777aya Privacy Policy — How We Collect, Use, and Protect Your Data
At 777aya, protecting the personal information of our players is a core commitment, not an afterthought. This Privacy Policy explains in plain English exactly what data we collect when you use the 777aya platform, why we collect it, how it is stored and processed, and the rights you hold over your own information.
Six Principles That Guide Our Approach
These six principles underpin every data handling decision made by 777aya. They reflect internationally recognised data protection standards and apply to all personal information we process on behalf of Bangladeshi players.
777aya only collects and processes personal data where there is a clear legal basis for doing so — such as contractual necessity, legal obligation, or legitimate interest. We tell you exactly what data we collect and why, in plain English, so there are no surprises.
Every piece of data we collect is gathered for a specific, documented purpose — account management, payment processing, KYC compliance, fraud prevention, or platform improvement. We do not repurpose your data for unrelated activities without obtaining fresh consent.
We collect only the minimum amount of personal information required to deliver our services securely and compliantly. If a service can be provided without a particular data point, we do not ask for it. Your data is not collected as a default — it is collected only when necessary.
We take reasonable steps to keep the personal information we hold accurate and up to date. Players are encouraged to notify 777aya of any changes to their registered details promptly. Outdated records are corrected or removed at your request or as part of our routine data quality processes.
All personal data held by 777aya is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Our infrastructure is subject to regular independent security audits. Access to player data within 777aya's operations is restricted on a strict need-to-know basis with full audit logging.
777aya takes full responsibility for the personal data it processes. We maintain records of all data processing activities, train our staff on data protection obligations, and have clear internal procedures for responding to data subject requests and potential breaches within mandatory timeframes.
1. Information We Collect
1.1 Information You Provide Directly
When you register an account on 777aya, make a deposit or withdrawal, contact our support team, or participate in any promotional activity, you provide us with personal information directly. The categories of information collected at registration include: your full legal name, date of birth, registered mobile number, preferred payment method, and account credentials (username and password). You may also provide additional information voluntarily when completing your KYC verification, such as a copy of your National Identity Card (NID), passport, or driving licence, together with proof of address or mobile banking ownership documentation.
1.2 Information Collected Automatically
When you access the 777aya platform — whether via a desktop browser or a mobile device — certain technical information is collected automatically by our servers and analytics systems. This includes your IP address, device type and operating system, browser type and version, session timestamps, pages and game sessions visited, bet history, transaction logs, and referral source data. This information is used to maintain platform security, optimise the user experience, detect fraudulent activity, and fulfil our regulatory reporting obligations.
1.3 Payment and Transaction Data
To process deposits and withdrawals, 777aya collects payment-related information including your mobile financial service account number (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard). Full card numbers are not stored on 777aya's servers — card payment processing is handled by a PCI-DSS-compliant third-party payment processor. Mobile banking transaction reference numbers are stored in your account transaction history for reconciliation and dispute resolution purposes.
1.4 Communications Data
If you contact 777aya's support team by email at [email protected] or through any in-platform messaging channel, we retain a record of the correspondence including your email address or contact identifier, the content of your messages, and any attachments you provide (such as screenshots or documents). This data is retained for account management, dispute resolution, and quality assurance purposes.
| Data Category | Examples | Collection Method | Legal Basis |
|---|---|---|---|
| Identity Data | Full name, date of birth, NID number | Registration / KYC submission | Contractual necessity / Legal obligation |
| Contact Data | Mobile number, email address | Registration form | Contractual necessity |
| Payment Data | Mobile banking number, transaction reference | Cashier / payment gateway | Contractual necessity / Legal obligation |
| Technical Data | IP address, device type, browser, session logs | Automatic collection via servers | Legitimate interest / Legal obligation |
| Usage Data | Game history, bet amounts, page visits | Platform activity logging | Legitimate interest / Contractual necessity |
| Communications Data | Support emails, chat transcripts | Direct contact with support team | Legitimate interest / Legal obligation |
| Document Data | ID scan, proof of address, payment proof | KYC verification submission | Legal obligation / AML compliance |
2. How We Use Your Information
2.1 Account Administration and Service Delivery
The primary use of your personal data is to create and maintain your 777aya account, process deposits and withdrawals in Bangladeshi Taka, verify your identity as required by our licensing and AML obligations, provide access to the game library and sportsbook, and respond to your support requests. Without this processing, 777aya cannot provide its core services to you. This processing is necessary for the performance of the contract between you and 777aya.
