsible gaming: Gaming activity data — including session frequency, stake levels, and deposit patterns — is used to operate responsible gaming tools such as deposit limits and to identify patterns that may indicate a player needs support.
• Fraud prevention and security: Technical data including IP addresses and device identifiers is used to detect suspicious login activity, prevent multi-account creation, identify bonus abuse, and protect the platform against fraudulent transactions.
• Customer support: Communication data is retained so that support agents have the context needed to handle your queries accurately and consistently across interactions.
• Marketing communications: If you have opted in, contact details are used to send promotional offers, bonus notifications, and platform updates. You can opt out of marketing communications at any time through your account settings.
• Platform improvement: Aggregated and anonymised usage data helps the att77 team identify performance issues, improve the user experience, and make informed decisions about new features.

4 Payment Data and PKR Transactions

All financial transactions on att77 are denominated in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal, certain payment details are processed and retained in connection with that transaction. This section explains how payment data is specifically handled.

ATT77 does not store full card numbers, CVV codes, or complete mobile wallet PINs. Payment processing for JazzCash, Easypaisa, Raast, and card transactions is handled through secure third-party payment processors. ATT77 receives confirmation of transaction status and a reference identifier — not the underlying sensitive payment credentials.

• PKR transaction amounts, dates, and reference numbers are stored in your att77 account transaction history
• Withdrawal requests are matched against verified payment methods previously used to deposit — this is a fraud prevention measure, not a data collection exercise
• Payment data is retained for the minimum period required to satisfy audit, dispute resolution, and compliance obligations
• ATT77 does not share full payment details with marketing partners or unrelated third parties

5 Cookies and Tracking Technologies

The att77 website and app use cookies and similar tracking technologies to deliver a functional, personalised experience and to understand how the platform is being used. Here is a plain-language breakdown of how this works.

• Essential cookies: Required for the platform to function. These handle session management, login state, and security checks. Disabling them means the platform will not work correctly.
• Functional cookies: Remember your preferences — such as your chosen odds format, language settings, and whether you have dismissed certain platform notifications.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where players spend time, and where they encounter friction. This data helps the att77 team improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent access attempts, multi-account creation, and bot activity on the platform.

Most modern browsers allow you to control cookie settings. You can typically set your browser to reject non-essential cookies, though doing so may affect the functionality of some platform features. The att77 app manages cookie-equivalent local storage within the app itself — these cannot be controlled through browser settings but do not persist after the app is uninstalled.

6 Sharing Your Personal Data

ATT77 does not sell personal data to third parties. We do not share your information with advertisers, data brokers, or unrelated businesses. The circumstances in which your data may be shared are limited and specific.

• Payment processors: Transaction details are shared with the payment gateways that handle JazzCash, Easypaisa, Raast, card, and bank transfer processing. These processors are contractually required to handle data securely and only for the purpose of completing your transaction.
• Game providers: When you play a slot or live casino game, certain session data — including stake and game result — is shared with the relevant game provider (e.g., Pragmatic Play, NetEnt, Habanero) to facilitate game operation and dispute resolution.
• Identity verification partners: If att77 uses a third-party KYC service to assist with document verification, your identity documents are shared with that service for the sole purpose of verification. Results are returned to att77 and the documents are not retained by the verification service beyond the required processing period.
• Fraud prevention systems: Certain technical identifiers may be checked against fraud prevention databases to detect suspicious activity, multi-accounting, or financial crime patterns.
• Legal obligations: ATT77 may be required to disclose personal data in response to a valid legal request, court order, or regulatory inquiry. We will only disclose what is specifically required and will inform the affected player where legally permissible to do so.

7 How Long We Keep Your Data

ATT77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any legal or operational minimum retention periods. The following general guidelines apply.

• Active account data is retained for the lifetime of the account
• Transaction records and gaming history are retained for a minimum of five years from the date of the transaction to satisfy audit and dispute resolution requirements
• Identity verification documents are retained for the minimum period required following account closure
• Marketing opt-in consent records are retained until the player withdraws consent plus a short compliance period
• Support communication logs are retained for up to two years after the last interaction
• Technical and security logs are retained for a shorter rolling period, typically six to twelve months

When data is no longer required, it is deleted from att77 systems or anonymised so that it can no longer be associated with any individual player. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.

8 Your Rights Over Your Personal Data

As an att77 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below along with how to exercise each one.

• Right of access: You can request a copy of the personal data att77 holds about you. Submit your request via live chat or email to the support team with your account username. Standard requests are fulfilled within thirty days.
• Right to correct inaccurate data: If any personal information held on your att77 account is incorrect — for example, a misspelled name or outdated contact number — you can request a correction through account settings or by contacting support.
• Right to erasure: You can request deletion of your personal data. Where deletion is legally permissible and the data is not required for ongoing compliance obligations (such as transaction record retention), att77 will action the request. Where data must be retained by law, this will be explained to you.
• Right to withdraw marketing consent: If you have opted in to receive promotional emails or notifications from att77, you can withdraw that consent at any time through your account notification settings or by contacting support. Withdrawal does not affect essential account communications.
• Right to data portability: You may request your personal data in a structured, machine-readable format where technically feasible. This typically applies to data you have actively provided, such as account registration details and transaction history.

9 How ATT77 Protects Your Data

Data security is taken seriously at att77. The platform uses a layered approach to protecting the personal information and financial data of Pakistani players. Key security measures include the following.

• All data transmitted between your device and the att77 platform is encrypted using TLS (Transport Layer Security)
• Passwords are stored using industry-standard hashing — att77 staff cannot view your actual password
• Payment data is handled through PCI-DSS compliant payment processors — full card details are never stored on att77 servers
• Access to personal data within the att77 organisation is restricted on a need-to-know basis — only team members who require access to fulfil their role can view account-level data
• Login sessions have automatic timeout controls and suspicious login attempts trigger security notifications
• Regular security reviews and penetration testing are carried out to identify and address vulnerabilities

While att77 applies robust technical and organisational security measures, no online platform can guarantee absolute security. Players are also responsible for keeping their own login credentials secure — do not share your password with anyone and enable two-factor authentication if available on your account.

10 Children's Privacy

ATT77 is strictly an adult platform. The service is not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from minors. If we become aware that an account has been registered by or on behalf of someone under 18, that account will be closed immediately, all funds will be returned to the verified payment source where possible, and any personal data collected will be deleted promptly.

If you believe that a minor has registered on att77 using your payment details or with your contact information, please contact the support team immediately so the account can be investigated and closed without delay.

11 Changes to This Privacy Policy

ATT77 may update this Privacy Policy from time to time to reflect changes to the platform, the payment methods we support, data handling practices, or applicable requirements. The date of the most recent update is shown at the top of this page.

When material changes are made — changes that significantly affect how your personal data is used or what rights you have — we will provide notice via your registered account before the new policy takes effect. Continuing to use the att77 platform after the effective date of an updated policy constitutes acceptance of the revised terms.

We recommend reviewing this page periodically, particularly if you have concerns about how your data is handled or if you have recently updated your payment methods or account details.

12 How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal information has been handled on att77, please get in touch through the following channel.