777sz Privacy Policy

777sz ("we", "us", "our") is committed to protecting the privacy and security of all individuals who interact with our platform at 777sz.io. This Privacy Policy applies to all personal data we collect from players, visitors, and prospective registrants in connection with access to and use of the 777sz online casino, sports betting, crash games, and live dealer services.

This policy is designed to be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Together, these documents form the complete framework governing your use of the 777sz platform.

777sz primarily serves players located in Bangladesh. All services are delivered in English. Account balances and transactions are denominated in Bangladeshi Taka (BDT). This Privacy Policy has been drafted to reflect the data protection standards applicable to our operations and our commitment to transparent, fair data handling practices.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your data rights, please contact us at [email protected]. Our support team is available 24/7 and will respond to privacy-related enquiries within 2 business hours (BST, UTC+6).

777sz collects personal data across several categories, depending on the nature of your interaction with the platform. The categories of data we collect are outlined below.

2.1 Registration & Identity Data

• Full legal name — as it appears on your government-issued identity document
• Date of birth — used to verify that you meet the 21+ age requirement
• Email address — used for account communications and support
• Mobile phone number — used for account verification and transaction notifications
• Residential address — requested at the KYC verification stage
• National Identity Card (NID) or passport number — collected for identity and age verification
• Selfie or live photograph — requested during enhanced KYC verification to confirm document authenticity

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Payment method identifiers (mobile wallet numbers, masked card numbers) — full card numbers are never stored by 777sz
• Transaction reference numbers and timestamps
• Account balance history and bonus credit/debit records

2.3 Gaming & Betting Activity Data

• Bet history, game session logs, wager amounts, and outcomes
• Sports betting selections, odds accepted, and settlement records
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)
• Bonus claims, wagering progress, and promotional participation history

2.4 Technical & Device Data

• IP address and approximate geolocation (used to enforce geographic access restrictions)
• Device type, operating system, and browser version
• Session duration, login timestamps, and logout records
• Cookies and similar tracking technologies (see Section 8)

2.5 Communication Data

• Content of live chat conversations, email exchanges, and support tickets with the 777sz team
• Feedback, complaint submissions, and formal dispute correspondence
• Responses to optional surveys or satisfaction ratings

777sz collects personal data through the following channels:

• Direct Registration: When you create an account at 777sz.io, you voluntarily provide registration data including your name, email address, date of birth, and mobile number.
• KYC Verification: When you submit identity documents (NID, passport, proof of address) in response to a verification request from our compliance team.
• Deposit & Withdrawal Processing: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, or card payment, relevant transaction identifiers and method details are captured automatically.
• Platform Activity: Your gaming and betting behaviour is logged automatically as you interact with the platform. This includes all wagers placed, games launched, and responsible gaming tools activated.
• Device & Browser: Technical data is collected automatically via your browser and device when you access the 777sz platform, including IP address, browser type, and session metadata.
• Customer Support: When you contact us via email or live chat, we retain records of the communication to ensure consistent, high-quality support.
• Cookies: We use cookies and similar technologies on the 777sz platform to maintain your session state, remember your preferences, and analyse usage patterns. See Section 8 for full details.

The personal data we collect is used exclusively for the following documented purposes. We do not use your data for any purpose that has not been disclosed in this policy.

777sz processes personal data on the following legal grounds:

• Contractual Necessity: Processing your registration data, financial data, and gaming activity is necessary to perform the contract between you and 777sz — specifically, to operate your account, process transactions, and deliver the gaming and betting services you have requested.
• Legal Obligation: Identity verification (KYC), anti-money laundering checks, age verification, and the retention of transaction records are required to meet applicable legal and compliance obligations. We process this data regardless of your consent because we are legally required to do so.
• Legitimate Interest: We process technical data, device data, and session logs under our legitimate interest in maintaining platform security, detecting and preventing fraud, and improving the quality and performance of 777sz services. We have assessed that this processing does not override your fundamental privacy rights.
• Consent: Where processing is optional — such as marketing communications or the use of non-essential analytics cookies — we rely on your freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

777sz does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only with the following categories of trusted operational partners, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment networks (Visa, Mastercard) receive transaction-related data necessary to process your deposits and withdrawals securely.
• Identity Verification Services: Third-party KYC providers may receive copies of your identity documents and biometric data (selfie) for the sole purpose of verifying your identity and age. These providers are contractually bound to process this data only for verification purposes.
• Game Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and account identifier to deliver the game experience. These providers do not receive your full registration profile unless specifically required for a regulatory purpose.
• Fraud Prevention & Security: We may share IP address and device fingerprint data with specialist fraud detection services to identify and block suspicious activity.
• Legal & Regulatory Authorities: 777sz may disclose personal data to law enforcement, courts, or regulatory bodies where required to do so by a valid legal order or where we are legally obligated to report suspicious financial activity.

