Privacy Policy for 777poker

This Privacy Policy ("Policy") describes how 777poker ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who register an account or otherwise interact with the 777poker website. By registering an account or using any feature of the platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

777poker is committed to maintaining the highest practicable standards of data protection. We process personal data only to the extent necessary to provide a safe, secure, and fair online gambling experience for players in Bangladesh. We do not process personal data for purposes incompatible with those stated in this Policy.

This Policy is written in English and the English-language version is the authoritative version. If any translated summary of this Policy conflicts with the English text, the English text prevails. We recommend that all players read this Policy in full before registering on 777poker.

1. Data We Collect

1.1 777poker collects personal data through several channels: information you provide voluntarily during registration or account management; information generated automatically as a result of your use of the platform; and information received from trusted third-party service providers such as payment processors and KYC verification partners.

Registration and Account Data

When you create an account on 777poker, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code.
• Mobile phone number registered in your name.
• Valid email address.
• Username and encrypted password.
• Preferred currency (Bangladeshi Taka — BDT).

KYC Verification Data

Before your first withdrawal is processed, we require you to complete our KYC identity verification procedure. During KYC, we may collect:

• A copy of a government-issued identity document (National ID card, passport, or driving licence).
• A recent selfie or photo for facial verification purposes.
• Proof of your registered payment method — for example, a screenshot of your bKash or Nagad account displaying your name and registered mobile number.
• Proof of address if required by our compliance team (e.g., a recent utility bill or bank statement issued within 90 days).

Financial Transaction Data

1.2 When you make deposits or request withdrawals, we collect transaction identifiers, payment method details (such as your bKash mobile number, Nagad account reference, Rocket wallet ID, Upay reference, or masked Visa/Mastercard details), transaction amounts in BDT, timestamps, and transaction status records. We do not store full card numbers or mobile banking PINs.

Usage and Technical Data

1.3 When you access 777poker, we automatically collect certain technical information necessary for platform operation and security monitoring:

• IP address and approximate geographic location (country and city level only).
• Device type, operating system, and browser version.
• Session start and end times (recorded in Bangladesh Standard Time, UTC+6).
• Pages visited, games played, bet amounts and outcomes, and in-platform navigation patterns.
• Referral source (the URL from which you arrived at 777poker, if applicable).

2. How We Use Your Data

2.1 777poker processes your personal data for the following lawful purposes:

Purpose	Lawful Basis	Examples
Account creation and management	Contractual necessity	Registration, login authentication, password reset
Processing deposits and withdrawals	Contractual necessity	bKash/Nagad/Rocket/Upay/Visa/Mastercard transactions in BDT
Identity and age verification (KYC)	Legal obligation	Confirming 18+ status; anti-money-laundering compliance
Fraud prevention and security	Legitimate interest	Detecting duplicate accounts, suspicious betting patterns, unauthorised logins
Platform improvement and analytics	Legitimate interest	Analysing usage data to improve game loading times and UX
Responsible gaming compliance	Legal obligation / legitimate interest	Monitoring deposit frequency; applying self-exclusion restrictions
Marketing communications	Consent	Promotional emails about bonuses, cricket season offers, Eid specials — only where you have opted in
Customer support	Contractual necessity	Resolving deposit issues, game disputes, withdrawal delays

2.2 We will not use your personal data for any purpose that is materially different from those listed above without first providing you with a clear notice and, where required, obtaining your explicit consent.

2.3 Where we rely on your consent as the lawful basis for processing (for example, for marketing emails), you have the right to withdraw that consent at any time without penalty. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect processing carried out on a different lawful basis such as contractual necessity.

3. Data Sharing & Third Parties

3.1 777poker does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described in this section.

Payment Processing Partners

3.2 To process your deposits and withdrawals, we share the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card processing intermediaries for Visa and Mastercard transactions. These partners act as independent data controllers with respect to their own services and are bound by their own privacy policies and applicable financial regulations.

KYC Verification Partner

3.3 Identity documents and selfies submitted during KYC verification are processed by our appointed third-party KYC verification partner. This partner is contractually bound to process your data solely for identity verification purposes and is prohibited from using your data for any other purpose.

Technology and Infrastructure Providers

3.4 777poker uses third-party cloud hosting, content delivery, and security services to operate the platform. These providers may have incidental access to server logs that contain personal data. All such providers are bound by strict data processing agreements and are contractually prohibited from processing personal data for their own purposes.

Legal Disclosures

3.5 We may disclose personal data to law enforcement authorities, regulatory bodies, or other third parties if we are required to do so by applicable law, court order, or legal process, or if we reasonably believe that disclosure is necessary to protect the rights, property, or safety of 777poker, our players, or the public.