2.2 Fraud Prevention and Platform Security
777aya uses automated and manual review processes to detect and prevent fraudulent activity, money laundering, underage access, bonus abuse, and other prohibited conduct on the platform. This involves analysing patterns in transaction data, login behaviour, device fingerprints, and IP address history. This processing is based on our legitimate interest in protecting the platform, other players, and our licensing obligations.
2.3 Regulatory and Legal Compliance
As a licensed gaming operator, 777aya is subject to regulatory obligations including Know Your Customer (KYC) verification, Anti-Money Laundering (AML) monitoring, and record-keeping requirements. We process your identity and transaction data to fulfil these obligations. Where required by law or by our licensing authority, we may be compelled to disclose certain data to regulators or law enforcement agencies regardless of your privacy preferences.
2.4 Responsible Gaming Monitoring
777aya monitors player behaviour patterns — including session duration, bet frequency, deposit frequency, and changes in wagering volume — to identify players who may be experiencing problem gambling. This monitoring is conducted using automated tools and is a condition of our licensing obligations. Where patterns suggestive of problem gambling are identified, 777aya may reach out proactively. This processing is in the vital interests of the players concerned and in compliance with our responsible gaming licence conditions.
2.5 Marketing Communications
777aya may send you promotional communications — including details of bonuses, seasonal promotions tied to events such as BPL, IPL, Eid, and Pohela Boishakh, and new game announcements — where you have not opted out of receiving marketing communications. You may opt out of marketing emails at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing does not affect service-related communications (e.g., withdrawal confirmations, KYC requests, or account security alerts).
2.6 Platform Analytics and Improvement
Aggregated and anonymised usage data is used by 777aya to understand how players navigate the platform, which games and features are most popular, and where the user experience can be improved. This analysis does not identify individual players and is used solely for internal product development and operational optimisation purposes.
3. Data Sharing and Disclosure
3.1 Our Principle on Sharing
777aya does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes under any circumstances. Data sharing is limited to the categories described below, each of which is necessary either for service delivery, legal compliance, or the protection of player interests.
3.2 Service Providers and Data Processors
To operate the 777aya platform, we engage a limited number of trusted third-party service providers who process personal data on our behalf and under our instructions. These include: payment processing partners (for card transaction handling), identity verification service providers (for KYC document checking), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — who may process session and gameplay data as part of game delivery), cloud hosting and infrastructure providers, and email communication platforms (for transactional and marketing emails). All data processors are contractually bound to process data only as directed by 777aya and to maintain appropriate security standards.
3.3 Regulatory and Law Enforcement Disclosure
777aya may disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or other competent authorities where required to do so by applicable law, regulatory instruction, court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or harm to the platform or its users. Such disclosures are made strictly on a need-to-know basis and only to the extent required by the relevant legal obligation.
3.4 Business Transfers
In the event that 777aya undergoes a merger, acquisition, asset sale, or corporate restructuring, player data may be transferred to the acquiring or successor entity as part of the transaction, subject to equivalent data protection commitments. You will be notified of any such transfer and of any changes to the data controller responsible for your personal information before the transfer takes effect.
- KYC identity verification partners
- PCI-DSS payment processors
- Game studio providers (session data only)
- Hosting and infrastructure partners
- Regulatory and law enforcement authorities (when legally required)
- Third-party advertisers or data brokers
- Other online gaming operators
- Social media platforms
- Marketing aggregators or lead generation companies
- Any party not listed in this Privacy Policy
4. Cookies and Tracking Technologies
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, language preferences, or items in a basket — and to distinguish you from other users. 777aya uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain security, and improve the user experience.
4.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Login session management, security tokens, fraud detection | Session / up to 24 hours | No — required for platform operation |
| Functional | Remembering game preferences, language settings, lobby layout | Up to 30 days | Yes — affects platform experience |
| Analytics | Aggregated usage data, page performance, error tracking | Up to 12 months | Yes — does not affect access |
| Marketing | Tracking referral source, promotional campaign attribution | Up to 30 days | Yes — does not affect access |
4.3 Managing Cookies
You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete cookies after each session. Please note that disabling strictly necessary cookies will prevent you from logging into your 777aya account, as session management depends on them. Instructions for managing cookies in popular browsers are available in each browser's help documentation. Continuing to use the 777aya platform without changing your cookie settings constitutes acceptance of our use of cookies as described in this section.
5. Data Security and Storage
5.1 Technical Security Measures
777aya implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key technical measures include: 256-bit SSL/TLS encryption for all data in transit between your device and our servers; AES-256 encryption for personally identifiable data stored in our databases; firewall protection and intrusion detection systems at the network perimeter; and multi-factor authentication requirements for all internal administrative access to player data systems.
