777bad Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") describes how 777bad ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Member", "you", "your") who visit, register on, or use the services available at https://777bad.club and any associated mobile-optimised interfaces.

777bad is committed to handling personal data responsibly, transparently, and in accordance with applicable data-protection principles. By registering an account or continuing to use the 777bad platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. Where any conflict arises between this Policy and those documents, this Policy shall govern with respect to data-protection matters.

2. Data Controller

777bad operates as the data controller in respect of all personal data collected from members and visitors through the platform. As data controller, 777bad determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully and fairly.

All data-protection enquiries, access requests, and complaints should be directed to the 777bad Data Protection contact at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 15 business days.

3. Personal Data We Collect

3.1 Registration Data

When you create a 777bad account, we collect the following information: full legal name, date of birth, gender, email address, mobile phone number, residential address (including city and postcode), and your chosen username. This information is required to establish and maintain your account and to verify your identity in accordance with our KYC obligations.

3.2 Identity Verification Data

To comply with our anti-money laundering (AML) and responsible gaming obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address in the form of a recent utility bill or bank statement, and in certain circumstances, proof of source of funds.

3.3 Financial Data

We collect information related to your financial transactions on the platform, including deposit amounts, withdrawal requests, transaction dates and times, and the payment channels used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard). We do not store complete card numbers or mobile banking PINs — sensitive payment credentials are handled directly by our payment processing partners under their own security protocols.

3.4 Transactional and Gaming Data

We collect records of your activity on the platform, including games played, bets placed, wager amounts, winnings, bonus usage, session duration, and betting history across casino and sports markets. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical Data

When you access the 777bad platform, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, language settings, and referring URL. This data is used for security purposes, to optimise the platform experience, and to detect and prevent fraudulent activity.

3.6 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of that correspondence including the content of messages, timestamps, and resolution outcomes. This data is used to manage your enquiries, improve our service quality, and maintain an audit trail of member interactions.

3.7 Marketing Preferences

Where you have opted in to receive marketing communications, we record your preferences, the types of communications you have consented to receive, and the dates on which preferences were set or changed. You may update your marketing preferences at any time through your account settings or by contacting our support team.

4. How We Collect Your Data

We collect personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, updating your account profile, submitting KYC documents, making a deposit or withdrawal, or contacting our support team.
• Automated collection: Technical data gathered automatically when you access the platform, including through cookies, server logs, and session-tracking technologies. See Section 11 for full details of our cookie practices.
• Payment processors: Transaction status and confirmation data returned by our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) following deposit and withdrawal processing.
• Third-party verification services: Where we engage identity verification or fraud-prevention providers to assist with KYC checks, those providers may return data to us as part of the verification outcome.
• Game providers: Session and gameplay data returned by our third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in connection with your participation in their games on our platform.

5. How We Use Your Personal Data

777bad uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain accurate account records.
• Service delivery: To process deposits and withdrawals, provide access to casino games and sports betting markets, administer bonuses and promotions, and deliver customer support.
• Security and fraud prevention: To monitor account activity for signs of fraud, money laundering, multi-accounting, or other prohibited conduct described in our Terms & Conditions, and to take appropriate protective action where such activity is detected.
• Legal and regulatory compliance: To satisfy our obligations under applicable AML, KYC, and data-protection frameworks, and to respond to lawful requests from regulatory or law-enforcement authorities.
• Responsible gaming: To monitor gambling patterns that may indicate problem gambling behaviour, to enforce account limits and self-exclusion requests, and to provide appropriate support tools to members who request them.
• Platform improvement: To analyse aggregate usage data, identify technical issues, optimise platform performance, and develop new features that better serve our members.
• Marketing communications: Where you have given explicit consent, to send you personalised promotional offers, bonus notifications, game recommendations, and other marketing materials via email or in-platform notification. You may withdraw this consent at any time.
• Dispute resolution: To investigate and resolve disputes raised by members regarding game outcomes, transactions, bonus terms, or any other aspect of our service.

