77aj Privacy
Policy
At 77aj, protecting your personal data is a fundamental part of how we operate. This Privacy Policy explains in clear, plain English exactly what information we collect, why we collect it, how we use and safeguard it, and the rights you hold as a player on our platform.
All data transmitted between your device and 77aj's servers is protected by industry-standard 256-bit SSL encryption. Your personal information, payment details, and account credentials are never sent in plain text over any network.
77aj does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used solely for the purposes described in this Privacy Policy and for legal compliance obligations.
We follow a data minimisation principle — collecting only the information that is strictly necessary to operate your account, process transactions, and meet our legal obligations. We do not collect data speculatively or in excess of operational need.
You can manage your communication preferences, update your personal details, and request data access or deletion directly through your 77aj account dashboard or by contacting our support team. Your privacy choices are respected promptly.
77aj uses cookies solely for session management, platform analytics, and fraud prevention — never for cross-site advertising or behavioural profiling outside of our platform. Our cookie usage is detailed in full within this Privacy Policy.
77aj maintains internal data protection policies and procedures to ensure accountability across all teams that handle player information. We conduct regular reviews of our data practices to align with evolving best practices in online platform security.
Information We Collect
77aj collects personal information from you at different points during your use of the platform. The categories of information we collect, and the context in which each category is gathered, are described in full below.
1.1 Information You Provide Directly
When you register an account, use our services, or contact our support team, you voluntarily provide us with certain personal information. This includes:
- Registration data: Your full name, date of birth, mobile phone number, and the payment method details you choose to link to your account (e.g., your bKash or Nagad number)
- Identity verification documents: Where required under our Know Your Customer (KYC) procedures, copies of government-issued identification such as your National Identity Card (NID), passport, or driving licence
- Account preferences: Your chosen username, password (stored in encrypted, hashed form — never in plain text), communication preferences, and responsible gaming settings
- Support communications: Records of any written correspondence between you and 77aj's customer support team, including chat logs, email exchanges, and support ticket content
- Financial transaction data: Details of deposits, withdrawals, and betting activity associated with your account, including transaction reference numbers, timestamps, and amounts in BDT
1.2 Information Collected Automatically
When you access and use the 77aj platform, certain technical and behavioural data is collected automatically by our systems. This includes:
- Device and browser data: Your device type, operating system, browser type and version, screen resolution, and language settings
- Network and connection data: Your IP address, internet service provider, approximate geographic location (derived from IP, not GPS), and connection timestamps
- Usage and session data: Pages visited, features accessed, games played, time spent on platform, navigation patterns, and click-stream data
- Cookies and local storage: Session identifiers, authentication tokens, preference data, and analytics markers as described in Section 4 of this Policy
Location Data: 77aj does not collect precise GPS location data from your device. The geographic location information we hold is derived from your IP address and is used solely for fraud prevention, regulatory compliance screening, and service quality monitoring. It is accurate only to the city or region level and is never used for advertising targeting.
1.3 Information from Third Parties
In certain circumstances, 77aj may receive information about you from trusted third-party sources. This includes identity and address verification data from KYC service providers, fraud signals and risk scores from payment processors, and — where permitted — information from publicly available sources used to verify the accuracy of account registration details. Any third-party data is handled with the same level of care as information you provide directly.
| Data Category | Examples | Primary Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, NID number | KYC verification, account security | 7 years post-account closure |
| Contact Data | Mobile number, email address | Account communication, support | Duration of account + 3 years |
| Financial Data | bKash number, transaction history | Payment processing, fraud prevention | 7 years (legal/tax obligation) |
| Technical Data | IP address, device type, browser | Security monitoring, service delivery | 13 months from collection |
| Usage Data | Pages visited, games played, session duration | Platform improvement, personalisation | 26 months from collection |
| Communications Data | Support chat logs, emails | Dispute resolution, quality assurance | 3 years from interaction date |
How We Use Your Information
77aj uses the personal information we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected without obtaining your explicit consent. Our primary bases for processing your personal information are: performance of the contract between you and 77aj, compliance with legal obligations, our legitimate business interests, and — in limited cases — your explicit consent.
2.1 Account Management and Service Delivery
The core purpose for which we process your data is to provide you with the 77aj service. This includes creating and maintaining your player account, processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and our banking partners, settling bets and game results, and delivering customer support. Without processing your personal information for these purposes, we would be unable to provide the service at all.
2.2 Identity Verification and KYC Compliance
We process your identity documents and personal details to verify that you meet our eligibility requirements — specifically, that you are at least 18 years of age and that the name on your account matches the payment methods linked to it. This processing is necessary both for the performance of our contract with you and to meet our legal obligations regarding underage gambling prevention and anti-money laundering (AML) compliance.
