777rb Privacy Policy

1 Who We Are

777rb operates the online casino and sports betting platform accessible at https://777rb.io (the "Platform"). In this Privacy Policy, "777rb", "we", "us", and "our" refer to the operator of the 777rb Platform. "You", "Member", and "Player" refer to any individual who accesses or registers an account on the Platform.

777rb is the data controller in respect of all personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed. Where third-party service providers process data on our behalf, they do so as data processors under contractual obligations that require them to handle your data in accordance with our instructions and with appropriate security standards.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by 777rb through the following channels:

• The 777rb website at https://777rb.io and all associated sub-pages, game lobbies, sports betting interfaces, and account management sections.
• Any mobile-optimised version of the 777rb Platform accessed via a mobile browser.
• Communications you initiate with our support team via live chat, email, or any other channel.
• Any promotional activities, surveys, or competitions conducted by 777rb in which you choose to participate.

This Policy does not apply to third-party websites or services linked from the 777rb Platform, including game studio interfaces operated independently by providers such as Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, or Spribe. Those providers maintain their own privacy practices, and we encourage you to review their policies directly.

3 Data We Collect

The personal data 777rb collects from Members falls into the following categories:

777rb does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes, except where a government-issued ID document incidentally contains such information as part of the standard document format.

4 How We Collect Your Data

777rb collects personal data through three principal means:

• Directly from you: Information you provide voluntarily when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to a promotional offer.
• Automatically: Technical data collected passively through server logs, session analytics tools, and cookies when you navigate the Platform. This includes your IP address, device fingerprint, session timestamps, and pages visited.
• From third parties: Identity and fraud-check data from KYC verification partners, transaction confirmation data from payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and fraud-risk signals from third-party anti-fraud services.

5 Purpose & Legal Basis for Processing

777rb processes your personal data only where a lawful basis exists. The following table sets out the primary purposes for which your data is processed and the corresponding legal basis:

6 Sharing Your Data

777rb does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive the minimum data required to authorise and process your transactions. These processors are bound by their own regulatory obligations regarding data security.
• Identity verification providers: Third-party KYC and anti-fraud service providers who assist in verifying member identity and detecting fraudulent account activity. These providers act as data processors under contracts requiring them to handle data only as instructed by 777rb.
• Game studio providers: Providers including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Ezugi, and Spribe receive session tokens and game-specific data necessary to run the games you play. Full identity data is not shared with game providers.
• Legal and regulatory disclosure: Where required by applicable law, court order, or at the direction of a competent authority, 777rb may disclose personal data. We will notify affected Members of such disclosure to the extent permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of 777rb's business assets, personal data held by 777rb may be transferred to the acquiring entity. Affected Members will be notified prior to any such transfer, and the acquiring entity will be bound by the same privacy commitments set out in this Policy.

7 Payment Data

777rb does not store full card numbers, CVV codes, or full mobile banking PINs on its own servers. Payment card data is processed directly by PCI DSS-compliant payment processors. 777rb retains only truncated payment identifiers (such as the last four digits of a card number or the last three digits of a mobile banking account number) for the purpose of identifying which payment method was used in a transaction and to facilitate withdrawal processing.

All bKash, Nagad, Rocket, and Upay transactions are subject to the privacy policies of those respective platforms in addition to this Policy. 777rb recommends that Members review the privacy documentation of their chosen payment provider to understand how transaction data is processed on the payment provider's side.

8 Cookies & Tracking Technologies

The 777rb Platform uses cookies and similar tracking technologies to support its operation and improve the Member experience. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game lobby layout to personalise your experience across sessions.
• Analytics Cookies: Collect anonymised aggregate data about how Members navigate the Platform — which game categories are most visited, how long sessions last, and where Members exit — to help us improve Platform design and content.
• Performance Cookies: Monitor Platform load times, error rates, and infrastructure performance to support reliable service delivery.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. A cookie management prompt is displayed on your first visit to the Platform.

