ar77 Privacy Policy

1 Introduction

ar77 (" the Platform", "we", "us", "our") operates the online casino and sports betting platform accessible at ar77.io. We are committed to protecting the personal information of all players, visitors, and users who interact with our platform, with particular regard for the privacy expectations of our Bangladeshi player community.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We encourage you to read this document carefully so that you understand our practices regarding your personal data and how we will treat it.

This policy applies to all personal data collected through the ar77 website, mobile interface, customer support channels, and any other digital touchpoint operated by ar77. It does not apply to third-party websites or services that may be linked from or integrated with our platform, each of which operates under its own privacy policy.

2 Data We Collect

ar77 collects only the personal data that is necessary to operate the platform safely, comply with applicable legal obligations, and provide a high-quality gaming experience. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the 21+ age requirement.
• Residential address including street, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postcode.
• Email address — used for account management, transactional notifications, and support communications.
• Mobile phone number — used for two-factor authentication and account security alerts.

2.2 Verification & KYC Data

• Copies of government-issued photographic identification (National Identity Card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or official government correspondence dated within the last three months).
• Proof of payment method ownership where required (e.g., screenshot of bKash or Nagad wallet showing your registered mobile number).
• Source-of-funds documentation where required under our anti-money laundering procedures.

2.3 Financial Data

• Transaction history including deposit amounts, withdrawal requests, and bonus redemptions denominated in BDT.
• Payment method identifiers such as mobile wallet numbers (bKash, Nagad, Rocket, Upay) and masked bank card details (last four digits, expiry date, and card type only — full card numbers are never stored).
• Bank account details where bank transfer is used as a withdrawal method.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from it.
• Device type, operating system, and browser information.
• Session duration, pages visited, games played, and wagering activity logs.
• Login timestamps and access logs.
• Clickstream data and on-platform navigation patterns.

2.5 Communications Data

• Records of all customer support interactions conducted via live chat or email, including the content of those communications.
• Feedback, survey responses, and complaints submitted through any ar77 communication channel.

3 How We Collect Your Data

ar77 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey.
• Automated technologies: Data collected automatically when you access the platform, including cookies, web beacons, server logs, and similar tracking technologies as described in Section 7 of this policy.
• Third-party sources: Data received from payment service providers (such as bKash, Nagad, and Rocket) to confirm transaction status; identity verification service providers used to assist with KYC processes; and fraud detection and anti-money laundering screening services.
• Publicly available sources: In limited circumstances, ar77 may supplement your data with information obtained from publicly available directories or databases for the purposes of identity verification or fraud prevention.

4 How We Use Your Data

ar77 uses the personal data it collects for the following specific purposes:

ar77 does not use your personal data for any purpose not listed above without first notifying you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

ar77 processes your personal data on one or more of the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil the contract between you and ar77, including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, age verification requirements, and financial reporting regulations.
• Legitimate interests: Processing carried out in pursuit of ar77's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, such as the sending of promotional communications. You may withdraw consent at any time by contacting our support team or adjusting your account notification preferences.

6 Data Sharing & Disclosure

ar77 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be shared in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking partners — solely to process your financial transactions.
• KYC and identity verification providers: Third-party services engaged to assist with the verification of your identity and age, operating under strict contractual data processing obligations.
• Game software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other platform partners — limited technical data necessary to deliver their games on our platform.
• Fraud prevention and AML screening services: Third-party tools used to detect and prevent money laundering, account fraud, and bonus abuse.
• Legal and regulatory authorities: Where ar77 is required by law, court order, or regulatory instruction to disclose personal data to a competent authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ar77's assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer in advance.

7 Cookies & Tracking Technologies

ar77 uses cookies and similar technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and maintain the security of your session. The following types of cookies may be active when you use the ar77 platform:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language, game settings, and responsible gaming tool configurations so that you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised or aggregated data about how players navigate the platform, which games are most popular, and where technical errors occur. This data is used solely to improve ar77's services.
• Security cookies: Support fraud detection, detect unusual login activity, and help protect your account from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the ar77 platform. ar77 does not use cookies to serve third-party advertising or to track your activity on websites outside of ar77.io.

8 Data Retention

ar77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction.
• KYC documentation: Retained for the duration of your account and for five years after account closure.
• Customer support communications: Retained for three years from the date of the communication, unless the communication relates to an ongoing dispute, in which case it is retained until that dispute is fully resolved.
• Technical and usage logs: Retained for twelve months on a rolling basis, after which they are deleted or anonymised.

When personal data is no longer required for its stated purpose and there is no legal obligation to retain it, ar77 will securely delete or anonymise that data in a manner that prevents recovery.

9 Data Security

ar77 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ar77 servers.
• Encrypted storage for all sensitive personal and financial data at rest.
• No storage of full payment card numbers — only masked card details (last four digits, card type, and expiry date) are retained.
• Access controls: Personal data is accessible only to ar77 staff who have a legitimate business need to access it, under strict role-based permission controls.
• Two-factor authentication (2FA) available to all players and mandatory for all ar77 staff systems handling personal data.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures in place to detect, assess, and respond to personal data breaches within the timeframes required by applicable law.

10 Your Data Rights

ar77 respects your rights over your personal data. Subject to applicable law, you hold the following rights with respect to the personal data ar77 holds about you:

• Right of access: You may request a copy of the personal data ar77 holds about you at any time.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to erasure: You may request that ar77 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to ar77's legal retention obligations.
• Right to restriction: You may request that ar77 restrict the processing of your personal data in certain circumstances, such as while a dispute is pending.
• Right to data portability: You may request that ar77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data on the basis of legitimate interests at any time. You may also withdraw consent where processing is consent-based.

To exercise any of these rights, please contact ar77's Data Protection team via email at [email protected] (plain text — not a clickable link). ar77 will respond to all valid data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days with prior notice to you.

11 Children's Privacy

If ar77 discovers or is notified that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered an account on ar77, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

12 Third-Party Services

The ar77 platform integrates with third-party game providers, payment processors, and support tools to deliver its services. These third parties operate their own independent privacy policies and data processing practices. ar77 is not responsible for the privacy practices of any third-party service, and the inclusion of a third-party integration on our platform does not constitute an endorsement of that third party's privacy practices.

ar77 conducts due diligence on all third-party data processors before engaging their services and requires, by contract, that they implement appropriate security and confidentiality measures consistent with the standards described in this Privacy Policy. A current list of active third-party data processors is available on request from our support team.

13 Changes to This Privacy Policy

ar77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The most current version of this policy will always be available at ar77.io/privacy-policy, and the "Last Updated" date at the top of this page will be revised accordingly.

Where a change to this Privacy Policy is material — meaning it significantly affects how we process your personal data or the rights available to you — ar77 will notify you by email to your registered address at least fourteen (14) days before the change takes effect. Your continued use of the ar77 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ar77 holds about you, please contact us through the following channel:

ar77 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to your privacy enquiry, you retain the right to escalate your concern to a competent supervisory authority in your jurisdiction.