Privacy Policy — How 77acp Handles Your Personal Data

1 Introduction & Scope

77acp is an online casino and sports betting platform serving players across Bangladesh, including those in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles.

This Policy applies to all personal data collected through:

• The 77acp website at https://77acp.io and all subpages, including the 77acp Login page, casino pages, cricket and slots sections, and all footer pages.
• Any mobile-optimised version of the 77acp platform accessible through a web browser on a smartphone or tablet.
• Any communication you have with our customer support team via live chat, email, or any other channel we make available.
• Any promotional or marketing communications sent to you with your consent.

This Policy does not apply to third-party websites, game providers, or payment processors that you may access via links or integrations on our platform. Those parties have their own privacy policies, and we encourage you to review them independently.

2 Data Controller

For the purposes of this Policy, 77acp is the data controller responsible for the personal data you provide when using the platform. As the data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that processing is carried out lawfully and fairly.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your rights described in Section 9, you may contact our Data Privacy team using the details set out in Section 15 of this Policy.

3 Data We Collect

We collect several categories of personal data, depending on how you interact with the 77acp platform. The table below summarises each category, the specific data points involved, and the primary purpose for which they are collected.

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for age and identity verification during KYC.

4 How We Collect Data

77acp collects personal data through the following means:

• Directly from you: When you register a Player Account via the 77acp Login page, complete KYC document submission, make a deposit or withdrawal request, contact our support team, or opt into a promotional campaign.
• Automatically through technology: When you use the platform, our servers and analytics infrastructure automatically log technical data including your IP address, device details, browser type, and session activity. This occurs via server logs, cookies, and similar tracking technologies described further in Section 10.
• From payment providers: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, those providers share limited transaction confirmation data (such as payment reference numbers and status codes) with 77acp to enable crediting or debiting your account balance.
• From game providers: Third-party game providers (such as Evolution Gaming, Pragmatic Play, Spribe, and others) may share game-round outcome data and fairness certification data with 77acp as part of their integration agreements. This data is used for account settlement and dispute resolution only.
• From identity verification services: Where we engage a third-party KYC verification service to assist with document authentication, that service will share a verification pass/fail result and a confidence score with us. The raw document data remains with the verification provider under their own privacy policy.

5 Legal Bases for Processing

77acp processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Performance of a contract: Processing necessary to create and manage your Player Account, accept and settle bets, process deposits and withdrawals in BDT, and provide customer support. Without this processing, we cannot deliver the service you signed up for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) obligations, fraud prevention requirements, and regulatory record-keeping mandates. This includes KYC verification and transaction monitoring.
• Legitimate interests: Processing that serves our legitimate business interests — such as fraud detection, platform security, responsible gaming monitoring, and product analytics — provided those interests are not overridden by your privacy rights. We conduct a balancing test before relying on this basis.
• Consent: Processing for optional purposes where you have given freely given, specific, and informed consent — primarily the sending of marketing communications about promotions and bonuses. You may withdraw consent at any time by contacting support or updating your account preferences.

6 How We Use Your Data

Personal data collected by 77acp is used for the following specific purposes:

• Account management: Creating, verifying, and maintaining your Player Account; enabling secure access through the 77acp Login process; managing password resets and two-factor authentication.
• Transaction processing: Crediting deposits to your Real Money Balance; processing withdrawal requests to your registered bKash, Nagad, Rocket, Upay, Visa, or Mastercard account; generating transaction histories accessible in your account dashboard.
• KYC and compliance: Verifying your identity and age (21+) to satisfy regulatory obligations; detecting and investigating potential fraud, multi-accounting, or money laundering; reporting suspicious activity where legally required.
• Responsible gaming: Monitoring usage patterns to detect indicators of problematic gambling behaviour; enforcing self-exclusion requests and deposit limits you have set; proactively offering support tools where usage patterns raise concern.
• Customer support: Investigating and resolving disputes relating to bets, account balances, and bonus credits; responding to general enquiries; maintaining support interaction records for quality assurance.
• Product improvement: Analysing aggregated, anonymised usage data to improve game performance, navigation experience, deposit flow, and the overall quality of the 77acp platform.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, BPL and IPL cricket season promotions, and seasonal campaigns (Eid, Victory Day, Pohela Boishakh) to players who have opted in. Marketing communications are sent in English.
• Security and fraud prevention: Detecting unusual login patterns, suspicious IP addresses, or anomalous betting activity that may indicate account compromise or fraudulent use of the platform.

We do not use personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated screening flags an account for investigation, a member of our compliance team will conduct a manual review before any enforcement action is taken.

7 Data Retention

77acp retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

Following expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to an identifiable individual. Anonymised aggregate data (used for statistical analysis and product improvement) may be retained indefinitely as it no longer constitutes personal data.