6. Legal Basis for Processing

777bad processes your personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including AML obligations, identity verification duties, and responses to lawful authority requests.
• Legitimate interests: Processing carried out to pursue 777bad's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud detection, security monitoring, and platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, primarily in connection with marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing and Disclosure

7.1 Payment Processors

We share the minimum necessary financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank — solely for the purpose of processing your deposit and withdrawal transactions. Each of these partners operates under their own data-protection frameworks and contractual obligations with 777bad.

7.2 Identity Verification Providers

Where we engage third-party KYC or identity verification service providers, we share the relevant identity documents and personal details required to complete the verification process. These providers are contractually bound to process your data only for the stated verification purpose and to maintain appropriate security standards.

7.3 Game Providers

Our third-party game studios receive a unique session identifier and your account currency to enable gameplay. They do not receive your full name, contact details, or financial information. Data returned by game providers to 777bad (such as game results and session logs) is processed by us in accordance with this Policy.

7.4 Legal and Regulatory Authorities

777bad may disclose your personal data to law-enforcement agencies, regulatory bodies, or courts where we are required to do so by law, court order, or other binding legal process. We will notify you of any such disclosure where legally permitted to do so.

7.5 No Sale of Data

777bad does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party. We do not share your data with advertising networks, data brokers, or marketing aggregators.

8. International Data Transfers

Some of our third-party service providers — particularly game studios and payment technology partners — may process data in jurisdictions outside Bangladesh. Where such transfers occur, 777bad takes steps to ensure that your data receives a comparable level of protection by requiring contractual data-protection safeguards from all recipients operating in other jurisdictions.

By using the 777bad platform, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh as described in this section. If you have concerns about international data transfers, please contact us at [email protected].

9. Data Retention

777bad retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the most recent interaction in a given support thread.
• Technical and log data: Retained for up to twelve (12) months from collection, subject to earlier deletion where no longer required for security purposes.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for analytical and reporting purposes.

10. Security Measures

777bad employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Multi-factor authentication requirements for access to internal systems that handle member data.
• Role-based access controls ensuring that only authorised personnel can access specific categories of member data.
• Regular internal security audits and penetration testing of our platform infrastructure.
• Automated monitoring and alerting systems designed to detect and respond to anomalous access patterns or potential data breaches in real time.

While 777bad takes every reasonable precaution to safeguard your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials. In the event of a data breach that is likely to result in a risk to your rights, 777bad will notify affected members without undue delay and take all necessary steps to contain and remediate the breach.

11. Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. 777bad uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to enhance your experience on the platform, maintain session security, and gather analytical data about platform usage.

11.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the platform, including session management, login authentication, and security functions. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, account display options, and last-visited game categories to provide a more personalised experience.
• Analytical cookies: Used to collect anonymised data about how members navigate and interact with the platform, helping us identify areas for improvement. This data is processed in aggregate form and is not used to identify individual members.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, multi-accounting, and suspicious login patterns.

11.3 Managing Cookies

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may prevent certain features of the 777bad platform from functioning correctly. Detailed instructions for managing cookies in your specific browser can be found in your browser's help documentation.

12. Your Data Protection Rights

As a data subject, you hold the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data 777bad holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to limitations where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to object: You may object to processing carried out on the basis of legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 48 hours and respond fully within 15 business days. We may ask you to verify your identity before processing your request.

13. Minors and Data Protection

777bad's services are intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or submit any personal data through this platform.

If 777bad becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on 777bad or submitted personal data through the platform, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

777bad reserves the right to update or amend this Privacy Policy at any time. When changes are made, we will revise the "Last Updated" date at the top of this document and publish the revised Policy on this page. Where changes are material, we will notify registered members by email or through a prominent notice on the platform prior to the changes taking effect.

Your continued use of the 777bad platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

15. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how 777bad handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — average response time under 2 hours.
• Live Chat: Available 24/7 directly from your account dashboard.

All formal data-protection complaints should be submitted in writing via email and will receive a substantive written response within 15 business days. 777bad is committed to resolving all privacy-related concerns fairly, transparently, and promptly.