ap777 Privacy Policy —
How We Protect Your Data in Pakistan

1. Introduction

ap777 ("we", "us", "our") operates Pakistan's trusted online gaming platform at ap777.lol, offering Rummy, T20 Cricket betting, live casino, cockfighting, jackpot slots, and related services — all in Pakistani Rupees (PKR). In the course of providing these services to Members across Pakistan, ap777 collects and processes certain categories of personal information.

This Privacy Policy explains our approach to data handling in clear, straightforward English. It applies to all personal data collected through: the ap777 website and any mobile version thereof; the ap777 account registration and login process; PKR deposits and withdrawals via Easypaisa, JazzCash, Raast, HBL, UBL, and other payment channels; game play and betting activity on the ap777 platform; interactions with ap777 customer support; and participation in ap777 promotions and marketing communications.

References to "ap777", "the Platform", "we", "us", or "our" mean the operator of ap777.lol. References to "you", "your", or "Member" mean any individual who registers an ap777 account or accesses the platform.

2. Personal Data We Collect

2.1 Registration Data

When you create your ap777 account, we collect: your full legal name; your Pakistani mobile number (used for OTP verification and account communications); your date of birth (to verify that you are 18 or older); your chosen username; and, optionally, your email address.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and to protect the integrity of the ap777 platform, we may collect: a copy of your Computerised National Identity Card (CNIC); proof of address (such as a utility bill or bank statement); a selfie or photograph for face-matching purposes; and documentation evidencing the source of funds deposited into your ap777 PKR wallet. KYC data is handled with particular care and accessed only by authorised compliance personnel.

2.3 Financial Transaction Data

When you make PKR deposits or withdrawal requests, we collect records of: the transaction amount in PKR; the payment method used (e.g., Easypaisa wallet identifier, JazzCash number, bank account reference, or USDT TRC20 wallet address); the date, time, and status of each transaction; and any reference numbers associated with the payment.

2.4 Gaming Activity Data

We maintain records of your activity on the ap777 platform, including: games played and game types (Rummy, T20 Cricket betting, live casino, cockfighting, jackpot slots); bet amounts, game results, and PKR winnings or losses; bonus claims and wagering progress; session start and end times; and responsible gaming tool usage (e.g., deposit limits set, self-exclusion periods).

2.5 Technical and Device Data

When you access ap777, we automatically collect certain technical information: your IP address; device type, operating system, and browser type; unique device identifiers; pages visited within the ap777 platform and time spent on each; referring URL (the page you visited before arriving at ap777); and crash reports and error logs where applicable.

2.6 Customer Support Communications

If you contact ap777 via Live Chat, WhatsApp, or email at [email protected], we retain records of those communications — including the content of messages, the date and time of contact, and the resolution of any issue raised. These records help us deliver consistent support and identify recurring platform issues.

3. How We Collect Your Data

ap777 collects personal data through the following channels:

• Directly from you: when you register an ap777 account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically: through cookies, pixels, and similar tracking technologies when you access the ap777 platform (see Section 9 for our Cookies Policy).
• From payment providers: Easypaisa, JazzCash, Raast, and other payment partners share transaction confirmation data with ap777 to verify and process your PKR deposits and withdrawals.
• From identity verification partners: where third-party KYC service providers are used to assist with document verification, they share verification outcomes with ap777.
• From fraud prevention services: ap777 may receive risk signals from fraud detection partners to protect Members from unauthorised account access.

4. How We Use Your Personal Data

ap777 uses the personal data we collect for the following purposes:

• Account management: creating and maintaining your ap777 account, verifying your identity, and managing your PKR wallet.
• Game and service delivery: providing you access to ap777 games, processing bets and paying out winnings, and delivering the full range of ap777 platform services.
• Payment processing: executing PKR deposits and withdrawals through Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, SadaPay, and USDT TRC20.
• Legal compliance: fulfilling our Know Your Customer (KYC) and anti-money laundering obligations, responding to requests from regulatory authorities, and maintaining required transaction records.
• Fraud prevention and platform security: detecting and preventing unauthorised account access, bonus abuse, money laundering, and other prohibited conduct as defined in the ap777 Terms & Conditions.
• Responsible gaming: monitoring gaming patterns that may indicate problem gambling, administering deposit limits and self-exclusion tools, and fulfilling our duty of care to Members across Pakistan.
• Customer support: responding to your queries, resolving complaints, and improving the quality of ap777's support services.
• Platform improvement: analysing aggregated, anonymised usage data to improve the ap777 platform, game catalogue, and user experience for Pakistani players.
• Marketing (with consent): sending you information about ap777 promotions, Eid celebration bonuses, PSL season offers, and other relevant marketing communications, where you have opted in to receive them.

