Your Privacy Matters at 7y77 — Our Full Data Policy

1. Introduction

This Privacy Policy ("Policy") is issued by 7y77 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "User") who visit, register on, or use the services offered through the 7y77 website and associated mobile interfaces, primarily targeting the Bangladesh market.

7y77 takes its obligations regarding the privacy and security of personal data seriously. This Policy is intended to provide a clear and complete account of our data practices so that you can make informed decisions about your personal information. It governs all data processing activities carried out by 7y77 in connection with your use of the platform, including account registration, identity verification, financial transactions, gameplay activity, and customer support interactions.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where any conflict exists between this Policy and the Terms & Conditions in relation to data matters, the provisions of this Policy shall prevail.

By registering an account or using the 7y77 platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact our support team to arrange account closure.

2. Data We Collect

7y77 collects personal data through several channels: directly from you at registration and during use of the platform, automatically through technical systems when you interact with the website, and from trusted third-party sources such as payment processors and identity verification providers. The categories of data we collect are set out in the table below.

7y77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless this is directly relevant to a responsible gaming assessment initiated at your request or required by a compliance process.

3. How We Use Your Data

The personal data collected by 7y77 is used exclusively for the purposes set out below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your express consent.

• Account Management: Creating, maintaining, and operating your player account, including login authentication, account history, and account settings management.
• Identity Verification (KYC): Verifying your identity and age (21+ requirement) in accordance with responsible gaming standards and anti-money laundering compliance obligations. This includes processing National ID cards, passports, and proof of address documents.
• Payment Processing: Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Financial data is shared with payment processors solely for transaction execution purposes.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, unauthorised access, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion requests, and applying deposit limits and session time-outs in line with your stated preferences.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance via live chat and email. Support communications may be recorded for quality assurance and dispute resolution purposes.
• Platform Improvement: Analysing aggregated, anonymised gameplay and usage data to improve game selection, interface design, promotional offers, and overall platform performance.
• Marketing Communications: Sending promotional offers, bonus alerts, and information about new games or sports betting markets (including BPL, IPL, and T20 events) where you have opted in to receive such communications. You may opt out at any time.
• Legal and Regulatory Obligations: Retaining records as required to comply with applicable legal, tax, and financial reporting obligations, and cooperating with lawful requests from competent authorities.

4. Legal Basis for Processing

7y77 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to perform the contract between you and 7y77 — i.e., to operate your account, process transactions, and provide platform services. Without this processing, we could not provide you with the services you have registered to use.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements (21+), and financial record-keeping requirements.
• Legitimate Interests: Processing carried out for the legitimate business interests of 7y77, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally in relation to direct marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on consent, you retain the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing already carried out based on consent prior to its withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or contact [email protected].

5. Sharing Your Data

7y77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa payment networks, and Mastercard payment networks receive the financial data necessary to process your deposit and withdrawal transactions. These providers are bound by their own regulatory obligations and data protection commitments.
• Identity Verification (KYC) Providers: Specialist third-party KYC and anti-money laundering service providers may receive your identity documents and personal details for the purpose of verifying your identity and age. These providers operate under strict data processing agreements with 7y77.
• Game Content Providers: Third-party game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi may receive anonymised session identifiers to facilitate gameplay. These studios do not receive your full identity or financial data.
• IT and Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who process data on our behalf under contractual obligations that require them to maintain appropriate security and confidentiality standards.
• Legal and Regulatory Authorities: 7y77 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale involving 7y77, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such change via the email address registered on your account.

All third-party data processors engaged by 7y77 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with our written instructions.

6. Cookies & Tracking Technologies

7y77 uses cookies and similar tracking technologies to operate the platform effectively, enhance user experience, and gather anonymised analytical data. A cookie is a small text file placed on your device when you visit the 7y77 platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies enable secure login sessions, maintain your authenticated state, remember your session preferences, and facilitate payment flows. They cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how visitors use the platform — including which pages are visited most frequently, how long sessions last, and which games attract the most engagement. This data is used in aggregate to improve platform performance and content.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations so that these do not need to be re-entered on each visit.
• Marketing and Targeting Cookies: Used only where you have provided consent, to deliver promotional content relevant to your gameplay preferences and to measure the effectiveness of our marketing campaigns related to cricket betting, slots, and seasonal promotions (BPL, Eid, Pohela Boishakh).

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the platform. For marketing and analytics cookies, you may withdraw consent at any time by updating your preferences in your account settings or by contacting support.

