777b7 Privacy Policy

1. Introduction

1.1 777b7 operates an online sports betting and casino platform designed for players in Bangladesh. In providing these services, we necessarily collect and process certain personal information about you. We take this responsibility seriously and are committed to handling your data fairly, securely, and transparently.

1.2 This Privacy Policy applies to all personal data collected through the 777b7 website (https://777b7.io), any associated mobile-optimised interfaces, live chat support interactions, email correspondence, and any other channel through which you communicate with us.

1.3 This policy does not cover the data practices of third-party game providers, payment processors, or any external websites that may be linked to or from our platform. We encourage you to review the privacy policies of those third parties independently.

2. Data We Collect

2.1 We collect personal data in two ways: information you provide to us directly, and information collected automatically when you use the platform.

2.2 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number.
• KYC verification documents: Copies of your national identity card (NID), passport, driver's licence, utility bill, or bank statement submitted during the identity verification process.
• Payment information: Your bKash, Nagad, Rocket, or Upay account numbers; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported institutions. We do not store full card numbers or payment authentication credentials — these are handled directly by payment providers.
• Support communications: Any information you share with our support team via live chat or email, including the content of your queries and any attachments you provide.
• Survey and feedback responses: Where you voluntarily participate in satisfaction surveys or promotions.

2.3 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, features used, games played, bets placed, session duration, click-through paths, and platform navigation patterns.
• Transaction data: Records of all deposits, withdrawals, bets, game rounds, bonus claims, and account balance movements associated with your account.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify that you are accessing the platform from Bangladesh.
• Cookie data: Session identifiers, preference settings, and analytics data collected via cookies and similar technologies (see Section 6).

3. How We Use Your Data

3.1 The table below summarises the primary purposes for which 777b7 processes your personal data:

3.2 We do not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. Our responsible gaming monitoring systems may flag accounts for human review, but any consequential action (such as account restriction) involves a human decision-maker.

4. Legal Basis for Processing

4.1 Contractual necessity. The majority of our data processing is necessary to perform the contract between you and 777b7 — specifically, to provide you with a functioning betting and casino account, process your transactions, and deliver the services you have requested.

4.2 Legal obligation. Certain processing activities — in particular KYC verification, transaction monitoring, and record retention — are required by applicable anti-money laundering legislation and financial regulation. We have no discretion to omit these activities.

4.3 Legitimate interests. We process usage data, device data, and cookie data on the basis of our legitimate interests in operating a secure, fraud-resistant platform, understanding how the platform is used, and improving our services. We apply a balancing test to ensure these interests do not override your privacy rights.

4.4 Consent. Where we send you marketing communications, we do so only on the basis of your explicit consent given at registration or subsequently updated in your account settings. You may withdraw this consent at any time.

5. Data Sharing & Disclosure

5.1 777b7 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum data required to process your deposit or withdrawal transaction.
• KYC and identity verification partners: Third-party verification services that assist us in confirming your identity and age receive the data you submit during the KYC process.
• Game technology providers: Studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive your account identifier and game session data to deliver their games through our platform.
• IT infrastructure and cloud providers: Our hosting and data storage providers maintain the servers on which your account data resides. These providers are contractually bound to process data solely on our instructions.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory directive. We do not make such disclosures voluntarily beyond what is legally required.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 777b7's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer via your registered email address.

5.2 All third parties with whom we share personal data are required to implement appropriate technical and organisational security measures and to use the data solely for the specified purpose.

6. Cookies & Tracking Technologies

6.1 777b7 uses the following categories of cookies on the platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, preserve your account state between pages, and enable core features such as the bet slip and game interfaces. These cookies cannot be disabled.
• Preference cookies: These remember your language preference, display settings, and other personalisation options so you do not need to re-configure them on each visit.
• Analytics cookies: We use internal analytics tools to understand aggregate patterns of platform usage — such as which games are most popular, where players spend the most time, and how navigation flows are used. This data is analysed in aggregate and is not used to profile individual users for commercial purposes.

6.2 777b7 does not deploy third-party advertising cookies, cross-site tracking pixels, or any technology designed to build a commercial profile of your browsing behaviour across external websites.

6.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform, as session management relies on them.

7. Data Retention

7.1 We retain your personal data for as long as your account remains active and for a defined period following account closure. The retention periods we apply are as follows:

• Account and transaction records: Retained for a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction, whichever is later.
• Support correspondence: Retained for 3 years following the resolution of the relevant query, unless the matter remains subject to a dispute or legal proceeding.
• Marketing preference records: Retained for the duration of the account relationship and for 1 year following account closure, to provide an audit trail of consent and opt-out history.
• Analytics and usage data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Raw individual-level usage logs are deleted after 12 months.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Data Security

8.1 777b7 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption at rest for sensitive data fields including payment identifiers and KYC document files;
• Password hashing using industry-standard algorithms — plain-text passwords are never stored;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular internal security audits and vulnerability assessments;
• Two-factor authentication options available to all registered players for account login.

8.2 Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 777b7 will notify affected players without undue delay via their registered email address.

9. Your Rights

9.1 As a 777b7 player, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Minor corrections (such as updating your address) can be made directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. We cannot delete data that we are legally required to retain.
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your data — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You may request a machine-readable export of the personal data you have provided to us, where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent (most notably, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you believe your rights and interests outweigh ours.

9.2 To exercise any of the above rights, please contact our support team via live chat or by email at [email protected]. We will verify your identity before processing any data rights request. All requests will be handled within 30 days; for complex requests, this period may be extended by a further 60 days with prior notice.

10. Children & Minors

10.1 The 777b7 platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has registered an account, the account will be immediately closed, all funds forfeited, and all associated personal data deleted as soon as practicable.

10.2 If you believe that a minor has registered a 777b7 account, please notify us immediately via live chat or at [email protected]. We will investigate and take appropriate action.

11. Marketing Communications

11.1 With your consent, 777b7 may send you promotional communications about new games, upcoming cricket and football events, BPL and IPL betting markets, seasonal offers (such as Eid promotions or Pohela Boishakh specials), and platform news via email or SMS.

11.2 You can opt out of marketing communications at any time by updating your notification preferences in your account settings, or by contacting our support team directly. Opting out of marketing communications will not affect the delivery of transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts), which are sent regardless of marketing preferences because they are necessary for service delivery.

11.3 We do not share your contact details with third-party marketers. All promotional communications are sent directly by 777b7.

12. Third-Party Links

12.1 The 777b7 platform does not link to external third-party websites. If in future any such links are introduced, this policy will be updated accordingly. In any event, 777b7 is not responsible for the privacy practices of any external websites and encourages users to review the privacy policies of any site they visit independently of 777b7.

13. Policy Updates

13.1 777b7 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. When we make material changes, we will notify registered players via their registered email address at least 14 days before the changes take effect.

13.2 The current version of this Privacy Policy, marked with its effective date, is always published at https://777b7.io/privacy-policy. Continued use of the platform after the effective date of an updated policy constitutes your acceptance of the revised terms.

13.3 Minor, non-substantive updates (such as typographical corrections or structural reorganisation without change of meaning) may be made without prior notice.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 777b7 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the 777b7 platform. This is our fastest response channel.
• Email: [email protected] — please note this address is displayed as plain text and is not a clickable link.

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex or sensitive requests — such as subject access requests or erasure requests — we may require up to 90 days in total, and we will communicate proactively if an extension is necessary.