4. Cookies & Tracking

4.1 777poker uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform effectively and securely. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your logged-in state, CSRF protection tokens, and load balancer cookies. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to collect anonymised or pseudonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This information is used exclusively to improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, including bot logins, credential stuffing attacks, and account takeover attempts.
• Preference cookies: Used to remember your language preference (English), display settings, and other interface choices between sessions.

4.2 777poker does not deploy third-party advertising cookies, cross-site behavioural tracking cookies, or any cookie technology that profiles your interests for the purpose of targeted advertising on other websites.

4.3 You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 777poker account and will affect core platform functionality. Disabling performance or preference cookies will not prevent you from using the platform but may degrade your experience.

4.4 We may use session replay tools that record anonymised mouse movements, click patterns, and scroll behaviour to diagnose usability issues. These recordings do not capture keystrokes in password fields, payment fields, or any other sensitive input field.

5. Data Retention

5.1 777poker retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal, regulatory, or contractual obligations. The following standard retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 7 years after closure	Financial record-keeping, regulatory compliance
KYC identity documents	Duration of account + 7 years after closure	Anti-money-laundering obligations
Financial transaction records	5 years from transaction date	Financial audit trail requirements
Betting and gaming history	5 years from transaction date	Dispute resolution, responsible gaming monitoring
Support correspondence	3 years from last interaction	Dispute evidence, quality assurance
Server and access logs	12 months	Security monitoring, fraud investigation
Marketing consent records	Until consent is withdrawn + 1 year	Proof of consent for regulatory purposes

5.2 Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data (for example, statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.

6. Data Security

6.1 777poker implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include but are not limited to:

• TLS 1.2 / TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment references.
• Bcrypt hashing for all account passwords — we do not store plaintext passwords under any circumstances.
• Multi-factor authentication options available to all registered players for account login.
• Role-based access controls ensuring that only authorised personnel can access sensitive player data, strictly on a need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection systems monitoring network traffic for anomalous patterns in real time.
• Automated alerts and incident response procedures for suspected data breaches.

6.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 777poker will notify affected players without undue delay and will take all reasonable steps to contain the breach and mitigate its impact.

6.3 While we take every reasonable precaution, no system can guarantee absolute security. You also bear responsibility for keeping your account credentials confidential. Use a strong, unique password and do not share your login details with any third party. If you suspect your account has been compromised, contact our support team immediately via live chat.

7. Your Rights

7.1 As a registered player on 777poker, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time. We will provide this within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as your email address or mobile number) directly via your account settings panel.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records. Note that mandatory financial and KYC records cannot be deleted before the end of their legally required retention period.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (for example, for marketing communications), you may withdraw your consent at any time. To unsubscribe from marketing emails, use the unsubscribe link in any marketing email or contact our support team.
• Right to object: You may object to processing based on our legitimate interests at any time, where the processing has a material impact on you. We will assess your objection and cease or continue processing with a written explanation of our decision.

7.2 To exercise any of the rights listed above, contact our support team via live chat from within your account dashboard, or send a written request to the email address listed in Section 8. All data subject requests are handled in English within 30 calendar days and at no cost to you. In cases of particularly complex or voluminous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

7.3 We may be required to verify your identity before processing a data subject request, to ensure that personal data is not disclosed to an unauthorised party. Verification will be conducted via your account credentials or via a KYC document check where the request is made by a former player whose account has been closed.

8. Contact & Complaints

8.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 777poker processes your personal data, please contact our support team in the first instance. Support is available 24 hours a day, 7 days a week via live chat inside your account dashboard. All privacy-related communications are handled in English.

8.2 For formal written requests — including data subject access requests, erasure requests, or objection notices — please use the contact email below. This email address is for correspondence only and is not a clickable link:

8.3 We aim to acknowledge all formal written privacy requests within 5 business days and to provide a substantive response within 30 calendar days. If your request is complex, we may request clarifying information from you to ensure that we respond accurately and completely.

8.4 If you are dissatisfied with our response to a privacy complaint or data subject request, you have the right to escalate your complaint. Please contact our senior compliance team by stating "Escalated Privacy Complaint" in the subject line of your written correspondence. We will review escalated complaints within 15 business days and provide a final written position.

8.5 777poker reserves the right to update or modify this Privacy Policy at any time. When material changes are made, registered players will be notified by email to the address on file. The updated Policy will be published at /privacy-policy with a revised "Last updated" date. Continued use of the platform following notification of a change constitutes acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.