77ac Privacy Policy — Your Data, Your Rights

77ac is an online betting and casino platform operating at https://77ac.im, serving players in Bangladesh with sports betting markets, live casino games, slots, and other gaming products. For the purposes of this Privacy Policy, "77ac", "we", "us", and "our" refer to the operators and data controllers responsible for the 77ac platform.

As the data controller, 77ac is responsible for deciding how and why your personal data is collected and processed. Where third-party service providers process data on our behalf — such as payment processors, identity verification providers, and game content suppliers — those parties act as data processors under contractual agreements that obligate them to handle your data solely as directed by 77ac and in accordance with this policy.

This Privacy Policy applies to all personal data collected through the 77ac website at https://77ac.im, any associated mobile-optimised interface, and all direct communications between you and our support team. It does not apply to third-party websites that may be referenced on this platform.

77ac collects personal data across several categories depending on how you interact with the platform. The following table summarises what we collect and the purpose of each category:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification under applicable legal obligations.

77ac collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing identity verification (KYC), making a deposit or withdrawal, updating your account profile, or contacting our support team.
• Automated technical collection: Technical and usage data collected automatically when you visit the 77ac platform, including IP address, device identifiers, browser type, referring URL, and page interaction data. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.
• Payment processors: Transaction confirmation data, payment method identifiers, and fraud-screening signals received from payment service providers including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks when you initiate deposits or withdrawals.
• Identity verification providers: Verification status, document authenticity signals, and age confirmation data received from third-party KYC providers that 77ac uses to comply with age verification and anti-fraud obligations.
• Responsible gaming interactions: Data you provide when setting deposit limits, session limits, loss limits, or requesting self-exclusion through the platform's responsible gaming tools.

77ac does not purchase personal data from data brokers, third-party list providers, or social media platforms. All data we hold about you has been collected directly or via service providers acting on our instruction.

77ac processes personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was collected.

• Account management: To create and maintain your player account, authenticate your identity at login, and update your account details as requested.
• Transaction processing: To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via your chosen payment method, maintain accurate financial records, and issue receipts or transaction confirmations.
• Age and identity verification: To confirm that you are at least 21 years of age and that the identity details you provided at registration are accurate, in compliance with our platform's eligibility requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, prohibited conduct, money laundering, account takeover attempts, and other security threats to the platform and its players.
• Legal and regulatory compliance: To meet our obligations under applicable laws, including record-keeping requirements, responding to lawful requests from authorities, and implementing responsible gaming obligations.
• Customer support: To respond to your queries, complaints, and dispute escalations, and to maintain records of those communications for quality assurance and compliance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve game offerings, navigation, and overall user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaigns — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time via your account settings or by contacting [email protected].
• Responsible gaming monitoring: To monitor gaming patterns that may indicate problem gambling behaviour and to provide timely interventions, limit reminders, and support resources in accordance with our Responsible Gaming Policy.

Every instance of personal data processing at 77ac is conducted on a valid legal basis. The following legal grounds apply to our processing activities:

• Contractual necessity: Processing your identity, contact, financial, and gaming activity data is necessary to perform the contract between you and 77ac — specifically, to operate your player account, process transactions, and deliver gaming services. Without this data, we cannot provide the services you have registered to use.
• Legal obligation: Certain processing activities — including identity verification, financial record-keeping, age verification, and the implementation of responsible gaming controls — are required by applicable legal and regulatory obligations. 77ac must process this data to remain compliant regardless of your consent.
• Legitimate interests: We process technical data, usage data, and fraud-detection signals on the basis of our legitimate interest in maintaining a secure, fair, and well-functioning platform for all players. We conduct a balancing assessment to ensure this processing does not override your rights and interests.
• Consent: Where you have expressly opted in to receive marketing communications or to the use of non-essential cookies, we process the relevant data on the basis of your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

77ac does not sell, rent, or trade your personal data. We share data with third parties only in the following strictly limited circumstances:

• Payment service providers: We share the financial and identity data necessary to process your deposit or withdrawal with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported Bangladeshi institutions). These providers receive only the data required to complete the specific transaction.
• Identity verification (KYC) providers: When you submit identity documents for account verification, those documents are processed by our contracted KYC provider, which returns a verification result to 77ac. The KYC provider does not retain your documents beyond the period required to complete verification.
• Game content providers: To deliver casino games, certain technical data (such as your player session token and bet history within a game session) is shared with the game provider — for example Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — to render the game and record outcomes. Game providers do not receive your identity or payment details.
• IT and hosting infrastructure providers: 77ac uses contracted cloud hosting and technology providers to run platform infrastructure. These providers process data on 77ac's behalf under strict data processing agreements and have no independent right to use your data.
• Legal and regulatory authorities: Where required by a valid legal obligation, court order, or lawful request from a competent authority, 77ac will disclose personal data as required by law. We will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 77ac's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any changes to how your data is processed.

All third-party data processors engaged by 77ac are bound by contractual data processing agreements that prohibit them from using your data for their own purposes, require them to implement appropriate security measures, and obligate them to delete or return data upon termination of the engagement.

