Privacy Policy

This Privacy Policy describes how a77 ("we", "us", "our") collects, uses, stores, and protects personal data provided by users ("you", "your") of the a77 online casino and sports betting platform at a77.lol (the "Platform"). It applies to all registered account holders, visitors to the Platform, and any individual who interacts with a77's customer support channels.

By registering an account on the a77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your use of the a77 Platform.

For the purposes of applicable data protection law, a77 is the data controller responsible for personal data collected and processed through the Platform. As data controller, a77 determines the purposes and means by which your personal data is processed.

All data protection and privacy enquiries may be directed to our customer support team at the contact details set out in Section 15 of this Policy. a77 is committed to responding to all data-related enquiries within a reasonable timeframe, and no later than 30 calendar days from the date of receipt of a written request.

a77 collects the following categories of personal data in the course of providing its services to you:

a77 does not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or political opinions) and requests that you refrain from providing such information through any channel on the Platform.

a77 collects personal data through the following means:

• Direct registration: Information you provide when creating your a77 account, including your name, date of birth, mobile number, and email address.
• KYC verification: Identity documents and supporting materials you submit in response to a verification request, including national ID cards, passport scans, or utility bills confirming your address.
• Payment processing: Details of the payment method you use to deposit or withdraw funds, including mobile wallet identifiers and card data passed to us by your payment provider.
• Platform interaction: Data generated automatically as you use the Platform — including game sessions, betting activity, login timestamps, and feature interactions — collected via server logs and application-level tracking.
• Cookies and similar technologies: Data collected automatically when you visit the Platform via your browser, as described further in Section 8.
• Customer support: Information you provide when contacting our support team by email or live chat, including the content of your messages and any attachments you send.
• Third-party verification providers: Where required for identity verification or fraud screening, a77 may receive data about you from reputable third-party identity verification or anti-fraud services. Such data is used solely for the purposes of verification and security.

a77 processes your personal data on one or more of the following legal bases:

• Contract performance: Processing is necessary to perform the contract between you and a77 — namely, to operate your account, accept your deposits, process withdrawals, settle bets, and deliver the gaming services you have requested.
• Legal obligation: Processing is necessary for a77 to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responsible gaming requirements mandating age verification.
• Legitimate interests: Processing is necessary for the purposes of a77's legitimate business interests, including fraud prevention, platform security, service improvement, and the detection of prohibited conduct — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where required by applicable law, a77 will seek your explicit consent before processing your data for a specific purpose (for example, sending you promotional communications). You may withdraw any consent given at any time by contacting our support team.

a77 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your a77 account, including processing login credentials, managing account settings, and responding to account-related queries.
• Payment processing: Processing your deposit and withdrawal transactions via your nominated payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, SureCash), reconciling account balances, and investigating disputed transactions.
• Identity verification: Verifying your age (18+), identity, and the ownership of your nominated payment method as part of a77's mandatory KYC process and ongoing AML obligations.
• Service delivery: Enabling you to access and participate in sports betting, live casino, slot games, crash games, and all other products offered on the a77 Platform.
• Responsible gaming: Monitoring your account activity to detect indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing appropriate responsible gaming interventions.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, collusion, bonus abuse, account takeovers, and other prohibited conduct on the Platform.
• Customer support: Responding to your queries, complaints, and requests through our support channels, and maintaining records of communications for quality assurance and dispute resolution purposes.
• Legal compliance: Fulfilling a77's obligations under applicable laws and regulations, including responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, usability, and content of the a77 Platform.
• Marketing communications: Where you have given your consent, sending you information about a77 promotions, bonuses, and seasonal offers relevant to the Bangladesh market. You may opt out of marketing communications at any time.

a77 does not use your personal data to make automated decisions that produce significant legal effects on you without human review, except where such automated processing is necessary for fraud screening and account security, in which case you have the right to request human review of any automated decision that adversely affects you.

a77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following limited circumstances:

• Payment service providers: Data necessary to process your deposits and withdrawals is shared with your nominated payment provider (for example, bKash, Nagad, Rocket) solely for the purpose of completing the transaction. These providers operate under their own privacy policies and are bound by contractual data protection obligations with a77.
• Identity verification providers: Where a77 engages a reputable third-party KYC or AML screening service to assist with identity verification or fraud prevention, your identity data may be shared with that provider on a strictly confidential basis.
• Game and technology providers: a77 partners with licensed game studios and technology providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) to deliver gaming content on the Platform. These providers may receive technical session data necessary to operate their games; they do not receive your financial data or full identity data.
• Legal and regulatory authorities: a77 may disclose your personal data to competent law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, valid legal process, or court order.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of a77's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.
• Professional advisers: a77 may share data with legal counsel, auditors, or other professional advisers where necessary for the conduct of a77's legal, regulatory, or financial affairs, subject to strict confidentiality obligations.

