Privacy Policy — 1a777

When you register an account or interact with the 1a777 platform, we collect certain categories of personal information. The specific data collected depends on how you use the platform and the services you access. The principal categories of data we collect are set out below.

Registration & Identity Data:

• Full legal name as it appears on official identification documents.
• Date of birth (required for age verification — players must be 18 years or older).
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and others across Bangladesh).
• Email address and/or mobile phone number used for account communication.
• Username and encrypted password credentials.

Identity Verification (KYC) Data:

• Copies of government-issued identity documents such as a National Identity Card (NID) or passport.
• Selfie or live photo for biometric identity matching, where required.
• Proof of address documentation such as a utility bill or bank statement.

Financial & Transaction Data:

• Payment method details including mobile money account numbers associated with bKash, Nagad, Rocket, and Upay registrations.
• Card details (card type, masked card number, billing address) where card payments are used.
• Deposit and withdrawal history, including amounts, timestamps, and transaction reference numbers.
• Bonus claims, wagering activity, and account balance history.

Technical & Usage Data:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, and browser version.
• Pages visited, features used, session duration, and click-path data.
• Game history, bet amounts, outcomes, and session logs.

Communications Data:

• Records of your interactions with 1a777 customer support, including live chat transcripts and email correspondence.
• Feedback, complaints, or dispute submissions made through any channel.

1a777 processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary processing purposes and the corresponding legal basis for each.

Where we rely on consent as the legal basis for processing (for example, for sending promotional emails or SMS notifications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

1a777 does not use automated decision-making processes — including profiling — that produce legal or similarly significant effects on users, without providing a mechanism for human review.

1a777 does not sell your personal data to any third party. However, in order to operate the platform and deliver the services you have requested, we share certain data with trusted partners and service providers. All third parties who process data on our behalf are contractually required to handle that data securely and only for the specific purpose for which it was shared.

Categories of third parties with whom data may be shared:

• Payment processors: Mobile money operators (bKash, Nagad, Rocket, Upay) and card processing networks (Visa, Mastercard) receive transaction-related data necessary to complete deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Where automated KYC verification is used, your identity documents and biometric data may be processed by a third-party verification service operating under strict data security standards.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary for the delivery and integrity of their game products.
• Analytics and fraud prevention providers: Technical and usage data may be shared with analytics platforms and fraud detection services to help us identify unusual patterns, prevent account takeover, and improve platform performance.
• Legal and regulatory authorities: 1a777 will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by applicable law, court order, or to protect the rights, safety, or property of 1a777, its users, or the public.

Where data is transferred to third-party processors located outside Bangladesh, 1a777 takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual data processing agreements.

The 1a777 platform uses cookies and similar tracking technologies to provide core functionality, improve your experience, and support security operations. A cookie is a small text file placed on your device when you visit the platform. Cookies allow the platform to recognise your device on subsequent visits and retain certain preferences or session states.

Types of cookies used by 1a777:

• Essential cookies: These are required for the platform to function correctly. They manage user sessions, authentication tokens, and security features such as CSRF protection. You cannot opt out of essential cookies without ceasing to use the platform.
• Performance cookies: These collect anonymised data about how users interact with the platform — for example, which pages are visited most frequently and where users encounter errors. This data helps us improve platform performance.
• Functional cookies: These remember your preferences, such as language settings, display options, and odds format, so that you do not need to re-configure them on each visit.
• Analytics cookies: We use analytics tools to understand aggregate user behaviour across the platform. Data processed through analytics cookies is anonymised and does not identify individual users.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking certain categories of cookies may impair the functionality of the 1a777 platform, particularly features that rely on session management.

The 1a777 platform does not use third-party advertising cookies and does not engage in cross-site behavioural advertising targeting.

1a777 implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction.

Technical safeguards include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data fields including payment information and identity document storage.
• Firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation.
• Two-factor authentication (2FA) available for player accounts to add a second layer of login security.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.

Organisational safeguards include:

• Role-based access controls ensuring that staff can only access data relevant to their specific job functions.
• Mandatory data security training for all personnel who handle personal data.
• Incident response procedures to identify, contain, and report data breaches in a timely manner.
• Regular internal audits of data handling practices and access logs.

Despite these measures, no method of data transmission or storage can be guaranteed to be completely secure. In the event of a data breach that poses a risk to your rights and freedoms, 1a777 will notify affected users as soon as reasonably practicable and in accordance with applicable legal requirements.

As a user of the 1a777 platform, you hold a number of rights in relation to the personal data we hold about you. 1a777 is committed to facilitating the exercise of these rights in a timely and transparent manner. Requests should be submitted in writing to [email protected] with the subject line "Privacy Request".

Right of Access: You have the right to request a copy of the personal data that 1a777 holds about you, along with information about how that data is being processed. We will provide this information within a reasonable timeframe following receipt of a valid request.

Right to Rectification: If you believe that personal data held by 1a777 is inaccurate or incomplete, you have the right to request that it be corrected. For routine updates such as a change of address or contact number, you may also make amendments directly through your account settings.

Right to Erasure: In certain circumstances, you have the right to request that 1a777 deletes the personal data we hold about you. This right is not absolute — we may be required to retain certain data for legal, regulatory, or fraud prevention purposes even following an erasure request. We will explain any such limitations when responding to your request.

Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.

Right to Object: Where we process your data on the basis of legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent: Where processing is based on your consent (such as for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.

1a777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account registration and for a period of five (5) years following account closure, to support potential legal or regulatory enquiries.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years in accordance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Identity verification documents are retained for five (5) years following the end of the business relationship, or longer if required by applicable law.
• Customer support communications: Records of support interactions are retained for three (3) years following the date of the interaction, unless the matter remains subject to an ongoing dispute or legal proceeding.
• Technical and usage logs: Server logs and usage data are retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing consent records: Records of consent to receive marketing communications are retained for as long as the consent remains active, plus three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification of the individual. Where anonymisation is used, the anonymised data may be retained for statistical or analytical purposes without further limitation.

If you close your 1a777 account voluntarily, your active account data will be flagged as inactive and retained for the applicable retention periods described above before being permanently deleted. You will not be able to recover a deleted account after this point.

1a777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to applicable law, changes to our data processing practices, or improvements to the platform. The effective date at the top of this document will be updated to reflect any such revision.

Where changes are material — meaning they affect your rights or the way in which we process your personal data in a significant way — we will provide advance notice through the platform dashboard and/or to your registered contact details. Where required by applicable law, we will seek your renewed consent before implementing material changes.

Your continued use of the 1a777 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated document. If you do not agree with the revised policy, you should discontinue your use of the platform and contact support to close your account.

Data Controller Contact:

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 1a777 processes your personal data, please contact our support team:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 through the platform dashboard
• Average response time: 2–5 minutes via live chat; within 1 business day via email

All privacy-related correspondence should include your registered account email address and the subject line "Privacy Request" to ensure prompt routing to the relevant team. We take all privacy concerns seriously and will respond to every valid enquiry.