77kk Privacy Policy — Your Data, Your Rights

For the purposes of this Privacy Policy, the data controller responsible for the personal information of users of the 77kk platform is the operating entity behind the website accessible at 77kk.bio ("77kk", "we", "us", "our"). 77kk operates as an offshore online casino and sports betting platform. References to "you", "your", or "Player" in this document mean any individual who visits, registers on, or interacts with the 77kk platform, including users located in Bangladesh.

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data across all 77kk touchpoints, including the main website, mobile-optimised browser sessions, email communications, customer support interactions, and cashier transactions conducted through integrated payment partners such as bKash, Nagad, and Rocket.

77kk collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the website, and from third-party service providers involved in payment processing or identity verification. The categories of personal data we collect include the following:

We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless such data appears incidentally in a document submitted during KYC, in which case it is handled with the same security standards and is not processed for any purpose other than identity verification.

We do not collect payment card numbers directly. Card-based transactions are handled end-to-end by our PCI-DSS compliant payment processing partners, and 77kk receives only a tokenised reference and transaction status confirmation — never the raw card data.

77kk processes your personal data only for specific, legitimate purposes. We do not sell personal data to third parties for their own marketing use. The following table sets out each processing purpose, the categories of data used, and the legal basis on which we rely:

Where processing is based on your consent — for example, receiving promotional emails about BPL season bonuses, Eid offers, or Pohela Boishakh promotions — you have the right to withdraw that consent at any time by updating your notification preferences in the account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

77kk uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser. They help us recognise returning visitors, maintain session state, prevent fraud, and understand how players navigate the platform.

The following categories of cookies are used on the 77kk platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, anti-CSRF tokens, and cashier session identifiers. These cookies cannot be disabled without impairing core platform functionality. No consent is required for strictly necessary cookies.
• Functional cookies: Remember your preferences such as preferred language display, last-used payment method (e.g., bKash vs Nagad), and responsible gaming limit settings. Disabling these cookies means your preferences will not be saved between sessions.
• Analytics cookies: Help us understand aggregate player behaviour — which games are most popular, how long players spend on the cricket betting section, which deposit methods are used most frequently in Dhaka vs Chittagong. Analytics data is processed in anonymised or pseudonymised form wherever possible. Consent is required for analytics cookies.
• Security and fraud-detection cookies: Used by our fraud prevention systems to detect anomalous login patterns, device fingerprinting for multi-account detection, and bot activity. These operate in the background and are classified as strictly necessary for platform integrity.

77kk does not use third-party advertising or retargeting cookies. We do not place cookies on behalf of advertisers, and we do not share cookie-derived data with advertising networks.

You may manage cookie preferences through your browser settings. Most modern browsers — including Chrome Mobile on Android devices widely used across Bangladesh — allow you to view, block, and delete cookies through the browser's privacy or settings menu. Please note that blocking strictly necessary cookies will prevent you from logging in or using the cashier.

We may also use web beacons (1x1 pixel images) in HTML emails to track whether a promotional email has been opened. This helps us measure the relevance of communications. You can prevent web beacon tracking by disabling HTML rendering in your email client.

77kk does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to handle data in accordance with standards consistent with this Privacy Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Visa/Mastercard processing partners, and banking partners including Dutch-Bangla Bank, BRAC Bank, and City Bank receive the minimum personal data required to process a specific deposit or withdrawal transaction (typically: account holder name, wallet or account number, transaction amount in BDT).
• Identity verification providers: Third-party KYC platforms that process submitted identity documents for age and identity verification. These providers are contractually prohibited from using your data for any purpose other than verification on behalf of 77kk.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive a pseudonymous player token (not your real name or contact details) to manage your game session. Game providers do not receive your financial or identity data.
• Platform technology partners: Hosting providers, CDN operators, cybersecurity services, and analytics platforms that process data on our behalf as data processors under binding data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or directive from a competent authority, 77kk will disclose personal data. We will notify affected players of such disclosures to the extent permitted by law.
• Fraud prevention networks: Anonymised or pseudonymised risk signals may be shared with industry fraud prevention consortia to protect all operators and players from cross-platform fraud.

