Privacy Policy — How 77gaya Collects, Uses, and Protects Your Personal Data
Your privacy matters to 77gaya. This policy explains in plain terms what personal data we collect when you use our platform, how we use it, who we share it with, and what rights you hold over your information. Please read it carefully alongside our Terms & Conditions.
End-to-End Encryption
All data transmitted between your device and the 77gaya platform is protected using 256-bit SSL/TLS encryption — the same standard used by international banking institutions. Your login credentials, payment details, and personal information travel encrypted at all times.
No Third-Party Marketing Sales
77gaya does not sell, rent, or lease your personal data to third-party marketers under any circumstances. Your information is used solely for the purposes described in this policy, and access is restricted to personnel and partners with a legitimate operational need.
Minimal Data Collection
77gaya operates on a principle of data minimisation. We collect only the personal information that is genuinely necessary to deliver our services, verify your identity, process payments, and fulfil our compliance obligations. We do not collect data for speculative future use.
KYC Data Handled Securely
Identity documents submitted as part of the KYC verification process are stored in encrypted form, access-controlled, and retained only for as long as required by our compliance obligations. KYC documents are never used for any purpose other than identity and age verification.
No Unsolicited Contact
77gaya contacts players by email or SMS only in connection with account activity, security alerts, promotional offers you have opted into, or support responses. We do not make unsolicited phone calls, and we do not pass your contact details to third-party call centres.
You Control Your Preferences
You can update your communication preferences, request access to the data we hold about you, or request deletion of your account data at any time by contacting the 77gaya support team. Subject to certain legal retention obligations, we will action such requests promptly.
1. Information We Collect
77gaya collects personal data from you in the following circumstances: when you register an account, when you complete KYC verification, when you make deposits or withdrawals, when you contact our support team, and through automated technical means as you interact with the platform. The categories of data we collect are described below.
1.1 Registration and Account Data
When you create a 77gaya account, we collect the following information that you provide directly:
- Full legal name;
- Date of birth (for age verification purposes);
- Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi);
- Mobile phone number;
- Email address;
- Chosen username and encrypted password hash.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer obligations, we may collect copies of:
- A government-issued photo identification document (National ID Card, Passport, or Driving Licence);
- Proof of the mobile financial service account (bKash, Nagad, Rocket, or Upay) used for transactions;
- Proof of address documentation (utility bill or bank statement), where specifically requested.
1.3 Financial Transaction Data
When you make deposits or request withdrawals, we record transaction amounts, timestamps, payment method identifiers (such as your registered bKash or Nagad account number), and transaction reference numbers. We do not store full debit or credit card numbers on our servers. Payment method identifiers are stored only in masked or tokenised form beyond what is operationally required.
1.4 Gameplay and Betting Activity
We record all betting and gaming activity associated with your account, including game titles, stake amounts, outcomes, session durations, and responsible gaming tool usage. This data is used for account management, dispute resolution, fraud detection, and responsible gaming monitoring purposes.
1.5 Technical and Device Data
When you access the 77gaya platform, our servers and analytics systems automatically collect certain technical data, including:
- IP address and approximate geolocation derived from it;
- Browser type and version;
- Operating system and device type;
- Pages visited, session start and end times, and clickstream data;
- Referring URL (the page from which you navigated to 77gaya, if applicable).
1.6 Communications Data
If you contact 77gaya via email or live chat, we retain a record of the communication including its content, timestamps, and any attachments. This data is used to manage your support case, maintain quality standards, and for training and audit purposes.
| Data Category | Collection Method | Primary Purpose |
|---|---|---|
| Account Registration Data | Provided by you at sign-up | Account creation, identity, communication |
| KYC / Identity Documents | Uploaded by you on request | Age and identity verification, AML compliance |
| Financial Transaction Records | Generated on each transaction | Payment processing, dispute resolution, AML |
| Gameplay and Betting History | Automatically recorded during play | Account management, responsible gaming, audits |
| Technical and Device Data | Automatically collected via server logs | Security, fraud detection, platform optimisation |
| Support Communications | Provided by you via email or live chat | Case management, quality assurance, audits |
2. How We Use Your Information
77gaya processes your personal data only for clearly defined, legitimate purposes. We do not use personal data for automated decision-making that produces legal or similarly significant effects on you without human review. The specific purposes for which we use each category of data are described below.
