777h Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") explains how 777h ("we", "us", "our", "Company", "Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access and use the 777h website at https://777h.io and all associated services, games, and features. By registering an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1 Introduction & Scope

This Policy applies to all personal data processed by 777h in connection with the operation of its online casino and sports betting platform, including cricket betting, live casino games, slot games, crash games, and all related promotional activities. It covers data collected from players located in Bangladesh and any other jurisdiction from which the Platform is accessed.

This Policy should be read in conjunction with the 777h Terms & Conditions, available at /terms-conditions, and the Responsible Gaming Policy, available at /responsible-gaming, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on matters of data processing, this Policy prevails.

777h is committed to handling personal data in a manner consistent with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability. These principles guide every aspect of our data handling practices described in this Policy.

2 Data Controller

For the purposes of this Policy, 777h acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, 777h determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully and in accordance with this Policy.

All data protection queries, access requests, correction requests, erasure requests, and formal privacy complaints should be directed to the 777h data protection contact at [email protected] (plain text — not a clickable link). Our support team handles all privacy matters in English, 24 hours a day, 7 days a week, with Bangladesh Standard Time (BST, UTC+6) as our primary operating timezone.

3 Data We Collect

777h collects the following categories of personal data from players and website visitors. The specific data collected in each category depends on how you interact with the Platform:

Data Category	Specific Data Points	Collection Trigger
Identity Data	Full legal name, date of birth, national ID number, passport number, photograph (where KYC requires document upload)	Registration, KYC verification
Contact Data	Mobile phone number, email address, city/district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna)	Registration, account updates
Financial Data	bKash account number, Nagad number, Rocket number, Upay number, bank account details, Visa/Mastercard masked card number, transaction history	Deposit, withdrawal requests
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session duration, login timestamps	Automatic — website usage
Usage Data	Pages visited, games played, bet amounts and outcomes, bonus activations, wagering history, session frequency	Automatic — Platform activity
Communications Data	Live chat transcripts, email correspondence, support ticket content, voluntary feedback submissions	Support interactions
Responsible Gaming Data	Deposit limit settings, session time controls, cooling-off periods, self-exclusion status and dates	Responsible gaming tool activation

4 How We Collect Data

777h collects personal data through the following mechanisms:

• Direct collection: Data you actively provide when registering an account, completing KYC verification, initiating a deposit or withdrawal, submitting a support request, or communicating with our team via live chat or email.
• Automatic collection: Technical and usage data collected automatically through server logs, session tracking, and browser-based technologies when you access and navigate the Platform. This includes IP address logging, device fingerprinting for fraud prevention, and session analytics.
• Payment processors: Transaction confirmation data (such as transaction reference numbers, amounts, and timestamps) received from our payment partners including bKash, Nagad, Rocket, Upay, and card payment processors. We do not receive full card numbers or mobile banking PINs from payment processors — these are handled entirely within the respective payment provider's secure environment.
• Game providers: Aggregated gameplay data (bet amounts, game outcomes, round durations) received from licensed third-party game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of account management and dispute resolution.
• Cookies and similar technologies: Data collected via first-party cookies, session tokens, and local storage for authentication, session management, and Platform performance purposes. See Clause 8 (Cookies & Tracking) for full details.

5 Legal Basis for Processing

777h processes personal data only where there is a valid legal basis for doing so. The following legal bases apply to the processing activities described in this Policy:

• Contractual necessity: Processing required to perform the contract between 777h and the player, including account creation, identity verification, payment processing, game delivery, bonus administration, and withdrawal processing. Without this processing, we cannot provide the Platform services.
• Legal obligation: Processing required to comply with applicable legal obligations, including anti-money-laundering (AML) requirements, Know Your Customer (KYC) obligations, record-keeping mandates, and responses to lawful law enforcement or regulatory requests.
• Legitimate interests: Processing carried out in pursuit of 777h's legitimate business interests, where those interests are not overridden by the player's rights and freedoms. This includes fraud detection and prevention, Platform security monitoring, responsible gaming pattern analysis, and service improvement analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to the use of non-essential cookies and to direct marketing communications (where offered). Consent-based processing may be withdrawn at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

Personal data collected by 777h is used for the following purposes, each of which corresponds to one or more of the legal bases identified in Clause 5:

