77ck Privacy Policy

1 Introduction

Welcome to the 77ck Privacy Policy. 77ck ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the 77ck platform located at 77ck.io (the "Platform"). This Privacy Policy describes the types of personal data we collect, the purposes for which it is processed, the conditions under which it may be shared with third parties, how long it is retained, and the rights available to you as a data subject.

This policy applies to all users of the Platform regardless of the device or method of access used, and covers all services offered through the Platform, including sports betting, live casino, slots, Teen Patti, Politics betting, and all customer support interactions.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and together form the complete agreement governing your use of the Platform.

2 Data Controller

For the purposes of applicable data protection legislation, 77ck acts as the data controller in respect of all personal data collected through the Platform. As data controller, 77ck determines the purposes for which personal data is processed and the manner in which such processing takes place.

If you have any questions regarding the identity of the data controller, the manner in which your personal data is handled, or you wish to exercise any of your data subject rights as set out in Article 11 below, please contact us using the details provided in Article 15 of this Policy.

3 Data We Collect

77ck collects the following categories of personal data from users of the Platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — players must be 21 years or older)
• Residential address, including city, district, and postal code
• Email address (primary communication channel)
• Mobile phone number (used for account verification and support)
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Proof of payment method ownership (screenshot or statement confirming mobile banking account or card ownership)
• Selfie or liveness check image submitted during verification, where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay transactions
• Bank card details (card number last four digits only — full card numbers are never stored by 77ck)
• Transaction history and account balance records

3.4 Betting & Gaming Activity Data

• Bets placed, selections made, odds accepted, and outcomes received
• Casino game sessions including game type, duration, stake, and result
• Bonus offers claimed and wagering requirement progress
• Self-exclusion and responsible gaming limit settings

3.5 Technical & Device Data

• IP address at the time of registration and each login
• Device type, operating system, and browser type and version
• Screen resolution and device language settings
• Session identifiers and authentication tokens

3.6 Communications Data

• Records of correspondence with our support team via live chat, email, or WhatsApp
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in or opt-out status

4 How We Collect Data

77ck collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided directly by you during the account registration process, the KYC verification process, when making deposits or requesting withdrawals, when contacting customer support, and when participating in promotions or surveys.

4.2 Automatically Through Platform Use

When you access the Platform, our servers automatically record certain technical data including your IP address, the pages visited, the time and duration of each visit, and the device and browser characteristics used. This data is collected through server logs, session tracking, and first-party cookies (see Article 8).

4.3 From Third-Party Service Providers

We may receive supplementary data from third-party providers engaged to support Platform operations, including:

• KYC and identity verification providers who cross-reference the documents you submit against official identity databases
• Payment processors and mobile banking gateways (bKash, Nagad, Rocket, Upay, and card acquirers) who confirm transaction status and, where required, payment method ownership
• Fraud detection and anti-money-laundering screening services that flag accounts or transactions meeting high-risk criteria
• Game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and others) who relay session and outcome data to the Platform for record-keeping purposes

5 How We Use Your Data

77ck processes your personal data for the following clearly defined purposes:

We do not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for that processing.

6 Legal Basis for Processing

77ck processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including account creation, transaction processing, and service delivery.
• Legitimate interests: Processing necessary for the legitimate interests of 77ck or third parties, provided those interests are not overridden by your rights. This includes fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering requirements, age verification mandates, and record-keeping obligations.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for the sending of direct marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.

7 Data Sharing & Disclosure

77ck does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly to the extent necessary for the stated purpose:

7.1 Payment Service Providers

Your financial and identity data is shared with payment gateways and mobile banking partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard acquirers) solely to process deposits and withdrawals and to verify payment method ownership. These providers are contractually bound to process data only for the transaction in question and in accordance with their own applicable data protection obligations.

7.2 KYC and Fraud Detection Partners

Identity and KYC documents are shared with third-party verification and fraud screening providers engaged to confirm the authenticity of submitted documents and to screen accounts against financial crime watchlists. These providers act as data processors under binding contractual terms that restrict use of the data to the specific verification service.

7.3 Game and Technology Providers

A limited set of session identifiers and account reference numbers is shared with licensed game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe, and others) to facilitate game session launch and outcome reporting. Full identity data is not shared with game providers beyond what is strictly required to operate the game session.

7.4 Legal and Regulatory Authorities

77ck may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or regulatory direction. We will only disclose the minimum data necessary to fulfil such an obligation and will notify you of any disclosure where we are legally permitted to do so.

