ad777 Privacy Policy

1 Introduction

ad777 ("we", "us", "our", "the Platform") is committed to protecting the personal information of all users who access our platform at ad777.io. This Privacy Policy describes our practices for collecting, using, storing, sharing and safeguarding personal data in connection with the provision of online casino and sports betting services to players in Bangladesh.

This policy applies to all personal data collected through the ad777 website, account registration process, payment transactions, customer support interactions, promotional activities and any other touchpoint between a player and the platform. It should be read alongside the ad777 Terms and Conditions and the Responsible Gaming Policy.

By creating an account or continuing to use the ad777 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this policy, you must discontinue use of the platform and contact the support team to request account closure.

2 Data We Collect

ad777 collects personal data that falls into the following categories. The specific data points collected at any given stage depend on your level of engagement with the platform:

ad777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health information unless such data is voluntarily provided by a player in a support context and is strictly necessary to resolve the issue at hand.

3 How We Collect Data

Personal data is collected through the following methods:

• Direct provision: You provide data directly when you register an account, complete identity verification, make a deposit or withdrawal, claim a bonus, submit a support request or respond to a survey or promotion.
• Automated collection: Certain technical and usage data is collected automatically as you interact with the platform. This includes data gathered via cookies, server logs and similar tracking technologies described in Section 8.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, Mastercard or a linked bank, our payment infrastructure receives confirmation data relating to the transaction. Full payment credentials are handled by the payment provider and are not stored on ad777 servers.
• Identity verification partners: Where ad777 uses a third-party Know Your Customer (KYC) service to verify your identity documents, that service may return verification outcomes and associated metadata to ad777.
• Fraud prevention services: ad777 may receive flagging data from industry fraud-prevention networks in order to identify accounts that pose a risk of fraudulent activity.

4 Purpose & Legal Basis for Processing

ad777 processes personal data only where a lawful basis exists for doing so. The table below summarises the primary purposes for which your data is used and the corresponding legal basis in each case:

Where consent is the stated legal basis — principally for marketing communications — you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

5 Data Sharing

ad777 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipient, strictly for the purposes described in this policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard and connected banking institutions receive the minimum data necessary to process your transactions securely.
• Identity verification providers: KYC partners receive identity documents and personal details solely for the purpose of verifying your identity and age in compliance with anti-money-laundering obligations.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and other certified studios may receive session identifiers and stake data required to operate their games. These providers are bound by data processing agreements and may not use your data for their own marketing purposes.
• Fraud prevention networks: Anonymised or pseudonymised risk signals may be shared with industry fraud prevention services. No directly identifiable personal data is shared with these networks beyond what is strictly necessary.
• Technical infrastructure providers: Hosting, content delivery, analytics and security infrastructure providers may process data on our behalf under strict contractual data processing terms.
• Legal and regulatory authorities: ad777 will disclose personal data to law enforcement, regulatory bodies or courts when required to do so by applicable law or in response to a valid legal order.

6 Data Retention

ad777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an active account relationship with you, or as required by applicable legal obligations. The following general retention principles apply:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to comply with anti-money-laundering record-keeping requirements.
• Identity and KYC documents: Copies of identity documents submitted for verification are retained for a minimum of five (5) years from the date of submission, in line with standard financial compliance obligations.
• Transaction records: Deposit and withdrawal records, including amounts, methods and timestamps, are retained for a minimum of seven (7) years for financial audit purposes.
• Support communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the conversation to facilitate dispute resolution and service improvement.
• Marketing consent records: Records of consent and consent withdrawal are retained for the duration of the account relationship and for five (5) years thereafter as evidence of lawful processing.
• Technical and usage logs: Server logs, IP records and session data are retained for up to twelve (12) months unless a longer period is required for security investigation purposes.

Once the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical analysis and platform improvement purposes.

7 Data Security

ad777 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ad777 platform, ensuring that login credentials, payment data and personal information cannot be intercepted in transit.
• Password hashing using industry-standard algorithms, so that plain-text passwords are never stored on ad777 servers. Even in the unlikely event of a data breach, stored passwords cannot be reversed into usable credentials.
• Two-factor authentication (2FA) available to all players. We strongly recommend enabling 2FA on your account. When enabled, access requires both your password and a time-sensitive code delivered to your registered mobile number.
• Role-based access controls restricting access to personal data within the organisation to only those staff members whose role requires it. All staff with access to personal data are bound by confidentiality obligations.
• Regular security assessments of platform infrastructure, including penetration testing and vulnerability scanning, conducted by independent security professionals.
• Incident response procedures to detect, contain and remediate data security incidents promptly. In the event of a breach that is likely to pose a risk to your rights, ad777 will notify affected players as soon as reasonably practicable.

