77df Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by 77df ("77df", "we", "us", "our"), the operator of the online betting and gaming platform accessible at https://77df.io and its associated mobile-optimised web interface. This Policy describes how 77df collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "User", "Player") who access or use the 77df platform.

77df is committed to protecting the privacy and security of all personal data entrusted to us by our players. We process personal data in accordance with responsible data handling practices and in compliance with applicable data protection principles.

This Policy applies to all personal data collected through the 77df website, mobile web interface, live chat support system, email communications, and any other channel through which you interact with 77df. This Policy should be read alongside the 77df Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Personal Data We Collect

77df collects the following categories of personal data in connection with the registration and operation of player accounts and the delivery of our betting and gaming services:

2.1 Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify the 21+ age requirement)
• National Identity Card (NID) number or passport number (for KYC verification)
• A photograph or scan of your identity document where required for enhanced verification

2.2 Contact Data

• Email address registered to your 77df account
• Mobile phone number (Bangladesh-registered)
• City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh)

2.3 Financial Data

• Your registered BDT mobile financial service account details (bKash, Nagad, Rocket, or Upay account number/identifier)
• Transaction history including deposit amounts, withdrawal requests, and bonus credits in BDT
• Details of any payment method changes or additions made during the account lifecycle

2.4 Account and Activity Data

• Your 77df username and encrypted account password
• Betting history, wager amounts, game selections, and outcomes across sports betting (cricket, football, kabaddi), slot games, and live casino
• Bonus and promotional offer usage history
• Account login timestamps, session durations, and device identifiers
• Responsible gaming tool settings, including deposit limits, loss limits, cooling-off periods, and self-exclusion records

2.5 Technical Data

• IP address and approximate geographic location derived from IP
• Browser type and version, operating system, device type, and screen resolution
• Referring URL (the page or link you followed to reach 77df)
• Cookie identifiers and session tokens (see Section 7 for full details)

2.6 Communication Data

• Content of support enquiries submitted via live chat or email to [email protected]
• Records of formal complaints and their resolution
• Marketing preference records (opt-in or opt-out status for promotional communications)

3 How We Collect Your Data

77df collects personal data through the following methods:

3.1 Direct Collection

The majority of personal data held by 77df is provided directly by you during the account registration process, during KYC verification, when you make a deposit or request a withdrawal, when you contact our support team, or when you update your account profile settings.

3.2 Automated Technical Collection

When you access the 77df platform, our systems automatically collect certain technical data including your IP address, browser and device information, session timestamps, and cookie data. This data is collected through server logs, analytics tools, and session management technologies. See Section 7 for details on our use of cookies.

3.3 Third-Party Sources

In certain circumstances, 77df may receive personal data about you from third-party sources, including:

• KYC and Identity Verification Providers: Third-party services that assist in verifying the authenticity of identity documents submitted during account verification
• Payment Processors: Transaction status data and fraud-screening signals received from bKash, Nagad, Rocket, and Upay in connection with your deposit and withdrawal activity
• Anti-Fraud and AML Screening Services: Data received from screening tools used to detect suspicious activity, multiple-account usage, or money-laundering indicators

4 How We Use Your Data

77df uses the personal data we collect for the following specific purposes:

77df will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your additional consent.

5 Legal Basis for Processing

77df processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to deliver the services you have contracted with 77df for, including account management, betting services, and payment processing
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC, AML record-keeping, and responsible gaming regulations
• Legitimate Interests: Processing carried out for 77df's legitimate business interests, including fraud prevention, platform security, and analytics, provided such interests are not overridden by your fundamental privacy rights
• Consent: Processing based on your freely given, specific, informed consent — primarily in the context of marketing communications. You may withdraw your consent at any time by contacting [email protected] or adjusting your account preferences

6 Sharing Your Data

6.1 Service Providers

77df shares personal data with carefully selected third-party service providers who assist in operating our platform. These include KYC and identity verification partners, payment processing partners (bKash, Nagad, Rocket, Upay), fraud screening and AML tools, cloud hosting and infrastructure providers, and customer support platform vendors. All service providers are bound by contractual obligations to process your data only on 77df's documented instructions and to maintain appropriate security standards.

6.2 Game Content Providers

77df's slot and live casino content is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In some cases, minimal anonymised session data (such as game round identifiers or stake amounts) may be passed to these providers for the purpose of game delivery, dispute resolution, and RNG certification. No personally identifiable data beyond what is technically required for game session management is shared with game providers.

