brt877 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") is published by brt877 ("brt877", "we", "us", "the Company"), the operator of the online gaming and sports betting platform accessible at brt877.net and all associated sub-domains, mobile interfaces, and related digital properties (collectively, "the Platform").

This Policy applies to all personal data collected from or about you in connection with your use of the brt877 Platform, including data collected during account registration, identity verification, payment processing, customer support interactions, and general browsing of the brt877 website.

By accessing the brt877 Platform or completing the brt877 Login process, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, you should discontinue use of the Platform immediately. This Policy should be read alongside the brt877 Terms and Conditions and Responsible Gaming Policy.

For the purposes of applicable data protection law, the data controller responsible for your personal data is brt877, the licensed operator of the brt877.net gaming platform. As data controller, brt877 determines the purposes and means by which your personal data is processed.

brt877 is licensed and regulated under an international gaming licence. Our compliance obligations under that licence include data protection requirements covering the collection, processing, storage, and deletion of player personal data. These obligations inform and underpin the practices described in this Policy.

All queries relating to data protection and privacy, including data subject access requests, correction requests, deletion requests, and complaints, should be directed to the brt877 data protection contact at: [email protected]

brt877 collects personal data across several categories, depending on your interaction with the Platform. The following table sets out the categories of data collected and their source:

brt877 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, except where a responsible gaming self-assessment tool is voluntarily completed by the player, in which case any disclosed information is treated with enhanced protection.

brt877 processes your personal data only where a lawful basis exists to do so. The following lawful bases apply across the different processing activities conducted by brt877:

• Performance of a contract: Processing necessary to create and maintain your brt877 account, process deposits and withdrawals in PKR, settle bets, and deliver the gaming services you have requested.
• Legal obligation: Processing necessary to comply with anti-money laundering (AML) obligations, age and identity verification requirements, tax reporting obligations, and regulatory reporting to the licencing authority.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and internal analytics to improve the brt877 user experience for Pakistani players — where those interests are not overridden by your rights.
• Consent: Processing for direct marketing communications (promotional emails and SMS messages) where you have given explicit opt-in consent. You may withdraw this consent at any time via your account settings.

brt877 uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining, and administering your brt877 Login account, including updating account details and managing brt877 Login credentials.
• Identity and age verification: Verifying that you are at least 21 years of age and that the identity information you have provided is accurate, using your CNIC or passport documentation.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard. Reconciling your account balance and maintaining accurate financial records.
• Sports betting and casino services: Settling bets, recording gaming session outcomes, managing bonus and promotional credits, and maintaining your betting and game history on the brt877 Platform.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, multi-accounting, collusion, money laundering, and other forms of platform abuse.
• Regulatory compliance: Meeting AML reporting obligations, responding to lawful requests from regulatory and law enforcement authorities, and maintaining records required under our gaming licence.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions to ensure consistency of service.
• Responsible gaming: Monitoring account activity for indicators of problem gambling behaviour and providing or enforcing deposit limits, cooling-off periods, and self-exclusion as appropriate.
• Marketing (with consent only): Sending promotional offers, PSL betting specials, bonus notifications, and platform update communications to players who have opted in to receive such messages.
• Platform improvement: Using aggregated, anonymised usage data to improve the brt877 Platform experience, identify technical issues, and develop new features relevant to Pakistani players.

brt877 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Your data may be shared only in the following limited and lawful circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your PKR transactions securely.
• Identity verification providers: Licensed Know Your Customer (KYC) service providers used by brt877 to verify CNIC documentation and cross-check identity data against relevant databases.
• Fraud prevention services: Specialist third-party providers engaged to detect and prevent money laundering, fraudulent transactions, and platform abuse. Data shared is limited to that required for this specific purpose.
• Regulatory and legal authorities: brt877 will disclose personal data to governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure where we are legally permitted to do so.
• Technology and hosting providers: Cloud infrastructure and software-as-a-service providers who host or process data on behalf of brt877 under binding data processing agreements that restrict their use of your data.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of brt877's business, player data may be transferred to the acquiring entity, which will be required to honour this Privacy Policy.

