e77e Privacy Policy

01 Introduction

This Privacy Policy sets out the basis on which e77e ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player") who access or use the e77e platform at e77e.io. e77e operates as an online casino and sports betting platform serving players in Bangladesh and internationally.

We are committed to protecting your privacy and ensuring that your personal data is handled responsibly, securely, and transparently. This policy applies to all personal data collected through e77e.io, our mobile-optimised site, our Customer Support channels, and any other touchpoint through which you interact with the e77e brand.

This Privacy Policy should be read alongside the e77e Terms & Conditions and the e77e Responsible Gaming policy, both of which are available on this website. Terms not defined in this Privacy Policy carry the meanings given to them in the Terms & Conditions.

02 Data Controller

For the purposes of this Privacy Policy, e77e acts as the data controller in respect of the personal data it collects from Players. As data controller, e77e determines the purposes and means by which your personal data is processed. e77e is responsible for ensuring that all data processing activities described in this policy are carried out in a manner consistent with applicable data protection legislation and internationally recognised privacy standards.

Where e77e engages third-party service providers to process personal data on its behalf (for example, payment gateway operators, KYC verification providers, and game content suppliers), those third parties act as data processors under binding contractual agreements that require them to handle your data in accordance with e77e's instructions and applicable data protection requirements.

03 Personal Data We Collect

e77e collects only the personal data that is necessary for the legitimate purposes described in this Privacy Policy. The categories of personal data we collect include the following:

04 How We Collect Your Data

e77e collects personal data through the following channels:

• Direct registration: When you create an e77e Account, you provide identity, contact, and payment data directly through the registration form.
• KYC submissions: When you submit identity documents for age and identity verification, those documents are collected and processed by our compliance team and our third-party KYC verification partner.
• Platform usage: Technical and device data, and gaming activity data, are collected automatically as you navigate e77e.io and interact with games, betting markets, and account features.
• Payment transactions: Financial data is collected each time you initiate a deposit or withdrawal through a supported payment method (bKash, Nagad, Rocket, or Upay).
• Customer Support interactions: When you contact e77e via live chat or email, the content of those communications is recorded and stored as part of your support ticket history.
• Cookies and tracking technologies: Cookies, web beacons, and similar technologies collect technical and behavioural data as described in Section 8 of this Privacy Policy.
• Third-party verification services: Where necessary for AML compliance or fraud prevention, e77e may receive data about you from third-party identity verification or credit reference agencies.

05 How We Use Your Personal Data

e77e uses the personal data it collects for the following purposes:

e77e does not use your personal data for automated individual decision-making that produces legal effects concerning you, except where this is required for fraud or AML screening, in which case you have the right to request human review of any automated decision.

06 Legal Basis for Processing

e77e processes your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to deliver the services described in the e77e Terms & Conditions — including account management, game access, and payment processing — to which you are a party.
• Legal obligation: Processing is necessary for e77e to comply with applicable legal and regulatory requirements, including KYC/AML obligations under international anti-money-laundering frameworks and age verification requirements.
• Legitimate interests: Processing is necessary for e77e's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, provided those interests are not overridden by your privacy rights.
• Consent: Where e77e processes your personal data for purposes not covered by the above bases — in particular for direct marketing communications — we will obtain your explicit consent before doing so. You may withdraw your consent at any time by contacting Customer Support.

07 Data Sharing & Disclosure

e77e does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We may share your personal data only in the following limited circumstances:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Bangladeshi financial regulations.
• KYC and identity verification partners: A third-party KYC provider may receive your identity documents and personal details to perform age and identity verification checks on our behalf.
• Game content suppliers: Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and anonymised player identifiers necessary to deliver their game content. These providers do not receive your full name, contact details, or financial information.
• Fraud and AML screening services: Third-party fraud detection and anti-money-laundering screening providers may receive data required to perform risk assessments on transactions and accounts.
• Legal authorities: e77e may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, valid legal process, or a binding order from a competent authority.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of e77e's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

08 Cookies & Tracking Technologies

e77e uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and collect anonymised analytics data about how Players use e77e.io. The following categories of cookies are used on the e77e platform:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency preferences, and enable core features such as game loading and deposit flows. These cookies cannot be disabled without impairing the platform's functionality.
• Analytics cookies: These cookies collect anonymised data about how visitors interact with e77e.io, including pages visited, session duration, and navigation paths. This data is used solely to improve the platform and is not shared with third-party advertising networks.
• Functionality cookies: These cookies remember your in-platform preferences, such as display settings and notification preferences, to provide a more personalised experience across sessions.
• Security cookies: These cookies help detect and prevent fraudulent account access by flagging unusual login patterns or anomalous session behaviour.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use core platform features including logging in, making deposits, and playing games. Disabling analytics or functionality cookies will not prevent you from using the platform but may affect your experience.

