77dac Privacy Policy

77dac ("we", "us", "our") operates the online casino and sports betting platform accessible at https://77dac.io, providing a comprehensive suite of gaming and wagering services to players in Bangladesh and other permitted jurisdictions. 77dac acts as the data controller in respect of all personal data collected and processed through the platform.

For all privacy-related enquiries, data access requests, or concerns about how your personal data is handled, you may contact our data team directly:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the 77dac platform (average response time under 2 minutes during Bangladesh Standard Time peak hours)

This Privacy Policy was last updated on 1 January 2026. We review and update this policy at least annually or whenever material changes to our data practices occur, whichever is sooner.

77dac collects the following categories of personal data. The specific data points collected from any individual player depend on the services they use and the stage of the account lifecycle they have reached.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health information, except where this is necessary as part of responsible gaming interventions (for example, if you voluntarily disclose information about a gambling-related health concern when requesting self-exclusion).

77dac collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or update your account profile, you provide personal data directly to us.
• Automatically through platform use: When you visit or use the 77dac platform, our servers automatically collect technical data including your IP address, device identifiers, session duration, pages visited, and click-stream data. This collection occurs via server logs, cookies, and similar tracking technologies (see Section 7 for details).
• From payment service providers: When you initiate a deposit or withdrawal, payment processors such as bKash, Nagad, Rocket, Upay, and card networks confirm transaction status, reference numbers, and account ownership details to 77dac. These providers operate under their own privacy policies in respect of data they independently hold.
• From KYC and identity verification partners: Where 77dac uses a third-party identity verification provider to assist with document authentication, that provider will return a verification outcome and extracted identity data fields to 77dac. The verification provider processes your document data under a data processing agreement with 77dac.
• From fraud prevention and AML screening services: 77dac may cross-reference account data against sanctions lists, politically exposed persons (PEP) databases, and fraud databases maintained by specialist third-party screening providers, as required by applicable anti-money laundering obligations.

77dac uses the personal data it collects for the following purposes:

• Account creation and management: To register your player account, authenticate your identity at login, and maintain accurate account records throughout your relationship with 77dac.
• Service delivery: To process your deposits and withdrawals, settle winning bets, credit bonuses, and provide access to all gaming products available on the platform.
• KYC and regulatory compliance: To verify that you meet the minimum age requirement (21+), confirm your identity, and comply with applicable anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Fraud detection and security: To identify and prevent fraudulent activity, detect multi-accounting, prevent unauthorised access, and protect the integrity of the platform for all players.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, enforce self-exclusion restrictions, apply deposit limits you have set, and reach out proactively where our responsible gaming algorithms identify a player who may benefit from support.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of your communications with the 77dac support team.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the features, performance, and user experience of the 77dac platform.
• Marketing and promotions: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given your explicit consent to receive such communications.
• Legal obligations: To retain transaction records, respond to lawful requests from regulatory or law enforcement authorities, and fulfil any other mandatory data retention or reporting obligations.

77dac processes your personal data on one or more of the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing is necessary to perform the contract between you and 77dac (i.e., to provide you with the gaming services you have registered to use). This covers account management, payment processing, bet settlement, and support.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF legislation, age verification requirements, and mandatory record-keeping obligations.
• Legitimate interests: Processing is in the legitimate interests of 77dac (or a third party), provided those interests are not overridden by your privacy rights. This covers fraud detection, platform security, responsible gaming monitoring, and anonymised analytics.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent. This applies to direct marketing communications and to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

77dac does not sell, rent, or trade your personal data to third parties. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard receive the transaction details necessary to process your deposit or withdrawal instructions. Each processor is an independent data controller in respect of the data it holds on its own systems.
• Identity verification providers: Third-party KYC and document authentication services receive copies of the identity documents you submit during the verification process. These providers act as data processors on behalf of 77dac under documented data processing agreements.
• Game studio providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum player data necessary (typically a pseudonymous player ID and session token) to launch and log game sessions. Your full personal details are not shared with game studios.
• Fraud and AML screening services: Specialist providers conducting sanctions screening, PEP checks, and fraud pattern analysis receive the data fields required for those screening processes.
• Legal and regulatory authorities: 77dac will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of 77dac, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 77dac's assets, personal data held by 77dac may be transferred to the acquiring entity, subject to the acquirer providing equivalent privacy protections. Registered players will be notified of any such transfer before it takes effect.

All third-party service providers who process personal data on our behalf are required to maintain the confidentiality and security of that data and to process it only for the purposes for which it was shared.