2.3 Fraud Prevention and Platform Security
77aj uses technical data, transaction patterns, and behavioural signals to detect and prevent fraudulent activity, including account takeover attempts, bonus abuse, money laundering, and collusion. This processing is carried out on the basis of our legitimate interests in protecting the integrity of the platform and the security of all players. Automated risk-scoring systems may flag accounts for manual review; human review is always applied before any account action is taken solely on the basis of an automated decision.
2.4 Communications and Notifications
We use your contact details to send you transactional notifications that are essential to your use of the service — such as deposit confirmations, withdrawal processing updates, and security alerts. Where you have provided explicit consent, we may also send promotional communications about 77aj offers, seasonal promotions (such as BPL or Eid specials), and new game launches. You may withdraw consent for promotional communications at any time through your account settings.
2.5 Platform Analytics and Improvement
Aggregated and anonymised usage data is analysed to understand how players interact with the 77aj platform, identify features that perform well, and prioritise improvements. This analysis helps us optimise game loading speeds, improve the mobile experience for players across Dhaka, Chittagong, Sylhet, and other cities, and refine our payment flow for local methods. The data used for this purpose is de-identified wherever possible.
Responsible Gaming Monitoring: 77aj uses your gameplay data — including session frequency, session duration, deposit amounts, and betting patterns — to power our responsible gaming monitoring tools. If our systems detect patterns consistent with problem gambling behaviour, we may proactively reach out to offer support resources. This processing is carried out in your genuine interest and forms part of our commitment to player welfare. See our Responsible Gaming page for full details.
Data Sharing and Disclosure
77aj does not sell your personal data to third parties. We share your information only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate care and in accordance with applicable data protection standards.
3.1 Payment Processing Partners
To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. Each of these partners operates under their own privacy policy and regulatory obligations. 77aj does not store full payment credentials on its own servers — payment tokenisation is used wherever technically supported.
3.2 Identity Verification and KYC Providers
We work with specialist third-party KYC verification services to validate the identity documents submitted by players. These providers receive only the data necessary to perform the verification check and are strictly prohibited from using that data for any purpose other than the verification service they provide to 77aj.
3.3 Technology and Infrastructure Partners
77aj uses third-party technology providers for hosting, content delivery, analytics, and customer support tooling. These providers act as data processors on our behalf, operating under binding data processing agreements that restrict them from using your data for their own purposes.
3.4 Game Content Providers
Where you play games supplied by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited gameplay data (such as session IDs and bet amounts) may be shared with those providers for the purpose of game delivery, result verification, and jackpot calculation. These providers do not receive your full identity profile.
3.5 Legal and Regulatory Disclosures
77aj may disclose your personal information to law enforcement agencies, regulatory bodies, or other authorities where we are legally required to do so, or where disclosure is necessary to prevent serious harm, detect or prosecute criminal activity, or protect the rights and safety of our players and staff. We will notify you of any such disclosure where we are legally permitted to do so.
No Cross-Border Transfers for Marketing: 77aj does not transfer your personal data to third parties in other countries for the purpose of direct marketing, profiling, or advertising. Any cross-border data transfers that are necessary for service delivery (for example, to cloud infrastructure providers) are covered by appropriate contractual safeguards.
Cookies and Tracking Technologies
77aj uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. This section explains what cookies we use, why we use them, and how you can manage your preferences.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login status, language preferences, and session state — so that the site functions correctly and your experience is consistent across pages and visits.
4.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Session authentication, security tokens, login state, CSRF protection | Session / up to 30 days | No — platform cannot function without these |
| Functional | Language preferences, game display settings, responsible gaming tool state | Up to 12 months | Yes — disabling reduces personalisation |
| Analytics | Page performance monitoring, feature usage tracking, error logging (anonymised) | Up to 26 months | Yes — via account preferences |
| Fraud Prevention | Device fingerprinting signals used to detect suspicious login patterns and bot activity | Up to 13 months | No — essential for account security |
4.3 Managing Cookie Preferences
You can manage your cookie preferences for non-essential cookies through your 77aj account settings panel. Additionally, most modern browsers allow you to control cookie behaviour through browser settings, including blocking all third-party cookies or deleting existing cookies. Please note that disabling strictly necessary or fraud-prevention cookies will impair your ability to use the platform, as these are integral to login security and session management.
77aj does not use cookies to serve third-party advertising, track you across websites you visit outside of our platform, or build advertising profiles for sale to external parties.
Data Security and Retention
77aj implements a layered approach to data security, combining technical controls, organisational measures, and procedural safeguards to protect your personal information against unauthorised access, disclosure, alteration, and destruction.
5.1 Technical Security Measures
- Transport encryption: All data in transit is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. Connections using outdated protocols are automatically rejected.
- Password hashing: Account passwords are stored using a strong one-way hashing algorithm with salting. 77aj staff cannot read your password in plain text, and it is never stored or transmitted in unencrypted form.
- Access controls: Access to player data within 77aj's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). Access logs are maintained and reviewed regularly.
- Database encryption: Sensitive data fields in our databases — including identity document references and payment method identifiers — are encrypted at rest using AES-256 encryption.
