Your Privacy Matters at 777dd

1 Introduction

777dd operates as Bangladesh's premier English-language online casino and sports betting platform, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As a data controller, 777dd is responsible for determining how and why personal data about our Players is processed.

We take our data protection obligations seriously. This Policy is designed to provide you with clear, plain-English information about our data practices so that you can make informed decisions about your engagement with the 777dd platform. We recommend reading this Policy in full alongside our Terms & Conditions, which together form the complete agreement governing your use of 777dd.

This Policy applies to all personal data collected through the 777dd website at 777dd.io, including all sub-pages, account portals, game interfaces, betting interfaces, and any communications between you and our support team. It does not apply to third-party websites or services that may be linked from our platform — those third parties operate under their own privacy policies.

2 Data We Collect

777dd collects personal data from you through several means: directly when you register and use the platform, automatically through technical mechanisms as you browse and play, and in certain limited cases from trusted third-party identity verification partners. The categories of data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond document-based age verification), or health data, except where a Player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion or problem gambling referral.

3 How We Use Your Data

777dd uses the personal data we collect for the following specific purposes. We process your data only where we have a valid legal basis for doing so (see Section 4).

• Account Creation & Management: To register and maintain your 777dd account, verify your identity, and provide you with access to all platform features appropriate to your account status.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment channels, and to reconcile financial records accurately.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years, to verify that the identity documents you have provided are authentic, and to prevent fraudulent account creation.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, account takeovers, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns, flag unusual activity, maintain required transaction records, and report suspicious activity where required under applicable law.
• Responsible Gaming Monitoring: To analyse your gaming behaviour for indicators of problem gambling, to enforce deposit limits, cooling-off periods, and self-exclusion restrictions you have requested, and to support our responsible gaming team in proactive outreach where concerning patterns are identified.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via live chat and email in English.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, optimise platform performance, and develop new features and games that better serve our Bangladeshi player community.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as those tied to BPL season, Eid, or Pohela Boishakh) — but only where you have explicitly opted in to receive marketing communications from 777dd. You may withdraw this consent at any time from your account settings.

4 Legal Basis for Processing

For each category of personal data processing activity, 777dd relies on one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering regulations, identity verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing carried out for the legitimate business interests of 777dd, including fraud prevention, platform security, abuse detection, responsible gaming monitoring, and analytics — provided such interests are not overridden by your fundamental rights and interests.
• Consent: Processing activities for which we have obtained your explicit, informed, and freely given consent — specifically, marketing communications via email. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

777dd does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment Processors: bKash, Nagad, Dutch-Bangla Bank (Rocket), and Upay receive the transaction reference data necessary to process your deposits and withdrawals. Each provider processes this data under its own privacy policy and applicable financial regulations.
• Identity Verification Partners: We may share copies of your identity documents with trusted third-party Know Your Customer (KYC) service providers for the purpose of authenticating your identity and verifying your age. These partners are contractually bound to process your data solely for KYC purposes and to maintain equivalent data security standards to those we apply internally.
• Game Providers: When you play games developed by third-party studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, a session token and your account identifier may be shared with the provider's systems to enable game functionality. Game providers do not receive your full identity or payment data.
• Technology & Infrastructure Partners: Cloud hosting providers, content delivery networks (CDNs), and IT security vendors who support the technical operation of the 777dd platform may process certain technical data in the course of providing their services. All such partners operate under data processing agreements that restrict their use of your data to platform-operation purposes only.
• Law Enforcement & Regulatory Authorities: Where required by applicable law, court order, or a lawful request from a competent authority, 777dd may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies. We will notify you of any such disclosure where legally permitted to do so.

We do not share your personal data with any third party for their independent marketing purposes. We do not share data with social media platforms for advertising targeting.

6 Data Retention

777dd retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with your identity. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

7 Cookies & Tracking Technologies

777dd uses cookies and similar web technologies — including local storage and session storage — on the 777dd.io platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preference (English), and ensure security features operate correctly. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised, aggregated data about how Players navigate the 777dd platform — which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data is used exclusively to improve platform performance and user experience. No personally identifiable information is included in analytics reports.
• Functional Cookies: These cookies remember your in-platform preferences, such as your preferred game category, last visited section, and responsible gaming reminder settings, so that your experience is consistent across sessions.

777dd does not deploy third-party advertising cookies, social media tracking pixels, or any cookie that tracks your activity across other websites outside 777dd.io. You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

8 Security Measures

777dd employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS): All data in transit between your browser or device and our servers is encrypted using current-generation TLS protocols. You will always see a padlock icon and https:// in your browser address bar when connected to 777dd.io.
• Data Encryption at Rest: Sensitive data stored on 777dd servers — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within 777dd's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum access permissions required to perform their specific role. All internal data access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): 2FA is available for Players on their 777dd accounts and is mandatory for all administrative staff accessing internal systems that contain personal data.
• Intrusion Detection: 777dd operates continuous server monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to your rights and interests, 777dd will notify affected Players without undue delay and take all necessary remediation steps.

9 Your Data Rights

As a data subject, you have the following rights with respect to the personal data 777dd holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request" and we will respond within 30 days.

10 Children & Minors

The 777dd platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If you are under 21, you must not register an account, attempt to access the platform, or provide any personal data to 777dd.

If 777dd becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, permanently delete all associated personal data (subject to any overriding legal obligations to retain records of the age verification failure), and — where appropriate — report the incident in accordance with applicable child protection guidelines.

If you are a parent or guardian and believe that a minor in your care has registered an account with 777dd, please contact us immediately at [email protected]. We will investigate and take all necessary action without delay.

11 Policy Updates

777dd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes to this Policy, we will notify you by posting a prominent notice on the 777dd platform and, where we hold a valid email address for your account, by sending a direct email notification in English.

The updated Policy will take effect 14 days after the notice is first posted, giving you reasonable time to review the changes before they apply to your account. Your continued use of the 777dd platform after the effective date constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically, even in the absence of a formal notification, to stay informed of how 777dd handles your personal data. The "Last Updated" date at the top of this document and in the table of contents sidebar indicates when the most recent revision was made.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 777dd holds about you, please contact our Data Protection team using the details below. All correspondence must be submitted in English to ensure accurate and timely handling.

For responsible gaming concerns, self-exclusion requests, or problem gambling referrals, please clearly state the nature of your request in your email subject line. Our dedicated Responsible Gaming team monitors these requests with priority handling to ensure Player welfare is addressed without delay.

For formal complaints regarding our data practices that have not been resolved to your satisfaction through our internal process, you may escalate the matter to a relevant supervisory or consumer protection authority in your jurisdiction. 777dd is committed to cooperating fully with any legitimate regulatory inquiry relating to our data protection practices.