Your Privacy Matters — The 77z7 Privacy Policy

1 Introduction

77z7 ("we", "us", "our", "the Platform") is an online casino and sports betting platform operating at https://77z7.io and serving players primarily located in Bangladesh. We are committed to protecting the privacy of every individual who accesses or uses our platform, and we handle all personal data in accordance with applicable data protection principles.

This Privacy Policy describes the categories of personal data we collect from players and visitors, the purposes for which that data is processed, the parties with whom it may be shared, the security measures we apply to protect it, the periods for which we retain it, and the rights available to you as a data subject. This policy applies to all interactions with the 77z7 platform, including account registration, deposits and withdrawals, gameplay, customer support communications, and general browsing of the website.

By registering an account or using the 77z7 platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should not access or use the platform. This Privacy Policy should be read alongside our Terms & Conditions.

2 Personal Data We Collect

We collect personal data through several channels, including information you provide directly when registering or using the platform, data generated automatically through your use of the platform, and information received from trusted third-party partners where applicable. The categories of personal data we may collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for mandatory age verification)
• Email address and mobile phone number
• Residential address including city, district, and postal code
• Username and account password (stored in encrypted form)
• Nationality and country of residence

2.2 Identity Verification (KYC) Documents

• Scanned copy or photograph of a government-issued photo ID (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within three months)
• Payment method verification evidence (e.g., screenshot of bKash, Nagad, or Rocket account showing your registered mobile number)
• Source-of-funds documentation for large deposit or withdrawal amounts, where required

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method details
• Mobile banking account references (bKash, Nagad, Rocket, Upay numbers)
• Bank account details where bank transfer is used
• Transaction history and running account balance
• Bonus and promotional credit history

2.4 Gaming and Wagering Activity Data

• Game history including titles played, bet amounts, outcomes, and timestamps
• Sports betting market selections, stake amounts, and settlement results
• Session duration and frequency of play data used for responsible gaming monitoring
• Self-exclusion and deposit limit preferences set by you

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP lookup
• Device type, operating system, and browser version
• Unique device identifiers and session tokens
• Log data including pages visited, actions taken, timestamps, and referral URLs
• Cookie identifiers and local storage data (see Section 6)

2.6 Customer Support Communications

• Content of support tickets, live chat transcripts, and email correspondence
• Complaint records and resolution outcomes
• Any additional personal information you voluntarily provide in the course of a support interaction

3 How We Use Your Personal Data

77z7 uses the personal data we collect for specific, clearly defined purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

4 Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The legal bases on which 77z7 relies for its various processing activities are:

• Contractual Necessity: Processing that is required to fulfil our contractual obligations to you under the Terms & Conditions — for example, processing your deposit to fund your account, or settling a winning wager.
• Legal Obligation: Processing required to comply with applicable legal requirements — for example, conducting KYC verification, maintaining transaction records for anti-money-laundering compliance, and responding to lawful requests from authorities.
• Legitimate Interests: Processing undertaken to pursue 77z7's legitimate business interests, provided those interests are not overridden by your rights and freedoms — for example, fraud detection, platform security, responsible gaming monitoring, and platform analytics to improve user experience.
• Consent: Where you have given us explicit consent to process your data for a specific purpose — primarily for sending marketing and promotional communications. You may withdraw consent at any time by contacting us at [email protected] or by following the unsubscribe instructions in any marketing communication.

5 Data Sharing and Disclosure

77z7 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Payment Service Providers

To process deposits and withdrawals, we share necessary transaction and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your payment data under their own privacy policies and are bound by contractual obligations to process data only for the stated purpose.

5.2 Game Content and Technology Providers

To deliver casino games and live dealer services, we share session tokens and account identifiers with certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your full identity or financial data.

5.3 Identity Verification Services

We may engage specialist KYC and identity verification service providers to assist with the verification of documents submitted during the account verification process. Such providers are engaged under formal data processing agreements and are authorised to use your data solely for the purpose of verification.