5.2 Organisational Security Measures
Access to personal data within 777aya's operational teams is granted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular training on data protection responsibilities. Access logs are maintained and audited regularly. Third-party data processors are vetted for their security practices before engagement and are bound by data processing agreements that include mandatory security standards.
5.3 Data Breach Response
Despite robust security measures, no system is entirely immune to security incidents. In the event of a personal data breach that poses a risk to your rights and freedoms, 777aya will notify affected players without undue delay and in accordance with applicable data protection requirements. Notifications will be sent to your registered email address and will include a description of the nature of the breach, the categories of data affected, likely consequences, and the steps 777aya is taking to address it.
5.4 International Data Transfers
777aya's primary servers are located in secure data centre facilities. Some of our third-party service providers — including game content providers and cloud infrastructure partners — may process data in locations outside Bangladesh. Where data is transferred internationally, 777aya ensures that appropriate safeguards are in place, such as contractual data protection clauses equivalent to recognised international standards. By using the 777aya platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh, subject to the protections described in this policy.
6. Data Retention Periods
6.1 Retention Principles
777aya retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our retention schedule is reviewed periodically, and data that is no longer required is securely deleted or anonymised. The specific retention periods applicable to the main categories of player data are set out in the table below.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account and Identity Data | 5 years after account closure | AML / KYC regulatory obligation |
| Transaction and Payment Records | 5 years after each transaction | Financial record-keeping and AML compliance |
| KYC Documents | 5 years after account closure | Regulatory requirement |
| Game and Betting History | 3 years after account closure | Dispute resolution and regulatory audit |
| Support Communications | 2 years after last contact | Dispute resolution and quality assurance |
| Technical / Log Data | 12 months | Security monitoring and fraud investigation |
| Marketing Preferences | Until opt-out, then deleted within 30 days | Consent management |
6.2 Deletion on Request
Where you exercise your right to erasure (see Section 7 below), 777aya will delete your personal data to the extent permitted by our legal and regulatory obligations. Data that must be retained to comply with AML, KYC, or financial record-keeping requirements cannot be erased on request during the applicable retention period — this is a legal obligation that takes precedence over erasure rights in this specific context. We will inform you clearly of any data categories that cannot be deleted at the time of your request.
7. Your Privacy Rights
7.1 Overview of Your Rights
777aya recognises and respects the privacy rights of all players. The rights described below apply to your personal data as processed by 777aya. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and aim to respond fully within 30 calendar days. Complex requests may take longer — we will notify you if an extension is required.
Request a copy of the personal data 777aya holds about you, along with information about how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete personal data held about you. Corrections are applied after verification.
Request deletion of your personal data where it is no longer necessary, subject to our legal retention obligations described in Section 6.
Request that we restrict processing of your data in certain circumstances — for example, while the accuracy of your data is being disputed.
Receive a copy of your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
Object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interest in certain circumstances.
7.2 Identity Verification for Rights Requests
To protect your privacy and prevent unauthorised access to your data, 777aya will ask you to verify your identity before processing any privacy rights request. You will be asked to confirm your registered mobile number and provide a copy of the same identity document used for your KYC verification. This step is necessary to ensure that your data is not disclosed to or deleted at the request of someone other than you.
8. Changes to This Privacy Policy
8.1 How We Communicate Changes
777aya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or platform functionality. When material changes are made to this policy, registered players will be notified by email to their registered address at least 7 days before the changes take effect. The updated policy will also be published on this page with a revised "Last updated" date at the top of the document.
8.2 Continued Use as Acceptance
Your continued use of the 777aya platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes made to this policy, you should stop using the platform and may request account closure by contacting [email protected]. Closing your account does not affect the lawfulness of any processing carried out under prior versions of this policy.
8.3 Version History
777aya maintains an internal version history of all Privacy Policy revisions. Previous versions of this policy are available on request by emailing [email protected] with the subject line "Privacy Policy Version History". This is the current published version (Version 2.4, effective 1 January 2026).
8.4 Contact for Privacy Enquiries
If you have any questions, concerns, or feedback about this Privacy Policy or about the way 777aya handles your personal data, please contact the 777aya data protection team at: [email protected]. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and will respond to all privacy-related enquiries within 5 business days.
Ready to Experience 777aya?
Your data is protected, your privacy is respected, and the games are waiting. Explore our full range of cricket betting, slots, live casino, and fishing games — all built for Bangladeshi players.