Your Privacy Matters at 1777

This Privacy Policy ("Policy") describes the practices of 1777 ("1777", "we", "us", "our") with respect to the collection, use, storage, sharing, and protection of personal data belonging to individuals ("you", "User", "Player") who access or use the online casino and sports betting platform available at 1777.lol (the "Platform").

1777 is an online betting and casino platform built specifically for the Bangladesh market. Our services include sports betting (including cricket — BPL, IPL, T20 World Cup, and Bangladesh Tigers international fixtures), live dealer casino games, slot games, Rummy, and politics betting markets. All services are made available exclusively to adults aged 18 and above and are intended for personal entertainment purposes only.

This Policy applies to all personal data collected through the Platform, including data collected via the website at 1777.lol, through any customer support interactions, and through your use of payment services such as bKash, Nagad, Rocket, and Upay to transact with your 1777 account. This Policy should be read in conjunction with the 1777 Terms & Conditions, which are available at /terms-conditions.

1777 collects the following categories of personal data from users of the Platform:

1777 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for identification purposes, or data concerning health (beyond age verification) unless required by law or expressly consented to by the user.

1777 collects personal data through the following channels:

• Direct registration. When you create a 1777 account, you provide your name, date of birth, contact details, and payment method information. You also provide identity documents when completing KYC verification.
• Platform activity. As you navigate and use the Platform — placing bets, playing casino games, using the Rummy tables, or browsing sports markets — 1777's systems automatically log usage data and technical identifiers such as your IP address and device fingerprint.
• Payment providers. When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, 1777 receives confirmation data from the relevant payment service provider, including transaction reference numbers and wallet identifiers. 1777 does not store full payment credentials on its own servers.
• Cookies and tracking technologies. 1777 uses cookies, web beacons, and similar technologies to collect technical and usage data. See Section 8 of this Policy for full details of our cookie practices.
• Customer support interactions. When you contact 1777 via email at [email protected] or through any in-Platform support channel, the content of that communication and your contact details are recorded.
• Third-party game providers. Game studios including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming may provide 1777 with aggregated or anonymised data relating to game sessions played on their platforms through 1777. Where such data can identify individual users, it is subject to this Policy.

1777 processes personal data for the following specific purposes:

• Account creation and management. To register your account, authenticate your identity, and maintain your player profile on the 1777 Platform.
• Age and identity verification (KYC). To verify that you are aged 18 or above and to confirm that your identity matches the information provided at registration. This is a core compliance obligation and cannot be waived.
• Payment processing. To facilitate deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and bank transfers, and to maintain accurate records of all financial transactions on your account.
• Service delivery. To provide access to cricket betting markets, live casino games, slot titles, Rummy, and all other features available on the 1777 Platform.
• Customer support. To respond to your queries, complaints, and account-related requests, including processing account suspension appeals and responsible gaming requests.
• Responsible gaming compliance. To monitor your betting and gaming behaviour in order to identify patterns consistent with problem gambling and to apply self-exclusion, deposit limits, or time-out periods where appropriate or requested.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited activities on the Platform.
• Legal and regulatory obligations. To comply with applicable laws, respond to lawful requests from regulatory authorities or law enforcement bodies, and maintain records as required.
• Platform improvement. To analyse usage patterns, test new features, and improve the overall experience of the 1777 Platform for Bangladeshi players.
• Marketing communications. To send you promotional offers, bonus notifications, and relevant updates about 1777 — but only where you have provided your consent or where we have a legitimate interest in doing so and you have not opted out.

1777 processes your personal data on the following legal bases:

• Performance of a contract. Processing your identity data, contact data, and financial data is necessary for 1777 to fulfil its contractual obligations to you under the 1777 Terms & Conditions — specifically, to operate your account, process payments, and deliver betting and gaming services.
• Legal obligation. Age verification, KYC identity checks, transaction monitoring, and record-keeping are carried out to comply with applicable legal and regulatory requirements including anti-money laundering obligations.
• Legitimate interests. 1777 processes technical data, usage data, and communications data on the basis of its legitimate interest in securing the Platform, preventing fraud, improving its services, and communicating relevant updates to existing customers. These legitimate interests are balanced against your rights and do not override them.
• Consent. Where 1777 processes your data for marketing purposes, or for any purpose not covered by the bases above, it does so on the basis of your freely given, informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

1777 does not sell your personal data to third parties for their own marketing purposes. 1777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers. bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary to process deposits and withdrawals on your behalf.
• Game content providers. Third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, and Microgaming may receive session identifiers and anonymised usage data necessary to deliver their games through the 1777 Platform.
• Identity verification providers. Third-party KYC and age verification service providers may process copies of your identity documents on behalf of 1777. These providers are contractually bound to process your data only for verification purposes and to apply appropriate security measures.
• Technology and infrastructure providers. Cloud hosting providers, content delivery networks, cybersecurity vendors, and platform analytics services may process technical data in the course of providing services to 1777. All such providers are subject to data processing agreements with 1777.
• Legal and regulatory authorities. 1777 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities in Bangladesh or other applicable jurisdictions where required by law, pursuant to a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of 1777, its users, or the public.
• Business transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of 1777's business, personal data held by 1777 may be transferred to the relevant successor entity. You will be notified of any such transfer where required by applicable law.