5.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are required to do so by applicable law, or where we reasonably believe disclosure is necessary to prevent fraud, protect the rights of 77z7, or protect the safety of our players or the general public.

5.5 Professional Advisers

We may share personal data with our legal advisers, auditors, and other professional consultants on a strictly confidential basis where necessary to obtain professional advice or to conduct audits of our business operations.

6 Cookies and Tracking Technologies

77z7 uses cookies and similar tracking technologies on its platform to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a website server when you visit the site. Cookies do not execute code or deliver viruses to your device.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, account login persistence, and security token verification. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, display options, and responsible gaming tool configurations — so you do not need to re-enter them on each visit.
• Performance and Analytics Cookies: We use analytics cookies to collect aggregated, anonymised data about how players use the platform — which pages are visited most frequently, where errors occur, and how players navigate between sections. This data is used to improve the platform experience.
• Marketing Cookies: Where you have consented to receiving promotional communications, marketing cookies may be used to record your interaction with promotional content on the platform and to ensure you see relevant offers based on your gaming preferences.

6.2 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to block or delete cookies through the browser's privacy or settings menu. Note that blocking strictly necessary cookies will prevent certain platform features from operating correctly. For detailed guidance on managing cookies, refer to your browser's help documentation.

7 Data Security Measures

The security of your personal data is a top priority at 77z7. We implement a layered security architecture that combines technical, organisational, and procedural safeguards to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data exchanged between your device and our servers is encrypted using TLS 1.3 protocol, ensuring that data cannot be intercepted during transmission.
• Encryption at Rest: Personal data and financial records stored on 77z7 servers are encrypted using AES-256 encryption, the current industry standard for data storage security.
• Access Controls: Access to personal data held by 77z7 is strictly limited on a role-based, need-to-know basis. Staff members who do not require access to personal data as part of their role are not permitted to view it.
• Regular Security Audits: Our platform and infrastructure undergo periodic third-party security assessments and penetration testing to identify and resolve vulnerabilities proactively.
• Incident Response: In the event of a data security incident that affects your personal data, we will notify affected players and take all necessary steps to contain and remediate the incident without undue delay.

8 Data Retention Periods

77z7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

9 Your Rights Over Your Data

As a player whose personal data is processed by 77z7, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your request and account username. We will respond within a reasonable timeframe and in any event within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. Note that we may be required to retain certain data to comply with legal obligations, and erasure requests cannot override these requirements.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10 Children's Privacy

77z7 is strictly an adult platform. Access to and use of the platform is permitted only to individuals who are 21 years of age or older. We do not knowingly collect, store, or process personal data relating to any person under the age of 21.

During the account registration process, all applicants are required to provide their date of birth and to confirm that they meet the minimum age requirement. Where we have reason to believe that an account has been registered by or on behalf of an individual under 21 years of age, we will suspend the account immediately, conduct a review, and permanently close the account if the age violation is confirmed. Any funds held in such an account will be handled in accordance with our Terms & Conditions and applicable legal requirements.

If you believe that a minor has accessed or registered an account on the 77z7 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11 Changes to This Privacy Policy

77z7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, platform features, or business operations. When we make material changes to this policy, we will notify registered players via the email address associated with their account and will post the updated policy on this page with a revised effective date.

We encourage all players to review this Privacy Policy periodically to stay informed about how we protect their personal data. Your continued use of the 77z7 platform following the posting of any updates to this policy constitutes your acceptance of those changes. If you do not accept the revised policy, you should cease using the platform and may request account closure by contacting our support team.

12 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 77z7 processes your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and thoroughly.

• Email (Data Protection Enquiries): [email protected]
• Subject Line: Privacy Policy Enquiry
• Response Time: Within 3 business days for general enquiries; within 30 calendar days for formal rights requests
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All privacy-related correspondence should be sent to the email address above. Please do not include sensitive documents such as copies of identity documents in initial enquiry emails — our team will advise on secure submission channels if documentation is required to process your request.