77ap Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") is issued by 77ap ("we", "us", "our") and applies to all users of the 77ap platform, accessible at 77ap.io. It describes the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared, the safeguards we apply to protect it, and the rights available to you as a data subject.

By registering an account on 77ap or by using the platform in any capacity, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must discontinue use of the platform and may request account closure by contacting our support team.

This Policy should be read alongside the 77ap Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on matters of data privacy, this Policy shall prevail.

We are committed to protecting your privacy and to processing personal data lawfully, fairly, and transparently. We apply reasonable technical and organisational measures to keep your data secure and to ensure it is not used beyond the purposes described in this Policy.

2. Data We Collect

77ap collects personal data in the following categories. We collect only what is necessary for the specific purposes described in this Policy.

2.1 Registration Data

When you create a 77ap account, we collect the information you provide during the registration process, including your full name, date of birth, residential address, email address, and chosen username. This data is required to establish your identity, verify your eligibility to use the platform, and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer obligations and anti-money laundering requirements, we may collect documentary evidence of your identity and address. This includes copies of your national identity card, passport, driving licence, or utility bills. KYC documents are handled with strict confidentiality and stored securely in accordance with Section 8 of this Policy.

2.3 Financial Data

When you make deposits or withdrawal requests, we collect transaction-related data including your mobile wallet number (bKash, Nagad, Rocket, or Upay), bank account details where applicable, transaction amounts in BDT, and transaction timestamps. We do not store full payment credentials beyond what is technically necessary to process a transaction.

2.4 Transactional and Gaming Data

We record all betting and gaming activity on your account, including wagers placed, games played, amounts staked and won, bonus usage, and account balance history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

We automatically collect certain technical data when you access 77ap, including your IP address, browser type and version, operating system, device identifiers, session duration, pages visited, and referral source. This data helps us maintain platform security, detect fraud, and improve the user experience.

2.6 Communications Data

If you contact our customer support team, we retain records of that correspondence — including the content of emails, live chat transcripts, and any attachments — for the purposes of resolving your query and maintaining service quality records.

3. How We Use Your Data

77ap uses the personal data we collect for the following specific purposes:

We will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for doing so.

4. Legal Basis for Processing

77ap processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contract Performance: Processing is necessary to fulfil our obligations under the account agreement with you, including operating your account, processing transactions, and providing access to games and betting markets.
• Legal Obligation: Processing is required for compliance with applicable legal and regulatory obligations, including anti-money laundering laws, age verification requirements, and fraud reporting duties.
• Legitimate Interests: Processing is necessary for 77ap's legitimate business interests, including maintaining platform security, preventing fraud, and improving our services — provided those interests are not overridden by your own rights and interests.
• Consent: For certain activities — particularly the sending of direct marketing communications and the use of non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

77ap does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data in the following limited circumstances:

5.1 Payment Service Providers

To process your deposits and withdrawals, we share the necessary financial and identity data with our payment partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank). These providers act as data processors under contractual agreements that require them to handle your data securely and in accordance with applicable law.

5.2 Game Content Providers

Our casino and sports betting services are powered by third-party game studios and data providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Limited session and gameplay data may be shared with these providers solely for the purpose of delivering and auditing game content. These providers are contractually prohibited from using your data for their own marketing purposes.

5.3 Legal and Regulatory Authorities

We may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 77ap, its users, or the public.

5.4 Fraud Prevention and AML

In cases where we suspect fraudulent activity, money laundering, or other financial crimes, we may share relevant data with financial intelligence units, fraud prevention agencies, or other operators for the purpose of investigating and preventing such activity. This processing is carried out under legal obligation.

5.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant acquiring or successor entity. We will provide reasonable notice of any such transfer and ensure that the receiving entity is bound by equivalent data protection obligations.

6. Cookies & Tracking Technologies

77ap uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and analyse usage patterns. Cookies are small text files placed on your device when you visit 77ap.io. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for core platform functionality including login session management, security tokens, and load balancing. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language selection, game display settings, and last-used payment method. These improve your experience but are not required for basic functionality.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with 77ap, which pages are visited most frequently, and where errors occur. This data helps us improve the platform over time.
• Marketing Cookies: Used — only with your consent — to deliver relevant promotional content based on your gaming interests and browsing behaviour on the platform.

You may manage or withdraw your cookie consent at any time through your browser settings. Disabling certain categories of cookies may affect the functionality of the 77ap platform. Strictly necessary cookies cannot be disabled via browser settings as they are essential to session operation.

7. Data Retention

77ap retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to meet our legal and regulatory obligations, and to resolve any disputes that may arise. Our general retention standards are as follows:

• Active Account Data: Retained for the full duration of your account relationship with 77ap and for a period of at least five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Retained for three (3) years from the date of the most recent interaction, unless the matter is subject to an ongoing dispute, in which case records are retained until the dispute is resolved.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which your data is suppressed to ensure we do not contact you again without fresh consent.
• Technical and Log Data: Retained for up to twelve (12) months from the date of collection, unless retained for longer as evidence of a suspected security incident or fraud investigation.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8. Security Measures

77ap takes the security of your personal data seriously. We implement a range of technical and organisational safeguards designed to protect your data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption applied to all data transmitted between your device and 77ap.io, protecting your account credentials and financial information in transit.
• Encryption of sensitive data at rest, including KYC documents and payment credentials, using industry-standard encryption protocols.
• Role-based access controls ensuring that 77ap staff can only access personal data to the extent required by their specific job function.
• Regular internal security audits and vulnerability assessments of our platform infrastructure.
• Intrusion detection systems and real-time monitoring for anomalous access patterns and potential data breaches.
• Staff data protection training and confidentiality obligations for all personnel who handle personal data.

Whilst we maintain robust security measures, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential. 77ap will never ask you to share your password via email or any communication channel.

9. Your Data Rights

As a user of 77ap, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered username and a clear description of your request. We will respond within thirty (30) days of receipt.

Please note that certain rights are subject to exemptions. For example, we may not be able to delete data that we are legally required to retain. Where we are unable to fully satisfy a request, we will explain the reason in our response.

10. Children's Privacy

The 77ap platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered on 77ap or provided us with personal data, please contact us immediately at [email protected]. We will investigate and respond within 48 hours.

11. Third-Party Links

The 77ap platform may contain references to third-party services, game providers, or payment processors. Where such references involve navigating away from 77ap.io to an external website or application, please be aware that this Policy does not apply to those external services. 77ap has no control over, and accepts no responsibility for, the privacy practices or content of third-party websites.

We recommend that you review the privacy policy of any third-party service before providing them with personal data. The presence of a reference to a third-party service on 77ap does not constitute an endorsement of that party's privacy or data handling practices.

12. Updates to This Policy

77ap reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered users via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect.

The "Effective Date" shown at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically to remain informed of how 77ap handles your personal data. Continued use of the platform following the effective date of any revision constitutes your acknowledgement of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 77ap handles your personal data, please contact our data support team. All privacy-related enquiries are handled in strict confidence.

Email: [email protected]

Please include your registered username, the nature of your request or concern, and any relevant account details in your correspondence. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days. Where a request is particularly complex, we may extend this period by a further 30 days and will inform you accordingly.