How 77fdc Collects, Uses, and Protects Your Personal Data

1 Introduction & Scope

77fdc ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses, registers on, or interacts with the 77fdc platform at https://77fdc.io. This Privacy Policy sets out in clear terms what personal data we collect, why we collect it, how we use and store it, who we may share it with, and the rights you hold as a data subject.

This Policy applies to all personal data collected through the 77fdc website, its mobile-optimised interfaces, customer support channels, and any other digital touchpoint operated under the 77fdc brand. It covers all players, prospective players, and visitors, regardless of whether they hold a registered account.

This Privacy Policy should be read alongside the 77fdc Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By accessing the platform or creating an account, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any provision of this Policy, you must discontinue use of the platform immediately.

All references to "personal data" in this Policy mean any information that identifies or could reasonably identify a living individual, including names, contact details, device identifiers, payment references, and behavioural data generated through use of the platform.

2 Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for personal data collected through the 77fdc platform is the operating entity behind the 77fdc brand, accessible at https://77fdc.io.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our support team using the contact details in Section 14 of this Policy. We aim to respond to all data subject requests within 30 calendar days of receipt.

3 Information We Collect

77fdc collects personal data through several channels. The categories of data we collect are described below.

3.1 Registration Data. When you create a 77fdc account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Mobile phone number registered to your bKash, Nagad, Rocket, or Upay wallet
• Username and hashed password
• City or region of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

3.2 Identity Verification (KYC) Data. As part of our Know Your Customer process, we may collect copies of:

• Bangladesh National Identity Card (NID) or valid passport
• Proof of address (utility bill, bank statement, or mobile wallet statement dated within 90 days)
• Selfie photograph for biometric comparison against your identity document
• Evidence of payment method ownership (screenshot of registered mobile wallet)

3.3 Transaction Data. Every financial transaction conducted on the platform generates a record, including deposit amounts in Bangladeshi Taka (৳ BDT), withdrawal requests, payment method references (mobile number prefix), timestamps in Bangladesh Standard Time (BST, UTC+6), and transaction status.

3.4 Gameplay & Betting Data. We record all betting and gaming activity associated with your account, including wagers placed, game sessions, bet outcomes, bonus usage, and responsible gaming tool activations such as deposit limits and self-exclusion requests.

3.5 Technical & Device Data. When you access the 77fdc platform, our servers automatically collect certain technical information, including:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Referring URL and navigation path through the platform
• Session duration and page interaction data
• Cookie identifiers (see Section 7)

3.6 Communications Data. If you contact the 77fdc support team via live chat or email, we retain a record of the communication, including the content of your messages, timestamps, and the resolution outcome, for training, compliance, and dispute resolution purposes.

4 How We Use Your Data

77fdc uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we process personal data are as follows:

• Account Creation and Management: To register your account, authenticate your identity at login, and maintain the accuracy of your account records throughout your relationship with 77fdc.
• Payment Processing: To facilitate deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, and Upay, and to maintain a complete transaction history accessible from your account dashboard.
• Identity Verification: To verify that you meet the 21+ age requirement and to comply with our Know Your Customer obligations, thereby preventing underage gambling and financial crime on the platform.
• Game and Betting Services: To deliver the cricket betting, live casino, slots, and instant game products offered by 77fdc, to settle wagers accurately, and to apply bonus and promotional credits in accordance with active promotion terms.
• Responsible Gaming: To monitor account activity for indicators of problem gambling behaviour, to apply self-imposed limits and self-exclusion requests, and to contact players where our responsible gaming obligations require intervention.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the 77fdc Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality and compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the 77fdc platform and to improve the user experience, product range, and performance of our services.
• Marketing Communications: To send you promotional offers, personalised bonus recommendations, and platform updates where you have provided consent to receive such communications (see Section 11).
• Legal Compliance: To fulfil any legal or regulatory obligation that requires the collection, retention, or disclosure of personal data, including responding to lawful requests from competent authorities.

5 Legal Basis for Processing

Every processing activity carried out by 77fdc rests on one of the following recognised legal bases:

• Contractual Necessity: Processing required to fulfil the contract between 77fdc and you, including operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering (AML) checks, and record-keeping obligations.
• Legitimate Interests: Processing carried out in the legitimate interests of 77fdc or its players, provided those interests are not overridden by your fundamental rights and freedoms. This covers fraud prevention, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing carried out based on your freely given, specific, informed, and unambiguous consent. This applies primarily to direct marketing communications. You may withdraw consent at any time by contacting [email protected].

6 Data Sharing & Third Parties

77fdc does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share player data only in the circumstances described below, and only to the extent strictly necessary for each purpose.

6.1 Game Content Providers. To deliver the casino and betting products on the platform, 77fdc shares necessary session and account data with certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only the minimum data required to launch a game session and record its outcome.

6.2 Payment Service Providers. To process deposits and withdrawals, 77fdc communicates with mobile financial service providers including bKash, Nagad, Rocket, and Upay. Transaction references and wallet identifiers are shared as required to initiate and confirm each payment. We do not store full mobile wallet credentials on our servers.

6.3 Identity Verification Partners. Where KYC verification is conducted through a third-party identity verification service, your submitted identity documents and biometric data are processed by that service under a data processing agreement that restricts use to verification purposes only.

6.4 Fraud Prevention and Security Services. Aggregated or pseudonymised data may be shared with specialist fraud prevention and cybersecurity partners to identify suspicious patterns, prevent platform abuse, and protect the integrity of the 77fdc ecosystem.