9 Data Retention

777rb retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of your membership and for a period of five years following account closure, to meet financial record-keeping obligations and to handle any post-closure disputes.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with standard financial compliance requirements.
• KYC and verification documents: Retained for the duration of membership and for five years post-closure. Copies of government-issued ID are stored in encrypted form and access is restricted to authorised personnel.
• Support communications: Retained for two years from the date of the last communication in a given thread, to allow reference in the event of repeat or related issues.
• Marketing preferences and consent records: Retained for the duration of membership and for one year after withdrawal of consent, to maintain an accurate suppression list.
• Technical and session data: Retained in aggregated, anonymised form for up to 24 months for analytics purposes. Raw IP logs are deleted after 90 days.

10 Your Rights Over Your Data

As a Member of 777rb, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team with your registered account details and a description of the request:

• Right of Access: You may request a summary of the personal data 777rb holds about you, the purposes for which it is processed, and the categories of recipients with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or complete it. We will respond within 10 business days.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal obligation requiring us to retain it (e.g., anti-money-laundering retention requirements).
• Right to Restrict Processing: In certain circumstances you may ask us to pause processing of your data — for example, while a rectification request is being assessed — without requesting full deletion.
• Right to Data Portability: You may request that a copy of your account data be provided in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you believe your individual circumstances outweigh our legitimate interest in conducting that processing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

All data rights requests should be submitted to [email protected] with the subject line "Data Rights Request" and your registered email address. We will acknowledge receipt within 2 business days and provide a full response within 10 business days. In complex cases, this period may be extended by a further 20 business days, in which case you will be notified of the extension and the reason for it.

11 Children & Minors

The 777rb Platform is strictly for adults. Persons under the age of 21 are not permitted to register an account or use any feature of the Platform. 777rb does not knowingly collect personal data from individuals under 21 years of age.

If we become aware that personal data has been submitted by a person under the age of 21, we will immediately close the associated account, delete all personal data submitted in connection with it, and return any deposited funds to the payment source. If you believe a minor has registered an account on the Platform, please notify us immediately at [email protected].

12 Security Measures

777rb implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures include:

• Transport Encryption: All data in transit is encrypted using TLS 1.3 with 256-bit keys. HTTP connections are automatically redirected to HTTPS.
• Data at Rest Encryption: Sensitive data fields — including identity document scans, full account numbers, and KYC records — are encrypted at the database level using AES-256.
• Access Controls: Internal access to Member personal data is restricted to authorised personnel on a strict need-to-know basis. Access is logged, reviewed, and audited periodically.
• Intrusion Detection: 777rb employs automated intrusion detection and rate-limiting systems that monitor for anomalous login patterns, credential stuffing attempts, and other network-level threats.
• Penetration Testing: The Platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All 777rb personnel with access to Member data receive regular training on data protection obligations and security best practices.

While 777rb takes all reasonable technical and organisational measures to protect your data, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that the device you use to access the Platform is adequately secured.

13 Third-Party Links & Services

The 777rb Platform may contain references to or integrations with third-party game providers and payment services. Once you leave the 777rb Platform or interact with a third-party interface embedded within it, this Privacy Policy ceases to apply. The handling of your data by those third parties is governed by their own privacy policies.

777rb is not responsible for the privacy practices, content, or security of any third-party service. We recommend reviewing the relevant privacy documentation for all third-party services you use in connection with your 777rb membership, including bKash, Nagad, Rocket, and Upay.

14 Changes to This Privacy Policy

777rb may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When changes are made, the "Last Updated" date at the top of this Policy will be revised accordingly.

Where changes are material — meaning they affect your rights or the way we use your data in a significant way — 777rb will notify active Members via email to the registered address at least 14 days before the new Policy takes effect. For minor or technical corrections that do not affect your rights, we may update the Policy without advance notice.

Continued use of the 777rb Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

15 Contact & Data Requests

For all privacy-related enquiries, data rights requests, or concerns about how 777rb handles your personal data, please contact our support team using the details below:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing
• Live Chat: Available 24 hours a day, 7 days a week via the chat interface on the 777rb Platform
• Response Time: Email responses within 2 business days; data rights requests fully resolved within 10 business days

We handle every privacy enquiry with equal care regardless of the nature or complexity of the request. Our support team is available in English around the clock to assist all Members across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.