In all cases where a77 shares personal data with a third party, it requires that party to maintain appropriate technical and organisational measures to protect the data and to use it only for the specified purpose.

The a77 Platform uses cookies and similar tracking technologies (including local storage and session tokens) to ensure the correct functioning of the Platform and to enhance your experience. The following categories of cookies may be used:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They include session authentication tokens, anti-CSRF tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These cookies remember your preferences and settings (such as language preference and responsible gaming tool configuration) to personalise your experience.
• Analytics cookies: These cookies collect anonymised data about how users interact with the Platform, including pages visited and features used, to help a77 improve the Platform's performance and usability. The data collected is aggregated and does not identify you individually.
• Security cookies: These cookies assist a77's fraud detection systems in identifying suspicious login activity, automated bot behaviour, and other security threats.

You may adjust your browser settings to refuse or delete cookies, though doing so may affect the functionality of certain features of the a77 Platform. Most modern browsers provide granular controls for cookie management; please refer to your browser's help documentation for guidance specific to your browser.

a77 does not use third-party advertising or behavioural tracking cookies that share your data with advertising networks.

a77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for such minimum periods as may be required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later, to comply with anti-money laundering recordkeeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by a specific regulatory obligation or legal proceedings.
• Customer support records: Retained for a minimum of two (2) years from the date of the last communication, or longer where the communication relates to a formal complaint or legal dispute.
• Technical and usage data (logs): Retained for up to twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, a77 will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, it may be retained indefinitely in aggregated form for analytical purposes, as it will no longer constitute personal data.

a77 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the a77 Platform is encrypted in transit using industry-standard TLS protocols. Our SSL certificate is verifiable via the padlock icon in your browser's address bar.
• Encrypted storage: Sensitive data fields — including passwords, payment method identifiers, and identity document data — are stored in encrypted or hashed form. Plaintext storage of passwords is strictly prohibited.
• Access controls: Access to personal data within a77's systems is restricted to authorised personnel on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Network security: a77's Platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning.
• Staff training: All a77 staff with access to personal data receive data protection and security awareness training as a condition of their role.
• Incident response: a77 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, a77 will notify you without undue delay.

Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your account credentials, and a77 encourages you to use a strong, unique password and to log out of your account at the end of each session.

Subject to applicable law, you have the following rights in relation to your personal data held by a77:

• Right of access: You have the right to request a copy of the personal data a77 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request that a77 correct any inaccurate or incomplete personal data held about you. You may update some information directly within your account settings.
• Right to erasure: You have the right to request that a77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to a77's overriding legal retention obligations (see Section 9).
• Right to restriction: You have the right to request that a77 restrict its processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or object to its processing.
• Right to data portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive a copy of the personal data you provided to a77 in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to a77's processing of your personal data where that processing is based on legitimate interests, including the right to opt out of direct marketing communications at any time.
• Right to withdraw consent: Where a77 processes your data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact a77's customer support team at [email protected] (plaintext — not a clickable link) with the subject line "Data Rights Request". a77 will acknowledge your request within 5 business days and aim to respond substantively within 30 calendar days. In complex cases, the response period may be extended by a further 30 days, and you will be notified of any such extension.

a77 may request reasonable proof of identity before processing a data rights request, to ensure that personal data is not disclosed to an unauthorised third party.

The a77 Platform may contain references to third-party payment providers or game studios. Where such references include links to third-party websites or applications, please be aware that those websites and applications operate under their own independent privacy policies, which a77 does not control and for which a77 accepts no responsibility.

a77 recommends that you review the privacy policy of any third-party service you interact with, particularly in respect of payment transactions conducted through mobile wallet providers such as bKash, Nagad, and Rocket, which have their own terms governing your personal data.

The a77 Platform is strictly for persons aged 18 years and above. a77 does not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the a77 account registration process and is enforced at every withdrawal.

If a77 becomes aware that personal data has been collected from a person under the age of 18, it will take immediate steps to delete that data and close the associated account. If you believe that a77 may have inadvertently collected data from a minor, please contact us immediately at [email protected] (plaintext — not a clickable link).

a77 reserves the right to update or amend this Privacy Policy at any time. The most current version will always be published at a77.lol/privacy-policy, with the effective date displayed at the top of this page. Where a77 makes a material change to this Privacy Policy, it will use reasonable endeavours to notify registered users by posting a notice on the Platform or by email to the address registered to your account.

Your continued use of the a77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Privacy Policy, you must cease using the Platform and may request account closure by contacting our support team.

For any privacy-related queries, data rights requests, or concerns about how a77 handles your personal data, please contact our dedicated support team:

When submitting a data rights request, please include your registered account username or mobile number and clearly state the nature of your request so our team can assist you as efficiently as possible. All requests are handled in strict confidence.

This Privacy Policy was last reviewed and updated on 1 January 2026. a77 reserves all rights not expressly granted herein.