The 77ac platform uses cookies and similar technologies to deliver a functional, secure, and personalised experience. The following categories of cookies are in use:

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or be notified before cookies are placed. Please note that disabling strictly necessary or fraud detection cookies may prevent you from logging in or using core platform features.

77ac does not use cookies or tracking pixels from third-party advertising networks for the purpose of delivering targeted advertising on external websites.

77ac retains personal data for no longer than is necessary for the purposes for which it was collected. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy financial record-keeping and anti-money-laundering compliance requirements.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial compliance obligations applicable in Bangladesh.
• KYC and identity verification documents: Retained for the period required to fulfil the verification purpose, plus any mandatory regulatory retention period, after which documents are securely destroyed.
• Support communications: Retained for three years from the date of last communication, to support dispute resolution, quality assurance, and training purposes.
• Gaming activity and session data: Retained for three years from the date of the session to support responsible gaming monitoring, dispute investigation, and regulatory audit requirements.
• Marketing preference records: Retained for the duration of your account and for one year following account closure, to maintain an accurate record of your consent and opt-out history.
• Technical and usage logs: Retained for 12 months from collection, after which they are aggregated or deleted.

When data reaches the end of its retention period, 77ac applies secure deletion procedures appropriate to the sensitivity of the data category. Anonymised or aggregated data derived from personal data may be retained indefinitely for analytical and statistical purposes, as it can no longer identify you as an individual.

77ac takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information from unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or device and the 77ac platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. The padlock symbol in your browser's address bar confirms that your connection is secure.
• Encryption at rest: Sensitive personal data stored in 77ac's databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to systems that hold personal data is restricted on a strict need-to-know basis. Staff and contractors with data access are subject to confidentiality obligations and undergo security awareness training.
• Password security: Player passwords are stored as salted cryptographic hashes. 77ac staff cannot view or recover your password in plain text. If you lose your password, you must reset it via the platform's secure password reset process.
• Fraud monitoring: Automated systems monitor account activity in real time for signs of unauthorised access, unusual transaction patterns, and other security anomalies. Suspicious activity triggers alerts and, where necessary, temporary account holds pending investigation.
• Incident response: In the event of a confirmed data breach that is likely to result in a risk to your rights, 77ac will notify affected players without undue delay, describing the nature of the breach, the data involved, and the steps being taken to address it.

While 77ac applies robust security measures, no system is entirely immune to risk. You also play an important role in keeping your account secure — use a strong, unique password, do not share your login credentials, and contact [email protected] immediately if you suspect your account has been accessed without your knowledge.

As a player whose personal data is processed by 77ac, you hold the following rights with respect to your information. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Request — [Your Account Username]":

• Right of access: You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a valid request, providing a structured summary of the categories and content of your data.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Corrections to identity data may require you to submit updated supporting documentation.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where no overriding legitimate interest or legal obligation requires its continued retention. Please note that certain data categories are subject to mandatory minimum retention periods and cannot be deleted on request until those periods have elapsed.
• Right to restriction: You may request that we restrict processing of your data — for example, while a dispute about the accuracy of your data is being resolved or where you have objected to processing and we are assessing whether our legitimate interests override your objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your data in a commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to object: You may object at any time to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, your preferences will be updated immediately. Where you object to legitimate-interests processing, we will assess whether our grounds override your rights.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

77ac aims to respond to all data subject requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 60 days, in which case we will notify you of the extension within the initial 30-day period.

The 77ac platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

Registration on the 77ac platform includes an age declaration step requiring the applicant to confirm they are 21 or older. All accounts are subject to identity verification procedures that include age confirmation. Any account discovered to belong to a person under the age of 21 will be closed immediately and all associated data will be deleted or returned in accordance with applicable legal requirements.

If a parent, guardian, or responsible adult believes that a person under 21 has created an account on the 77ac platform, they should contact [email protected] immediately. 77ac will investigate and take appropriate action, including account closure and deletion of the minor's data, as a priority.

77ac reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. The effective date at the top of this document indicates when the current version entered into force.

Where changes are material — affecting how we collect, use, or share your personal data in ways that could significantly impact your rights or expectations — we will notify registered players by email to their registered address and/or via an in-platform notification at least 14 days before the revised policy takes effect. For minor corrections or clarifications that do not alter the substance of your rights, changes may take effect immediately.

The most current version of this Privacy Policy is always available at https://77ac.im/privacy-policy. We encourage you to review this page periodically. Continued use of the 77ac platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or complaints about how 77ac processes your personal data, or if you wish to exercise any of your data subject rights as described in Section 10, please reach out to us using the contact details below. All privacy inquiries are handled in English.

• Email: [email protected]
• Subject line for data requests: "Data Subject Request — [Your Account Username]"
• Subject line for privacy complaints: "Privacy Complaint — [Your Account Username]"
• Response time: Initial acknowledgement within 24 hours; full response within 30 calendar days
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)

77ac is committed to resolving all privacy concerns directly and promptly. If you have submitted a complaint and are not satisfied with our response within 30 days, you may escalate the matter by re-contacting [email protected] with the subject line "Escalated Privacy Complaint" and requesting a senior review.