Privacy Policy — How 1777bay Protects Your Data

1777bay collects personal data through several channels: directly from you when you register an account or contact support, automatically when you use the platform, and in some cases from third parties such as payment processors or identity verification providers. The categories of data we collect are described below.

Account Registration Data: When you create a 1777bay account, we collect your full legal name, date of birth, residential address (including city, district, and postcode within Bangladesh), email address, mobile phone number, and a chosen username and password. This data forms the core of your account profile and is required to fulfil our Know Your Customer (KYC) obligations.

Identity Verification Documents: To comply with Anti-Money Laundering (AML) requirements and to confirm that all players are aged 18 or above, we collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. For address verification, we may collect utility bills or bank statements. These documents are stored securely and accessed only by our compliance team.

Financial Transaction Data: Every deposit and withdrawal processed through your 1777bay account is recorded, including the transaction amount in BDT (৳), the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card), the transaction timestamp, and a masked reference to your payment account identifier. We do not store full card numbers or complete mobile money PINs.

Behavioural and Platform Usage Data: We automatically collect data about how you interact with 1777bay, including pages visited, games played, bet amounts and outcomes, session duration, device type and operating system, browser version, screen resolution, IP address, and approximate geographic location derived from your IP address. This data is used for fraud detection, responsible gaming monitoring, and platform improvement.

1777bay processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account management and service delivery: Processing your registration, maintaining your account, enabling login authentication, processing bets and financial transactions, and delivering customer support.
• Identity verification and KYC compliance: Confirming your identity, age, and payment method ownership as required by our AML and responsible gaming obligations.
• Fraud prevention and security: Detecting and investigating unusual account activity, multiple account registrations, bonus abuse, money laundering patterns, and other forms of platform misuse.
• Responsible gaming monitoring: Tracking betting patterns and session behaviour to identify players who may be exhibiting signs of problem gambling, and proactively reaching out with responsible gaming information or applying account-level interventions.
• Platform improvement and analytics: Analysing aggregated usage data to understand how players navigate the platform, which features are most used, and where the user experience can be enhanced. This analysis is performed on anonymised or pseudonymised data wherever possible.
• Marketing and promotional communications: Sending you information about bonuses, seasonal promotions (such as Eid offers, BPL season specials, or IPL promotions), and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: Fulfilling obligations imposed by applicable laws, responding to lawful requests from competent authorities, and maintaining records required for financial crime prevention.

The legal basis on which we process your personal data varies by purpose. Account management and KYC processing are necessary for the performance of our contract with you. Fraud prevention and legal compliance are based on our legitimate interests and legal obligations respectively. Marketing communications are processed only on the basis of your explicit consent.

1777bay does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually required to maintain appropriate data protection standards.

Payment processors and financial service providers: To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These providers receive only the data required to execute and reconcile the specific transaction.

Identity verification and KYC providers: We use specialist third-party identity verification services to assist with document authentication and age verification. These providers process your identity documents on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.

Game software providers: When you play games on 1777bay powered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical data (such as your session token and game results) is exchanged with those providers' game servers. This data exchange is necessary to deliver the game and record outcomes accurately. Game providers do not receive your full account profile or payment details.

Fraud prevention and security services: We use specialist risk intelligence providers to assist with fraud detection and AML monitoring. Data shared with these providers is limited to the technical and behavioural data necessary to assess risk and is processed under binding confidentiality agreements.

Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or a lawful regulatory request. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted, notify the affected player that such a disclosure has been made.

Corporate transactions: In the event that 1777bay undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will take reasonable steps to ensure that any such transfer is subject to equivalent privacy protections, and we will notify affected players in advance of any material change in data controllership.

