Privacy Policy

77aac collects personal data from players through several channels: directly from you when you register an account or interact with platform features, automatically through your use of the platform, and in limited circumstances from third-party service providers such as payment processors and identity verification services.

1.1 Registration Data

When you create a 77aac account, we collect the following information:

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification — players must be 18 years of age or older 18+)
• Email address
• Mobile phone number registered in Bangladesh
• Username and hashed password
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may collect copies of identity and address verification documents, including:

• National Identity Card (NID) issued by the Bangladesh Election Commission, or a valid passport
• Proof of payment method ownership (e.g., bKash or Nagad account confirmation screenshot showing your registered name and number)
• Proof of residential address (utility bill, bank statement, or similar document dated within the last three months)

KYC documents are processed and stored securely. Document images are used solely for identity and compliance verification purposes and are not shared with third parties beyond our authorised KYC verification service providers.

1.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect transaction-related data, including:

• Transaction amounts (in BDT ৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Transaction timestamps and reference numbers
• Account numbers or identifiers associated with your payment method (we do not store full card numbers — these are handled by our payment processors)

1.4 Gameplay and Betting Data

We collect records of your activity on the 77aac platform, including:

• Games played, bet amounts, game outcomes, and session duration
• Sports betting activity (markets selected, odds accepted, stake amounts, settlement outcomes)
• Bonus and promotion interactions (bonuses claimed, wagering progress, bonus expiry)

This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

1.5 Technical and Device Data

When you access the 77aac platform, our servers automatically collect certain technical information:

• IP address and approximate geographic location (country/city level)
• Browser type and version, operating system, device type
• Pages visited on the 77aac platform, referring URLs, and time spent on each page
• Session identifiers and authentication tokens

77aac uses the personal data we collect for the following purposes, each of which has a defined legal basis:

2.1 Marketing Communications

If you have opted in to receive marketing communications from 77aac, we may send you emails or SMS messages regarding new games, promotional offers, seasonal bonuses (such as those related to Eid, Pohela Boishakh, BPL tournaments, or IPL season), and platform updates. You may withdraw your consent to marketing communications at any time by contacting the support team at [email protected] or by clicking the unsubscribe link in any marketing email you receive. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

2.2 Automated Decision-Making

77aac may use automated processes to assess account activity for fraud indicators, responsible gaming risk factors, and AML compliance purposes. Where an automated process results in a significant decision affecting your account (such as a temporary withdrawal freeze or an account review flag), you have the right to request a manual review of that decision by contacting the support team.

77aac does not sell or rent personal data to third parties. We share personal data only in the following limited and controlled circumstances:

3.1 Payment Service Providers

To process deposits and withdrawals, we share relevant transaction data and account identifiers with our payment partners, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks. These providers act as independent data controllers in respect of their own transaction processing systems and are subject to their own privacy policies. 77aac shares only the minimum data necessary to complete each transaction.

3.2 KYC and Identity Verification Partners

To fulfil our Know Your Customer obligations, we work with authorised identity verification service providers. Document images and personal information shared for KYC purposes are processed by these providers solely for verification and are not used for any secondary purpose. All KYC partners are bound by contractual data processing agreements.

3.3 Game Studio Providers

Games on the 77aac platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive anonymised or pseudonymised session data (such as a session token and stake amounts) as part of the game round process. They do not receive your full name, contact details, or payment information.

3.4 Legal and Regulatory Authorities

77aac may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are legally required to do so, where we have a good-faith belief that disclosure is necessary to prevent fraud or other illegal activity, or where disclosure is required to protect the rights, property, or safety of 77aac, its players, or the general public.

3.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of the assets of 77aac, personal data held by 77aac may be transferred to the acquiring entity as part of the transaction. Players will be notified by email prior to any such transfer if it results in a material change to how their personal data is processed.

The 77aac platform uses cookies and similar tracking technologies to enable core platform functionality, maintain your session while you are logged in, and collect aggregated analytics data that helps us improve the platform experience for players in Bangladesh.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work more efficiently, to remember your preferences, and to provide the website operator with aggregated information about how the site is used.

4.2 Types of Cookies We Use

4.3 Third-Party Cookies

77aac does not deploy third-party advertising cookies or allow external ad networks to place tracking cookies on the 77aac platform. Analytics data collected through the platform is processed by our own analytics infrastructure and is not shared with external advertising platforms.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse some or all cookies, delete existing cookies, and set preferences for specific websites. Please note that disabling strictly necessary cookies will impair your ability to use the 77aac platform, as session authentication and security functions depend on them. Disabling functional cookies will mean that your preferences may not be saved between visits.

