777ay Privacy Policy

777ay is an online betting and casino platform operated for players based in Bangladesh. Throughout this Privacy Policy, references to "777ay", "we", "us", and "our" refer to the platform operator responsible for processing your personal data. References to "you", "your", and "the Player" refer to any individual who accesses, browses, registers on, or otherwise uses the 777ay platform.

This Privacy Policy applies in full to all personal data collected through the 777ay website at https://777ay.io, through our customer support channels (email, live chat, and WhatsApp), and through any other direct interactions between you and the 777ay team. It does not apply to third-party websites or services that may be linked from the 777ay platform — those services operate under their own independent privacy policies.

If you have any questions about this Privacy Policy or about how 777ay handles your personal data, please contact our Data Support team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

777ay collects personal data from you in several ways: directly when you provide it during registration or in correspondence with our support team; automatically when you use the platform; and from third-party payment service providers when you make deposits or withdrawals. The categories of personal data we collect are set out below.

777ay does not collect or store full payment card numbers. Card transactions are processed via PCI-DSS compliant payment gateways, and only tokenised or truncated card references are retained in our systems.

777ay uses personal data strictly for the purposes for which it was collected. We do not use your data for purposes that are incompatible with those original purposes without first notifying you and, where required, obtaining your consent. The primary purposes for which we process personal data are as follows:

• Account Management: To create, maintain, and administer your 777ay account, including verifying your identity, managing your account balance, and processing your betting and gaming activity.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank, and to process withdrawal requests to your registered payment method.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our obligations to prevent fraud and financial crime.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our live chat, email, and WhatsApp support channels.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to enforce self-exclusion or deposit limits you have set, and to provide responsible gaming assistance where needed.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the functionality, design, and performance of the 777ay platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal Compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

777ay processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contractual obligations to you under the 777ay Terms and Conditions. This covers account management, payment processing, and the provision of betting and gaming services.
• Legal Obligation: Processing is necessary for 777ay to comply with applicable legal requirements, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is necessary for 777ay's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

777ay does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Service Providers: We share financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank solely to process your deposit and withdrawal transactions.
• Identity Verification Partners: We may share identity documents with third-party KYC verification providers for the purpose of age and identity checks. These providers are contractually bound to process your data only for this specific purpose.
• Technology & Infrastructure Providers: We use third-party cloud hosting, database, and security services to operate the 777ay platform. These providers act as data processors under our instruction and are subject to strict data protection obligations.
• Game Software Providers: Live casino and slot game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive limited technical and session data to facilitate the delivery of their games within the 777ay platform.
• Legal & Regulatory Authorities: We may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law or a valid legal order.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of 777ay's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

777ay retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting obligations. The general retention periods applied by 777ay are as follows:

• Account Data: Retained for the duration of the active account relationship and for a period of 5 years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for the duration of the account and for 5 years following account closure, consistent with anti-money laundering regulations.
• Support Communications: Customer support correspondence is retained for 3 years following the date of the communication, or longer where it relates to an ongoing dispute or legal claim.
• Marketing Consent Records: Records of your marketing opt-in consent are retained for as long as you remain a registered player plus 2 years, to demonstrate compliance with consent obligations.
• Technical & Log Data: Server logs and technical data are retained for up to 12 months for the purpose of security monitoring and platform performance analysis.

Once the applicable retention period expires, 777ay will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

777ay implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our core security measures include:

• 256-bit SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the 777ay platform.
• Encryption of sensitive personal data fields (including identity document references and payment method identifiers) at rest in our database systems.
• Two-factor authentication (2FA) available on all player accounts to prevent unauthorised login.
• Strict internal access controls limiting access to personal data to authorised 777ay personnel who require it for their specific job function.
• Regular internal security reviews and vulnerability assessments of the 777ay platform and infrastructure.
• Secure, access-controlled hosting environments with activity logging and intrusion detection systems.

While 777ay employs these measures, no system is entirely immune to security risks. In the event of a data security incident that materially affects your personal data, 777ay will notify you promptly and provide guidance on any recommended protective steps you should take.

You also have a role to play in keeping your data secure. You should use a strong, unique password for your 777ay account and enable two-factor authentication. You must not share your login credentials with any other person. If you suspect your account has been accessed without your authorisation, contact support immediately at [email protected].

777ay uses cookies and similar tracking technologies to operate and improve the platform, to remember your preferences, and to analyse how the platform is used. Cookies are small text files stored on your device by your web browser. The types of cookies used by 777ay are set out in the table below.

You can control the use of non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair the functionality of the 777ay platform and may prevent you from accessing your account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a registered player on 777ay, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

777ay operates a strict minimum age policy of 21 years. Our platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. If you are under 21 years of age, you must not use the 777ay platform, create an account, or submit any personal data to us.

If 777ay becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the relevant payment method. If you are a parent or guardian and believe that a person under 21 in your care has registered on 777ay, please contact us immediately at [email protected] so that we can act without delay.

The 777ay platform may, from time to time, contain references to or integrations with third-party service providers, including game software studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. While 777ay takes care in selecting its software partners, these third parties operate under their own independent privacy policies and data practices.

777ay is not responsible for the privacy practices or the content of any third-party service that processes data independently of the 777ay platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of 777ay.

777ay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or applicable regulations. When we make material changes to this policy, we will notify registered players via the email address associated with their account and will display a prominent notice on the platform at the time of their next login.

The date of the most recent revision is always indicated at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how 777ay collects, uses, and protects your personal data. Your continued use of the 777ay platform following any update to this policy constitutes your acknowledgement of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 777ay handles your personal data, please contact us through the following channels:

We are committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint in accordance with the dispute resolution procedure described in our Terms and Conditions.