777c7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how 777c7 ("777c7", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the 777c7 platform available at 777c7.io and any related mobile applications or ancillary services operated by 777c7.

777c7 is committed to handling your personal data with integrity, transparency, and respect. This Policy is intended to provide you with clear and comprehensive information about our data practices so that you can make informed decisions about your use of the 777c7 platform. We encourage you to read this Policy in full before registering an account or providing any personal information.

This Policy should be read alongside the 777c7 Terms and Conditions and the Responsible Gaming Policy, both of which are available on this site and are incorporated by reference. By registering a 777c7 account or by continuing to use the 777c7 platform after this Policy has been updated, you acknowledge that you have read and understood the terms set out herein.

2 Data We Collect

The categories of personal data that 777c7 may collect about you include, but are not limited to, the following:

2.1 Identity Data

• Full legal name (first name, last name)
• Date of birth
• Gender (where provided voluntarily)
• Copies of government-issued identity documents submitted for KYC/AML verification (e.g., National Identity Card, passport, driving licence)

2.2 Contact Data

• Email address
• Mobile phone number (including the number linked to bKash, Nagad, Rocket, or Upay accounts)
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet, Khulna)

2.3 Financial Data

• Mobile financial service (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay — stored in masked/tokenised form
• Last four digits of registered Visa or Mastercard (full card numbers are never stored by 777c7)
• Bank account details where bank transfer is used (account name, partial account number, bank name)
• Transaction records including deposit amounts, withdrawal amounts, dates, and reference numbers

2.4 Transactional & Gaming Data

• Betting history: markets wagered on, stake amounts, outcomes, accumulated winnings and losses
• Casino game session data: games played, session duration, bet sizes, RTP outcomes
• Bonus redemption history and wagering requirement progress
• Account balance history and ledger records

2.5 Technical Data

• IP address at the time of registration and subsequent logins
• Device type, operating system, and browser version
• Unique device identifiers
• Session timestamps (login time, logout time, session duration)
• Geolocation data (country/region level, derived from IP)

2.6 Communications Data

• Records of live chat conversations with the 777c7 support team
• Email correspondence sent to or received from 777c7
• Complaint records and dispute resolution correspondence
• Survey responses and feedback submissions (where provided voluntarily)

3 How We Collect Your Data

777c7 collects personal data through the following channels:

3.1 Direct Collection

Data you provide directly when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, complete surveys, or correspond with 777c7 by any means.

3.2 Automated Collection

Data collected automatically as you use the 777c7 platform, including technical and behavioural data such as IP address, device identifiers, browser type, pages visited, click-stream data, session duration, and in-game activity. This data is collected via server logs, cookies, and similar tracking technologies (see Section 7 for full cookie information).

3.3 Third-Party Sources

Data received from third parties in the course of delivering our services, including:

• Identity verification providers: confirmation of identity document authenticity and age verification results;
• Payment processors: transaction confirmation data, tokenised payment method identifiers, and fraud screening signals;
• Fraud prevention and AML partners: risk scores and watchlist screening results necessary for regulatory compliance;
• Game providers (e.g., Evolution Gaming, Pragmatic Play, Spribe, NetEnt): game session outcomes and any chat content generated within live casino game environments.

4 Legal Basis for Processing

777c7 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

5 How We Use Your Data

777c7 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your 777c7 account, including verifying your identity, processing login requests, and managing your account balance and transaction history.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to resolve any payment queries or disputes.
• Regulatory compliance: To satisfy our legal obligations in respect of know-your-customer (KYC) checks, anti-money laundering (AML) monitoring, responsible gaming requirements, and age verification.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other forms of prohibited conduct as defined in the Terms and Conditions.
• Customer support: To respond to your queries, complaints, and feedback, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply player-requested limits and self-exclusions, and to deliver responsible gaming communications where appropriate.
• Platform personalisation: To tailor your platform experience based on your gaming preferences, preferred sports (such as BPL cricket, T20 tournaments, football), and betting history, in order to surface relevant content and offers.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign updates (e.g., Eid promotions, BPL season offers) via email or SMS — subject to your marketing consent preferences. You may opt out at any time.
• Analytics and improvement: To analyse aggregated platform usage data in order to improve the functionality, design, and performance of the 777c7 platform.
• Legal proceedings: To establish, exercise, or defend legal claims arising in connection with your account or use of the platform.

6 Data Sharing & Disclosure

777c7 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the minimum extent necessary for each purpose:

6.1 Service Providers

We share data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers are prohibited from using your data for any purpose other than providing the contracted service to 777c7. Service provider categories include:

• Payment processors and mobile financial service integrators (bKash, Nagad, Rocket, Upay, Visa/Mastercard networks)
• Identity and age verification platform providers
• Fraud detection and AML screening providers
• Cloud infrastructure and hosting providers
• Customer support software providers
• Email and SMS marketing platform providers (for consented communications only)
• Game content providers (e.g., Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming) — limited to the session data necessary to deliver the game

6.2 Legal & Regulatory Disclosure

777c7 may disclose your personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, legal process, or lawful authority — including in connection with AML investigations, fraud investigations, or court orders. In such cases, we will disclose only the data that is strictly required by the specific legal obligation.