1777bay uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, and gather analytics data that helps us improve the user experience. A cookie is a small text file stored on your device by your web browser when you visit the platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the platform to function. They include session authentication tokens that keep you logged in, security tokens that protect against cross-site request forgery (CSRF), and load balancing cookies that direct your requests to the appropriate server. These cookies cannot be disabled without breaking the platform's core functionality.
• Functional Cookies: These remember your preferences and settings, such as your chosen language, display preferences, and whether you have acknowledged any platform notices. Disabling these cookies will not prevent you from using the platform but may result in a reduced experience.
• Analytics Cookies: We use first-party analytics tools to understand how players navigate 1777bay — which pages are visited most, where users drop off during registration, and how platform performance varies across device types. Analytics data is aggregated and does not identify individual users. You may opt out of analytics tracking by contacting our support team.
• Security and Fraud Detection Cookies: These help our risk systems identify suspicious login patterns, detect account takeover attempts, and flag unusual betting behaviour that may indicate fraud or bonus abuse. These cookies are considered necessary for platform integrity and cannot be disabled.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so for strictly necessary cookies will impair your ability to use 1777bay. Instructions for managing cookies are available in the help documentation for your specific browser.

1777bay does not use third-party advertising cookies or tracking pixels that monitor your activity on other websites after you leave our platform.

1777bay implements a multi-layered security architecture to protect your personal and financial data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and our servers is encrypted using TLS 1.3, the current industry standard for secure web communications. Our SSL certificate status can be verified in your browser's address bar.
• Password hashing: Account passwords are never stored in plain text. They are processed using bcrypt with a unique per-user salt, making them computationally infeasible to reverse even in the event of a data breach.
• Access controls: Access to personal data within 1777bay is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are required to undergo background screening and data protection training before being granted system access.
• Infrastructure security: Our platform infrastructure is hosted in data centres with physical security controls, redundant power systems, and 24/7 intrusion monitoring. Regular penetration testing is conducted by independent security firms to identify and remediate vulnerabilities.
• Two-factor authentication (2FA): Players are encouraged to enable two-factor authentication on their 1777bay accounts for an additional layer of login security. This feature is available in account settings and supports both authenticator apps and SMS verification.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights, 1777bay will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Data Storage Location: Personal data collected from players is stored on servers located in secure data centres. Where data is processed outside Bangladesh, we ensure that appropriate contractual safeguards are in place with the relevant service providers to maintain equivalent levels of data protection.

1777bay recognises your right to exercise meaningful control over your personal data. The following rights are available to all registered players. To exercise any of these rights, please contact our support team via live chat or at [email protected] with the subject line "Data Rights Request". We will respond within 14 calendar days.

• Right of Access: You may request a copy of all personal data that 1777bay holds about you. We will provide this in a structured, commonly used, and machine-readable format (such as JSON or CSV) within 14 days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number or email address) can be made directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where you object to processing and there are no overriding legitimate grounds. Note that we are required by law to retain certain data (such as financial transaction records) for a minimum period even after account closure. We will clearly explain what data can and cannot be deleted and the reason for any retention.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a portable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to the use of your personal data for direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

1777bay retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes that may arise. The following retention periods apply as a general guide:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Where you request erasure of your personal data and a legal obligation requires us to retain it beyond the standard retention period, we will restrict access to that data so that it is used solely for the purpose of fulfilling the legal obligation, and we will delete it as soon as that obligation expires.

1777bay reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on the 1777bay platform informing players of the change
• Where the change materially affects your rights or our use of your data in a new way, send a direct notification to your registered email address at least 14 days before the change takes effect

Minor changes — such as corrections of typographical errors, clarifications of existing practices, or updated contact details — will be made without advance notice beyond the updated date on this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you disagree with any changes to this Privacy Policy, you are entitled to close your account and request erasure of your personal data (subject to our legal retention obligations) by contacting our support team. Continued use of the 1777bay platform after the effective date of any revision constitutes your acceptance of the updated policy.

For any privacy-related questions, concerns, or requests — including data rights requests, marketing opt-outs, or security concerns — please contact our dedicated privacy support line via live chat inside the platform or by email at [email protected]. Our team aims to acknowledge all privacy inquiries within one business day and to resolve them fully within 14 calendar days.