6.5 Legal Authorities. 77fdc may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by a lawful order or where disclosure is necessary to protect the rights, property, or safety of 77fdc, its players, or the public. We will notify you of any such disclosure where legally permitted to do so.

6.6 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 77fdc's business, personal data held by us may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any material change in data controllership.

7 Cookies & Tracking Technologies

The 77fdc platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. A cookie is a small text file placed on your device by the platform when you visit. The categories of cookies we use are as follows:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming display preferences, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised, aggregated data about how visitors navigate the platform — which pages are visited most frequently, where users exit, and which features are used — to help 77fdc improve the platform experience. Individual users are not identified through analytics data.
• Marketing Cookies: Used where you have consented to receive personalised promotional content. These cookies allow 77fdc to present you with offers and game recommendations relevant to your stated preferences and platform history.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform's core features, though some personalisation functions may be reduced. For guidance on managing cookies in your specific browser, consult your browser's official help documentation.

8 Data Retention

77fdc retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy legal record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for the period required by applicable compliance obligations, typically five years from the date of verification or from account closure, whichever is later.
• Support Communications: Live chat transcripts and email records are retained for three years from the date of the interaction, or longer where they relate to an open dispute or legal proceeding.
• Technical Logs: Server and access logs are retained for up to 12 months, after which they are anonymised or deleted.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with consent obligations, even if the associated personal data has been deleted.

When personal data is no longer required and no legal retention obligation applies, it is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

9 Data Security

77fdc implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls in place include:

• SSL/TLS Encryption: All data in transit between your device and the 77fdc platform is encrypted using current SSL/TLS protocols, ensuring that information cannot be read by third parties during transmission.
• Password Hashing: Account passwords are never stored in plaintext. They are processed using a current best-practice one-way hashing algorithm with per-user salting to prevent compromise even in the event of a database breach.
• Access Controls: Access to personal data within 77fdc systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: The platform is protected by automated intrusion detection and prevention systems that monitor for unusual access patterns, brute-force login attempts, and other indicators of malicious activity.
• Regular Security Audits: 77fdc conducts periodic internal and external security reviews to identify vulnerabilities and verify that security controls remain effective against current threat vectors.

While 77fdc takes all reasonable precautions to protect your personal data, no digital platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights or interests, we will notify you and, where applicable, relevant authorities, in accordance with our incident response obligations.

You share responsibility for account security. You must maintain the confidentiality of your 77fdc login credentials and notify [email protected] immediately if you suspect any unauthorised access to your account.

10 Your Rights Over Your Data

As a data subject, you hold the following rights with respect to the personal data that 77fdc holds about you. To exercise any of these rights, please contact us using the details in Section 14.

• Right of Access: You may request a copy of all personal data held about you by 77fdc, along with information about how it is used, where it originates, and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request deletion of personal data that is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing has no legitimate basis. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that we restrict our processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of 77fdc's legitimate interests, including profiling for fraud prevention purposes. We will assess whether our legitimate interests override your objection in each case.
• Right to Withdraw Consent: Where processing is based on your consent (primarily direct marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

77fdc will respond to all valid data subject requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

77fdc will not charge a fee for responding to data subject requests, except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied.

11 Marketing Communications

77fdc may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new game launches, seasonal promotions (such as Eid, Pohela Boishakh, or BPL cricket season offers), and other platform news. We will only send direct marketing communications where you have provided your prior consent, either during account registration or through a subsequent consent update in your account settings.

Opting Out. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in the account settings dashboard, or by contacting the support team at [email protected] with the subject line "Marketing Opt-Out". Opt-out requests are processed within five business days. Please note that withdrawing marketing consent does not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notices, and security alerts — which are sent as part of the platform's core service.

Personalisation. Where you have consented to personalised marketing, 77fdc may use your gameplay history, preferred game categories, and deposit patterns to tailor the offers and recommendations you receive. This personalisation is carried out using automated logic and does not produce legally significant decisions about your account status.

12 Children & Minors

The 77fdc platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the registration and KYC processes, and any account found to be held by an individual under 21 will be immediately closed, with all associated data flagged and handled in accordance with our underage gambling prevention procedures.

If you have reason to believe that a person under the age of 21 has registered on or is using the 77fdc platform, please notify the support team immediately at [email protected]. We will investigate all such reports promptly and take appropriate action.

13 Changes to This Policy

77fdc reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. When material changes are made, registered players will be notified via the contact details held on their account — typically by email or in-platform notification — before the changes come into effect.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. We encourage you to review this page periodically to stay informed about how your personal data is being handled. Continued use of the 77fdc platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any changes to this Policy, you must stop using the platform and may request account closure in accordance with the procedures set out in the 77fdc Terms & Conditions.

14 Contact & Data Requests

For all privacy-related enquiries, including data access requests, rectification requests, erasure requests, marketing opt-outs, and reports of suspected data breaches or underage account activity, please contact the 77fdc data team using the following details:

• Email: [email protected] (plain text — not a clickable link; please copy the address manually into your email client)
• Subject Line for Data Requests: "Data Subject Request — [Your Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the support widget on the 77fdc platform
• Response Time: Email responses within 24 hours; data subject request responses within 30 calendar days
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

To process a data subject request, we will need to verify your identity before disclosing or modifying any personal data. Please include your registered username and, where possible, the mobile number associated with your account in your request to allow us to locate your records promptly.