Your Privacy Matters
to 77af

Introduction

This Privacy Policy ("Policy") describes how 77af ("77af", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "the Player") who access or use the 77af online betting and casino platform at 77af.io, including all related services, features, and content offered therein.

77af is committed to handling your personal data with care, respect, and full transparency. This Policy has been drafted in plain English so that you can clearly understand your rights and our obligations, without needing legal expertise to interpret the key points.

This Policy applies to all personal data we collect through the 77af website, through your account interactions, through your communications with our support team, and through the technical operation of the platform — including data collected automatically via cookies and similar technologies. It does not apply to third-party websites or services that may be linked to or from the 77af platform; those services are governed by their own privacy policies.

This Policy should be read alongside the 77af Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

Data We Collect

77af collects two broad categories of personal data: data you provide directly to us, and data we collect automatically through your use of the platform. The specific types of data within each category are set out below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, national identity card number or passport number, and a photograph of your identity document (provided during KYC verification).
• Contact data: Email address, mobile phone number, and residential address including district, division, and postcode within Bangladesh.
• Account credentials: Username and encrypted password. We do not store your password in plain text at any point.
• Financial data: Mobile wallet account details (bKash, Nagad, Rocket, or Upay account numbers registered in your name), bank account details where applicable, and payment card details processed via our secure payment gateway partners.
• Verification documents: Copies of supporting documents submitted during KYC verification, including utility bills, bank statements, or other address verification documents.
• Communications data: Records of your correspondence with the 77af support team, including emails, live chat transcripts, and any attachments submitted.
• Responsible gaming self-declarations: Any information you voluntarily provide when activating responsible gaming tools, including self-exclusion requests, deposit limit settings, and cooling-off period activations.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device type and model, screen resolution, and time zone setting (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, bet amounts placed, session duration, navigation patterns, features accessed, and timestamps of all significant account actions.
• Transaction data: Full records of all deposits, withdrawals, wagers, winnings, bonus activations, and bonus wagering history associated with your account.
• Cookie and tracking data: Data collected via cookies, pixel tags, and similar technologies as described in Section 07 of this Policy.

2.3 Sensitive Personal Data

77af does not intentionally collect sensitive personal data — including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where you voluntarily disclose such information in the context of a responsible gaming self-exclusion request or a support communication. Such disclosures are processed with the highest level of care and are not used for any purpose beyond the immediate support context.

How We Collect Your Data

77af collects personal data through the following channels:

• Account registration: When you complete the registration form on the 77af platform, you provide identity and contact data directly to us.
• KYC verification submissions: When you submit identity and address documents in response to a verification request from our compliance team.
• Deposit and withdrawal transactions: When you initiate a financial transaction, payment data is captured by our payment gateway partners and associated transaction records are logged in our systems.
• Platform use: Technical and usage data is collected automatically each time you access and navigate the 77af website, regardless of whether you are logged in.
• Support communications: When you contact the 77af support team by any channel, the content of that communication and any data you include within it is recorded.
• Cookies and similar technologies: As described in Section 07, data is collected automatically via cookies placed on your device when you visit the 77af website.
• Third-party sources: In limited circumstances, we may receive data about you from our identity verification service providers or payment processors for the purpose of completing KYC checks or fraud prevention — for example, confirmation that the name on your account matches the name on your registered payment method.

How We Use Your Data

The table below summarises the primary purposes for which 77af uses the personal data it collects, together with the categories of data used for each purpose.

77af does not use automated decision-making or profiling in any way that produces legal or similarly significant effects on you without human review. Automated systems are used for fraud pattern detection and responsible gaming monitoring, but decisions arising from those systems that affect your account are always reviewed by a member of the compliance or support team before any action is taken.

Legal Basis for Processing

For each purpose for which 77af processes your personal data, we rely on one of the following legal bases:

• Performance of a contract: Processing that is necessary to provide you with the services you have registered for — including account management, game access, and payment processing.
• Legal obligation: Processing that is required to comply with applicable law, including KYC identity verification, anti-money laundering obligations, and responsible gaming regulatory requirements.
• Legitimate interests: Processing that is necessary for 77af's legitimate business interests, where those interests are not overridden by your rights — including fraud prevention, platform security, and internal analytics for service improvement.
• Consent: Processing that we carry out on the basis of your explicit consent — including sending promotional emails or SMS notifications about offers and new games. You may withdraw your consent to marketing communications at any time by contacting the support team.

Sharing Your Data

77af does not sell, rent, or trade your personal data to any third party. We share personal data externally only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

6.1 Payment Processors

When you make a deposit or request a withdrawal, the financial data necessary to complete that transaction is shared with the relevant payment processing partner — for example, your bKash account number when you initiate a bKash withdrawal. Payment processors are contractually required to process your data solely for the purpose of completing the transaction and are not permitted to use it for any other purpose.

6.2 Identity Verification Providers

When you submit KYC documentation, the documents and associated identity data may be passed to our third-party identity verification partner for automated and/or manual review. Verification providers are contractually bound to process the data only for KYC purposes and to delete it upon completion of the verification process.

6.3 Legal and Regulatory Disclosures

77af may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by law, or where necessary to investigate, prevent, or take action in relation to suspected fraud, money laundering, or other illegal activity. In such cases, we will disclose only the minimum amount of data required to comply with the legal obligation.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 77af's business, personal data held by 77af may be transferred to the relevant successor entity. You will be notified of any such transfer and its implications for this Privacy Policy prior to the transfer taking effect.

6.5 Service Providers

77af engages a small number of trusted third-party service providers to assist with the technical operation of the platform — including cloud hosting, data security monitoring, and customer support tooling. These providers access personal data only to the extent necessary to perform their contracted services and are prohibited from using the data for any other purpose. All such providers are subject to contractual data processing agreements consistent with applicable data protection standards.

Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on return visits, remember your preferences, and collect data about how you use the site. Cookies themselves do not contain executable code and cannot access other data on your device.

7.2 Types of Cookies Used by 77af

• Strictly necessary cookies: These cookies are essential for the 77af platform to function. They enable core features such as maintaining your login session, remembering items in your account settings, and ensuring that security tokens are passed correctly during transactions. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and display preferences — so that you do not need to re-enter them on each visit.
• Analytics cookies: These cookies collect aggregated, anonymised data about how visitors use the 77af platform — including which pages are visited most frequently, how long sessions last, and where users exit the site. This data is used internally to improve platform performance and user experience.
• Session security cookies: Short-lived cookies that expire when you close your browser, used to protect the integrity of your active session and prevent cross-site request forgery.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the 77af platform. Disabling strictly necessary cookies in particular may prevent you from logging in or completing transactions.

77af does not currently use third-party advertising cookies or cross-site tracking cookies. The cookies deployed on the 77af platform are limited to those necessary for the safe and functional operation of the service and for internal analytics.

Data Security

77af takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 77af servers.
• Encryption at rest for all personally identifiable data stored in our databases, including financial data and identity documents.
• Role-based access controls that restrict access to personal data to those members of 77af staff who have a specific operational need to access it.
• Audit logging of all access to personal data by internal systems and staff, with regular review by the security team.
• Password hashing using industry-standard one-way cryptographic algorithms, ensuring that your account password is never stored in recoverable plain text.
• Two-factor authentication available to all players to add an additional layer of protection to their account login.
• Regular security assessments of platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

While 77af takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect any unauthorised access to your 77af account, please contact the support team immediately at [email protected].

Data Retention

77af retains personal data for different periods depending on the category of data and the purpose for which it was collected. The general principles governing our retention practices are as follows:

• Active account data: Personal data associated with an active 77af account is retained for as long as the account remains open and for a period of up to 5 years following account closure.
• Transaction records: Full transaction history — including all deposits, withdrawals, and wagers — is retained for a minimum of 5 years following the date of the transaction in accordance with anti-money laundering record-keeping requirements.
• KYC documents: Identity and address verification documents are retained for a minimum of 5 years following account closure or the completion of the KYC process, whichever is later.
• Support communications: Records of support interactions are retained for 2 years from the date of the interaction, or for the duration of the active account, whichever is longer.
• Marketing consent records: Records of your marketing consent or withdrawal thereof are retained for the duration of the account plus 2 years.
• Technical and usage data: Aggregated, anonymised analytics data may be retained indefinitely, as it does not constitute personal data. Raw session-level usage data is retained for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where deletion is not immediately possible due to backup schedules, the data will be isolated and protected from any further active processing until deletion is completed.

Your Rights

As a person whose data is processed by 77af, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 77af support team at [email protected] with a clear description of your request. All valid requests will be responded to within 15 working days.

• Right of access: You have the right to request a copy of all personal data 77af holds about you. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: You have the right to request that any inaccurate personal data we hold about you be corrected. Where data is incomplete, you may also request that it be completed.
• Right to erasure: You have the right to request that 77af delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to 77af's legal obligation to retain certain categories of data for regulatory purposes.
• Right to restrict processing: You have the right to request that 77af restricts its processing of your personal data in certain circumstances — for example, while a correction request is being investigated.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 77af in a structured, machine-readable format, and to have it transferred to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where 77af relies on legitimate interests as the legal basis. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Children and Minors

The 77af platform is strictly for adults aged 21 and above. 77af does not knowingly collect personal data from any person under the age of 21. The registration process requires users to confirm their age, and KYC verification provides an additional safeguard by requiring documentary proof of identity and date of birth.

If 77af becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or through any other means — the affected account will be closed immediately, all associated data will be deleted as promptly as is practicable, and any funds held in the account will be handled in accordance with applicable law and the 77af Terms & Conditions.

If you are a parent or guardian and you believe that a minor in your care may have registered an account on the 77af platform, please contact the support team immediately at [email protected]. We will investigate promptly and take all appropriate steps.

Third-Party Services

The 77af platform may contain references to, or integrations with, third-party services — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe. These third-party providers operate independently of 77af, and their collection and use of personal data is governed by their own privacy policies. 77af is not responsible for the privacy practices of third-party game content providers.

Similarly, the payment processing services used on the 77af platform — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — are provided by independent third parties. When you use any of these payment methods, your transaction data is processed by the relevant payment service provider in accordance with their own privacy and data protection policies. 77af recommends reviewing those policies before using any payment method.

77af does not control, and is not responsible for, the content or privacy practices of any third-party website or service that may be accessible from, or which may link to, the 77af platform.

Policy Amendments

77af reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, the "Last Updated" date at the top of this Policy will be revised, and registered players will be notified by email to the address on file for their account.

Continued use of the 77af platform following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and may request closure of your account by contacting the support team.

We encourage you to review this Policy periodically so that you remain informed about how 77af protects your personal data.

Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 77af has handled your personal data, please contact us using the details below. The 77af data support team is available seven days a week, including public holidays in Bangladesh.

• Email: [email protected]
• Response target: Acknowledgement within 4 hours; full response to data rights requests within 15 working days.
• Time zone: Bangladesh Standard Time (BST, UTC+6).

When submitting a data-related request, please include your full name, your 77af account username, and a clear description of your request or concern. This will help us locate your data quickly and respond as efficiently as possible.

If you are not satisfied with 77af's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. 77af will cooperate fully with any such regulatory investigation.