6.3 Business Transfers

In the event that 777c7 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Policy that results from it.

7 Cookies & Tracking Technologies

The 777c7 platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session state, detect fraud, and analyse platform usage. A cookie is a small text file placed on your device by a website you visit. Cookies do not carry viruses and cannot access other information stored on your device.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and configure alerts when a cookie is set. Please note that disabling strictly necessary cookies will impair core platform functions including login and session persistence. Instructions for managing cookies are available in the help documentation of all major browsers.

8 Data Retention

777c7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, regulatory, accounting, or reporting requirements. The table below summarises our standard retention periods by data category:

Once a retention period has expired, personal data is either securely deleted from our systems or anonymised in a manner that renders it impossible to re-identify the individual. Anonymised aggregate data may be retained for longer periods for statistical and analytical purposes.

9 Data Security

777c7 implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and 777c7 servers is encrypted using industry-standard 256-bit TLS encryption.
• At-rest encryption: Sensitive data stored in our databases, including identity document copies and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 777c7 is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
• PCI-DSS compliance: Payment card data is handled exclusively by PCI-DSS Level 1 certified processors. Full card numbers are never transmitted to or stored on 777c7 infrastructure.
• Penetration testing: The 777c7 platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Multi-factor authentication: Administrative access to 777c7 backend systems is protected by multi-factor authentication requirements.
• Incident response: 777c7 maintains a documented incident response plan, and all staff with access to personal data receive regular data security training.

10 Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data that 777c7 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request — [Your Username]".

• Right of Access: You have the right to request confirmation of whether 777c7 holds personal data about you, and if so, to receive a copy of that data along with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where you update your information directly via the account dashboard, corrections take effect immediately.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations — for example, 777c7 may be required to retain certain data to comply with AML regulations, even after account closure.
• Right to Restrict Processing: You may request that 777c7 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing on the basis of legitimate interests.
• Right to Data Portability: Where processing is based on consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests. 777c7 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.

11 International Data Transfers

The 777c7 platform serves players primarily in Bangladesh, and the majority of data processing takes place within the platform's core infrastructure. However, certain service providers used by 777c7 — including game studios, cloud infrastructure providers, and fraud screening vendors — may process data in jurisdictions outside of Bangladesh.

Where personal data is transferred internationally, 777c7 takes all reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under applicable data protection principles. Safeguards may include contractual data processing agreements that incorporate standard contractual clauses, the use of service providers that are independently certified to internationally recognised security standards, and vendor due diligence assessments conducted prior to onboarding.

By using the 777c7 platform, you acknowledge that your personal data may be processed in a jurisdiction outside Bangladesh. If you have questions about the specific safeguards in place for any particular international transfer, you may contact us at [email protected].

12 Children's Privacy

The 777c7 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, use, or retain personal data from individuals under the age of 21. If 777c7 becomes aware that personal data has been collected from a person under the age of 21 , we will take immediate steps to delete that data from our systems and close the associated account. Any deposits made by an underage player will be returned to the originating payment method where technically possible.

13 Third-Party Links

The 777c7 platform may contain references to third-party game providers, payment partners, and sports data services. These third parties operate their own websites, applications, and services, and their own privacy policies govern the collection and use of any personal data they obtain directly from you in the course of your interaction with their services.

777c7 is not responsible for the privacy practices of any third-party service, nor for the content or accuracy of any third-party privacy policy. We encourage you to review the privacy policies of all third-party services you interact with in connection with your use of the 777c7 platform. The inclusion of a third-party game provider or payment partner on the 777c7 platform does not constitute an endorsement of that party's privacy practices.

14 Amendments to This Policy

777c7 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made in response to developments in applicable law and regulation, changes to our data processing practices, updates to the services we offer, or feedback from players and regulatory bodies.

When a material change is made to this Policy, 777c7 will notify registered players by email to the address associated with their account and/or by a prominent notice on the 777c7 platform, at least 14 days before the change takes effect. The updated Policy will always be accessible at 777c7.io/privacy-policy with the effective date clearly indicated at the top of the document.

Your continued use of the 777c7 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the platform and contact support to discuss your account closure options.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 777c7 handles your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy enquiries promptly and transparently.

Privacy Contact

Email: [email protected]
Subject line: Privacy Enquiry — [Your Username]
Response time: Within 5 business days for general enquiries; within 30 days for formal rights requests.

Complaint Resolution

If you are not satisfied with 777c7's response to your privacy concern, you have the right to escalate your complaint. We take all unresolved privacy complaints seriously and will review any escalation with appropriate care and seniority. Details of the escalation process are provided in our response to your initial complaint.

777c7 is committed to resolving all data privacy disputes in good faith and in a timely manner. We view player privacy as a cornerstone of the trust relationship that underpins everything we do, and we will always prioritise a fair and transparent resolution. Players in Bangladesh may also seek guidance from consumer protection bodies or financial dispute resolution services applicable in their jurisdiction.