Privacy Policy — How 77acc Handles Your Personal Data

1. Data We Collect

77acc collects personal data only to the extent necessary to provide a safe, legal, and high-quality gaming service to players in Bangladesh. We collect data in two ways: directly from you (information you provide) and automatically (information generated by your use of the Platform).

1.1 Information You Provide Directly

When you register a 77acc account, request a withdrawal, contact support, or otherwise interact with the Platform, you may provide the following categories of personal data:

• Identity data: full legal name, date of birth, gender
• Contact data: email address, mobile phone number, residential address
• Identity verification documents: National ID Card (NID), passport, or driving licence; proof of address documents
• Payment data: bKash account number, Nagad account number, Rocket account number, bank account details, or other payment method identifiers used for deposits and withdrawals
• Support communications: messages, complaints, or queries submitted to the 77acc support team via email or the in-platform messaging system

1.2 Information Collected Automatically

When you access the 77acc Platform, certain technical and behavioural data is collected automatically by our systems. This includes:

• Device and access data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Session data: login timestamps, session duration, pages visited, game titles launched, and wagering activity logs
• Location data: approximate geographic location inferred from IP address (used for eligibility verification and fraud prevention — no precise GPS data is collected)
• Cookie and tracking data: session cookies, persistent cookies, and similar technologies as described in Section 4 of this policy

2. How We Use Your Data

77acc uses personal data collected from players for specific, lawful purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following table summarises our principal data processing activities and the legal basis for each.

Processing Purpose	Data Categories Used	Legal Basis
Account registration and authentication	Identity, contact	Contractual necessity
KYC identity verification and age checks	Identity, verification documents	Legal obligation
Processing deposits and withdrawals	Payment, identity	Contractual necessity
Fraud detection and anti-money laundering	Identity, payment, session, location	Legal obligation / Legitimate interest
Responsible gaming monitoring	Session, wagering activity	Legal obligation / Legitimate interest
Customer support and dispute resolution	Identity, contact, support communications	Contractual necessity
Marketing and promotional communications	Contact, session	Consent (opt-in)
Platform analytics and improvement	Session, device, cookie	Legitimate interest

2.1 Marketing Communications

77acc will only send you promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive them during registration or via your account preferences. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or updating your notification preferences within your account settings. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to that withdrawal.

2.2 Automated Decision-Making

Certain 77acc processes — including fraud risk scoring, responsible gaming triggers, and bonus eligibility assessments — involve automated processing of your data. Where an automated decision produces a significant effect on your account (such as a temporary deposit restriction or an account review flag), you have the right to request human review of that decision. To exercise this right, contact [email protected] with the subject line "Automated Decision Review Request".

3. Data Sharing & Third Parties

77acc does not sell your personal data to any third party. We share data only where necessary to deliver the Platform's services, comply with legal requirements, or protect the legitimate interests of the Platform and its players. The categories of recipients with whom we may share your data are described below.

3.1 Payment Service Providers

To process deposits and withdrawals, 77acc shares necessary payment and identity data with integrated payment service providers including bKash, Nagad, Rocket, Upay, and partnered banking institutions. Each of these providers operates under its own privacy policy and data protection obligations. 77acc shares only the minimum data required to authenticate and complete a transaction.

3.2 Game and Technology Providers

The 77acc Platform delivers games developed and operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To facilitate gameplay, certain session and account data (such as a player token or account identifier) is transmitted to these providers. Game providers are contractually prohibited from using this data for any purpose other than game delivery and session management.

3.3 Legal and Regulatory Authorities

77acc may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law, court order, or to prevent, detect, or investigate fraud, money laundering, or other serious criminal activity. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

3.4 Service Providers and Sub-Processors

77acc engages third-party service providers to assist with infrastructure hosting, analytics, email delivery, and customer support tooling. These providers act as data processors and are contractually bound to process personal data only on 77acc's documented instructions, to maintain appropriate security standards, and not to use that data for their own purposes.

4. Cookies & Tracking Technologies

The 77acc Platform uses cookies and similar tracking technologies to ensure core site functionality, remember your preferences, analyse usage patterns, and — where you have given consent — deliver relevant promotional content.