7.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of some or all of 77ck's assets, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

8 Cookies & Tracking Technologies

The 77ck Platform uses cookies and similar client-side tracking technologies to maintain session integrity, analyse usage patterns, and improve the overall player experience. The categories of cookies we use are described below:

8.1 Strictly Necessary Cookies

These cookies are essential to the operation of the Platform and cannot be disabled. They enable core functions such as maintaining your login session, storing your account preferences, and ensuring the security of your authenticated session. Without these cookies, the Platform cannot function correctly.

8.2 Performance and Analytics Cookies

These first-party cookies collect anonymised data about how players interact with the Platform — including which pages are visited most frequently, how long sessions last, and where error events occur. This data is used exclusively to improve Platform performance and reliability. No personally identifiable information is transmitted via these cookies.

8.3 Functional Cookies

Functional cookies remember preferences you have set — such as your preferred language, time zone display, or odds format — to provide a more personalised experience across sessions. These cookies do not track activity on third-party websites.

8.4 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will prevent core Platform features from functioning, and you may be unable to log into your account or complete transactions. Instructions for managing cookies in common browsers are available from the browser's help documentation.

9 Data Retention

77ck retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with financial record-keeping and anti-money-laundering obligations.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Betting and gaming activity logs: Retained for a minimum of 3 years from the date of each event, or longer where required for dispute resolution.
• Customer support correspondence: Retained for a minimum of 3 years from the date of the final communication in a support thread.
• Technical and device logs: Retained for up to 12 months from the date of recording, except where required for ongoing security investigations.
• Marketing preference records: Retained for the duration of the account relationship plus 1 year to demonstrate consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

10 Data Security

77ck takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the 77ck Platform servers, ensuring that no data is transmitted in plain text.
• At-rest encryption for sensitive data fields stored in our database, including payment method references and KYC document files.
• One-way cryptographic hashing of all account passwords. 77ck staff cannot retrieve or view your password; only a reset function is available.
• Role-based access controls limiting internal access to personal data to only those staff members whose job function requires it, with comprehensive audit logging of all data access events.
• Regular security assessments including vulnerability scanning and penetration testing of Platform infrastructure.
• Incident response procedures to ensure that any data breach is identified, contained, and reported in accordance with applicable legal obligations without undue delay.

11 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by 77ck. These rights may be exercised by contacting us at the details provided in Article 15:

• Right of Access: You have the right to request confirmation of whether 77ck holds personal data about you and, if so, to receive a copy of that data in a commonly used, machine-readable format (a "subject access request").
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data held about you be corrected without undue delay. You may update most account details directly through your account settings dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Please note that this right is subject to exceptions including our legal obligation to retain certain data for the retention periods described in Article 9.
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances, for example while the accuracy of the data is contested or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object at any time to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to support@77ck.io with the subject line "Data Subject Request". We will acknowledge receipt within 5 business days and aim to fulfil all requests within 30 calendar days. Where requests are complex or numerous, this period may be extended by up to a further 60 days, with notification provided.

12 Children's Privacy

If you are a parent or guardian and you believe that a minor in your care has provided personal data to 77ck through the Platform, please contact us immediately at support@77ck.io. Upon confirmation, we will promptly delete the relevant account and all associated personal data, void any winnings generated by the account, and where appropriate return any deposited funds to the originating payment method.

77ck takes its responsibilities in relation to underage gambling and data protection of minors with the utmost seriousness. If you require further guidance on parental controls or blocking tools to restrict access to gambling platforms, please visit our Responsible Gaming page.

13 Third-Party Links

The 77ck Platform does not contain links to third-party websites for general browsing purposes. Any third-party services referenced on the Platform (such as game providers, payment partners, or verification services) are accessed through integrated interfaces within the Platform itself, not through outbound links to external sites.

To the extent that the Platform or any communication from 77ck contains a reference to a third-party service, 77ck is not responsible for the privacy practices, content, or security of any third-party site or service. We encourage you to review the privacy policy of any third-party service you engage with independently of the 77ck Platform.

14 Policy Updates

77ck reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The version number and effective date at the top of this Policy identify the currently applicable version.

Where a change is material — meaning it substantially affects your rights or the manner in which your data is processed — we will notify you by email to the address registered on your account at least 14 days before the change takes effect, or by displaying a prominent notice on the Platform at login. Non-material changes (such as clarifications of language or formatting corrections) may be made without individual notice.

Your continued use of the Platform following the effective date of an updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure in accordance with Article 12.1 of our Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which 77ck handles your personal data, please reach out using any of the following contact methods:

• Email: support@77ck.io — please use the subject line "Privacy Enquiry" for data protection queries
• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform after login
• WhatsApp Support: Available — details provided within your account dashboard after login
• Response Time: We aim to acknowledge all privacy-related written queries within 5 business days and resolve them within 30 calendar days (Bangladesh Standard Time, UTC+6)