Your Privacy Matters at 77ca

Introduction

This Privacy Policy ("Policy") describes how 77ca ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal information relating to individuals ("Players", "Users", "you") who access or use the services available at https://77ca.io and any associated interfaces operated under the 77ca brand.

77ca is committed to handling personal data responsibly, transparently, and securely. This Policy has been written in plain English to ensure every player — regardless of their technical background — can understand exactly how their information is managed. Where legal or technical terminology is unavoidable, we have provided definitions or context to aid understanding.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming policy, both of which form part of the complete agreement between you and 77ca.

Data We Collect

77ca collects personal data through several channels: directly from you when you register or interact with the platform, automatically when you use our services, and occasionally from trusted third-party sources for verification or fraud-prevention purposes. The categories of data we collect are described below.

2.1 Registration & Account Data

• Full legal name — used to verify your identity and process payments
• Date of birth — used to confirm you meet the 21+ age requirement
• Email address — used for account communications, support, and optional marketing
• Mobile phone number — used for account security, OTP verification, and support contact
• Residential address — used for identity verification and compliance purposes
• Username and encrypted password — used to authenticate your account access

2.2 Identity Verification (KYC) Data

• Government-issued photo identification — National ID card (NID), passport, or driving licence
• Proof of address documents — utility bills or bank statements dated within the last three months
• Payment method ownership evidence — bKash, Nagad, Rocket, or Upay account confirmation screenshots or statements
• Selfie or video verification images where enhanced KYC is required

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and reference identifiers
• Payment method type and masked account identifiers (e.g., last four digits of a card, or registered mobile number associated with a bKash or Nagad wallet)
• Transaction history and cumulative account balance records

2.4 Gameplay & Betting Activity Data

• Game session logs, bet amounts, outcomes, and win/loss records
• Bonus and promotion redemption history
• Responsible gaming tool usage — deposit limits set, cooling-off periods activated, self-exclusion requests

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps, page navigation paths, and feature interaction logs
• Cookie identifiers and similar tracking technology data (see Section 5)

2.6 Communications Data

• Live chat transcripts and support ticket records
• Email and SMS correspondence with the 77ca support team
• Feedback, complaint, and dispute submissions

How We Use Your Data

77ca uses the personal data described in Section 2 for the following specific purposes. We do not use your data for any purpose that is not listed here without first obtaining your explicit consent.

Legal Basis for Processing

Every instance of personal data processing carried out by 77ca rests on one or more of the following recognised legal bases:

• Contractual necessity: Processing required to deliver the services you have requested — including account creation, payment processing, and gameplay — is necessary for the performance of the contract between you and 77ca.
• Legal obligation: Certain processing activities — particularly KYC verification and anti-money laundering record-keeping — are required by applicable law and compliance frameworks that 77ca is obligated to follow.
• Legitimate interests: 77ca processes certain technical and behavioural data on the basis of its legitimate interests in operating a secure, fair, and sustainable platform. This includes fraud detection, abuse prevention, and platform analytics. We ensure that our legitimate interests do not override your fundamental rights.
• Consent: Marketing communications and optional personalisation features are processed solely on the basis of your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Cookies & Tracking Technologies

77ca uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience on the platform. A cookie is a small text file placed on your device by your web browser when you visit a website. The table below describes the types of cookies 77ca uses and their purposes.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some platform features. Strictly necessary and security cookies cannot be disabled as they are essential to the safe operation of the platform.

Sharing Your Data

77ca does not sell, rent, or trade your personal data to unaffiliated third parties. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Payment Service Providers

To process your deposits and withdrawals, 77ca shares necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported institutions. Each payment provider operates under its own privacy policy and data security standards.

6.2 Game Content Providers

Game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive limited session data necessary to deliver their game content to your device, record game outcomes, and ensure fair play. These providers are contractually bound to use such data only for the purpose of delivering the game service.

