77f7 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") describes how 77f7 ("we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your") who visit, register on, or otherwise interact with the 77f7 platform at https://77f7.io, including all associated sub-domains, mobile web interfaces, and support channels.

This Policy applies to all personal data processed in connection with the provision of 77f7's online casino, sports betting, and related services to players in Bangladesh and any other jurisdiction from which the platform is accessed. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

By creating a 77f7 account, making a deposit, or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and contact 77f7 support to arrange the return of any available account balance before requesting account closure.

Data Controller

For the purposes of applicable data-protection law, 77f7 is the data controller in respect of the personal data it collects from players and visitors to the platform. As data controller, 77f7 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing activities comply with applicable legal obligations.

All data-related inquiries, requests to exercise data rights, and privacy complaints should be directed to the 77f7 support team. Contact details are provided in Section 15 of this Policy. We aim to acknowledge all data-related correspondence within 48 hours of receipt and to provide a substantive response within 30 days.

Data We Collect

77f7 collects personal data in the following categories. We collect only what is reasonably necessary for the stated purpose — we do not maintain speculative data profiles.

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Email address registered to your 77f7 account.
• Mobile phone number associated with your account.
• Copies of identity documents submitted during KYC verification (e.g., National Identity Card, passport, driving licence).

3.2 Financial & Payment Data

• Mobile wallet identifiers (e.g., bKash account number, Nagad number, Rocket number, Upay number) used to make deposits or receive withdrawals.
• Card details for Visa and Mastercard transactions (card number, expiry, cardholder name — stored in tokenised form only; we do not retain full card numbers in our systems).
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers.
• Source-of-funds documentation where requested for compliance purposes.

3.3 Account & Gaming Data

• Username and account ID.
• Account creation date and last-login timestamp.
• Game-play history including games played, wager amounts, win/loss outcomes, and bonus usage records.
• Responsible gaming settings you have applied, including deposit limits, loss limits, and self-exclusion records.
• Correspondence with 77f7 support, including live chat transcripts and email exchanges.

3.4 Technical & Usage Data

• IP address at the time of each login and each significant account action.
• Device type, operating system version, and browser type.
• Device fingerprint identifiers used for fraud-prevention and duplicate-account detection.
• Pages visited on the 77f7 platform, time spent on each page, and click-stream data.
• Error logs and crash reports generated by your browser or device during platform use.

3.5 Marketing Preferences

• Your opt-in or opt-out status for promotional emails, SMS notifications, and in-platform messages from 77f7.
• Records of promotional communications sent to you and your interaction with those communications (e.g., email open rates, link clicks) — used only to improve the relevance of future communications.

How We Collect Data

77f7 collects personal data through the following means:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit, contact support, or update your account settings.
• Automatically during platform use: Through server logs, session tracking, and browser storage technologies (see Section 8 on Cookies & Tracking) when you visit or interact with the 77f7 website.
• From payment service providers: When a payment transaction is initiated or completed, the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) shares transaction-confirmation data with 77f7 sufficient to credit or debit your account balance.
• From identity-verification partners: Where 77f7 uses a third-party KYC service to verify identity documents, that service returns a verification result and a confidence score to 77f7 alongside any data points you submitted.
• From fraud-prevention systems: Device fingerprinting and IP-geolocation services may return data about your device or network that 77f7 uses to detect suspicious activity or duplicate accounts.

How We Use Your Data

The table below sets out the primary purposes for which 77f7 uses your personal data and the corresponding legal basis for each processing activity.

Legal Basis for Processing

77f7 relies on one or more of the following legal bases when processing your personal data:

• Contract performance: Processing is necessary to enter into or perform the contract between you and 77f7 — that is, to provide the online casino and sports betting services you have requested.
• Legal obligation: Processing is necessary for 77f7 to comply with applicable laws, including anti-money-laundering regulations, age-verification requirements, and financial record-keeping obligations.
• Legitimate interest: Processing is necessary for the purposes of 77f7's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, and improving service quality.
• Consent: Where 77f7 relies on your consent — for example, for the sending of marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

77f7 does not sell personal data to any third party. We share personal data with the following categories of recipient only to the extent necessary for the stated purpose:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): Transaction data is shared with the relevant provider to process deposits and withdrawals. Each provider operates under its own privacy policy and is independently responsible for data it collects through its own interfaces.
• Identity verification services: Where a third-party KYC provider is used, identity document images and personal details are shared with that provider solely for the purpose of verification. The provider returns a pass/fail result and does not retain your documents beyond its contractually specified retention window.
• Game studios and content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others): A unique anonymised player token is shared with game providers to initialise game sessions. Identifiable personal data such as your name, address, or payment details is not shared with game studios.
• Fraud prevention and analytics platforms: Anonymised or pseudonymised usage data and device identifiers may be shared with fraud-detection services. No identifiable personal data is shared beyond what is strictly required for the fraud signal being investigated.
• Regulatory and law-enforcement authorities: 77f7 will disclose personal data to competent authorities where required to do so by law, court order, or binding regulatory instruction. We will notify affected players of such disclosures to the extent permitted by law.
• Professional advisers: Lawyers, auditors, and accountants may access personal data on a need-to-know basis under strict confidentiality obligations when providing professional services to 77f7.

Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your login status, preferred settings, and browsing session data. 77f7 also uses similar technologies including local storage objects and session tokens.