• Account creation and management: To register your player account, authenticate your identity at login, and manage your account settings and preferences throughout your relationship with 777h.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our anti-money-laundering compliance obligations.
• Payment processing: To process deposits from and withdrawals to your registered payment methods (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard) and to maintain accurate financial records of all transactions.
• Game delivery and betting: To provide access to the 777h game library — including cricket betting markets for BPL, T20 World Cup, IPL, ICC tournaments, and Bangladesh Tigers internationals — live casino, slots, and crash games.
• Bonus and promotions administration: To credit, track, and administer bonus balances, wagering requirements, and promotional offers, including the 200% welcome bonus up to ৳20,000 and ongoing reload promotions.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, unauthorised account access, and other forms of Prohibited Conduct as defined in the Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, to administer player-activated responsible gaming tools, and to proactively reach out to players who may benefit from support resources.
• Customer support: To respond to your support queries, complaints, and requests via live chat and email, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Platform improvement: To analyse aggregated usage data and technical performance metrics in order to improve the reliability, speed, and user experience of the 777h Platform.
• Legal and regulatory compliance: To maintain records required by applicable law, to respond to court orders and regulatory inquiries, and to cooperate with law enforcement authorities where legally required.

7 Data Sharing & Disclosure

777h does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing networks under any circumstances. Personal data is shared only in the following specific and controlled circumstances:

• Licensed payment processors: Your financial data is shared with the payment service providers necessary to process your deposit and withdrawal transactions. Each payment partner (bKash, Nagad, Rocket, Upay, Visa, Mastercard processing networks) operates under its own privacy policy and is contractually required to handle your data securely and only for the purpose of payment processing.
• Licensed game providers: Necessary gameplay data is shared with our licensed game providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — to deliver the game experiences within the Platform. Game providers receive the minimum data necessary for game session management and are contractually prohibited from using it for any other purpose.
• Identity verification partners: Where third-party KYC and age verification services are engaged to assist in verifying your identity documents, necessary identity data is transmitted to those services under strict data processing agreements.
• Legal and regulatory authorities: 777h will disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by a lawful order, summons, or legal obligation. Where permitted, 777h will endeavour to notify the affected player prior to such disclosure.
• Fraud prevention networks: In cases of suspected fraud, money laundering, or multi-accounting, limited data may be shared with industry fraud prevention databases and consortia for the purpose of protecting the integrity of online gaming services.
• Business transfers: In the event of a merger, acquisition, or asset sale involving 777h, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections and advance notification to affected players.

8 Cookies & Tracking

777h uses cookies and similar browser-based technologies to operate the Platform effectively, maintain your authenticated session, and collect anonymous usage analytics. The following categories of cookies are in use on the 777h Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session authentication tokens that keep you logged in during your visit, CSRF protection tokens that prevent cross-site request forgery, and load-balancing cookies that ensure consistent server routing. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred game category, currency display settings, and responsible gaming reminder intervals. They enhance your experience but are not strictly necessary for core functionality.
• Analytics cookies: First-party analytics cookies collect anonymous, aggregated data about how visitors interact with the Platform — including pages visited, session durations, and navigation paths. This data is used exclusively to improve Platform performance and user experience. No personally identifiable data is transmitted to external analytics platforms via these cookies.
• Fraud prevention tokens: Device fingerprinting tokens are used to identify and prevent multi-accounting, bonus abuse, and unauthorised access attempts. These tokens are treated as personal data under this Policy and are subject to the same retention and security standards as all other personal data.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing games or placing bets.

9 Data Retention

777h retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in accordance with standard financial record-keeping obligations applicable to online payment services.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, in compliance with anti-money-laundering record-keeping requirements.
• Transaction records (deposits and withdrawals): Retained for a minimum of 5 years from the date of the transaction.
• Support communications (live chat transcripts and emails): Retained for 2 years from the date of the interaction, or longer if the communication relates to an unresolved dispute or ongoing investigation.
• Responsible gaming records (self-exclusion, limit settings): Retained for the duration of the exclusion or limit period plus 5 years, to prevent circumvention through account re-registration.
• Technical and usage data (server logs, session data): Retained for a maximum of 12 months from collection, unless required for longer retention in connection with a security incident or investigation.
• Marketing consent records: Retained until consent is withdrawn, plus 3 years for evidence of the consent record.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 777h's data destruction procedures.

