Privacy Policy
How 77q7 Protects Your Data

77q7 ("we", "us", "our") operates the online gaming and sports betting platform accessible at https://77q7.io (the "Platform"). We are committed to protecting the personal data of every individual who interacts with our Platform, whether as a registered player, a visitor browsing our content, or a prospective user considering registration.

This Privacy Policy sets out the legal and practical framework governing how 77q7 collects, stores, processes, shares, and safeguards personal information. It applies to all users of the Platform, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh from which the Platform is accessed.

This policy is written in accordance with internationally recognised standards of data protection and privacy best practice. Where local Bangladeshi law imposes additional obligations, we comply with those obligations in addition to the standards described herein.

We encourage you to read this policy in full before using the Platform. If you have questions about any provision, our support team is available 24/7 at [email protected] and will respond in English within one business day.

77q7 collects personal data across several categories depending on the nature of your interaction with the Platform. The categories below describe all personal information we may hold about you:

We do not collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily disclose such information in support communications. Any such data disclosed incidentally is handled with the highest level of confidentiality and is not used for profiling or marketing purposes.

77q7 collects personal data through the following channels:

• Direct interactions: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, contact our support team, or update your account settings.
• Automated technologies: When you browse the Platform, our servers and analytics systems automatically record technical and usage data including your IP address, session timestamps, device identifiers, and page interaction events. This collection occurs even if you do not have a registered account.
• Payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, the relevant payment gateway provides us with transaction confirmation data including masked account references and transaction amounts.
• Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may return session outcome data, wagering statistics, and RNG verification logs to our Platform systems as part of game integration.
• Fraud prevention and KYC services: We may use third-party identity verification and anti-fraud tools that process identity documents and cross-reference them against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.
• Cookies and tracking technologies: As described in Section 8 of this policy.

77q7 processes personal data only for specific, legitimate purposes. The table below maps each purpose to the categories of data used:

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

Every processing activity carried out by 77q7 rests on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including identity verification, transaction processing, game delivery, and support — is carried out on the basis that it is necessary to perform the contract between you and 77q7.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and aggregated analytics is based on 77q7's legitimate interest in maintaining a safe, fair, and functional gaming environment for all players. We have assessed that these interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, know-your-customer regulations, and any lawful requests from competent authorities is carried out on the basis of legal obligation.
• Consent: Where we send you promotional communications about bonuses, tournaments, or new game releases, we do so only on the basis of your freely given, specific, and informed consent, obtained during registration or via your account preference settings. You may withdraw this consent at any time by updating your notification preferences or by contacting [email protected].

77q7 shares personal data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios integrated into the Platform receive session identifiers and wager data necessary to deliver game outcomes. These providers are contractually prohibited from using your data for any purpose other than game delivery and fraud prevention.
• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum transaction data required to process deposits and withdrawals. Each provider operates under its own data protection obligations.
• Identity Verification & KYC Partners: Third-party identity verification services receive copies of identity documents and personal details for the purpose of verifying player identity and conducting AML screening.
• IT Infrastructure & Hosting Providers: Our platform infrastructure and data storage services are operated by professional hosting providers who process data strictly as data processors under our instruction and are bound by data processing agreements.
• Legal and Regulatory Authorities: 77q7 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal obligation, court order, or to protect the rights, property, or safety of 77q7 or its players.
• Professional Advisors: Legal counsel, auditors, and accountants may access personal data on a strictly confidential basis as part of their advisory services to 77q7.

77q7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of your account's active status plus five (5) years following account closure, to satisfy AML record-keeping requirements and to support any post-closure dispute resolution.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial record-keeping best practice.
• KYC and identity verification documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication in a given support case.
• Marketing consent records: Retained for the duration of your account plus two (2) years to evidence the basis on which marketing communications were sent.
• Technical and usage logs: Retained for thirteen (13) months on a rolling basis for platform security and analytics purposes, after which they are aggregated and anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to an ongoing legal hold (e.g., active litigation or regulatory investigation) will be retained until the hold is lifted, regardless of the standard retention period.