77aac implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

5.1 Technical Safeguards

• Encryption in Transit: All data transmitted between player devices and 77aac servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted using AES-256 encryption at rest.
• Password Security: Account passwords are stored using industry-standard one-way cryptographic hashing algorithms (bcrypt). Plain-text passwords are never stored.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to player data systems is logged and audited.
• Firewalls and Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for anomalous activity patterns.

5.2 Organisational Safeguards

• All 77aac staff and contractors who handle personal data are bound by confidentiality obligations.
• Regular internal training is conducted on data protection best practices.
• Security assessments and vulnerability scans are conducted on a scheduled basis.

5.3 Data Breach Response

In the event of a data security incident that results in a breach of your personal data, 77aac will assess the severity of the breach and take immediate steps to contain it. Where a breach poses a risk to your rights and freedoms, we will notify affected players by email to their registered address without undue delay, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, and the steps we are taking to address it.

77aac retains personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, to comply with legal and regulatory obligations, and to resolve disputes or enforce our Terms & Conditions. The following retention schedule summarises our approach:

When personal data is no longer required under the applicable retention schedule, it will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and research purposes.

6.1 Account Closure and Data

Closing your 77aac account does not result in the immediate deletion of all your personal data. As set out in the retention table above, certain categories of data are retained for legally mandated periods after account closure. If you wish to understand exactly what data is held about you following account closure, you may submit a Subject Access Request (see Section 7 below).

As a player on the 77aac platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 77aac data protection team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address.

7.1 Right of Access (Subject Access Request)

You have the right to request a copy of the personal data that 77aac holds about you. We will provide a structured, machine-readable summary of your personal data within 30 days of receiving your verified request. Where a request is unusually complex or voluminous, we may extend this period by a further 30 days and will notify you of the extension within the initial 30-day period.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may update certain account details (such as your email address or phone number) directly within your account settings. For corrections to identity documents or date of birth, please contact the support team with supporting documentation.

7.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Please note that the right to erasure is not absolute: we may be required to retain certain data for legal, regulatory, or contractual reasons (as described in the Data Retention section above). Where we are unable to fulfil an erasure request in full, we will explain which data must be retained and why.

7.4 Right to Restriction of Processing

You have the right to request that we restrict (i.e., pause, but not delete) the processing of your personal data in specific circumstances, such as while a dispute about the accuracy of your data is being resolved, or while you contest the legitimacy of our processing of your data.

7.5 Right to Data Portability

Where personal data has been provided by you and processed on the basis of your consent or for contract performance, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that it be transmitted to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interest. Where you object, we will assess whether our legitimate interest overrides your rights in the specific context. You have an absolute right to object to the processing of your personal data for direct marketing purposes, and we will honour all such objections without requiring justification.

7.7 Rights Related to Automated Decision-Making

Where a significant decision affecting your account has been made using solely automated means (for example, an automated fraud flag resulting in a withdrawal hold), you have the right to request a manual review of that decision by a member of the 77aac compliance team. Please contact [email protected] to initiate a manual review request.

If you have any questions, concerns, or complaints about how 77aac handles your personal data, or if you wish to exercise any of your privacy rights, please contact our data protection team using the following details:

• Email: [email protected] (Subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Response Time: We aim to acknowledge all privacy-related correspondence within 5 business days (Bangladesh Standard Time, UTC+6)
• Language: All privacy correspondence is handled in English

8.1 Complaints Process

If you believe that 77aac has not handled your personal data in accordance with this Privacy Policy or applicable data protection standards, you are encouraged to raise the matter directly with us in the first instance. We take all privacy complaints seriously and will investigate and respond to every complaint thoroughly and promptly.

To submit a formal complaint, please email [email protected] with the subject line "Formal Privacy Complaint", a clear description of your concern, the relevant account email address, and any supporting documentation you believe is relevant. A member of our data protection team will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days.

8.2 Updates to This Privacy Policy

77aac reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by email to their registered address at least 14 days before the changes take effect. The updated Privacy Policy will also be published on this page with a revised "Last Updated" date. Your continued use of the 77aac platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

8.3 Governing Law

This Privacy Policy is governed by and construed in accordance with applicable data protection and privacy principles. Any disputes arising in connection with this Privacy Policy that cannot be resolved through our internal complaints process will be subject to the dispute resolution procedures set out in the 77aac Terms & Conditions.