777ba Privacy Policy

1. Introduction

This Privacy Policy describes how 777ba ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the 777ba platform at 777ba.io, including all associated pages, features, games, and services.

By creating an account on the 777ba platform or by continuing to use the platform after this Privacy Policy has been updated and communicated to you, you acknowledge that you have read and understood this policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read alongside the 777ba Terms and Conditions, which set out the contractual framework governing your use of the platform. Where there is a conflict between the two documents on a data-related matter, this Privacy Policy shall prevail.

2. Data Controller

The data controller responsible for the personal data collected through the 777ba platform is the operator of 777ba.io. For all data-related enquiries, requests, and complaints, players may contact us directly using the details provided in Section 15 of this policy.

Where 777ba engages third-party processors to carry out specific data-processing activities on its behalf — such as payment providers, identity verification services, or analytics platforms — those third parties act as data processors and are bound by contractual obligations that restrict their use of your data to the specific purpose for which it was shared.

3. Data We Collect

777ba collects the following categories of personal data in the course of operating its platform and providing services to registered players:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender (where provided voluntarily)
• Government-issued photo ID (national ID card, passport, or driving licence) provided during verification
• Proof of address documentation (utility bill, bank statement) provided during verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential or correspondence address

3.3 Financial Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers registered to your account)
• Bank account details provided for withdrawal processing
• Transaction history (deposits, withdrawals, wagers, bonus credits, and adjustments)
• Source-of-funds documentation provided in response to a verification request

3.4 Technical Data

• IP address at the time of registration and each login
• Device type, operating system, and browser version
• Session timestamps, login history, and logout times
• Geolocation data (country and city level, derived from IP address)
• Cookie identifiers and similar tracking technologies (see Section 10)

3.5 Behavioural and Usage Data

• Games played, betting history, stakes, and outcomes
• Platform navigation patterns and feature usage frequency
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)
• Bonus claims, wagering progress, and promotion participation history

3.6 Communications Data

• Records of all communications between you and 777ba support, including live chat transcripts, email exchanges, and support ticket history
• Feedback and survey responses submitted voluntarily
• Marketing preference records (opt-in and opt-out status for promotional communications)

4. How We Collect Data

777ba collects personal data through the following means:

• Directly from you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account profile;
• Automatically through the use of cookies, server logs, and similar tracking technologies as you navigate and interact with the 777ba platform;
• From third-party service providers including identity verification agencies, payment processors, and fraud prevention services that provide additional data about you in the course of delivering their services to 777ba on your behalf;
• From publicly available sources where 777ba is required to conduct due-diligence checks under applicable anti-money laundering obligations.

5. How We Use Your Data

777ba uses the personal data collected about you for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Identity data, contact data, technical data
Identity verification and age verification	Identity data, contact data, financial data
Processing deposits and withdrawals	Financial data, identity data, technical data
Delivering games, sportsbook markets, and platform services	Behavioural data, technical data
Administering bonuses and promotional offers	Behavioural data, financial data, contact data
Fraud detection and prevention	Technical data, financial data, behavioural data, identity data
Anti-money laundering compliance	Financial data, identity data, behavioural data
Responsible gaming monitoring and enforcement	Behavioural data, financial data, communications data
Customer support and complaint resolution	Communications data, identity data, financial data
Platform security and integrity monitoring	Technical data, behavioural data
Sending account-related transactional communications	Contact data, financial data
Sending marketing communications (where consented)	Contact data, behavioural data, communications data
Platform analytics and service improvement	Technical data, behavioural data (anonymised where possible)

6. Legal Basis for Processing

777ba processes your personal data on the following legal bases, depending on the specific purpose for which the data is used:

• Contractual necessity: Processing that is necessary to create and manage your account, deliver the services you have requested, and process your transactions is carried out on the basis that it is required to perform our contract with you;
• Legal obligation: Processing that is necessary to comply with applicable anti-money laundering regulations, age verification requirements, and fraud reporting obligations is carried out on the basis of legal obligation;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming enforcement is carried out on the basis of 777ba's legitimate interest in maintaining a safe, secure, and fair platform;
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit consent, which may be withdrawn at any time by updating your marketing preferences in your account settings or by contacting our support team.

7. Data Sharing

7.1 Third-Party Service Providers

777ba shares personal data with carefully selected third-party service providers who assist in the delivery of our services. These providers are contractually restricted to using your data solely for the purpose for which it was shared and are prohibited from using it for their own commercial purposes. Categories of third-party processors include:

• Payment processing providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank);
• Identity and age verification service providers;
• Fraud prevention and anti-money laundering screening providers;
• Game content providers and live casino studio operators (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe);
• Cloud hosting and infrastructure providers;
• Customer support platform providers.