2.1 Service Delivery
We use your account registration data to create and maintain your player account, verify your eligibility to use the platform, process deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported banks, deliver game content, and send essential transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.
2.2 Identity and Age Verification
KYC data is used exclusively to verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your payment accounts are registered in your own name. This verification is a necessary precondition for processing any withdrawal from your 77gaya account.
2.3 Fraud Prevention and Security
Technical and device data, combined with transaction records and gameplay patterns, is analysed to detect and prevent fraudulent activity, unauthorised account access, money laundering, and the use of automated tools in violation of our Terms & Conditions. Where suspicious activity is detected, we may temporarily restrict account functionality pending investigation.
2.4 Responsible Gaming
Gameplay and session data is used to monitor for indicators of problematic gambling behaviour. Where such indicators are identified, 77gaya may proactively reach out to the affected player to offer responsible gaming resources, or apply platform-level protections in accordance with our Responsible Gaming Policy.
2.5 Promotional Communications
If you have opted in to receive promotional communications, we use your email address and mobile number to send you information about bonuses, seasonal promotions (such as Eid specials, Pohela Boishakh offers, or BPL cricket promotions), and platform updates. You may opt out of promotional communications at any time by contacting our support team or by using the unsubscribe link in any promotional email.
2.6 Platform Improvement
Aggregated and anonymised technical data is used to analyse platform performance, identify user experience issues, and guide decisions about feature development. This data cannot be linked back to any individual player once anonymised.
3. Sharing and Disclosure of Data
77gaya does not sell your personal data to third parties. We share data with external parties only to the extent necessary to deliver our services, meet legal obligations, or protect the security of the platform. The categories of recipients with whom data may be shared are described below.
Payment Service Providers
We share payment-relevant data with mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (including City Bank, BRAC Bank, Dutch-Bangla Bank) strictly as required to process your deposits and withdrawals. These providers are contractually bound to use your data only for payment processing purposes.
Game Software Providers
Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver game content. These providers do not receive your full name, payment details, or contact information through this integration.
Fraud and AML Screening
We may share transaction and identity data with third-party fraud detection and anti-money laundering screening services in order to fulfil our compliance obligations. These service providers are engaged under strict data processing agreements and may not use the data for any other purpose.
Legal and Regulatory Disclosure
77gaya will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order, warrant, or regulatory directive. In such cases, we will disclose only the minimum data required to satisfy the specific legal obligation, and we will notify the affected player where permitted by law to do so.
5. Data Retention
77gaya retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide.
5.1 Active Account Data
Account registration data, gameplay history, and transaction records are retained for the full duration of your account's active life. This data is necessary for the ongoing delivery of services, the resolution of disputes, and the administration of bonuses and promotions.
5.2 Post-Closure Retention
Following the closure of your account — whether initiated by you or by 77gaya — we retain your account data (excluding KYC documents) for a period of five years. This retention period reflects our obligation to maintain financial records for anti-money laundering compliance and to defend against potential legal claims that may arise after account closure.
5.3 KYC Document Retention
Identity documents submitted as part of the KYC process are retained for a period of five years following the closure of the account to which they relate. After this period, KYC documents are securely and permanently deleted from our systems.
5.4 Support Communications
Records of customer support interactions are retained for three years from the date of the last interaction in the relevant support case. This retention period supports quality assurance review and enables us to refer back to prior communications in the event of a recurring issue or escalated complaint.
