777rb Privacy Policy

777rb collects personal data through three primary channels: information you provide directly during registration and platform use, information generated automatically by your device and browser when you interact with the platform, and information received from third-party service providers who assist us in delivering and securing the service. The following table summarises the main categories of data we collect and the context in which each category arises.

1.1 Data You Provide Directly

When you register an account on 777rb, you are required to submit identity and contact data as described above. During the KYC verification process you will also be asked to upload scanned or photographed copies of government-issued identification documents — such as your Bangladesh National Identity Card (NID) or passport — and, where applicable, proof-of-address documents. These documents are processed by our compliance team and by our approved KYC service provider and are stored securely in encrypted form. Once verification is complete, document images are retained only for the minimum period required to satisfy our record-keeping obligations.

1.2 Data Collected Automatically

Each time you access the 777rb platform — whether via a web browser on desktop or mobile — our servers automatically record a range of technical and usage data. This includes your IP address (which may indicate your approximate geographic location), the type and version of your browser, your operating system, the pages you visit, and the sequence and duration of your navigation. This data is collected for fraud detection, platform security, and service-improvement purposes. It does not identify you by name in its raw form, but when combined with your account data it constitutes personal data and is treated as such under this Privacy Policy.

1.3 Data Received from Third Parties

777rb may receive personal data about you from third-party sources in the following circumstances: payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) may confirm the success or failure of a transaction and provide a transaction reference; identity verification providers may return a pass/fail signal and risk score following document checks; and fraud-prevention data brokers may provide device-fingerprint signals that help us detect suspicious account activity. In each case, 777rb uses only the minimum data necessary from the third-party source and applies the same security standards to third-party-sourced data as to directly collected data.

777rb processes your personal data only where a lawful basis for doing so exists. The primary lawful bases on which we rely are: (a) contract performance — processing necessary to deliver the services you have contracted for by creating a 777rb account; (b) legal obligation — processing required to comply with applicable law, including anti-money laundering (AML) and know-your-customer (KYC) requirements; (c) legitimate interests — processing necessary to protect the security of the platform, detect fraud, and improve service quality; and (d) consent — processing carried out on the basis of your freely given, specific, and informed consent, such as optional marketing communications.

The following list sets out the specific purposes for which 777rb processes personal data, together with the lawful basis applicable to each purpose:

• Account creation and management — to register your account, verify your identity, and maintain your player profile. Basis: contract performance.
• Service delivery — to enable you to place bets, play casino games, deposit funds, and withdraw winnings through the 777rb platform. Basis: contract performance.
• Payment processing — to process deposits and withdrawals via your chosen Bangladesh payment method. Basis: contract performance.
• KYC and age verification — to verify that you meet the 18+ age requirement and satisfy our identity-verification obligations. Basis: legal obligation.
• Fraud and security monitoring — to detect, investigate, and prevent fraudulent transactions, account takeovers, and other security incidents. Basis: legitimate interests.
• AML compliance — to monitor transactions for indicators of money-laundering activity and to file reports where legally required. Basis: legal obligation.
• Responsible gaming — to identify patterns of play that may indicate problem gambling and to administer deposit limits, session limits, and self-exclusion arrangements. Basis: legal obligation and legitimate interests.
• Customer support — to respond to your enquiries, resolve complaints, and maintain records of support interactions. Basis: contract performance and legitimate interests.
• Platform analytics and improvement — to analyse usage patterns, identify technical issues, and develop new features. Basis: legitimate interests.
• Marketing communications — to send you promotional offers, bonus notifications, and event-specific promotions (such as BPL season or Eid offers) by email or SMS, where you have consented to receive such communications. Basis: consent.

777rb does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, with the exception of automated fraud-detection systems that may temporarily flag or suspend an account pending human review. Where such an automated flag has a material impact on your account access, you have the right to request human review of the decision.

777rb does not sell, rent, or otherwise commercially exploit your personal data. We share personal data with third parties only in the categories and circumstances described below. All third-party recipients of your data are required to maintain appropriate technical and organisational security measures and to process your data solely for the specified purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, 777rb shares necessary transaction data — including your account reference, transaction amount, and registered payment method identifier — with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). These providers act as independent data controllers for their own processing and are subject to their respective privacy policies. 777rb shares only the minimum data necessary to initiate and reconcile each transaction.

3.2 Identity Verification Providers

To fulfil our KYC and age-verification obligations, 777rb engages approved third-party identity verification providers. Your identity document images and biographic data may be transmitted to such providers over encrypted connections for the purpose of document authenticity checking and sanctions-list screening. Verification providers are contractually prohibited from retaining your data beyond the period necessary to complete the verification check.

3.3 Fraud Prevention and Security Partners

777rb uses third-party fraud-detection and device-intelligence services to protect the platform and its players. These services may receive technical data — including IP address, device fingerprint, and session metadata — in order to generate risk scores. No financial or identity data is shared with fraud-prevention partners beyond what is strictly required for risk assessment.