All financial transactions on the 1777 Platform are denominated in Bangladeshi Taka (৳ BDT). The following specific provisions apply to the handling of your payment and financial data:

• Wallet numbers. Your bKash, Nagad, Rocket, and Upay mobile wallet numbers are stored by 1777 solely for the purpose of processing deposits, verifying withdrawal requests, and matching transactions to your account. These numbers are encrypted at rest using 256-bit AES encryption.
• Transaction records. 1777 maintains a complete record of all deposits and withdrawals associated with your account for a minimum period of 5 years, as required for anti-money laundering compliance. These records are accessible to you at any time through your account transaction history.
• No full card storage. 1777 does not store full debit or credit card numbers, CVV codes, or bank account PINs on its servers. Where card payments are accepted, they are processed through PCI-DSS compliant payment gateways.
• Third-party wallet security. The security of your bKash, Nagad, Rocket, or Upay wallet PIN and OTP is entirely your responsibility. 1777 will never ask you to share your mobile wallet PIN, bank account password, or any one-time passcode via email, support chat, or any other channel.

1777 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies. These cookies are essential for the Platform to function. They enable you to log in, maintain your session, and use core features such as depositing funds and placing bets. These cookies cannot be disabled without rendering the Platform unusable.
• Functional cookies. These cookies remember your preferences — such as your preferred language (English), currency display (৳ BDT), and notification settings — so that you do not need to reconfigure them each time you visit the Platform.
• Analytics cookies. These cookies collect anonymised usage data about how you interact with the Platform — including which pages you visit, how long you spend on each section, and which features you use most. This data is used to improve the Platform's design and content. Analytics data is aggregated and does not identify you personally.
• Security cookies. These cookies help 1777 detect and prevent fraudulent activity, including login attempts from unrecognised devices, multi-accounting, and bot traffic.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the 1777 Platform. Clearing cookies may also log you out of your active session.

1777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. In cases where personal data is the subject of a legal dispute or regulatory investigation, 1777 may retain relevant data beyond the standard retention period until the matter is fully resolved.

1777 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, alteration, disclosure, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption. All data transmitted between your browser or device and the 1777 Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols. Look for the padlock icon in your browser's address bar when using 1777.lol.
• Encryption at rest. Sensitive data including wallet numbers, identity document data, and financial transaction records are encrypted at rest using AES-256 encryption on 1777's servers.
• Access controls. Access to personal data held by 1777 is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and undergo regular data security training.
• Two-factor authentication (2FA). 1777 supports two-factor authentication for player accounts and mandates it for all staff accounts with access to personal data.
• Security monitoring. 1777's systems are continuously monitored for unusual activity, including unauthorised login attempts, abnormal transaction patterns, and indicators of compromise.
• Incident response. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 1777 will notify affected users without undue delay, and will take immediate steps to contain and remediate the incident.

As a user of the 1777 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact 1777 at [email protected] with a clear description of your request:

• Right of access. You have the right to request a copy of the personal data that 1777 holds about you, along with information about how that data is being processed.
• Right to rectification. You have the right to request that 1777 correct any inaccurate or incomplete personal data held about you. You may also update certain personal details directly through your account settings.
• Right to erasure ("right to be forgotten"). You may request that 1777 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to 1777's legal obligation to retain certain data (see Section 9).
• Right to restriction of processing. You have the right to request that 1777 restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of the data or while 1777 is considering your objection to processing.
• Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object. You have the right to object to the processing of your personal data where 1777 relies on legitimate interests as its legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

1777 will respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case 1777 will notify you of the extension and the reasons for it. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests.

The 1777 Platform is strictly intended for adults aged 18 years and above. 1777 does not knowingly collect, store, or process personal data from individuals under the age of 18. All registration attempts are subject to age verification checks, and accounts where the registered user is found or suspected to be under 18 are immediately closed.

If you are a parent or guardian and believe that your child has registered an account on the 1777 Platform or has submitted personal data to 1777, please contact us immediately at [email protected]. Upon verification of the report, 1777 will take prompt steps to delete the account, remove all associated personal data, and refund any deposits made, in accordance with our underage gambling policy as set out in the 1777 Terms & Conditions.

The 1777 Platform may contain links to, or embed content from, third-party game providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming. These third parties operate their own platforms and privacy policies, which are independent of this Policy. 1777 is not responsible for the privacy practices of third-party game providers and recommends that you review the relevant privacy policies directly.

Payment service providers such as bKash, Nagad, Rocket, and Upay also operate under their own privacy policies. By using these services to transact with your 1777 account, you are also subject to the respective provider's privacy terms. 1777 encourages you to familiarise yourself with these policies.

1777 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 1777 will notify registered users by email to the address on file or by displaying a prominent notice on the Platform, at least 7 days before the revised Policy takes effect.

Minor updates such as typographical corrections, formatting changes, or clarifications that do not alter the substance of the Policy may take effect immediately without prior notice. The effective date at the top of this page will always reflect when the Policy was last updated.

Your continued use of the 1777 Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and close your account by contacting [email protected].

For all privacy-related enquiries, personal data access requests, or concerns about how 1777 handles your information, please contact us using the details below:

• Email: [email protected]
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Platform: 1777.lol
• Language of correspondence: English

1777 aims to acknowledge all privacy-related correspondence within 24 hours and to provide a substantive response within 30 days. For complex data subject access requests, the response period may be extended as described in Section 11 of this Policy.