5.5 Anonymous Analytics Data
Anonymised and aggregated analytics data — from which no individual player can be identified — is retained indefinitely for the purpose of historical platform performance analysis. Because this data cannot be linked to any individual, its retention does not constitute personal data processing and is not subject to the retention limits described above.
6. Security Measures
77gaya applies a multi-layered approach to information security, combining technical controls, organisational procedures, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure.
6.1 Technical Controls
All data in transit between your browser and the 77gaya platform is encrypted using 256-bit TLS. Data stored on our servers — including account credentials and KYC documents — is encrypted at rest using industry-standard encryption protocols. Access to production databases is restricted to authorised systems and personnel via role-based access controls and multi-factor authentication.
6.2 Organisational Controls
Access to personal data within 77gaya is granted on a strictly need-to-know basis. Staff who handle personal data are trained on data protection obligations and are bound by confidentiality agreements. Access privileges are reviewed regularly and revoked immediately upon a staff member's departure from the organisation.
6.3 Incident Response
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 77gaya will notify affected players as promptly as practicable. Notification will be provided via the email address registered to your account and will include a description of the nature of the breach, the categories of data affected, and the steps we are taking to address it.
6.4 Your Responsibility
The security of your account also depends on actions you take. You should choose a strong, unique password for your 77gaya account, enable two-factor authentication where available, and ensure you log out of your account when using a shared or public device. 77gaya will never ask for your password via email, live chat, or any other communication channel. If you receive such a request, do not respond and contact support immediately.
7. Your Privacy Rights
As a player on the 77gaya platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 14 business days.
Right of Access
You have the right to request a copy of the personal data that 77gaya holds about you. This includes your account registration data, transaction history, KYC records, and gameplay data.
Right to Rectification
If any personal data we hold about you is inaccurate or out of date, you have the right to request that it be corrected. You can update most account details directly through your account profile page.
Right to Erasure
You may request deletion of your personal data. Please note that certain data — particularly transaction records and KYC documents — must be retained for legal compliance reasons and cannot be deleted on request during the mandatory retention period.
Right to Restriction
You may request that we restrict our processing of your data in certain circumstances — for example, while we are investigating a dispute about data accuracy or a complaint about how your data has been used.
Right to Portability
You have the right to receive a structured, machine-readable copy of the personal data you have provided to 77gaya, so that you can transfer it to another service provider if you choose to do so.
Right to Opt Out of Marketing
You may withdraw your consent to receive promotional communications from 77gaya at any time. Opting out of marketing does not affect your ability to receive essential transactional and security notifications related to your account.
77gaya will not discriminate against you in the delivery of services as a result of your exercising any of the rights listed above. Where a request cannot be fulfilled — for example, because a legal retention obligation applies — we will explain the reason in our response.
8. Policy Updates and Contact
8.1 Updates to This Policy
77gaya may update this Privacy Policy from time to time to reflect changes in the services we offer, the data processing activities we undertake, or the applicable legal framework. When material changes are made, we will display a prominent notice on the platform and, where appropriate, notify affected players by email. The updated policy will take effect on the date stated at the top of the document.
Your continued use of the 77gaya platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we handle your personal information.
8.2 Links to Other Sites
The 77gaya platform may contain links to third-party game providers or payment portals. 77gaya is not responsible for the privacy practices of these third parties. Once you navigate away from the 77gaya website to a third-party site or application, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party services you use in connection with your 77gaya account.
8.3 Children's Privacy
77gaya is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the platform, please contact us at the address below immediately.
8.4 Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 77gaya holds about you, please contact our support team. Our preferred contact method is email. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 14 business days.
Email: [email protected]
Live Chat: Available 24/7 via your account dashboard.
Support Hours: 08:00 – 00:00 BST (UTC+6), seven days a week.
Your Data Is Safe With 77gaya
We take your privacy as seriously as your gaming experience. If you have questions about how your data is used, visit our FAQ page for quick answers, review our Terms & Conditions, or log in to manage your account preferences and responsible gaming settings. 18+ only — please play responsibly.