77ae Privacy Policy

1 Who We Are

77ae ("we", "us", "our") operates the online casino and sports betting platform accessible at https://77ae.io. We are the data controller responsible for the personal information you provide to us and the information we collect automatically when you use our platform. As the data controller, 77ae determines the purposes and means of processing your personal data.

Our platform is designed for adult players in Bangladesh, offering casino games, live dealer tables, and sports betting markets including cricket, football, and kabaddi. We are committed to protecting the privacy and security of every player who chooses to trust us with their personal information.

If you have questions about our data practices or wish to exercise any of your privacy rights, you can reach our Data Protection contact at [email protected]. All privacy-related enquiries are treated with priority and are handled within five business days of receipt.

2 Information We Collect

77ae collects personal data through several channels: information you provide directly when registering or using the platform, information collected automatically through your device and browsing behaviour, and information received from third-party verification and payment service providers. The specific categories of personal data we collect are set out below.

2.1 Information You Provide Directly

• Full legal name, as it appears on your government-issued identity document
• Date of birth, used to verify that you meet the 21+ age requirement
• Email address, used for account communications and transactional notifications
• Bangladesh mobile phone number, used for account authentication and bKash/Nagad payment processing
• Residential address, used for identity verification and regulatory compliance
• Account username and encrypted password
• Copies of identity documents submitted for KYC (Know Your Customer) verification, such as a National Identity Card (NID), passport, or driving licence
• Payment method details, including bKash account numbers, Nagad numbers, Rocket numbers, Upay numbers, or bank account details provided for deposit and withdrawal purposes
• Any correspondence you send to our support team via email, live chat, or WhatsApp

2.2 Information Collected Automatically

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session data including login timestamps, session duration, and pages visited
• Games played, bet amounts, wagering history, and win/loss records
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method used
• Bonus activations, wagering progress, and promotion participation history
• Cookie identifiers and similar tracking technology data (see Section 5)

2.3 Information from Third Parties

• Identity verification data returned by our KYC service providers following document checks
• Payment confirmation data returned by bKash, Nagad, Rocket, Upay, and banking partners
• Fraud and risk signals from our fraud prevention technology partners
• Responsible gaming data from any self-exclusion registers to which 77ae subscribes

3 How We Use Your Information

77ae uses your personal data only for legitimate, defined purposes directly connected to the operation of our platform and the services we provide. The table below summarises the primary purposes for which your data is processed and the categories of data involved.

4 Legal Basis for Processing

77ae processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the core gaming and betting services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, identity verification requirements, and any other applicable legal or regulatory obligations.
• Legitimate interests: Processing carried out in the legitimate interests of 77ae or a third party, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies and Tracking Technologies

77ae uses cookies and similar tracking technologies to operate the platform, enhance your user experience, maintain session security, and analyse platform usage patterns. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

The following categories of cookies are used on the 77ae platform:

• Essential cookies: Required for the basic operation of the platform. These include session management cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and cookies that maintain your language and currency preferences. Essential cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences and personalise your experience, such as your preferred sports league (e.g., BPL, T20 World Cup, IPL) or your most recently played game categories.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform, which pages are most visited, and where users encounter difficulties. This data helps us improve the platform experience. Analytics data is aggregated and does not identify individual users.
• Security and fraud prevention cookies: Used to identify potentially suspicious activity patterns and protect the integrity of the platform and your account.

6 How We Share Your Information

77ae does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment processors: We share necessary payment and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks such as Visa and Mastercard to process your deposit and withdrawal transactions.
• Identity verification providers: We share identity document data with our KYC service partners to verify your age and identity as required for account activation and withdrawal processing.
• Game technology providers: Aggregated, non-identifiable gameplay data may be shared with game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to facilitate game delivery and resolve technical disputes.
• Fraud prevention and security providers: We share risk signals and device data with our fraud detection technology partners to protect the platform and all players from fraudulent activity.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law or a valid legal order.
• Professional advisers: We may share data with our legal advisers, auditors, or accountants where strictly necessary and subject to appropriate confidentiality obligations.

All third parties with whom 77ae shares personal data are required to handle that data securely, use it only for the specified purpose, and not retain it beyond the period necessary for that purpose. We conduct due diligence on our service partners to ensure they maintain appropriate data protection standards.

7 International Data Transfers

Some of 77ae's service providers and technology partners may process personal data in countries outside Bangladesh. When personal data is transferred internationally, 77ae takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection principles.

These safeguards may include contractual data processing agreements that impose data protection obligations on the recipient, technical security measures such as encryption during transfer and at rest, and access controls that limit who can view personal data to authorised personnel only.

8 Data Retention

77ae retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention principles apply:

• Active account data: Retained for the duration of your account's active status plus a post-closure period as required for legal and regulatory purposes.
• KYC and identity documents: Retained for a minimum of five years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years following the transaction date to support financial auditing, AML compliance, and dispute resolution.
• Support correspondence: Retained for three years following the closure of the support case, to enable reference in the event of recurring issues or disputes.
• Marketing consent records: Retained for the duration of your account plus two years post-closure, to demonstrate compliance with consent-based marketing obligations.
• Anonymised analytics data: May be retained indefinitely, as it does not contain personally identifiable information.

When personal data reaches the end of its retention period, 77ae securely deletes or anonymises it in accordance with our internal data destruction procedures. Secure deletion methods used include cryptographic erasure for digitally stored data and certified destruction for any physical records.

9 Security Measures

77ae implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS encryption for all data transmitted between your device and the 77ae platform
• AES-256 encryption for personal data stored in our databases
• Bcrypt hashing with salting for all stored account passwords — meaning even 77ae staff cannot read your password
• Multi-factor authentication options for player accounts
• Role-based access controls ensuring that only authorised staff can access personal data, and only to the extent their role requires
• Regular security assessments and penetration testing of platform infrastructure
• Intrusion detection and monitoring systems operating continuously across our server infrastructure
• Secure, access-controlled data centres with physical security protocols

10 Your Rights and Choices

As a player on the 77ae platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with sufficient information to identify your account. We will respond within five business days of receiving a valid request.

11 Children and Minors

The 77ae platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step during account registration and is enforced through our KYC processes.

If 77ae becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, void any associated transactions, and securely delete the personal data in question. If you are a parent or guardian and believe that your child has registered an account on 77ae, please contact us immediately at [email protected] and we will act without delay.

12 Third-Party Links and Services

The 77ae platform may contain references to third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment service providers (such as bKash, Nagad, Rocket, and Upay). While these services are integrated into the 77ae platform experience, they operate under their own terms and privacy policies.

77ae is not responsible for the data practices of third-party service providers operating within or alongside our platform. We recommend that you review the privacy policies of any third-party service you use in connection with your 77ae account, particularly your mobile financial service provider.

13 Changes to This Privacy Policy

77ae reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes, we will notify registered players via email or via an in-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how 77ae protects your personal information. Your continued use of the platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, please stop using the platform and contact us to request account closure.

14 Contact and Data Requests

For any questions, concerns, or formal requests related to this Privacy Policy or the handling of your personal data, please contact the 77ae Data Protection team using the details below. All privacy-related requests are handled separately from general customer support and are given priority processing.

• Email (preferred for formal data requests): [email protected] — include "Privacy Request" in the subject line and provide your registered account username or email address for verification purposes.
• Live Chat: Available 24/7 via your account dashboard after logging in. For data access or deletion requests, our live chat agents will escalate your request to the Data Protection team.
• WhatsApp: +880 1700 000000, available 08:00–00:00 BST (UTC+6). Please note that formal data requests should be submitted in writing via email for verification and audit trail purposes.