7.2 Legal and Regulatory Disclosures

777ba may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised third parties where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity, or to protect the rights, property, or safety of 777ba, its players, or the public.

7.3 No Sale of Data

777ba does not sell, rent, or otherwise transfer your personal data to any third party for that party's own marketing, advertising, or commercial purposes. This prohibition applies unconditionally and without exception.

7.4 Business Transfers

In the event that 777ba undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller by email to your registered address before the transfer takes effect.

8. Data Retention

777ba retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status;
• Account data following closure: Retained for a minimum of 5 years from the date of account closure to meet anti-money laundering and fraud investigation obligations;
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction;
• Identity verification documents: Retained for a minimum of 5 years from the completion of verification or account closure, whichever is later;
• Support communications: Retained for 3 years from the date of the most recent communication in the relevant thread;
• Marketing consent records: Retained for 3 years from the date the consent was last confirmed or updated.

After the applicable retention period has expired, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

9. Data Security

777ba implements a layered approach to data security designed to protect your personal information against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest;
• Multi-factor authentication requirements for administrative access to production systems;
• Regular independent security audits and penetration testing of our platform infrastructure;
• Role-based access controls ensuring that only authorised personnel can access specific categories of personal data;
• Continuous intrusion detection monitoring on all production systems;
• Strict vendor assessment procedures before any third-party processor is granted access to player data.

While 777ba takes all reasonable precautions to protect your personal data, no system of data security can guarantee complete protection against all threats. You also have a role to play in keeping your account secure — see Section 3 of the Terms and Conditions for your account security obligations.

10. Cookies and Tracking Technologies

10.1 What We Use

The 777ba platform uses cookies and similar tracking technologies, including local storage objects and session tokens, to maintain your login session, remember your preferences, analyse platform usage patterns, and detect fraudulent or suspicious behaviour.

10.2 Types of Cookies

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, prevent cross-site request forgery, and enable core security features. These cookies cannot be disabled.
• Functional cookies: These remember your preferences such as language setting and responsible gaming tool configurations. Disabling them may affect your experience on the platform.
• Analytics cookies: These collect anonymised data about how players navigate and use the platform, which we use to improve our services. They do not collect data that could directly identify you.
• Fraud prevention cookies: These track device fingerprint characteristics and behavioural signals to assist in the detection of fraudulent account activity, bonus abuse, and bot traffic.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Blocking all cookies may prevent certain features of the 777ba platform from functioning correctly. Please refer to your browser's help documentation for guidance on managing cookie settings. Note that strictly necessary cookies and fraud prevention cookies cannot be disabled without affecting your ability to use the platform securely.

11. Your Rights

As a registered player on the 777ba platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and details of the specific right you wish to exercise:

• Right of access: You may request a copy of the personal data that 777ba holds about you;
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held about you;
• Right to erasure: You may request the deletion of your personal data, subject to 777ba's legal retention obligations. This right cannot be exercised where retention is required by law;
• Right to restriction: You may request that processing of your personal data be restricted to storage only, pending the resolution of a dispute or a rectification request;
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 777ba demonstrating compelling grounds that override your interests;
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that your data be provided in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

777ba will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days and will notify you of the extension within the initial 30-day window.

12. Minors

The 777ba platform is strictly prohibited for use by persons under the age of 21. We do not knowingly collect personal data from individuals under 21. If we become aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, any funds held will be frozen pending review, and the personal data collected will be deleted in accordance with our retention schedule once all necessary investigations are complete. If you believe a person under 21 has registered an account on the 777ba platform, please contact us at [email protected] immediately.

13. International Data Transfers

777ba operates as an offshore platform and your personal data may be stored or processed in data centres located outside Bangladesh. Where personal data is transferred to countries that may not have equivalent data protection standards to those applicable in your jurisdiction, 777ba implements appropriate safeguards to ensure that your data receives an adequate level of protection. These safeguards include the use of standard contractual clauses with data processors and the selection of data centre providers who maintain recognised international security certifications. By using the 777ba platform, you acknowledge and consent to such international transfers of your personal data in accordance with the safeguards described in this section.

14. Changes to This Privacy Policy

777ba reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. Where changes are material — meaning they affect how your data is used in a way that is meaningfully different from what was previously stated — we will notify you by email to your registered address at least 14 days before the revised policy takes effect. The date at the top of this document will always reflect when the policy was last updated. Your continued use of the 777ba platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and request account closure before the effective date.

15. Contact Us

For all privacy-related enquiries, data rights requests, complaints, or questions about this Privacy Policy, please contact the 777ba data team using the following details:

• Email: [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Response time: We aim to acknowledge all privacy-related communications within 24 hours and to resolve them within 30 days
• Support hours: 24 hours a day, 7 days a week
• Language: English