How 777a Protects Your Personal Data

1 Introduction and Scope

This Privacy Policy applies to all personal data collected, stored, processed, or otherwise handled by 777a in connection with the operation of the online casino and sports betting platform accessible at https://777a.ws (referred to throughout this document as "the Platform" or "777a").

This policy applies to all individuals who visit, register on, or use the Platform, including registered players, visitors who browse without registering, and individuals who contact our support team by any means. By accessing the Platform or creating a player account, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described herein.

This policy should be read alongside the 777a Terms & Conditions and the Responsible Gaming Policy, both of which are published on this Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions in matters relating to data handling, this Privacy Policy shall take precedence.

777a is committed to handling personal data in a manner that is fair, transparent, and proportionate. We collect only what is necessary, retain it only for as long as required, and protect it using appropriate technical and organisational security measures throughout its lifecycle.

2 Data We Collect

777a collects personal data from players through several channels: directly during account registration, through your use of the Platform's features and services, from payment processing partners, and automatically through standard web technologies. The categories of data we collect are described below.

2.1 Registration and Identity Data

When you create a 777a account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address in Bangladesh (city, district, and postcode), contact email address, and mobile phone number. This information is required to create and maintain your account and to fulfil our identity verification obligations.

2.2 Identity Verification Documents

To comply with our know-your-customer (KYC) obligations and to verify that players meet the minimum age requirement of 21 years, 777a may request copies of official identity documents. Accepted documents include a Bangladesh National Identity Card (NID), a valid passport, or a driving licence. We may also request recent proof of address, such as a utility bill or bank statement issued within the past three months.

2.3 Payment and Transaction Data

We collect data related to all deposits, withdrawals, and in-platform transactions, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, transaction dates and times, and reference numbers. Full payment credentials (such as card numbers or mobile banking PINs) are handled exclusively by our PCI-DSS-compliant payment processing partners and are never stored directly by 777a.

2.4 Gaming and Betting Activity Data

We collect records of your gaming and betting activity on the Platform, including games played, wagers placed, outcomes, session durations, login timestamps, device type, and browser or application version. This data is used to operate the services you have requested, to ensure fair play, and to support our responsible gaming monitoring obligations.

2.5 Communications Data

We retain records of any communication you have with the 777a support team, including live chat transcripts, emails sent to or received from [email protected], and any written correspondence. These records are kept to resolve disputes, improve service quality, and maintain an audit trail of support interactions.

2.6 Technical and Device Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type, operating system, browser type and version, referring URL, pages visited within the Platform, and session timestamps. This data is collected using standard web server logs and cookies as described in Section 6 of this policy.

3 How We Use Your Data

777a uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.

• Account creation and management: To register your player account, maintain your profile, process your login credentials, and keep your account details up to date.
• Identity and age verification: To confirm that you are who you say you are, that you are at least 21 years of age, and that you are legally permitted to use the 777a platform from your location in Bangladesh.
• Transaction processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), to reconcile transaction records, and to investigate and resolve any payment disputes.
• Service delivery: To provide you with access to casino games, sports betting markets, bonuses, promotions, and all other features of the 777a platform that you have chosen to use.
• Customer support: To respond to your support enquiries, resolve disputes or complaints, and improve the quality of our support services over time.
• Responsible gaming monitoring: To monitor your gaming activity for indicators of problem gambling behaviour, to apply any deposit limits, loss limits, or self-exclusion settings that you have requested, and to fulfil our duty-of-care obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and any other conduct that may violate our Terms & Conditions or applicable law.
• Legal and regulatory compliance: To fulfil any reporting, record-keeping, or disclosure obligations imposed on 777a by applicable law, court orders, or requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players use the Platform and to identify opportunities to improve the user experience, game selection, and service performance.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have opted in to receiving such communications. You may withdraw this consent at any time by contacting [email protected].

4 Legal Basis for Processing

777a processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing that is required to perform the contract between you and 777a — namely, the Terms & Conditions you accepted upon registration. This covers account creation, identity verification, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with a legal obligation applicable to 777a, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for the purposes of our legitimate business interests, provided those interests are not overridden by your rights and interests. This covers fraud prevention, platform security, service improvement through anonymised analytics, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to the sending of direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

777a does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the circumstances described below, and only to the extent necessary for each specific purpose.

• Payment processors: We share transaction data with our approved payment processing partners (including the providers behind bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations) to the extent necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by contractual data protection obligations.
• Game content providers: When you play a game developed by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), certain technical data — including your session token, game activity, and wager records — is transmitted to that studio's game server to facilitate gameplay. Game studios are bound by contractual data protection agreements with 777a.
• Identity verification services: We may share identity and document data with third-party KYC verification service providers to assist in verifying your identity and age. These providers process data solely on our behalf and under our instruction.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities if required to do so by applicable law, court order, or other legal process. Where permitted, we will notify you of such disclosure.
• Business transfers: In the event that 777a undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any changes to the privacy terms that apply to your data.
• Professional advisers: We may share data with our legal, financial, and security advisers on a confidential basis where necessary for the conduct of their professional services on behalf of 777a.