3.4 Legal and Regulatory Authorities

777rb will disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to protect the rights, property, or safety of 777rb, its players, or the public. Where legally permitted, 777rb will notify affected account holders of any such disclosure.

3.5 Business Transfers

In the event that 777rb undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the successor entity as part of that transaction. Affected account holders will be notified by email in advance of any such transfer and will be given a reasonable opportunity to close their accounts if they do not wish their data to be transferred to the new entity.

777rb uses cookies and similar browser-based storage technologies to operate the platform, maintain your session after 777rb login, analyse platform performance, and detect fraudulent activity. This section explains the types of cookies we deploy, their purpose, and how you can manage them.

4.1 Managing Your Cookie Preferences

You may disable non-essential cookies at any time through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide options to block or delete cookies under their privacy or settings menus. Please note that disabling strictly necessary or fraud-prevention cookies will impair your ability to log in and use the 777rb platform, as these cookies are fundamental to session security. Disabling analytical or functional cookies will not prevent you from using the platform but may reduce the quality of your experience.

4.2 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal to websites. 777rb acknowledges DNT signals but does not modify its cookie behaviour in response to them, given that the cookies we deploy are limited to operational, analytical, and security purposes and do not include cross-site behavioural advertising trackers.

777rb retains personal data for the minimum period necessary to fulfil the purpose for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide. Specific circumstances — such as an ongoing investigation, an unresolved complaint, or a regulatory hold — may require data to be retained beyond the standard period.

• Active account data — retained for the full duration of the account relationship and for a period of seven years following account closure, in order to satisfy anti-money-laundering record-keeping requirements.
• KYC and identity documents — retained for five years from the date of completion of the verification check, or for seven years from account closure, whichever is longer.
• Transaction and betting records — retained for seven years from the date of each transaction, consistent with financial record-keeping requirements.
• Support communications — retained for three years from the date of the last interaction in a given support thread, or until any related complaint or dispute is fully resolved.
• Technical and usage logs — retained for up to 13 months in identifiable form, after which they are aggregated and anonymised for statistical analysis.
• Marketing consent records — retained for the duration of the consent and for three years following withdrawal of consent, to demonstrate compliance with opt-in requirements.

When a retention period expires, 777rb will either securely delete the relevant data or, where deletion is not technically feasible (for example, because the data is held in backup archives), apply controls to ensure the data is isolated from active processing until the backup cycle completes and physical deletion becomes possible.

777rb implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our principal security measures include the following:

• Transport-layer encryption: All data in transit between your device and 777rb servers is protected using TLS 1.2 or TLS 1.3. HTTP connections are redirected to HTTPS automatically.
• Data-at-rest encryption: Sensitive data stored in our databases — including password hashes, identity document references, and financial data — is encrypted using AES-256.
• Access controls: Access to personal data within 777rb's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to contractual confidentiality obligations and regular security-awareness training.
• Multi-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication. We also offer 2FA via Bangladesh mobile OTP to all player accounts and strongly encourage its use.
• Penetration testing and vulnerability management: 777rb conducts periodic security assessments of its platform infrastructure, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 777rb maintains a documented security-incident response plan. In the event of a data breach that poses a risk to affected individuals, we will notify affected account holders by email as promptly as operationally possible.

Notwithstanding the measures described above, no internet-connected platform can guarantee absolute security. You are responsible for keeping your 777rb login credentials confidential and for reporting any suspected unauthorised access to your account immediately via [email protected].

As a data subject whose personal information is processed by 777rb, you hold a number of rights in relation to that data. The following rights apply to all registered 777rb account holders. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request", including your registered account username and a description of the right you wish to exercise. All requests will be acknowledged within 5 BST business days and responded to substantively within 30 calendar days.

777rb reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law, or platform features. When material changes are made, we will notify registered account holders via the email address on file at least 14 days before the revised policy takes effect. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent amendment.

Minor changes — such as clarifications that do not alter the substance of how your data is processed — may be made without advance notice. We recommend that all account holders review this Privacy Policy periodically to remain informed of how 777rb handles their personal information.

Continued use of the 777rb platform following the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you should cease using the platform and request account closure as described in the Terms & Conditions.

8.1 How to Contact Us About Privacy

For all privacy-related enquiries — including data-subject rights requests, questions about this Privacy Policy, or reports of suspected data-protection breaches — please contact the 777rb privacy team using the details below. Our support team operates 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response time: All privacy enquiries are acknowledged within 48 BST hours and resolved within 30 calendar days.
• Languages: Our privacy team handles all correspondence in English.

This Privacy Policy was last reviewed and updated in 2026. The English-language version of this policy is the authoritative version. Any translation provided for reference purposes is subject to the English text in all cases of conflict.