777aa Privacy Policy —
How We Collect, Use & Protect Your Data

1. Who We Are

This Privacy Policy applies to the online gaming platform operated under the brand name 777aa, accessible at https://777aa.io (the "Platform" or "Site"). Throughout this document, "777aa", "we", "us", and "our" refer to the operator of the 777aa Platform.

777aa operates as an online casino and sports betting platform primarily serving users in the Bangladesh market. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the Platform.

This Privacy Policy should be read alongside the 777aa Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By using the 777aa Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2. Personal Data We Collect

777aa collects only the data that is necessary for the purposes described in this policy. The categories of personal data we may collect include:

2.1 Identity Data

Full legal name, date of birth, nationality, gender, and government-issued identification details (such as National ID number, passport number, or driving licence number) collected during registration and KYC (Know Your Customer) verification.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh — for example, addresses in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).

2.3 Financial Data

Payment method details, transaction records (deposits and withdrawals), wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts registered in your name, and records of any bonus or promotional credits applied to your account. Note: 777aa does not store full card numbers or payment credentials — these are handled by our payment processing partners.

2.4 Technical Data

IP address, browser type and version, device type and operating system, screen resolution, time zone, and other technical identifiers automatically collected when you access the Platform.

2.5 Usage Data

Records of your activity on the Platform, including pages visited, games played, bets placed, session duration, login timestamps, and interaction logs with customer support.

2.6 Communications Data

Records of correspondence between you and the 777aa support team via live chat, email, or WhatsApp, including the content of those communications and any attachments submitted.

2.7 Verification Documents

Copies of identity documents, proof-of-address documents, and payment method ownership evidence submitted during the KYC verification process. These documents are stored securely and accessed only by authorised personnel.

3. How We Collect Your Data

777aa collects personal data through the following channels:

• Direct Interactions: Data you provide when you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated Technologies: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform.
• Third-Party Sources: Identity verification data received from KYC service providers; transaction data received from payment processors such as bKash, Nagad, Rocket, and Upay; fraud prevention data from anti-fraud services; and analytics data from website analytics providers.
• Publicly Available Sources: In limited circumstances, publicly available information may be used to supplement identity verification (for example, cross-referencing a publicly listed address).

4. Why We Use Your Personal Data

777aa uses personal data collected from you for the following purposes:

• Account Registration & Management: To create and maintain your 777aa account, verify your identity, and manage your account settings and preferences.
• KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Processing Transactions: To process deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records.
• Providing Platform Services: To deliver the games, betting products, live casino features, and other services available on the 777aa Platform.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance via live chat, email, or WhatsApp.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct.
• Responsible Gaming: To monitor gameplay patterns and identify signs of problem gambling behaviour so that we may proactively offer assistance, apply protective limits, or initiate self-exclusion where warranted.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, tournaments, and seasonal promotions. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns, improve Platform performance, fix bugs, and develop new features and services.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable laws and regulations, respond to lawful requests from authorities, and maintain records as required by law.

5. Legal Bases for Processing

777aa processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions — including operating your account, processing bets, and handling deposits and withdrawals.
• Legal Obligation: Processing required to comply with applicable laws, including KYC identity verification, AML reporting obligations, and data retention requirements mandated by regulation.
• Legitimate Interests: Processing carried out for our legitimate business interests, including fraud prevention, security monitoring, responsible gaming oversight, and Platform improvement — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your explicit, freely given consent — primarily for marketing communications. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing message.

6. Sharing Your Personal Data

777aa does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may share your data with the following categories of trusted parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.1 Payment Processors

Your financial data is shared with payment processing partners (bKash, Nagad, Rocket, Upay, and others as applicable) solely for the purpose of processing transactions. These partners operate under their own privacy frameworks and are responsible for the data they handle independently.

6.2 Identity Verification Providers

Identity documents and personal details may be shared with third-party KYC and age-verification service providers who assist 777aa in fulfilling its verification obligations. These providers are contractually bound to process data only for the specified purpose.

6.3 Game Technology Providers

Certain gameplay data (such as session identifiers and bet history) may be shared with game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of operating games and resolving disputes. These providers do not receive your identity or financial data beyond what is technically required.

6.4 Fraud Prevention & Security Services

Technical and usage data may be shared with anti-fraud and cybersecurity service providers to protect the Platform and its users from fraudulent activity, account takeover, and other security threats.

6.5 Legal & Regulatory Authorities

777aa may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, or where such disclosure is necessary to protect the rights, property, or safety of 777aa, its users, or the public.

7. Cookies & Tracking Technologies

777aa uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and gather analytical insights. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience on return visits.
• Analytical Cookies: Collect anonymised data about how users navigate the Platform — pages visited, time on site, and error reports — to help us identify and fix issues and improve the user experience.
• Marketing Cookies: Used (only where you have provided consent) to track interactions with promotional content and measure the effectiveness of marketing campaigns. These do not enable third-party advertising on the 777aa Platform.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the Platform's functionality and may prevent you from logging in or completing transactions.

8. Data Retention

777aa retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention requirements. Our general retention periods are as follows:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money laundering regulatory requirements.
• KYC verification documents: Retained for a minimum of five (5) years from submission, or longer where required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter.
• Technical and usage logs: Retained for up to twelve (12) months from collection, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for statistical or analytical purposes without identifying any individual.

9. Your Privacy Rights

As a user of the 777aa Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You have the right to request a copy of the personal data 777aa holds about you, along with information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your 777aa account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML requirements).
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. Note that objecting to certain processing may limit your ability to use the Platform.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10. Children's Privacy

The 777aa Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from anyone under the age of 21. If 777aa becomes aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and void any associated transactions or winnings.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the 777aa Platform, please contact our support team immediately at [email protected] and we will take prompt action.

11. Data Security

777aa implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL (Secure Sockets Layer) / TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data fields, including identity document copies and financial records.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel who require it for their specific function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures that enable rapid detection, containment, and notification in the event of a suspected data breach.

While 777aa takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, 777aa will notify affected users without undue delay and in accordance with applicable legal requirements.

12. Third-Party Links

The 777aa Platform may contain references to third-party services, payment providers, or game studios. These third-party entities operate under their own independent privacy policies, and 777aa is not responsible for the data practices of any third party. We encourage you to review the privacy policies of any third-party service you use in connection with the 777aa Platform.

In particular, mobile wallet providers such as bKash, Nagad, Rocket, and Upay are independent entities whose data handling practices are governed by their own privacy frameworks. Any personal data you provide directly to these services is subject to their policies, not this Privacy Policy.

13. Changes to This Privacy Policy

777aa reserves the right to amend this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered users via email or via a notice on the Platform prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to stay informed of how 777aa is protecting your data. Your continued use of the Platform after any update to this policy constitutes acceptance of the revised terms.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 777aa handles your personal data, please contact us using the details below. All communications regarding privacy matters should be submitted in English.

• Email: [email protected] — use subject line "Privacy Enquiry" or "Privacy Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• WhatsApp: +880 1700 000000
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

777aa aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days. Where a request requires additional time due to complexity, you will be informed of the delay and provided with a revised resolution timeline.