In all cases where data is shared with third parties, 777a requires those parties to maintain appropriate data security standards and to use the shared data only for the specific, permitted purpose for which it was disclosed.

6 Cookies and Tracking Technologies

The 777a platform uses cookies and similar tracking technologies to operate core platform functions, improve performance, and — where you have consented — to personalise your experience. A cookie is a small text file placed on your device by a web server; it cannot execute code or deliver viruses.

The following categories of cookies are used on the 777a platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, maintain your game state, and handle security tokens. The platform cannot operate without them. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve platform performance. These cookies are only set with your consent.
• Functional cookies: These cookies remember your preferences, such as your language or display settings, to provide a more personalised experience on return visits. They are set with your consent.
• Marketing cookies: These cookies track your interaction with promotional content on the platform to help us understand which offers are relevant to you. They are set only where you have opted in to marketing communications.

You may manage, restrict, or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent core platform features from functioning correctly. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Retention

777a retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The general retention periods that apply to each category of data are set out below:

• Account and identity data: Retained for the duration of your active account and for a period of five (5) years following permanent account closure, to satisfy legal record-keeping obligations and to respond to any retrospective regulatory enquiries.
• Transaction and payment data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements applicable to online payment services in Bangladesh.
• KYC verification documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Gaming activity logs: Retained for three (3) years from the date of the activity, or longer if the data is related to an ongoing dispute, investigation, or responsible gaming case.
• Support communications: Retained for two (2) years from the date of the most recent communication in a given thread, unless the thread relates to an unresolved dispute or investigation, in which case it is retained until resolution plus one (1) additional year.
• Technical and device data (web logs): Retained for ninety (90) days for routine operational monitoring, and for up to two (2) years where retained as part of a security or fraud investigation.
• Marketing consent records: Retained for as long as the consent remains active, plus two (2) years after withdrawal of consent to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with 777a's data destruction procedures.

8 Data Security

777a implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures include:

• Encryption in transit: All data exchanged between your device and the 777a platform is encrypted using 256-bit TLS/SSL protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting https://777a.ws.
• Encryption at rest: Sensitive personal data and credentials stored in 777a's databases are encrypted using AES-256 encryption. Passwords are hashed using industry-standard one-way hashing algorithms and are never stored in plain text.
• Access controls: Access to personal data within 777a's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their specific job functions, and all access is logged and audited.
• Network security: The 777a platform is protected by enterprise-grade firewalls, intrusion detection systems, and regular third-party penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Payment security: 777a does not store full payment credentials. All payment data is tokenised and handled by PCI-DSS-compliant payment processors. 777a never has access to your full card number, CVV, or mobile banking PIN.

While 777a takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 777a will notify affected players without undue delay and will take all necessary steps to contain, investigate, and remediate the breach.

9 Your Rights Over Your Data

As a player on the 777a platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the 777a support team via live chat or by emailing [email protected]. We will acknowledge your request promptly and aim to respond in full within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data that 777a holds about you, together with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data held by 777a be corrected or completed without undue delay.
• Right to erasure: You have the right to request that 777a delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing has been unlawful. This right is subject to legal retention obligations that may require 777a to retain certain data for a defined period regardless of your request.
• Right to restriction of processing: You have the right to request that 777a restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a complaint about processing is being investigated.
• Right to data portability: Where processing is based on consent or on a contractual basis and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. 777a will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

Please note that exercising certain data rights — in particular, requesting erasure — may result in your 777a account being closed, since certain data is essential for the delivery of our services and for compliance with legal obligations. 777a will explain the implications of any such request before processing it.

10 Children and Minors

The 777a platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process the personal data of any individual under the age of 21. If 777a discovers or is notified that a player account has been registered by or for a person under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed.

Parents and guardians who believe that a minor in their care has accessed or registered on the 777a platform should contact us immediately at [email protected] so that we can take prompt corrective action, including the deletion of any personal data associated with the account.

777a strongly encourages the use of parental controls and internet filtering tools to prevent minors from accessing online gambling platforms. A range of free parental control software solutions are available and can be configured to block access to gambling websites across all devices in a household.

11 Changes to This Policy

777a reserves the right to update or revise this Privacy Policy at any time. When changes are made, the revised policy will be published on this page with an updated effective date shown at the top of the document. For changes that are material — meaning changes that significantly affect how we collect, use, or share your personal data — 777a will provide advance notice to registered players via their registered email address at least seven (7) days before the changes take effect.

Continued use of the 777a platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with any changes to this policy, you should contact the 777a support team to discuss your options, which may include account closure and data deletion as described in Section 9.

We encourage you to review this Privacy Policy periodically to stay informed about how 777a protects your personal data. The date at the top of the document will always reflect when the most recent review or update was completed.

12 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 777a handles your personal data, please contact our support team using the details below. All data enquiries are handled in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the 777a platform (Bangladesh Standard Time, UTC+6)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 14 calendar days. Complex requests involving data access or erasure may take up to 30 calendar days.

When contacting us about a data request, please include your registered email address and, where applicable, your 777a account username, so that we can locate your records and respond accurately. For security reasons, we may ask you to verify your identity before processing certain requests.