77q7 uses cookies and similar tracking technologies to deliver a functional, personalised, and secure Platform experience. A cookie is a small text file stored on your device by your browser when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, enable secure account access, and remember your responsible gaming settings. You cannot opt out of these cookies without ceasing use of the Platform.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors interact with the Platform — including pages visited, time on site, and error events — to help us improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences such as language, game display settings, and recently played titles, so that your experience is consistent across sessions.
• Marketing & Targeting Cookies: With your consent, these cookies may be used to deliver relevant promotional messages about 77q7's offers that may be of interest to you. We do not use third-party advertising networks that place cookies on your device for purposes unrelated to 77q7's own promotions.

You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in or complete transactions. On your first visit to the Platform, you will be presented with a cookie preference notice that allows you to manage non-essential cookies.

77q7 applies a layered security framework to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and 77q7's servers, including login sessions, deposit flows, and support communications.
• Encryption at rest for sensitive personal data stored in our databases, including identity document images, financial records, and payment method references.
• Two-factor authentication (2FA) available as an optional but strongly recommended security layer for all player accounts.
• Role-based access controls ensuring that internal 77q7 staff can access only the minimum personal data necessary to perform their specific job function. No employee has unrestricted access to the full player database.
• Regular penetration testing and security audits conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems and 24/7 monitoring of platform infrastructure to detect and respond to abnormal access patterns, brute-force attempts, and other security threats in real time.
• Secure credential storage using industry-standard hashing algorithms. Passwords are never stored in plain text and are not accessible to 77q7 support staff.

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 77q7 will notify affected players directly as soon as practicable and take immediate remedial action. We maintain a documented incident response plan for this purpose.

While 77q7 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is protected by appropriate security software.

As an individual whose personal data is processed by 77q7, you hold the following rights in relation to that data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request:

• Right of Access: You may request a copy of the personal data 77q7 holds about you, along with information about how it is used and with whom it is shared. We will respond within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you may request that we correct or complete it. Minor updates (e.g., email address changes) can be made directly via account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (where consent is the processing basis). Please note that this right is subject to overriding legal obligations — for example, we cannot erase transaction records that we are required to retain under AML regulations.
• Right to Restrict Processing: You may request that we restrict (i.e., pause but not delete) our use of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object at any time to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to marketing, we will stop sending marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The 77q7 Platform does not contain links to external third-party websites in its core navigation or content. However, where Game Providers' game information pages or promotional content reference external game studio sites, 77q7 is not responsible for the privacy practices of those third-party sites.

If you navigate to any external website from the 77q7 Platform, we strongly recommend reviewing the privacy policy of that third-party site before submitting any personal data. 77q7's Privacy Policy applies only to the 77q7 Platform at https://77q7.io and its associated sub-domains.

The 77q7 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes a date-of-birth verification step, and accounts found to have been opened by individuals under 21 will be immediately closed.

If you are a parent or guardian and believe that a minor has registered an account on the 77q7 Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and close the account within 24 hours of receiving a substantiated report, and will return any deposited funds to the originating payment method.

We encourage parents and guardians to use parental control software and to monitor their children's online activity to prevent unauthorised access to gambling platforms. Several free parental control tools are available that can restrict access to gambling websites on shared or family devices.

77q7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where a material change is made to the policy, we will notify registered players by posting a prominent notice on the Platform homepage and, where practicable, by sending an email notification to the registered address associated with your account.

The effective date at the top of this policy will be updated to reflect the date on which the revised version takes effect. Continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

The current version of this Privacy Policy is always accessible at https://77q7.io/privacy-policy. We recommend that you review this page periodically to stay informed about how 77q7 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 77q7 holds about you, please contact our dedicated data protection team. We are available 24 hours a day, 365 days a year, including during Eid, Pohela Boishakh, Victory Day (December 16), and BPL season.

Email: [email protected]

When contacting us regarding a data protection matter, please include your registered account username, the nature of your request, and any relevant reference information (such as a transaction ID or the date of a support interaction). This will help us locate the relevant data and respond accurately within the applicable timeframe.