5. Legal Bases for Processing

ap777 processes your personal data on the following legal bases:

• Contract performance: processing that is necessary to provide the ap777 gaming services you have signed up for, including account management, game delivery, and payment processing.
• Legal obligation: processing required by applicable law, including KYC verification, anti-money laundering record-keeping, and regulatory reporting.
• Legitimate interests: processing that is necessary for ap777's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: where processing is based on your consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Personal Data

ap777 does not sell your personal data to third parties. We may share your personal information with the following categories of recipient, strictly for the purposes set out in this Privacy Policy:

• Payment providers: Easypaisa, JazzCash, Raast, HBL, UBL, MCB Bank, SadaPay, and our cryptocurrency processing partner for USDT TRC20 transactions — for the purpose of processing your PKR deposits and withdrawals.
• KYC and identity verification providers: third-party services that assist ap777 in verifying the identity and age of Members in compliance with our legal obligations.
• Fraud and security service providers: companies that help ap777 detect, investigate, and prevent fraudulent activity and unauthorised access to Member accounts.
• Game software providers: where ap777 partners with third-party game studios for live casino or other game content, your gaming session data may be processed by those studios to operate the game. Such providers are contractually bound to use your data only for game delivery purposes.
• Regulatory and law enforcement authorities: where required to do so by applicable law, court order, or lawful government request, ap777 may disclose Member data to regulatory bodies or law enforcement agencies.
• Professional advisers: lawyers, auditors, and accountants who provide ap777 with professional services, subject to binding confidentiality obligations.

7. Data Security

ap777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the ap777 platform
• Encryption of sensitive data at rest, including CNIC documents and financial transaction records
• Role-based access controls ensuring that ap777 personnel can only access the data necessary for their specific job function
• Regular security testing, including penetration testing and vulnerability scanning of the ap777 platform
• Multi-factor authentication for ap777 internal systems that hold Member data
• Incident response procedures for identifying, containing, and notifying affected Members of any data security breach

While ap777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also have a role to play: please keep your ap777 login credentials confidential, use a strong and unique password, and contact ap777 support immediately if you suspect that your account has been accessed without your authorisation.

8. Data Retention Periods

ap777 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law:

• Active account data: retained for the duration of your ap777 membership and for a period of 5 years following account closure, to meet regulatory record-keeping requirements.
• KYC documents: retained for a minimum of 5 years from the date of collection or the date of account closure, whichever is later, in line with anti-money laundering regulations.
• Financial transaction records: retained for 5 years from the date of each transaction.
• Customer support records: retained for 3 years from the date of the most recent interaction.
• Marketing consent records: retained for as long as you remain opted in, plus 1 year following any opt-out, to evidence your consent history.
• Technical logs: typically retained for 90 days, unless specific logs are required for ongoing security investigations.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual Member.

9. Cookies & Tracking Technologies

ap777 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit ap777.lol. ap777 uses the following categories of cookies:

• Strictly necessary cookies: required for the platform to function. These include session cookies that keep you logged in to your ap777 account during a visit. These cookies cannot be disabled.
• Analytics cookies: help ap777 understand how Members use the platform — which games are most popular, which pages are visited most frequently, and where technical issues occur. This data is analysed in aggregate and anonymised form.
• Functional cookies: remember your preferences, such as your preferred language or the last game category you visited, to improve your ap777 experience.
• Marketing cookies: used where you have consented to receive ap777 marketing communications. These help ap777 understand which promotions are relevant to you.

You can control cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing your ap777 account or using core platform features. Your continued use of ap777 after being presented with cookie information constitutes your acceptance of analytical and functional cookies.

10. Your Data Rights

As an ap777 Member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ap777 support at [email protected] with the subject line "Data Rights Request". ap777 will respond within 30 days of receiving your verified request.

• Right of Access: You may request a copy of the personal data ap777 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data ap777 holds about you is inaccurate or incomplete, you may request that it be corrected. You can update most account details directly in your ap777 account settings.
• Right to Erasure: In certain circumstances, you may request that ap777 delete your personal data. This right is subject to limitations where ap777 has ongoing legal obligations to retain data (e.g., KYC records).
• Right to Restriction: You may request that ap777 restrict the processing of your personal data in certain circumstances, for example while a dispute about data accuracy is being resolved.
• Right to Object: Where ap777 processes your personal data on the basis of legitimate interests, you may object to that processing. ap777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that ap777 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

11. Children's Privacy

ap777 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will immediately close the associated account, delete the data, and forfeit any associated funds in line with our Terms & Conditions.

12. Marketing Communications

ap777 may send you marketing communications about promotions, Eid celebration bonuses, HBL PSL season offers, new game launches, and other ap777 news. We will only send you marketing messages where you have actively opted in to receive them at the time of registration or at a later stage through your account settings.

You can opt out of ap777 marketing communications at any time by: updating your communication preferences in your ap777 account dashboard; or by emailing [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing does not affect transactional communications such as account verification messages, deposit confirmations, withdrawal notifications, security alerts, or updates to this Privacy Policy — these are operational messages that ap777 sends regardless of your marketing preference.

13. Changes to This Privacy Policy

ap777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the scope of ap777's services. When material changes are made, ap777 will notify Members via SMS to their registered Pakistani mobile number and/or via a prominent notice on the ap777 website, at least 7 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of ap777 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how ap777 handles your personal information, please contact ap777 through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing to our data team
• Live Chat: available 24/7 inside your ap777 account dashboard — ask to speak with a data privacy representative
• WhatsApp Support: available 24/7 — details provided after ap777 login

ap777 is committed to resolving all privacy-related queries and complaints promptly and fairly. We aim to respond to all data-related contacts within 5 business days and to complete any data rights requests within 30 days of receiving a verified request from the relevant Member.