8.2 Types of Cookies Used by 77f7

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens that keep you logged in during a visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as preferred language, notification settings, and responsible-gaming limits you have set. Disabling these may reduce your experience but will not prevent you from using the platform.
• Analytics cookies: Used to collect anonymised information about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used exclusively to improve platform design and performance.
• Fraud-prevention tokens: Short-lived device identifiers used to detect unusual login patterns, duplicate accounts, and automated bot activity. These are strictly necessary for platform security and responsible gaming compliance.

8.3 Managing Cookies

You may configure your browser to refuse all cookies or to notify you before a cookie is set. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your 77f7 account. Instructions for managing cookies are available in your browser's help documentation. 77f7 does not use third-party advertising cookies or tracking pixels that report your activity to external advertising networks.

Data Retention

77f7 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data (identity, contact, account settings): Retained for the full duration of your account and for 90 days following confirmed account closure, after which identifiable data is deleted or anonymised.
• Financial transaction records (deposit/withdrawal history, payment method identifiers): Retained for a minimum of five years from the date of the transaction to satisfy anti-money-laundering record-keeping requirements.
• KYC verification documents (identity document images, address evidence): Retained for five years from the date of verification or from account closure, whichever is later, in accordance with applicable compliance obligations.
• Support correspondence: Retained for two years from the date of the most recent exchange in a support thread, after which transcripts are anonymised.
• Technical and usage logs: Retained for 12 months on a rolling basis, then automatically purged unless a specific log entry is the subject of an ongoing security investigation.
• Marketing preference records: Retained for as long as your account is active. Upon account closure or withdrawal of marketing consent, your marketing data is removed from active campaign lists within 30 days.

Where retention beyond the periods above is required by a specific legal obligation, court order, or ongoing investigation, 77f7 will retain the relevant data for the duration of that requirement and delete it promptly upon its conclusion.

Data Security

77f7 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, and destruction. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and 77f7 servers is encrypted using industry-standard TLS protocols. HTTPS is enforced across all platform URLs.
• Data-at-rest encryption: Sensitive personal data, including identity documents and payment tokens, is encrypted at rest in 77f7's storage infrastructure using AES-256 encryption.
• Access controls: Access to personal data within 77f7's systems is restricted to staff and contractors who require it to perform their specific role. Access privileges are reviewed quarterly and revoked promptly upon role change or contract termination.
• Tokenisation: Card payment data is handled exclusively through tokenised payment flows. 77f7 systems never receive or store full card numbers — only tokens issued by the payment processor.
• Intrusion detection: 77f7's infrastructure is monitored continuously for anomalous access patterns, and automated alerts trigger manual review of any suspicious activity.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, 77f7 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Despite these measures, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your 77f7 account and to report any suspected unauthorised access to support immediately.

Your Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by 77f7. To exercise any of these rights, contact the 77f7 support team (see Section 15). We will respond within 30 days and will not charge a fee for standard requests.

• Right of access: You may request a copy of the personal data 77f7 holds about you, together with information about how it is being used.
• Right to rectification: If personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account profile data, you may also update many fields directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate interest or legal obligation requiring its retention.
• Right to restriction: You may request that 77f7 pause certain processing activities — for example, while the accuracy of your data is being verified — without requiring full deletion.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request a machine-readable copy of the personal data you have provided to 77f7, in a format suitable for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interest, including profiling for fraud-prevention purposes, where you believe your individual circumstances outweigh 77f7's interests. You also have an unconditional right to object to processing for direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Children & Minors

The 77f7 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process, and additional KYC checks may be required to confirm a player's date of birth before their first withdrawal is processed.

If 77f7 becomes aware that personal data has been collected from a person under 21 — whether through a misrepresentation at registration or any other means — the relevant account will be suspended immediately, all wagers placed while the account was active will be voided, and any deposits will be returned after a compliance review. The personal data of the underage individual will be securely deleted to the fullest extent permitted by law.

If you are a parent or guardian and believe that your child has created a 77f7 account, please contact our support team immediately so that we can investigate and act without delay.

Third-Party Links

The 77f7 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where your interaction with the platform involves visiting or submitting data directly to a third-party interface — for example, a mobile wallet payment screen hosted by bKash — that interaction is governed by the third party's own privacy policy, not this Policy.

77f7 is not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service you use in connection with your 77f7 account before submitting personal data to that service.

Policy Updates

77f7 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing activities, applicable law, or regulatory guidance. The "Effective" date at the top of this document will be updated on each revision.

Where changes are material — for example, where a new category of personal data is collected, a new third-party recipient is introduced, or a new legal basis for processing is relied upon — 77f7 will provide at least 14 days' advance notice to registered players by email and/or by displaying a prominent notice on the platform. For minor clarifications and corrections that do not alter the substance of your rights or our obligations, updates may take effect immediately upon publication.

We recommend bookmarking this page and reviewing it periodically. Continued use of the platform following any update constitutes acceptance of the revised Policy.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related complaint, please contact the 77f7 support team. Our team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Victory Day, Independence Day, and Eid.

Support email: support@77f7.io  (plain text — not a clickable link)

We aim to acknowledge all privacy-related correspondence within 48 hours and to provide a full response within 30 days. Where a request is complex or where a high volume of requests is received simultaneously, we may extend this period by a further 30 days and will inform you of the extension within the initial 30-day window.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data-protection authority in your jurisdiction.