77dac uses cookies and similar tracking technologies to ensure the correct functioning of the platform, remember your preferences, and analyse how players interact with the site. Below is a summary of the cookie categories we use:

You may manage your cookie preferences at any time through the cookie settings panel accessible in your account dashboard. Please note that disabling non-essential cookies will not impair your ability to play games, deposit, or withdraw — it only affects analytics and marketing tracking.

77dac does not use cross-site tracking technologies that follow you across unrelated websites beyond the 77dac platform domain.

77dac retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal retention requirements. Our standard retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised. Anonymised data (where no individual can be re-identified) may be retained indefinitely for statistical and analytical purposes.

77dac implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Transport encryption: All communications between your device and 77dac servers are encrypted using TLS 1.3, the current industry standard for secure data transmission.
• At-rest encryption: Personal data stored in 77dac databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data using a dedicated key management system.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo background screening and receive regular data protection and security training.
• Multi-factor authentication: Administrative access to 77dac's core infrastructure requires multi-factor authentication. We strongly recommend that players also enable two-factor authentication (2FA) on their player accounts.
• Intrusion detection: 77dac's infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to anomalous activity in real time.
• Penetration testing: The 77dac platform undergoes regular penetration testing by independent security professionals. Critical vulnerabilities are remediated on a priority basis with no delay.
• Incident response: In the event of a personal data breach, 77dac will notify affected players and relevant authorities within the timeframe required by applicable law. We maintain a documented incident response plan that is reviewed and tested regularly.

As a player whose personal data is processed by 77dac, you hold the following rights in relation to that data. To exercise any of these rights, please contact us via live chat or at [email protected]. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that 77dac holds about you, along with information about how and why it is being processed. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For account details, you may be able to update certain information directly through your account settings without needing to contact support.
• Right to erasure ("right to be forgotten"): You may request that 77dac delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where the data has been unlawfully processed. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (see Section 8).
• Right to restriction of processing: You may request that 77dac suspend the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or while a complaint is under review.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

There is no fee for exercising any of the rights listed above. 77dac will not discriminate against you or restrict your access to the platform as a result of you exercising your privacy rights.

The 77dac platform is strictly for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21, you must not register an account or use any service offered by 77dac.

If 77dac becomes aware that personal data has been collected from a person under 21 years of age — through the outcome of an age verification check or any other means — that account will be immediately suspended, all associated personal data will be deleted as soon as legally permissible, and any funds deposited will be returned to their source after completion of the required investigation.

If you believe that a person under the age of 21 has registered an account on 77dac, please contact our support team immediately at [email protected] so that we can investigate and take prompt action.

The 77dac platform may, from time to time, contain references to or integrations with third-party services — for example, game studio interfaces supplied by Pragmatic Play, Evolution Gaming, or other certified providers. While 77dac takes reasonable steps to ensure that third-party providers maintain appropriate data protection standards, we are not responsible for the privacy practices of third parties that operate outside the 77dac platform domain.

Any personal data you provide directly to a third-party service — for example, if you visit a game studio's own website via a link — is governed by that party's own privacy policy and not by this 77dac Privacy Policy. We recommend reviewing the privacy policies of any third-party services you choose to interact with independently of the 77dac platform.

77dac reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or platform developments. When we make material changes, we will:

• Update the "Effective Date" at the top of this document.
• Display a prominent notice on the 77dac platform informing registered players of the change.
• Where the change significantly affects how we process your personal data, send a direct notification to your registered email address at least 14 days before the change takes effect.

Minor changes — such as typographical corrections, clarifications of existing provisions, or updates to contact details — may be made without advance notice. Your continued use of the 77dac platform following any update to this Privacy Policy constitutes your acknowledgement of the revised version.

We encourage you to revisit this Privacy Policy periodically to stay informed about how 77dac protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how 77dac handles your personal data, please do not hesitate to get in touch with our data team:

• Live Chat: Available 24/7 through the 77dac platform. Average first-response time under 2 minutes during Bangladesh Standard Time (BST, UTC+6) peak hours. This is the fastest channel for urgent privacy concerns.
• Email: [email protected] — for non-urgent privacy requests, data access enquiries, and formal written complaints. We aim to acknowledge all emails within 1 business day and provide a full response within 30 days.

When submitting a data access or erasure request, please include your registered email address, your 77dac username, and a clear description of the request so that our team can process it efficiently. We may need to verify your identity before actioning the request to ensure we are disclosing or deleting data belonging to the correct account holder.

77dac is committed to resolving all privacy concerns fairly, promptly, and transparently. If you are not satisfied with our response to your complaint, you may escalate the matter through the relevant consumer protection channels available in Bangladesh.