While ad777 takes all reasonable steps to secure your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying ad777 immediately if you suspect unauthorised access to your account.

8 Cookies & Tracking Technologies

ad777 uses cookies and similar technologies (including local storage, session storage and pixel tags) to operate the platform effectively, remember your preferences and understand how players interact with the site. The following categories of cookie are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cookies cannot be disabled without impairing the core functionality of the platform.
• Functional cookies: Used to remember preferences such as your preferred language setting, display options and responsible gaming limits so that they persist between sessions.
• Analytics cookies: Used to collect aggregate, anonymised data about how visitors use the platform — which pages are visited most frequently, where users encounter errors and how navigation flows. This data helps us improve the platform experience. Analytics data is not linked to individually identifiable accounts.
• Performance cookies: Used to monitor platform load times, server response rates and technical errors so that performance issues can be identified and addressed promptly.

ad777 does not use third-party advertising or retargeting cookies. No data collected via cookies on the ad777 platform is shared with advertising networks or used for the purpose of delivering targeted advertisements on other websites.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. Disabling functional or analytics cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

9 Your Rights

As a player whose personal data is processed by ad777, you hold the following rights in relation to that data. To exercise any of these rights, contact the support team via live chat or email as detailed in Section 13.

• Right of access: You may request a copy of the personal data that ad777 holds about you. We will provide this in a structured, commonly used format within 30 days of a valid request.
• Right to rectification: If any personal data held by ad777 about you is inaccurate or incomplete, you may request that it be corrected. Certain data (such as verified legal name and date of birth) can only be changed by submitting updated identity documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. This right is subject to legal retention obligations — for example, financial transaction records required by anti-money-laundering law cannot be deleted on request during the mandatory retention period.
• Right to restriction: You may request that processing of your data be restricted in certain circumstances, such as while a dispute over the accuracy of data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contractual relationship, you may request that your data be provided to you in a machine-readable format for transfer to another service provider.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling. You may also object to direct marketing communications at any time through your account settings.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

ad777 will respond to all valid rights requests within 30 days. In complex cases this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

10 Protection of Minors

The ad777 platform is strictly restricted to individuals aged 21 years and above. ad777 does not knowingly collect personal data from persons under the age of 21. Age verification is performed as part of the account registration and KYC process, and accounts found to belong to individuals under 21 will be closed immediately and all associated data handled in accordance with applicable legal requirements.

If you are a parent or guardian and have reason to believe that a minor has created an account on the ad777 platform, please contact the support team immediately via live chat. We will investigate and take appropriate action, including account closure and deletion of any personal data collected, as promptly as possible.

11 Third-Party Services

The ad777 platform integrates with third-party game studios, payment processors and technical infrastructure providers as described in this policy. Each of these providers operates under its own privacy practices and data processing terms. While ad777 selects partners carefully and requires them to maintain adequate data protection standards through contractual agreements, we are not responsible for the privacy practices of third parties beyond the scope of those agreements.

This Privacy Policy governs only the processing of personal data by ad777 itself. Players who have questions about how a specific payment provider (such as bKash, Nagad or Rocket) or game studio handles their data should consult that provider's own privacy documentation.

12 Policy Changes

ad777 may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations or the structure of our business. Where a material change is made, we will post a notice on the platform and, where practicable, notify you by email to your registered address in advance of the change taking effect. The revised policy will display an updated effective date at the top of the document.

Your continued use of the platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and contact the support team to request account closure.

13 Contact

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by ad777, please contact our support team. All privacy-related enquiries are treated as confidential and handled by trained staff.

• Live chat: Available inside your account dashboard — fastest response, typically under 2 minutes during any hour of the day.
• Email: [email protected] (plain text only — not a clickable link).
• Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6).

ad777 will acknowledge all privacy-related requests within 48 hours and will aim to provide a substantive response or resolution within 30 days of receiving a complete and valid request, as outlined in Section 9.