77z7 Privacy Policy — Your Data, Your Rights

This Privacy Policy describes how 77z7 ("we", "us", "our") collects, uses, stores and shares personal information when you access or use the 77z7 online gaming platform at 77z7.pro (the "Platform"). It applies to all registered players, visitors and any individual whose personal data is processed in connection with our services. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

77z7 is committed to protecting the privacy and security of its players. We recognise that players in Bangladesh entrust us with sensitive personal and financial information when they deposit via bKash, Nagad, Rocket or Upay, and we take that responsibility seriously. This Policy is written in plain English so that every player can understand their rights and how we handle their data — not as a formality, but as a genuine statement of how we operate.

The categories of personal data we collect include:

• Identity data: full name, date of birth, National ID number or passport number, photograph (where required for KYC verification)
• Contact data: mobile number, email address, and the city or division within Bangladesh associated with your account
• Financial data: bKash wallet number, Nagad number, Rocket number, Upay number, or card details (last four digits and card type only — full card numbers are never stored by 77z7)
• Transaction data: deposit history, withdrawal history, wagering history, bonus claims and account balance information
• Technical data: IP address, device type, browser type, operating system, session duration, pages visited and click patterns (collected automatically via server logs and first-party analytics)

The specific purposes for which 77z7 processes your personal data include:

• Account management: creating and maintaining your player account, authenticating your identity on login, and managing account preferences and settings
• Payment processing: processing deposits from bKash, Nagad, Rocket, Upay, Visa and Mastercard, and processing withdrawal requests back to the same payment source
• KYC compliance: verifying player age and identity in accordance with responsible gaming obligations and anti-money laundering requirements
• Customer support: responding to queries, complaints and disputes submitted to the support team via email at [email protected]
• Platform improvement: analysing anonymised and aggregated usage data to identify technical issues, improve game performance, and develop new features that better serve Bangladesh players

The legal bases we rely on are: (a) Contract performance — processing your identity, contact and financial data is necessary to create and operate your account and to process deposits and withdrawals; (b) Legal obligation — processing data for KYC and anti-money laundering checks is required by applicable law; (c) Legitimate interests — processing technical and usage data to maintain platform security, detect fraud and improve our services, provided those interests are not overridden by your data protection rights; (d) Consent — sending you promotional communications about bonuses, new games and seasonal offers, which you may withdraw at any time.

The parties with whom 77z7 may share your personal data, and the reason for each, are:

• Payment processors: bKash, Nagad, Rocket, Upay and card payment gateways receive the minimum data necessary to complete each transaction. Payment processors operate under their own privacy policies and security standards.
• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi and other studio partners receive anonymised session identifiers to enable game loading and fair-play certification. They do not receive your name, mobile number, or payment details.
• Identity verification partners: where KYC checks cannot be completed internally, we may use a regulated identity verification service provider who is contractually bound to process your data only for verification purposes and to delete it upon completion
• Law enforcement and regulatory authorities: where required by applicable law, court order or regulatory direction, we will disclose personal data to the extent legally required. We will notify you of such disclosure where permitted to do so.

In all cases where 77z7 shares personal data with third parties, we impose contractual obligations on those parties that are equivalent to the protections we apply to data we hold ourselves. We do not allow third parties to use your personal data for their own unrelated purposes.

Your bKash or Nagad wallet number is stored in encrypted form and is used only to match incoming deposits to your account and to route approved withdrawals back to your registered wallet. It is never displayed in full to support agents and is never included in any external data transfer other than to the relevant payment processor for the purpose of executing your transaction. 77z7 does not store your bKash or Nagad PIN, password or OTP under any circumstances. If you receive a call, SMS or message from anyone claiming to be from 77z7 and asking for your bKash PIN or OTP, this is a phishing attempt — our support team will never request these credentials. Contact us at [email protected] immediately if you receive such communication.

The cookies 77z7 uses fall into three categories: (a) Strictly necessary cookies — these are essential to log you in, keep your session active, and process deposits and withdrawals securely. They cannot be disabled without breaking core platform functionality; (b) Functional cookies — these remember your language preference, display settings and responsible gaming choices such as your deposit limit selections; (c) Analytics cookies — these collect anonymised data about pages visited, session duration and error events, which we use solely to improve platform performance. You can disable analytics cookies at any time via your browser settings. Disabling functional cookies may affect your experience but will not prevent you from using the platform.

Active account data is retained for the duration of your account plus a minimum post-closure period of 5 years to satisfy anti-money laundering record-keeping requirements. Transaction records are retained for 7 years from the date of each transaction. KYC documents are retained for 5 years after account closure or the date of the last transaction, whichever is later. Support communications are retained for 3 years from the date of each interaction. Where retention beyond these periods is required by a specific legal obligation, we will retain the data for that extended period only and then securely delete it. Data held solely on the basis of consent (e.g. marketing preferences) is deleted promptly upon withdrawal of consent.

• Right of access: you may request a copy of all personal data 77z7 holds about you, together with information about how it is used and with whom it has been shared
• Right to rectification: you may request correction of any personal data that is inaccurate or incomplete
• Right to erasure: subject to legal retention obligations, you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies
• Right to restrict processing: you may request that 77z7 limits its processing of your personal data in certain circumstances, such as while a rectification request is being assessed
• Right to withdraw consent: where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal

77z7 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the first 30-day period.

Our security measures include: SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest including payment details and KYC documents; access controls that limit internal access to personal data on a strict need-to-know basis; regular security audits and penetration testing of the platform infrastructure; anomaly detection systems that flag unusual login patterns or transaction behaviour in real time; and staff training on data handling, phishing awareness and incident response. In the event of a data breach that is likely to result in a risk to your rights or freedoms, 77z7 will notify affected players promptly and take all reasonable steps to mitigate the impact.