8 Data Sharing & Transfers

77acp does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum necessary data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to facilitate transaction processing. Each payment partner operates under their own data protection standards and privacy policies.
• Game providers: Licensed providers such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, and NetEnt receive session tokens and anonymised player identifiers necessary to serve games through our platform. These providers do not receive your full identity or financial data.
• KYC verification partners: Where a specialist identity verification service is engaged to assist with document review, your submitted documents are shared with that provider under strict data processing agreements that prohibit secondary use of your data.
• Fraud prevention services: Anonymised device fingerprint data and risk scores may be shared with specialist fraud detection partners to improve our ability to identify suspicious activity across the platform.
• Legal and regulatory authorities: Where we are legally required to disclose data — for example, in response to a valid court order, a regulatory investigation, or an AML reporting obligation — we will do so to the minimum extent required by law. We will notify you of such disclosure where legally permissible.
• Business transfers: In the event of a merger, acquisition, or sale of 77acp's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Policy that result from it.

All third-party processors engaged by 77acp are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your personal data for any purpose beyond providing services to 77acp.

9 Your Privacy Rights

As a player on the 77acp platform, you hold the following rights with respect to your personal data. You may exercise these rights at any time by contacting us at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Note that corrections to KYC identity data may require submission of updated documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that erasure requests cannot be fulfilled where retention is required by legal or regulatory obligations (see Section 7).
• Right to Restrict Processing: You may request that we pause processing of your data while a dispute regarding its accuracy or lawfulness is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. We will assess whether our legitimate interests override your objection on a case-by-case basis.
• Right to Withdraw Consent: Where we process your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

We will respond to all verified privacy rights requests within the timeframe specified (maximum 30 days, extendable by a further 30 days in complex cases with notification). We may need to verify your identity before processing a request. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee.

10 Cookies & Tracking Technologies

77acp uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, keep you securely logged in during your session, and prevent fraud. The following cookie categories are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They include session authentication tokens generated when you complete the 77acp Login process, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing access to the platform.
• Functionality cookies: These cookies remember preferences you have set — such as preferred language (English) and notification settings — to improve your experience across sessions.
• Analytics cookies: We use privacy-respecting, first-party analytics to understand how players navigate the platform, which games are most popular, and where deposit or withdrawal flows may cause friction. This data is collected in aggregated, anonymised form and is used solely for product improvement.
• Security cookies: Short-lived cookies used to detect and prevent fraudulent login attempts, device spoofing, and session hijacking. These are deleted at the end of each browser session.

77acp does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts on the platform. You may manage or delete cookies via your browser settings; however, disabling strictly necessary cookies will prevent you from accessing your 77acp account.

11 Children & Minors

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing gambling platforms. Information on freely available parental control software is listed on our Responsible Gaming page.

12 Security Measures

77acp implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the 77acp platform.
• Encrypted storage of sensitive data at rest, including KYC documents, financial transaction records, and account credentials.
• Access controls: Strict role-based access permissions ensuring that only authorised 77acp personnel can access personal data, and only to the extent required for their specific job function.
• Regular security audits: Periodic vulnerability assessments and penetration testing of our platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident response plan: A documented data breach response procedure that includes timely notification to affected players and relevant authorities in the event of a confirmed breach involving personal data.
• Staff training: All 77acp team members who handle personal data receive regular training on data protection principles and security best practices.

While we take all reasonable steps to secure your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your 77acp Login credentials and should notify us immediately if you suspect any unauthorised access to your account.

13 Third-Party Services

The 77acp platform integrates with a number of third-party services to deliver its full range of features. While we select partners carefully and require them to maintain appropriate data protection standards, their privacy practices are governed by their own policies. Third-party categories integrated with 77acp include:

• Game providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, NetEnt, and others — these providers power the casino games and live dealer experiences available on the platform.
• Payment gateways: bKash, Nagad, Rocket, Upay, Visa, Mastercard — these providers process deposit and withdrawal transactions and maintain their own records of financial transactions.
• Content delivery networks (CDN): CDN services may be used to deliver static assets (images, scripts, fonts) to your browser efficiently. These services may log IP addresses as part of standard CDN operation.

77acp is not responsible for the privacy practices of third-party providers. We recommend that you review the privacy policies of any third-party payment provider you use before initiating a transaction.

14 Policy Updates

77acp reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the platform upon their next login, and by updating the "Last Updated" date at the top of this page.

Your continued use of the 77acp platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised Policy, you should stop using the platform and contact our support team to arrange account closure and data deletion where applicable.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. The current version of this Policy is always accessible at https://77acp.io/privacy-policy.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 77acp handles your personal data, please contact us using the following details:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Privacy Rights Request" as appropriate
• Live Chat: Available 24 hours a day, 7 days a week via the support widget in your Player Account dashboard after 77acp Login
• Response Target: We aim to acknowledge all privacy enquiries within one (1) business day (Bangladesh Standard Time, UTC+6) and to provide a substantive response within five (5) business days

If you are not satisfied with our response to your privacy concern after raising it directly with us, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. We will always cooperate fully with any such investigation.