Privacy Policy for 77p7

1 Overview

This Privacy Policy applies to all personal data processed by 77p7 in connection with the operation of the 77p7 Platform at 77p7.io (the "Platform"). It covers data collected when you visit the Platform as a guest, register an account, make deposits or withdrawals, interact with our customer support team, participate in promotions, or otherwise engage with any 77p7 service.

By using the 77p7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the Platform immediately.

This Privacy Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are published on the Platform and incorporated into the overall agreement between you and 77p7.

2 Data Controller

For the purposes of this Privacy Policy, 77p7 acts as the data controller responsible for your personal information. As data controller, 77p7 determines the purposes and means by which your personal data is processed in connection with the Platform and its associated services.

All enquiries relating to this Privacy Policy, requests to exercise your data rights, or concerns about the way your personal data is handled should be directed to our support team. Contact details are provided in Section 14 of this document.

3 Data We Collect

77p7 collects personal data through several channels during the normal operation of the Platform. The categories of personal data we collect include the following:

Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including district, city, and postal code (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• Email address and mobile phone number used for account registration and communications
• Copies of identity documents submitted during KYC verification (National Identity Card, passport)

Financial & Transaction Data

• Payment method identifiers, including bKash, Nagad, Rocket, or Upay mobile wallet numbers
• Visa and Mastercard details (card number truncated; full card numbers are never stored by 77p7)
• Transaction records including deposit amounts, withdrawal requests, bonus credits, and betting history
• Account balance history and net gaming activity expressed in Bangladesh Taka (BDT)

Technical & Usage Data

• IP address, device type, operating system, and browser version
• Session data including login timestamps, session duration, and pages visited
• Geolocation data derived from your IP address (country and city level only)
• Game play data including games accessed, bet amounts, outcomes, and RTP statistics
• Cookies and similar tracking technologies (see Section 8)

Communications Data

• Records of live chat conversations, support emails, and any other correspondence with the 77p7 support team
• Preferences and feedback submitted through surveys or promotional opt-in forms

4 How We Use Your Data

77p7 uses the personal data it collects only for legitimate, specified purposes. The table below sets out the primary purposes for which we process your personal data and the corresponding legal basis for each purpose.

77p7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a clear legal basis for doing so.

5 Legal Basis for Processing

77p7 processes your personal data on the following legal grounds depending on the nature of the processing activity:

• Contract performance: Processing is necessary to fulfil the contractual relationship between you and 77p7, including operating your account, processing bets, and paying out winnings.
• Legal obligation: Processing is required by applicable law, including anti-money laundering regulations, age verification obligations, and responsible gaming requirements.
• Legitimate interest: Processing serves a legitimate business interest of 77p7, such as fraud prevention, network security, and improving the Platform experience, provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (for example, to send you marketing communications or personalised promotional offers), you may withdraw that consent at any time by contacting our support team or updating your account preferences.

6 Sharing Your Data

77p7 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients solely to the extent necessary to operate the Platform and comply with our legal obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal transactions securely.
• Identity verification providers: Third-party KYC service providers engaged to verify the authenticity of identity documents submitted during the verification process.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session data necessary to deliver game content and calculate outcomes.
• Technology service providers: Cloud hosting, data storage, cybersecurity, and analytics vendors engaged by 77p7 under strict data processing agreements that prohibit any independent use of your data.
• Regulatory and law enforcement authorities: Where required by applicable law or in response to a lawful request from a competent authority, 77p7 may disclose personal data to regulatory bodies or law enforcement agencies.

Any third party to whom 77p7 discloses personal data is required to maintain appropriate security standards and to use the data only for the specific purpose for which it was shared. 77p7 does not authorise any third-party recipient to use your personal data for their own independent purposes.

7 Payment Data

77p7 takes the security of your financial information with the utmost seriousness. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Visa/Mastercard payment card, the transaction is processed through a secure, encrypted payment gateway.

Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and used solely for the purpose of processing deposits and withdrawals to and from your registered 77p7 account. Wallet numbers may not be changed to a different individual's account, in line with our anti-money laundering policy.

8 Cookies & Tracking Technologies

77p7 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and analyse how the Platform is used. Cookies are small text files placed on your device when you visit the Platform.

Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings, display options, and recently viewed game categories.
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform, which pages are most visited, and how long sessions last. This data is used solely to improve the Platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and account takeover attempts.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to stay logged in or access personalised features.

9 Data Retention

77p7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account and for a period of 5 years following account closure, in line with standard financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 2 years from the date of the last interaction, or longer if the communication relates to a dispute or investigation that remains unresolved.
• Anonymised analytics data: May be retained indefinitely as it cannot be used to identify any individual.

When personal data is no longer required and its retention period has expired, 77p7 will securely delete or irreversibly anonymise it in accordance with industry best practices.

10 Security Measures

77p7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 77p7 Platform
• Encrypted storage of sensitive data fields including passwords, payment method identifiers, and identity document copies
• Strict access controls ensuring that only authorised 77p7 personnel with a legitimate need may access personal data
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists
• Multi-factor authentication options for account access to protect against unauthorised login attempts
• Continuous monitoring for suspicious activity, including anomalous login patterns and unusual transaction behaviour

11 Your Data Rights

As a data subject, you hold the following rights in relation to the personal data 77p7 holds about you. To exercise any of these rights, please contact our support team using the details in Section 14.

• Right of access: You have the right to request a copy of the personal data 77p7 holds about you, along with information about how and why it is being processed.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update certain details (such as your email address or contact number) directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligations that require its retention.
• Right to restrict processing: You have the right to request that 77p7 limits the way in which your personal data is processed in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: You have the right to receive certain personal data you have provided to 77p7 in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where 77p7 processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing of your personal data where 77p7 relies on legitimate interest as the legal basis, subject to 77p7's ability to demonstrate overriding legitimate grounds.

77p7 will respond to all data rights requests within 30 days of receipt. In cases where the volume or complexity of requests requires additional time, we will notify you of the extension and the reason for the delay.

12 Minors

The 77p7 Platform is strictly intended for individuals aged 21 years or older. 77p7 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification checks are conducted as part of the account registration and KYC process to enforce this restriction.

If 77p7 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that a minor in your care has registered an account on 77p7, please contact us immediately at [email protected] so that we can take appropriate action without delay.

13 Policy Updates

77p7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent update will be displayed at the top of this page.

Where changes are material and affect the way we process your personal data or the rights available to you, 77p7 will notify registered account holders by email at least 7 days before the updated policy takes effect. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how 77p7 protects your information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 77p7 handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the 77p7 Platform
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

For formal data subject access requests or requests to exercise any of the rights described in Section 11, please use the subject line "Data Rights Request" in your email and include your registered account email address and a description of the right you wish to exercise. 77p7 may request proof of identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party.