In the event of a merger, acquisition, or restructuring of the 77kk operating entity, personal data held by 77kk may be transferred to the acquiring or successor entity. In such circumstances, players will be notified at their registered email address and provided with information about any material changes to data processing practices that result from the transaction.

77kk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce agreements. The following retention periods apply as a general framework:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where deletion is not immediately possible due to backup or archival processes, the data is isolated from active processing systems until deletion can be completed.

If you request erasure of your personal data (see Section 08 — Your Privacy Rights) and the data is subject to a mandatory retention obligation under applicable law (e.g., financial records subject to a 7-year retention requirement), we will retain only the minimum data required to satisfy that obligation and delete all other associated personal data.

77kk employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. The following security controls are in place across the 77kk platform:

• TLS/SSL encryption in transit: All data transmitted between your device and 77kk servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser address bar confirms that your connection is encrypted.
• AES-256 encryption at rest: Sensitive data fields — including identity document data, payment account references, and KYC records — are encrypted at rest using AES-256 symmetric encryption on our storage infrastructure.
• Two-factor authentication (2FA): Players are strongly encouraged to enable SMS OTP-based 2FA on their accounts. 2FA adds a second verification layer that prevents unauthorised account access even if login credentials are compromised.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. 77kk staff can only access the minimum data required for their specific role. Access logs are maintained and reviewed regularly.
• Brute-force protection: The 77kk login system implements account lockout after a defined number of failed login attempts, along with CAPTCHA challenges for suspicious login patterns. Login attempt events are logged with IP address and Bangladesh Standard Time (BST, UTC+6) timestamps.
• Penetration testing: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 77kk maintains a documented data breach response procedure. In the event of a breach that poses a risk to player data, affected players will be notified at their registered email address within a reasonable timeframe, along with guidance on protective steps to take.

As a user of the 77kk platform, you hold a set of rights with respect to your personal data. 77kk is committed to facilitating the exercise of these rights in a timely and transparent manner. The following rights are available to all registered players:

• Right of access: You may request a copy of the personal data that 77kk holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request correction. Minor corrections (e.g., phone number update) can be made directly from the account profile page. Corrections to identity data require KYC re-verification.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will comply where no overriding legal retention obligation exists. Data subject to mandatory retention periods (see Section 06) will be retained for the minimum required period and then deleted.
• Right to restrict processing: You may request that we restrict processing of your data in specific circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You may request that we provide your personal data in a portable format for transfer to another service provider.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate overriding grounds in some cases.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time via the account dashboard or by emailing [email protected].

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 5 business days (BST) and complete the action within 30 days. Complex requests may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

77kk will verify your identity before processing any rights request to prevent unauthorised access to another person's data. Identity verification for rights requests follows the same KYC standards applied to withdrawal requests.

The 77kk platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If a person under 18 has accessed the platform and provided personal data, that data will be deleted immediately upon discovery, and the associated account will be permanently closed in accordance with our Terms & Conditions.

We encourage parents and guardians of young people in Dhaka, Chittagong, Sylhet, and across Bangladesh to use internet filtering tools and parental control software to restrict access to online gambling platforms. Several Bangladeshi internet service providers and mobile operators offer family safety features that can be configured to block gambling-related domains. 77kk fully supports such measures and is not accessible to users who have configured such controls on their networks.

For guidance on responsible gaming tools available to adult players — including deposit limits, session time reminders, and self-exclusion — please visit our Responsible Gaming page.

77kk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made — those that significantly affect how we use your personal data or your rights — we will notify registered players by email to their registered address at least 7 days before the change takes effect. Minor updates (clarifications, formatting changes, updated third-party partner names) may be made without advance notice; the "Last Updated" date at the top of this page will always reflect the current version.

Continued use of the 77kk platform after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with an updated policy, please discontinue use of the platform and contact [email protected] to close your account and request deletion of your personal data.

For all privacy-related enquiries, data rights requests, or concerns about how your personal data is handled, contact the 77kk privacy team at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: Within 2–6 hours during standard support hours (BST, UTC+6)
• Rights requests: Acknowledged within 5 business days, completed within 30 days