777ay Privacy Policy

777ay collects personal data from players and site visitors through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described below.

Account Registration Data: When you create a 777ay account, we collect your full legal name, date of birth, residential address, mobile phone number, and email address. This information is used to create and administer your account, verify your identity, and comply with Know Your Customer (KYC) and anti-money laundering obligations.

Identity Verification Data: As part of the KYC process, you may be required to submit copies of government-issued identification documents such as a National Identity Card (NID), passport, or driving licence, as well as proof of address and confirmation of payment method ownership. These documents are processed securely and retained for the periods required by applicable law.

Financial Transaction Data: We record details of all deposits, withdrawals, bonus claims, and betting activity conducted through your 777ay account. This includes transaction amounts (in BDT), timestamps, payment method identifiers (such as your bKash or Nagad account reference), and transaction outcomes. This data is used for payment processing, fraud prevention, and financial record-keeping.

Technical and Device Data: We automatically collect information about the devices and connections used to access 777ay, including IP address, device type, browser type and version, operating system, and referring URL. This data is used to maintain platform security, detect fraud, and improve the technical performance of our services.

Behavioural and Usage Data: We collect data on how you interact with the 777ay platform, including pages visited, games played, bet values, session duration, and feature usage patterns. This data is used to personalise your experience, optimise our product, and support our responsible gaming monitoring programme.

Communications Data: If you contact 777ay support — whether by email, live chat, or any other channel — we retain a record of that correspondence including the content of messages and any supporting documentation provided.

777ay does not disclose your personal data to third parties except in the circumstances described in this section. Where data is shared, we take steps to ensure that the recipient provides an equivalent level of data protection and that the sharing is limited to what is strictly necessary for the stated purpose.

Payment Service Providers: To process your financial transactions, 777ay shares transaction-specific data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the minimum data necessary to authorise and complete the transaction and are bound by their own data protection obligations.

Identity Verification Services: 777ay engages specialist KYC and identity verification providers to assist with document authentication and age verification. These providers process identity document data on our behalf and are prohibited from using it for any other purpose.

Game Technology Providers: The casino games and live dealer tables available on 777ay are supplied by licensed software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive gameplay data — such as bet amounts and game outcomes — for settlement and audit purposes. They do not receive your full personal profile.

Fraud Prevention and Security Partners: We share technical data such as IP addresses and device fingerprints with specialist fraud detection services to identify and mitigate account takeover attempts, bonus abuse, and money laundering activity across the platform.

Regulatory and Legal Authorities: 777ay will disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts when required to do so by applicable law, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of 777ay, our players, or the public.

Corporate Transactions: In the event that 777ay undergoes a merger, acquisition, or sale of business assets, personal data held by the Company may form part of the transferred assets. Players will be notified of any such change that materially affects the processing of their personal data.

Under no circumstances does 777ay share your personal data with third-party marketers, social media networks, or data brokers for their independent commercial use.

777ay implements a layered information security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated regularly in response to evolving threats and industry best practices.

Encryption: All data transmitted between your device and the 777ay platform is encrypted using TLS (Transport Layer Security). Sensitive data stored on our servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard algorithms. Passwords are never stored in plaintext; they are hashed using a one-way cryptographic function with a unique salt per account.

Access Controls: Access to personal data within 777ay's internal systems is restricted on a need-to-know basis. Staff who handle player data undergo background screening and are bound by confidentiality obligations. Access privileges are reviewed regularly and revoked promptly when no longer required.

Infrastructure Security: The 777ay platform is hosted on secure, geographically redundant server infrastructure with continuous intrusion detection monitoring, automated vulnerability scanning, and regular third-party penetration testing. Critical security patches are applied on an emergency basis as soon as they are available.

Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 777ay will notify affected players without undue delay following discovery and confirmation of the breach. We will provide clear information about the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

Data Location: Personal data collected from players in Bangladesh is primarily stored on servers located within secure data centres. Where data is transferred to third-party processors operating in other countries, 777ay ensures that appropriate contractual safeguards are in place to maintain an equivalent standard of protection.

While 777ay takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. You also have a role to play in protecting your account: use a strong, unique password for your 777ay login, do not share your credentials with anyone, and contact support immediately if you suspect unauthorised access.

777ay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a baseline; specific legal requirements may mandate longer retention in certain cases.

• Account and Registration Data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later, as required by financial crime prevention regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction to meet financial record-keeping obligations applicable to online payment service operators.
• Betting and Gaming History: Retained for 2 years from the date of each wager for responsible gaming monitoring and dispute resolution purposes; thereafter anonymised and retained in aggregate statistical form.
• Technical and Device Data: Retained for up to 12 months from the date of collection for fraud detection and security purposes, after which it is deleted or anonymised.
• Support Communications: Retained for 2 years from the date of the last communication in a given case thread, to allow for follow-up and dispute resolution.
• Marketing Opt-In Records: Retained for the duration of the marketing relationship plus 1 year after opt-out, to demonstrate compliance with consent obligations.

When personal data is no longer required to be retained, 777ay deletes or anonymises it using secure data destruction procedures. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical, analytical, and product improvement purposes.