All third parties with whom brt877 shares personal data are required to process that data only for the specified purpose and in accordance with brt877's instructions, applicable law, and appropriate data security standards.

brt877 uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, improve user experience, and support analytics and fraud prevention activities. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly, including session management, brt877 Login authentication, and anti-fraud checks. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred game categories, and remembered login details to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how players use the brt877 Platform — which pages are visited most, session duration, and navigation paths. This data is used solely to improve the Platform.
• Marketing and retargeting cookies: Used only with your consent to deliver relevant promotional content relating to brt877 services. These are not used to share data with third-party advertisers.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the brt877 Login portal and other core Platform functions. Disabling analytics or marketing cookies will not affect your ability to place bets or access your account.

brt877 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active brt877 account and for a minimum of 5 years following account closure, as required under anti-money laundering regulations.
• Financial transaction data: PKR transaction records, deposit and withdrawal histories are retained for a minimum of 7 years for regulatory and audit purposes.
• Betting and game history: Retained for a minimum of 12 months to support dispute resolution, and archived for up to 5 years for regulatory reporting.
• Customer support records: Retained for 3 years following the closure of the relevant support interaction.
• Marketing consent records: Consent records are retained for the duration of your account and for 2 years following account closure or withdrawal of consent.
• Technical and server log data: IP address logs and session data are retained for 12 months for security and fraud investigation purposes.

Where personal data is no longer required for any lawful purpose, brt877 will securely delete or anonymise that data in accordance with industry-standard data destruction practices.

brt877 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all pages of the brt877 Platform, including the brt877 Login portal, ensuring that all data transmitted between your device and our servers is encrypted in transit.
• Encryption at rest for all sensitive personal data stored in brt877 databases, including CNIC numbers, payment method details, and authentication credentials.
• Two-factor authentication (2FA) via SMS on new device logins through the brt877 Login portal, providing an additional layer of protection against unauthorised account access.
• Segregated data storage — financial data, identity data, and betting data are stored in logically separate systems with access controlled on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by qualified third-party security professionals to identify and remediate vulnerabilities.
• Staff training — all brt877 employees who handle personal data receive regular data protection and information security training.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, brt877 will notify you and relevant authorities in accordance with applicable legal requirements and without undue delay.

As a data subject whose personal data is processed by brt877, you hold the following rights under applicable data protection law. brt877 is committed to facilitating the exercise of these rights in a timely and transparent manner.

To exercise any of these rights, please contact brt877 at [email protected] with a clear description of your request and your registered mobile number for identification purposes. brt877 will not discriminate against you for exercising your data protection rights.

The brt877 Platform is strictly for individuals who are at least 21 years of age. brt877 does not knowingly collect personal data from any individual under the age of 21. The mandatory age and identity verification process, which requires submission of a valid Pakistani CNIC or passport, is the primary mechanism by which brt877 enforces this requirement.

If brt877 becomes aware, at any time, that a player's account is being operated by or on behalf of an individual under the age of 21, the following actions will be taken immediately:

• The account will be suspended and access to the brt877 Platform will be blocked.
• Any personal data collected from the under-age individual will be securely deleted, except where retention is required by law.
• Deposits associated with the account will be returned less any administration costs. Any winnings generated will be forfeited.
• The incident will be reported to relevant regulatory authorities where required to do so by our licensing obligations.

If you are a parent or guardian and have reason to believe that an individual under the age of 21 has accessed the brt877 Platform using your details or otherwise, please contact brt877 immediately at [email protected].

brt877's primary operations and data processing activities are conducted within the jurisdiction of our gaming licence. However, certain service providers — including cloud infrastructure vendors and KYC service providers — may process data in other jurisdictions.

Where personal data is transferred outside the jurisdiction of our primary operations, brt877 ensures that appropriate safeguards are in place, which may include:

• Binding contractual clauses that require recipient parties to process data to the same standard required under our licensing obligations.
• Selection of service providers located in jurisdictions recognised as providing an adequate level of data protection.
• Technical measures including data minimisation and pseudonymisation prior to transfer wherever operationally feasible.

No transfer of Pakistani player personal data is made to any jurisdiction without first ensuring that the receiving party is contractually bound to uphold data protection standards consistent with this Policy.

brt877 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform operations. Where material changes are made to this Policy, brt877 will provide notice via the Platform interface or by sending a notification to your registered mobile number or email address.

The most current version of this Policy will always be accessible at brt877.net/privacy-policy and will be identified by the effective date displayed at the top of the document. Your continued use of the brt877 Platform following the posting of an updated Privacy Policy constitutes your acceptance of those changes.

If you do not agree with any changes to this Policy, you should discontinue your use of the brt877 Platform and may request account closure by contacting the support team.

For any questions, concerns, or requests relating to your personal data and brt877's privacy practices, please contact the brt877 data protection team using the details below. brt877 will acknowledge all data-related enquiries within 48 hours and provide a substantive response within 30 calendar days.

If you are not satisfied with brt877's response to your data protection concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in the jurisdiction applicable to your situation. brt877 will cooperate fully with any regulatory investigation arising from a player data complaint.

For responsible gaming-related concerns — including requests to self-exclude, set deposit limits, or access your betting history for personal review — please visit the brt877 Responsible Gaming page or contact the support team directly.