- Intrusion detection: Our infrastructure is monitored 24/7 by automated intrusion detection and anomaly-alerting systems. Security incidents are escalated to our technical team within minutes of detection.
5.2 Organisational Measures
All 77aj staff and contractors who handle personal data are required to complete data protection training and are bound by confidentiality obligations in their contracts. Access to production systems containing player data is subject to multi-factor authentication and regular access reviews.
5.3 Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The specific retention periods for each category of data are set out in the table in Section 1.3 of this Policy. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.
Data Breach Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 77aj will notify affected players as promptly as reasonably practicable. Notification will be provided via your registered contact details and will include a description of the nature of the breach, the categories of data affected, and the steps we have taken or plan to take to address the breach and mitigate its effects.
Your Rights as a Data Subject
As a player on the 77aj platform, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without creating unnecessary barriers to their exercise.
6.1 Right of Access
You have the right to request a copy of the personal data that 77aj holds about you. Upon receipt of a verified access request, we will provide you with a summary of your personal data, the purposes for which it is processed, the categories of recipients it has been shared with, and the applicable retention periods. Access requests are fulfilled within 30 days of receipt.
6.2 Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details — such as your contact number or email address — you can update information directly through your account settings. For identity-verified fields such as your legal name or date of birth, an update request may require submission of supporting documentation.
6.3 Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (in cases where consent is the basis of processing), or where you object to processing on legitimate interest grounds and no overriding interest applies. Please note that we may be unable to fulfil erasure requests in full where retention is required by law — for example, financial transaction records subject to a 7-year retention obligation under applicable regulations.
6.4 Right to Restrict Processing
In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing pending verification of our legitimate grounds — you may request that we restrict the processing of your personal data to storage only, without using it for other purposes, while the matter is being resolved.
6.5 Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. This right applies to data that you provided directly to us, such as your account registration details and transaction history.
6.6 Right to Object
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests or where it is used for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately. Where you object to processing on legitimate interest grounds, we will assess whether our legitimate interests are overridden by your interests, rights, and freedoms before determining whether to continue or cease the processing.
Exercising Your Rights: To exercise any of the rights described above, please contact the 77aj privacy team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 days. There is no fee for exercising your data rights, except in cases of manifestly unfounded or excessive requests, where a reasonable administrative fee may apply.
Third-Party Services and Links
The 77aj platform integrates with a number of third-party services that are necessary for the delivery of our products. This section describes how your data interacts with these services and clarifies the boundaries of 77aj's data responsibility.
7.1 Game Providers
Live casino and slot game content on 77aj is supplied by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, a session connection is established between your device and that provider's game server. The provider will process technical session data necessary to run the game. Each provider maintains its own privacy policy governing this processing; 77aj is not responsible for the data practices of third-party game studios in their capacity as independent data controllers.
7.2 Payment Gateways
Deposit and withdrawal transactions are processed through the payment systems of our supported partners — bKash, Nagad, Rocket, Upay, and our banking partners. When you initiate a transaction, you are interacting directly with these providers' payment infrastructure, which is governed by each provider's own terms of service and privacy policy. 77aj recommends that you review the privacy policies of any payment service you use alongside the 77aj platform.
7.3 No Outbound External Links in Content
This website does not contain outbound links to external third-party websites within its page content. All navigation links on the 77aj platform point to pages within the 77aj.app domain. If you navigate away from 77aj.app by typing an address directly into your browser, 77aj has no responsibility for the data practices of any third-party site you visit.
Updates to This Privacy Policy
77aj reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. The "Last Revised" date displayed at the top of this document will be updated whenever a material change is made.
Where changes are material — meaning they significantly affect the way we use your personal data or the rights available to you — we will notify you proactively via your registered contact details before the changes take effect. For minor updates, such as clarifications of existing language or corrections of typographical errors, we may update the document without individual notification.
Your continued use of the 77aj platform after any updates to this Privacy Policy constitutes your acknowledgement of the revised Policy. If you disagree with the changes, you may close your account in accordance with the process described in our Terms & Conditions and request deletion of your personal data in accordance with Section 6.3 of this Policy.
8.1 Governing Language
This Privacy Policy is written and shall be interpreted exclusively in the English language. Any translation provided for reference purposes does not constitute a legally binding version of this Policy. In the event of any conflict between a translation and the English-language original, the English version shall prevail.
8.2 Contact for Privacy Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or 77aj's data practices, please contact us at [email protected] with the subject line "Privacy Enquiry". We are committed to addressing all privacy-related communications promptly and transparently.
Effective Date: This Privacy Policy is effective as of 01 January 2026 and supersedes all prior versions of the 77aj Privacy Policy. The current version is always accessible at 77aj.app/privacy-policy.
Ready to Play with Confidence?
Your privacy is protected every step of the way on 77aj. Explore our games, review our responsible gaming tools, or log in to your account — knowing your data is safe with us. 18+ only.