6.3 Legal and Regulatory Disclosure

77df may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised government authorities where required to do so by applicable law, court order, or lawful regulatory request. In such cases, 77df will disclose only the minimum personal data required by the specific legal obligation and, where legally permissible, will notify the affected player of the disclosure.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 77df business, personal data held by 77df may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material change to data processing arrangements that results from it.

6.5 No Sale of Personal Data

77df does not and will never sell, rent, lease, or exchange your personal data with third parties for their independent marketing or commercial purposes. Any sharing of data is limited strictly to the purposes and categories of recipient described in this Policy.

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, preferred language, and account settings — so that your experience is more consistent and personalised on subsequent visits.

7.2 Cookies Used by 77df

77df uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the basic operation of the 77df platform, including maintaining your authenticated session, remembering items in your account basket, and enabling secure access. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as your currency display (BDT / ৳), notification preferences, and responsible gaming tool configurations.
• Analytical Cookies: Used to collect anonymised usage data about how players interact with the 77df platform — including page visit frequency, session duration, and feature engagement — to help us improve platform performance and user experience.
• Security Cookies: Used to support fraud detection systems, including device fingerprinting signals used to identify multiple-account activity and unauthorised access attempts.

7.3 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, or be alerted when a new cookie is set. Please note that disabling cookies may affect the functionality of the 77df platform, including your ability to stay logged in, access personalised settings, or use certain game features.

7.4 No Third-Party Advertising Cookies

77df does not currently use third-party advertising networks or behavioural advertising cookies that track your activity across other websites for the purpose of serving targeted advertisements.

8 Data Retention

77df retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active Accounts: Personal data is retained for the full duration of an active player account relationship with 77df.
• Closed Accounts: Following voluntary account closure or suspension, account data (including identity records, financial transaction history, and betting activity logs) is retained for a minimum of five years in compliance with anti-money laundering record-keeping obligations and responsible gaming audit requirements.
• Support Communications: Records of customer support interactions, including live chat transcripts and email correspondence, are retained for a minimum of two years.
• Technical and Log Data: Server log data and session records are retained for a maximum of 12 months, after which they are purged or anonymised.
• Marketing Consent Records: Records of your marketing consent or opt-out status are retained for as long as they remain relevant and for a period thereafter sufficient to demonstrate compliance with consent obligations.

At the end of any applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9 Data Security

77df implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the 77df platform is encrypted using TLS 1.3. All personal data stored on 77df infrastructure is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 77df's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Payment Tokenisation: Raw payment method credentials (bKash account numbers, Nagad identifiers, etc.) are tokenised. 77df stores only tokenised references and never retains full payment credentials on its own servers.
• Two-Factor Authentication: 77df supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
• Penetration Testing: 77df's platform infrastructure undergoes regular independent security assessments to identify and remediate potential vulnerabilities.
• Incident Response: 77df maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players without undue delay and take all reasonable steps to limit the impact of the breach.

10 Your Rights

As a player on the 77df platform, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of all personal data that 77df holds about you. We will provide this information within a reasonable timeframe following a verified identity check.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected without undue delay. For routine updates such as email address or phone number changes, you may update this information directly within your account settings.
• Right to Erasure: You have the right to request that 77df delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing. Please note that this right is subject to legal retention obligations — 77df may be required to retain certain records even following an erasure request.
• Right to Restriction: You have the right to request that 77df restrict the processing of your personal data in certain circumstances, for example while a dispute about its accuracy is resolved.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to 77df and to have it transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on 77df's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please submit a written request to our support team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We may need to verify your identity before processing your request. We aim to respond to all verified data rights requests within 30 days.

11 Minors and Age Restriction

The 77df platform is strictly restricted to individuals aged 21 years and above. 77df does not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not use the 77df platform or provide any personal data to 77df under any circumstances.

If 77df becomes aware that personal data has been collected from a person under the age of 21 — including through parental or guardian notification or through our own age verification processes — we will immediately suspend the associated account, delete the personal data collected from that individual, and void any betting or gaming activity conducted during the period of access.

Parents and guardians who believe that a minor in their care may have registered a 77df account or provided personal data to 77df without permission should contact our support team immediately at [email protected]. We treat all such notifications as urgent and will act on them without delay.

12 Changes to This Policy

77df reserves the right to update or amend this Privacy Policy at any time. When material changes are made — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by sending a notice to your registered email address and displaying a prominent update banner on the 77df platform.

The effective date shown at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 77df protects your personal information. Your continued use of the 77df platform following notification of a material change constitutes your acceptance of the updated Policy.

13 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 77df holds about you, please contact our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Enquiries: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 directly within the 77df platform
• Response Target: First response within two hours via email, under three minutes via live chat (24/7, BST UTC+6)