09 Data Retention

e77e retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, to maintain your active Account, and to meet our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account data: Retained for the duration of your Account's active status plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the date of verification or account closure, whichever is later, in accordance with international AML standards.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the most recent communication in each support case.
• Gaming activity logs: Retained for five (5) years from the date of the relevant gaming session.
• Technical and device data (server logs): Retained for twelve (12) months from the date of collection, unless a specific retention requirement applies due to an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual Player. Where anonymisation is not technically feasible, data is securely destroyed in accordance with e77e's data disposal policy.

10 Data Security

e77e implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption: All data transmitted between your device and e77e.io is encrypted using industry-standard 256-bit TLS encryption. The padlock icon in your browser confirms that your connection is secure.
• Encryption at rest: Sensitive personal data stored on e77e's servers — including KYC documents, payment data, and Account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised e77e personnel on a strict need-to-know basis. All internal access to personal data is logged and audited.
• Two-factor authentication: e77e strongly recommends that all Players enable two-factor authentication (2FA) on their Accounts. 2FA is also applied internally to all staff accounts that have access to player data.
• Penetration testing and security audits: e77e's platform and infrastructure undergo regular security assessments conducted by independent third-party security professionals.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, e77e will notify affected Players without undue delay and take all reasonable steps to contain and remediate the breach.

While e77e takes all reasonable precautions to secure your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying e77e immediately if you suspect unauthorised access to your Account.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that e77e holds about you:

• Right of access: You have the right to request a copy of the personal data that e77e holds about you and to receive information about how that data is used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that e77e delete your personal data. Please note that this right is subject to our legal obligation to retain certain records for a minimum period — in particular KYC documents and financial transaction records — and erasure requests that conflict with those obligations cannot be fully fulfilled.
• Right to restriction: You have the right to request that e77e restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You have the right to receive a copy of personal data you have provided to e77e in a structured, commonly used, machine-readable format, where technically feasible.
• Right to object: You have the right to object to e77e processing your personal data on the basis of legitimate interests. You also have the right to withdraw consent for marketing communications at any time.
• Right not to be subject to automated decisions: Where e77e makes automated decisions that significantly affect you — for example in fraud or AML screening — you have the right to request human review of that decision.

To exercise any of the above rights, please contact the e77e Data Protection team at [email protected] with the subject line "Data Rights Request". e77e will respond to all valid requests within thirty (30) days. We may request verification of your identity before processing any data rights request to ensure that personal data is not disclosed to an unauthorised party.

12 Children & Minors

If you believe that a minor has registered an Account on the e77e platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay. Parents and guardians are encouraged to use parental control software to restrict minors' access to online gambling platforms.

13 International Data Transfers

e77e operates as an internationally licensed platform. Some of the third-party service providers we work with — including game content suppliers, KYC verification providers, and fraud screening services — may be located in jurisdictions outside Bangladesh. When your personal data is transferred to a third country in connection with such services, e77e takes appropriate steps to ensure that an adequate level of protection is applied to that data.

These steps may include entering into data transfer agreements based on internationally recognised standard contractual clauses, or relying on the adequacy determination applicable to the recipient jurisdiction. Where neither of these mechanisms is available, e77e will only transfer data to third countries where necessary for the performance of a contract with you (for example, to enable the delivery of a game from a provider based in a specific jurisdiction) and will ensure that appropriate safeguards are in place.

You may request further information about the specific international transfer mechanisms e77e relies on by contacting our Data Protection team at [email protected].

14 Amendments to This Policy

e77e reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. When material changes are made to this Privacy Policy, we will notify registered Players by posting a prominent notice on e77e.io and, where practicable, by sending a notification to the email address associated with your Account.

The revised Privacy Policy will take effect on the date stated in the notice. We encourage you to review this Privacy Policy periodically to stay informed about how e77e protects your personal data. Continued use of the e77e platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The current version of this Privacy Policy is always available at e77e.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to e77e's handling of your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] — Subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 from within the e77e platform after login
• Response Time: We aim to acknowledge all privacy enquiries within five (5) business days and to provide a substantive response within thirty (30) days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Languages: English and Bengali

If you are not satisfied with e77e's response to your privacy enquiry or data rights request, you may have the right to escalate your complaint to a relevant data protection supervisory authority in your jurisdiction.