6.3 Identity Verification Partners

Where automated KYC verification is employed, 77ca may share identity document images and registration data with trusted identity verification service providers. These partners are subject to strict data processing agreements and are not permitted to retain or reuse your documents beyond the verification process.

6.4 Legal and Regulatory Disclosure

77ca may disclose personal data to government authorities, law enforcement agencies, or financial intelligence units where required to do so by applicable law, court order, or regulatory instruction. In such cases, 77ca will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where permitted to do so by law.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 77ca business, personal data held by 77ca may be transferred to the acquiring entity as part of the transaction. Affected players will be notified of any such transfer and of any material change to the processing of their personal data that results from it.

Payment Data Security

The security of financial data is treated with the highest priority at 77ca. The following technical and organisational measures are in place to protect payment information at every stage of the transaction lifecycle.

• SSL/TLS encryption: All connections between your device and 77ca's servers are encrypted using TLS 1.2 or higher, preventing interception of data in transit.
• No full card storage: 77ca does not store full payment card numbers on its own servers. Card tokenisation is handled by the relevant payment network.
• Mobile wallet security: bKash, Nagad, Rocket, and Upay transactions are authenticated directly through each provider's own secure API. 77ca never handles or stores your mobile banking PIN or OTP.
• Transaction monitoring: All deposit and withdrawal activity is monitored in real time for anomalies, including unusual transaction sizes, rapid successive deposits, and mismatches between account holder identity and payment method registration details.
• Access controls: Access to financial transaction records within 77ca's internal systems is restricted on a strict need-to-know basis and protected by multi-factor authentication.

Data Retention

77ca retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and in any case for no longer than required by applicable compliance obligations. The table below provides indicative retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data — which cannot be used to identify any individual — may be retained indefinitely for platform analytics and improvement purposes.

Your Privacy Rights

As a player on the 77ca platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact the support team at [email protected] with the subject line "Data Rights Request" and include your registered account username.

• Right of access: You have the right to request a copy of the personal data 77ca holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. For account-critical fields such as name and date of birth, documentary evidence may be required before changes are made.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Note that this right is subject to overriding retention obligations under applicable law.
• Right to restriction of processing: In certain circumstances you may request that 77ca restrict the processing of your personal data — for example, while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Children & Minors

The 77ca platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Registration on the platform by a person under 21 is a direct violation of the 77ca Terms & Conditions and this Privacy Policy.

Where 77ca discovers or has reasonable grounds to suspect that a registered account belongs to an individual under the age of 21, the account will be suspended immediately, all balances will be withheld pending investigation, and any personal data collected in connection with that account will be deleted in accordance with our data deletion procedures, subject to any overriding legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered on the 77ca platform, please contact the support team immediately at [email protected] so that appropriate action can be taken without delay.

Third-Party Services & Links

The 77ca platform integrates services from third-party providers including game studios, payment processors, and identity verification platforms. While 77ca carefully selects and contracts with these providers, each operates under its own privacy policy and data protection framework. 77ca is not responsible for the privacy practices of third-party providers beyond the contractual data processing agreements in place.

Third-party providers whose services are integrated into the 77ca platform include but are not limited to:

• Game providers: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, Ezugi
• Payment providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, Mastercard
• Banking partners: Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank

77ca does not embed external social media widgets, third-party comment systems, or external advertising technology on the platform. No data is transmitted to social media networks or advertising platforms as a result of using 77ca.

Updates to This Policy

77ca may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. The effective date at the top of this Policy indicates when the current version took effect.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — registered players will be notified via the contact details held on their account no less than 7 days before the revised Policy takes effect. Continued use of the platform following the effective date constitutes acceptance of the updated Policy.

For non-material changes, such as formatting corrections or clarifications that do not alter the substance of the Policy, updates may be made without prior notification. Previous versions of this Policy are available upon written request to [email protected].

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact the 77ca team through one of the following channels: