Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how 77l ("the Platform", "we", "us", "our") collects, holds, uses and discloses personal data about users ("you", "your") of the 77l online gaming platform at 77l.bio. This Policy applies to all users of the platform regardless of their location in Bangladesh and regardless of the device used to access the platform. By registering an account or using the platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

77l is committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. We collect only the data that is genuinely necessary to operate the platform safely, process your transactions, verify your identity and deliver a high-quality gaming experience to players across Bangladesh, including players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi and beyond.

Your Privacy at a Glance

1. Who We Are

77l is an online gaming platform operating at 77l.bio, providing sports betting, live casino, slots and other gaming services to adult players in Bangladesh. For the purposes of this Policy, 77l is the data controller responsible for your personal data — meaning we determine the purposes and means by which your personal data is processed.

If you have any questions about how 77l handles your personal data, or if you wish to exercise any of your rights in relation to your data, please contact us at [email protected]. We take privacy enquiries seriously and will respond to all requests within a reasonable timeframe.

2. What Personal Data We Collect

We collect personal data in the following categories. We collect only data that is necessary for the purposes described in this Policy:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information or biometric data beyond what may be captured in a standard government-issued identity document during KYC verification.

3. How We Use Your Personal Data

77l uses the personal data we collect for the following purposes only:

• Account creation and management: to register your account, maintain your profile, manage your account settings and provide you with access to platform features.
• Identity verification and age verification: to confirm that you are who you say you are and that you meet the minimum age requirement of 21 years as required by 77l's Terms and Conditions.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and to maintain transaction records for your account history and for regulatory compliance.
• Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, money laundering, bonus abuse, multi-accounting and other prohibited activities that could harm users or the platform.
• Customer support: to respond to your enquiries, resolve disputes and provide technical assistance. Support communications may be reviewed for training and quality assurance purposes.
• Promotional communications: where you have opted in to receive marketing messages, to send you relevant bonus offers, promotions and platform updates. You can opt out of marketing communications at any time by contacting support.

4. Legal Basis for Processing

77l processes your personal data on the following legal grounds, depending on the purpose of the processing:

• Contractual necessity: processing your registration data, transaction data and account management data is necessary to perform the contract between you and 77l (i.e., to operate your account and provide the gaming services you have signed up for).
• Legal obligation: processing identity verification data and transaction records is required by applicable anti-money laundering (AML) regulations and age-verification requirements.
• Legitimate interests: processing usage data and communications data for fraud prevention, platform security and customer support is necessary for 77l's legitimate interest in operating a safe and fair gaming environment.
• Consent: sending you promotional communications is based on your opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

5. Sharing Your Personal Data

77l does not sell your personal data. We share your data only in the following limited and necessary circumstances:

• Payment providers: we share the minimum necessary transaction data with bKash, Nagad, Rocket, Upay, Visa and Mastercard (as applicable) in order to process your deposit and withdrawal requests. These providers are bound by their own privacy and data security obligations.
• Technology and platform partners: we share necessary operational data with technology service providers who help us run the platform, including game content providers (such as Pragmatic Play, Evolution Gaming, Spribe and Ezugi) and hosting and infrastructure providers. All such partners are required to process data only for the purpose for which it was shared and under appropriate data protection terms.
• Regulatory and law enforcement authorities: we may be required by law to disclose certain data to government authorities, law enforcement agencies or regulatory bodies. We will disclose only the data specifically required by any such request and will notify you where we are legally permitted to do so.
• Business transfers: in the event that 77l undergoes a merger, acquisition or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users in advance where reasonably practicable and the acquiring entity will be bound by this Policy or a policy of equivalent standard.

6. Payment Data and Financial Security

All payment transactions on the 77l platform are processed through encrypted, secure channels. We retain transaction records (amounts, dates, payment method identifiers and transaction reference numbers) for the purpose of account history, dispute resolution and compliance with applicable financial record-keeping requirements. We do not store full debit or credit card numbers, card expiry dates or CVV security codes on our systems. Card data is tokenised by the payment processor at the point of entry and is not accessible to 77l staff.

For mobile wallet payments via bKash, Nagad and Rocket, we retain only the wallet number associated with your account for the purpose of processing withdrawal requests back to your registered wallet. We do not retain your mobile banking PIN or any authentication credentials for these services.

7. Cookies and Tracking Technologies

77l uses the following categories of cookies and similar tracking technologies on the platform:

• Essential cookies: these are strictly necessary for the platform to function. They maintain your login session, remember your language preference and enable core security features. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: we use anonymised analytics data to understand how users interact with the platform — which pages are visited most, where users drop off during the registration flow, and how game categories perform. This data is aggregated and does not identify individual users.
• Security cookies: short-lived tokens used to validate your session and protect against cross-site request forgery (CSRF) and other common web security threats. These are set automatically and cannot be user-controlled.

77l does not use third-party advertising cookies, retargeting pixels or behavioural tracking technologies that share your browsing activity with advertisers. You can manage or delete cookies at any time through your browser settings. Note that disabling essential cookies will prevent you from logging in to the platform.

8. Data Retention

77l retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Account data is retained for the duration of your account's active period plus five (5) years following account closure, to satisfy AML record-keeping obligations. Transaction records are retained for a minimum of five (5) years from the date of the transaction. KYC identity documents are retained for five (5) years following the completion of verification or account closure, whichever is later. Support communications are retained for two (2) years from the date of the last interaction. After the applicable retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you.

9. Your Rights Over Your Personal Data

You have the following rights in relation to the personal data 77l holds about you. To exercise any of these rights, contact us at [email protected]:

• Right of access: you may request a copy of the personal data 77l holds about you. We will provide this in a commonly used, machine-readable format within 30 days of your request.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure: you may request deletion of your personal data. Where legal obligations prevent full deletion (e.g. AML record-keeping requirements), we will explain the reason and delete everything that is not legally required to be retained.
• Right to restrict processing: you may request that we restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of your data while we verify it.
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all data rights requests within 30 days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.

10. Data Security

77l implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive account data at rest, access controls limiting which staff members can access personal data and for what purpose, regular security reviews of platform systems and third-party integrations, and session management controls including automatic session timeout after a period of inactivity.

While 77l takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and take immediate steps to contain and remediate the breach.

11. Children's Privacy

The 77l platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person who is under 21, we will delete that data immediately and close the associated account. If you believe that a minor has registered on the platform, please notify us at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

77l may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law or improvements to our platform. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes significantly affect your rights, notify you via the platform or account communication before the changes take effect.

Your continued use of the 77l platform after any update to this Policy constitutes your acceptance of the revised Policy. We recommend bookmarking this page and reviewing it periodically so you remain fully informed about how your personal data is handled.

13. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 77l handles your personal data, please contact our support team. All privacy enquiries are handled by our compliance team and we aim to respond within 30 days.

Email us at: [email protected]