10 Data Security

777h implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and 777h servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The 777h website enforces HTTPS on all pages — unencrypted HTTP connections are automatically redirected.
• Password hashing: User passwords are never stored in plaintext. Passwords are processed through a strong cryptographic hashing algorithm with per-user salting before storage. Even 777h staff with database access cannot retrieve your original password.
• Access controls: Personal data is accessible only to 777h staff and contractors who have a legitimate operational need to access it. Access is governed by role-based permissions, and all access events are logged for audit purposes.
• Infrastructure security: 777h servers are hosted in secure, access-controlled data centres with physical security measures, redundant power and network connectivity, and regular security patching and vulnerability scanning.
• Fraud and intrusion monitoring: Automated systems monitor Platform activity in real time for anomalous patterns indicative of account takeover attempts, brute-force login attacks, and other security threats.
• Staff training: All 777h staff who handle personal data receive regular training on data protection obligations, secure data handling practices, and the procedures for responding to data security incidents.

11 Your Rights

As a data subject, you hold the following rights in respect of your personal data held by 777h. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request — [Your Username]":

• Right of access: You have the right to request a copy of the personal data 777h holds about you, together with information about how that data is being used. We will respond to access requests within 30 days of receipt.
• Right to rectification: You have the right to request correction of any personal data held by 777h that is inaccurate or incomplete. Minor account details (such as contact number and city) may be updated directly through the account dashboard without requiring a formal request.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing was based. This right is subject to 777h's legal retention obligations — data required for AML record-keeping, financial records, or active dispute resolution cannot be deleted before the applicable retention period expires.
• Right to restriction: You have the right to request that 777h restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of personal data you have provided to 777h in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. 777h will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

All rights requests will be acknowledged within 48 hours and resolved within 30 calendar days. Where a request is particularly complex or numerous, 777h may extend this period by a further 30 days, with notification to the requesting player.

12 Children & Minors

777h is strictly an adult platform. Registration is prohibited for any person under the age of 21. This age restriction applies without exception to all players accessing the Platform from any location. 777h does not knowingly collect personal data from individuals under the age of 21.

Where 777h becomes aware that personal data has been collected from a person under the age of 21 — whether through age verification failure, self-reporting, or third-party notification — the following steps will be taken without delay:

• The affected account will be immediately suspended pending investigation.
• Any deposits made by the underage player will be returned to the originating payment method in full.
• All personal data associated with the account will be securely deleted, subject only to any mandatory retention obligations required for the refund transaction record.
• The incident will be recorded in 777h's compliance log.

13 Third-Party Services

The 777h Platform integrates services provided by licensed third-party partners to deliver its full range of gaming and payment functionality. Each third-party provider operates under its own privacy policy and data processing framework. 777h ensures that all third-party partners are contractually bound to handle any personal data they receive in a manner consistent with the standards required by this Policy.

Third-party providers whose services are integrated into the 777h Platform include:

• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners. These providers process gameplay session data necessary to operate their games within the Platform environment.
• Payment processors: bKash, Nagad, Rocket, Upay, and international card payment processing networks. These providers process the financial transaction data necessary to execute deposits and withdrawals.
• KYC and identity verification: Where third-party verification services are used to support the identity verification process, they receive only the minimum data required to perform that specific function.

The 777h Platform does not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that would transmit personal data to unrelated third parties as a consequence of your visit. The Platform is designed to limit data flows to only those third parties directly necessary for service delivery.

14 Policy Updates

777h reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the structure and features of the Platform. When material changes are made to this Policy, 777h will notify registered players via the mobile number or email address on file at least 7 days before the revised Policy takes effect.

The current version of this Privacy Policy is always available at /privacy-policy and is identified by its effective date at the top of the document. Continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should close your account before the revised Policy takes effect.

For historical reference, previous versions of this Policy may be requested from [email protected]. 777h maintains an archive of prior policy versions for a minimum of 3 years from the date of supersession.

15 Contact Us

For all privacy-related queries, data rights requests, or concerns about how 777h handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the 777h website. Average response time under 2 minutes during peak hours (Bangladesh Standard Time, UTC+6).
• Email: [email protected] (plain text — not a clickable link). For data rights requests, use the subject line "Data Rights Request — [Your Username]". For privacy complaints, use "Privacy Complaint — [Your Username]".

777h will acknowledge all privacy-related contacts within 48 hours and aims to resolve all requests within 30 calendar days. If you are not satisfied with the outcome of your privacy request or complaint, you may request escalation to a senior compliance officer within 777h's data protection team.

Document Information: This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all prior versions of the 777h Privacy Policy. The authoritative version of this document is the English-language version published at https://777h.io/privacy-policy.