All third-party partners who process data on behalf of 777sz are subject to contractual data processing agreements that require them to maintain appropriate security standards and to use your data only for the specific purposes authorised by 777sz.

777sz retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML and financial record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by a specific legal obligation or ongoing investigation.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with standard financial record-keeping practice.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, unless the communication is related to a formal complaint or legal matter, in which case it is retained for five (5) years.
• Marketing Consent Records: Retained for the duration of your account plus two (2) years, to demonstrate that consent was properly obtained and recorded.
• Technical & Session Logs: Retained for up to ninety (90) days for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data set is no longer considered personal data and may be retained for aggregate analytical purposes without further retention limits.

777sz uses cookies and similar browser-based technologies to deliver a functional, secure, and optimised platform experience. The types of cookies used on 777sz.io are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your account state between pages, and enable secure transaction processing. Essential cookies cannot be disabled without impairing platform functionality.
• Preference Cookies: These cookies remember your display and language preferences so that you do not need to re-enter settings on each visit.
• Analytics Cookies: We use privacy-respecting analytics tools to understand how players navigate the 777sz platform — which pages are visited most frequently, where users encounter friction, and how session flows can be improved. Analytics data is aggregated and does not identify individual users.
• Security Cookies: These cookies support our fraud detection systems by identifying unusual session behaviour, such as simultaneous logins from multiple geographic locations.

777sz does not use third-party behavioural advertising cookies or cross-site tracking pixels. We do not participate in retargeting advertising networks.

777sz implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or app and 777sz servers is encrypted using TLS 1.2 or higher. This protects your login credentials, financial data, and personal information in transit.
• Encrypted Data Storage: Sensitive personal data fields — including identity document references and financial identifiers — are encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to personal data within 777sz is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): 777sz strongly recommends enabling 2FA on your account for an additional layer of protection. 2FA requires verification via your registered mobile number in addition to your password.
• Intrusion Detection: 777sz operates continuous monitoring for unusual access patterns, brute-force login attempts, and other indicators of potential security compromise.
• Incident Response: In the event of a confirmed data breach affecting your personal data, 777sz will notify affected players and take immediate remediation action. We are committed to transparent, timely communication in the event of any security incident.

As a player on the 777sz platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to all data rights requests within five (5) business days.

• Right of Access: You may request a copy of all personal data that 777sz holds about you. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date of birth corrections, you will be required to provide supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires us to retain it. Note that financial, KYC, and AML data is subject to mandatory legal retention periods and cannot be erased on request until those periods expire.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format (e.g., JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You may object to processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

777sz operates an exclusively adult gambling platform. Access to all 777sz services is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21 under any circumstances.

During the registration process, every prospective player is required to confirm their date of birth. 777sz verifies age through documentary evidence at the KYC verification stage, prior to processing any withdrawal request. Accounts found to belong to individuals under 21 are immediately terminated, all associated balances are voided, and deposited funds are returned to the originating payment method.

If you are a parent or guardian and you believe that a minor in your care has registered an account on 777sz without authorisation, please contact us immediately at [email protected] with full details. We will investigate and close the account within 24 hours of receiving a substantiated report, and return any deposited funds.

The 777sz platform does not contain links to external third -party websites for general browsing or advertising purposes. Any third-party services referenced on the platform (such as game providers or payment processors) operate under their own independent privacy policies, which 777sz has no control over.

Where you interact with a third-party game provider's interface within the 777sz platform — for example, a live dealer studio operated by Evolution Gaming or a slot title by Pragmatic Play — that provider may process a limited set of session data under their own privacy terms. 777sz recommends that you review the privacy practices of any third-party service you interact with directly.

777sz accepts no responsibility for the privacy practices, data security standards, or content of any third-party service. Our Privacy Policy applies solely to data collected and processed by 777sz in connection with the 777sz.io platform.

777sz reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal standards. All updates will be published at 777sz.io/privacy-policy with a revised Effective Date clearly displayed at the top of the page.

For material changes — those that meaningfully affect how your personal data is collected, used, or shared — 777sz will notify registered players via email to the address on file at least seven (7) days before the change takes effect. For minor administrative or formatting updates that do not affect substantive data rights, the updated policy will simply be published without advance notice.

Your continued use of the 777sz platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you have the right to close your account and request erasure of your data (subject to mandatory legal retention obligations) before the change takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to the 777sz data support team using the contact details below. All privacy enquiries are handled in English, 24 hours a day, 7 days a week.

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Request — [Your Account Username]"
• Response Time: Within 2 hours for general queries; within 5 business days for formal data rights requests
• Languages: English
• Operating Hours: 24/7, including all public holidays

When submitting a data rights request, please include your registered email address and account username so that we can verify your identity before processing the request. For security reasons, we are unable to action data rights requests that cannot be matched to a verified account holder.

We are committed to resolving all privacy-related queries fairly and promptly. If you remain dissatisfied following our response, you retain the right to seek any independent remedy available to you under applicable law.