4.1 Types of Cookies Used

The following categories of cookies may be set when you access 77acc:

• Strictly necessary cookies: These are essential for the Platform to function. They enable session management, authentication, and security features. They cannot be disabled without breaking core functionality.
  Session tokenCSRF protectionLoad balancer
• Functional cookies: These remember your preferences such as language settings, display preferences, and last-visited game categories so that the Platform behaves consistently across sessions.
  UI preferencesGame historyNotification settings
• Analytics cookies: These collect aggregated, anonymised data about how players navigate the Platform, which games are most popular, and where technical errors occur. This data is used solely to improve the Platform experience.
  Page viewsSession durationError logging
• Marketing cookies (consent required): With your explicit consent, these cookies enable 77acc to identify your interests and show you relevant promotional content. They are only activated if you opt in via the cookie preference panel.
  Promotion targetingReferral tracking

4.2 Managing Cookie Preferences

You may review and adjust your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the Platform. For all other categories, you may opt out at any time without losing access to core gaming services. Most modern browsers provide tools to view, delete, and block cookies on a per-site basis.

5. Data Retention

77acc retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory retention obligations that require us to keep records for a specified minimum period.

As a general guide, the following retention periods apply across the principal data categories:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and payment records: Retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Retained for three (3) years from the date of the most recent communication in a given thread.
• Marketing consent records: Retained for three (3) years from the date of consent or the date of withdrawal, whichever is later.
• Analytics and session data: Retained in aggregated, anonymised form indefinitely; individually identifiable session data is deleted within twelve (12) months of collection.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player.

6. Your Privacy Rights

As a player on the 77acc Platform, you hold a number of rights with respect to your personal data. These rights may be exercised at any time by submitting a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 20 business days. In exceptional cases of complexity, the response period may be extended by a further 10 business days, with notification.

6.1 Right of Access

You have the right to request a copy of the personal data that 77acc holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.

6.2 Right to Rectification

If any personal data held by 77acc about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-level data such as your registered name or contact details, you may also update this information directly through your account settings panel.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for continued processing. Please note that this right is subject to overriding legal obligations — in particular, we are required to retain certain transaction and identity records for a minimum of five years and cannot delete these on request during the mandatory retention window.

6.4 Right to Restrict Processing

You may request that 77acc restrict the processing of your personal data in certain circumstances — for example, while a rectification request is under review, or where you contest the lawfulness of a particular processing activity. During a restriction period, 77acc will continue to store your data but will not actively process it beyond storage.

6.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes at any time. Once an objection is received, 77acc will immediately cease all marketing communications directed to your account.

7. Data Security Measures

77acc applies a layered set of technical and organisational security measures to protect player data against unauthorised access, loss, alteration, or disclosure. While no system can guarantee absolute security, the following controls are in place across the Platform:

• SSL/TLS encryption: All data transmitted between your device and the 77acc Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to account access, payment flows, and all API communications.
• Password security: Account passwords are stored using industry-standard one-way hashing algorithms. 77acc staff cannot view or retrieve your password in plain text under any circumstances.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security awareness training.
• Fraud monitoring: Automated systems monitor account activity in real time for indicators of fraudulent behaviour, unauthorised access attempts, and anomalous transaction patterns.
• Infrastructure security: The Platform's server infrastructure is hosted in secured data centre environments with physical access controls, redundant power supplies, and regular security auditing.

8. Policy Updates & Contact

77acc reviews and updates this Privacy Policy periodically to reflect changes in legal requirements, technology, or business practices. When material changes are made, the revised policy will be published on this page with an updated effective date. For significant changes that may substantially affect your rights, 77acc will provide additional notice via email or a prominent in-platform notification.

We encourage you to review this page periodically. Your continued use of the 77acc Platform after any policy update constitutes your acknowledgement of the revised terms. If you disagree with a material change, you have the right to close your account and request deletion of your data in accordance with Section 6 of this policy.

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data, please contact the 77acc Privacy Team using the details below. We are committed to resolving all privacy concerns promptly and transparently.

Last Updated: January 2026  |  Version: 2.4  |  Contact: [email protected]