7. Data Retention

7y77 retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as we are required to do so by applicable law. The following retention periods apply as a general guideline:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of seven (7) years following the date of the transaction, in line with standard financial record-keeping requirements.
• Gameplay Data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes, and in anonymised, aggregated form indefinitely for platform improvement purposes.
• Customer Support Communications: Retained for two (2) years following closure of the relevant support case, or for five (5) years where the communication relates to a formal dispute or complaint.
• Marketing Consent Records: Retained for three (3) years from the date of last consent action, to demonstrate compliance with consent obligations.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud investigation purposes, after which it is deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction or identification. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for analytical purposes.

8. Your Rights

As a data subject, you hold the following rights in relation to the personal data that 7y77 processes about you. To exercise any of these rights, please submit a written request to [email protected] with sufficient detail to identify your account and the specific right you wish to exercise. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that 7y77 holds about you, along with information about how it is being processed, the purposes for which it is used, and the categories of recipients to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where the data has been unlawfully processed. This right is subject to legal retention obligations that may require us to retain certain data despite a deletion request.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data on the grounds of legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

7y77 will not charge a fee for processing data subject requests in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, 7y77 reserves the right to charge a reasonable administrative fee or to decline to act on the request, with a written explanation provided.

9. Children & Minors

The 7y77 platform is strictly intended for adults aged 21 years and above. 7y77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and 7y77 employs technical controls to prevent underage access.

If 7y77 becomes aware that personal data has been collected from an individual below the minimum age threshold, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the verified payment method where possible. Any winnings accrued by an underage account will be voided in accordance with our Terms & Conditions.

10. Security Measures

7y77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• Transport Encryption: All data transmitted between your device and 7y77 servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates), ensuring that data cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, payment details, and KYC records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls, multi-factor authentication, and audit logging.
• Intrusion Detection: Automated intrusion detection and prevention systems monitor platform infrastructure continuously for anomalous activity, unauthorised access attempts, and security incidents.
• Regular Security Audits: 7y77 conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: A formal data breach response procedure is in place. In the event of a security incident affecting your personal data, 7y77 will notify affected players without undue delay and take immediate steps to contain and investigate the breach.
• Staff Training: All personnel with access to personal data receive mandatory training on data protection obligations, secure data handling practices, and the procedures to follow in the event of a suspected breach.

While 7y77 takes all reasonable steps to protect your personal data, no security system is entirely impenetrable. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your 7y77 account has been compromised, contact our support team immediately.

11. Third-Party Links

The 7y77 platform may contain references to third-party game providers (such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi) whose game interfaces are embedded within or accessible through the platform. While 7y77 carefully selects its technology and content partners, we do not have control over the privacy practices of third-party systems and are not responsible for the privacy policies of those providers.

We encourage you to review the privacy policies of any third-party service providers whose content you access through the 7y77 platform. This Privacy Policy applies solely to data collected and processed directly by 7y77 in connection with your platform account and activity.

12. Policy Amendments

7y77 reserves the right to amend, update, or replace this Privacy Policy at any time. All changes will be published on this page with a revised "Last Updated" date. Where amendments are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — 7y77 will provide advance notice to registered players via email to the address held on your account, or via an in-platform notification, prior to the changes taking effect.

Your continued use of the 7y77 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept any amendment to this Policy, you must cease use of the platform and contact support to arrange account closure.

We recommend reviewing this Privacy Policy periodically, particularly before making deposits or providing updated personal information. The current version is always accessible at 7y77.io/privacy-policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 7y77 processes your personal data, please contact our support team through the following channels:

• Email: [email protected] — for written data subject requests, complaints, and policy enquiries. Please include your registered account name and a clear description of your request.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat interface on the 7y77 platform. Live chat is best suited to general questions; formal data subject requests should be submitted by email for documentation purposes.
• Response Times: Email requests are acknowledged within 24 hours and substantively addressed within 30 calendar days. Live chat responses average under 2 minutes during Bangladesh peak hours (BST, UTC+6).

For matters relating to responsible gaming, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For general platform questions, visit our FAQ page.

Responsible Gaming Notice: Gambling involves financial risk and is intended for entertainment purposes only. The 7y77 platform is for adults aged 21 and above. If gambling is negatively impacting you or someone you know, please visit our Responsible Gaming page or contact support immediately. Tools including deposit limits, session reminders, and self-exclusion are available to all registered players.