Your Privacy Matters
at 777rxy

This Privacy Policy ("Policy") sets out the practices of 777rxy ("we", "us", "our", "the Platform") with respect to the personal data of individuals ("you", "your", "Player", "User") who access or use the 777rxy website at https://777rxy.app, its associated mobile interfaces, and all related services. By registering an account or continuing to use 777rxy, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

If you are located in Bangladesh, this Policy applies in full to your use of the platform. Where any conflict arises between this Policy and a more specific notice provided to you at the point of data collection, the more specific notice shall take precedence for that particular processing activity.

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, complete identity verification, contact support, or interact with any feature of the 777rxy platform, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, national ID number, passport number, or driver's licence details submitted during Know Your Customer (KYC) verification.
• Contact data: Email address, mobile phone number, and residential address (including district, division, and postal code within Bangladesh).
• Account credentials: Your chosen username and encrypted password. We do not store passwords in plain text.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and transaction records in Bangladeshi Taka (৳). We do not store full card numbers — only masked identifiers are retained.
• Communications data: Any messages, support tickets, feedback submissions, or other correspondence you send to the 777rxy team.
• Responsible gaming data: Self-exclusion requests, deposit limit settings, cooling-off period preferences, and any information you provide when seeking support through our responsible gaming tools.

1.2 Information We Collect Automatically

When you browse or interact with the 777rxy platform, certain technical and behavioural data is collected automatically through our servers and analytics systems:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and language settings.
• Usage data: Pages visited, games played, bet amounts, session duration, click patterns, navigation paths, and feature interactions.
• Location data: Approximate geographic location derived from your IP address. We do not access GPS-level location data from your device unless you explicitly grant permission.
• Transaction logs: Timestamps, amounts, payment methods, and status records for all deposit and withdrawal transactions processed through your account.

2. How We Use Your Data

777rxy processes your personal data for the following lawful purposes. In each case, we rely on one or more of the following legal bases: performance of a contract (your account agreement with us), compliance with a legal obligation, your explicit consent, or our legitimate interests where those interests are not overridden by your rights.

Purpose	Data Used	Legal Basis
Account creation and management	Identity, contact, credentials	Contractual necessity
KYC identity verification	Identity documents, financial data	Legal obligation
Processing deposits and withdrawals	Financial data, transaction logs	Contractual necessity
Fraud prevention and security monitoring	Device data, usage data, transaction logs	Legitimate interests
Responsible gaming monitoring	Usage data, responsible gaming data	Legal obligation / legitimate interests
Customer support and dispute resolution	Communications data, account data	Contractual necessity
Promotional communications (opt-in only)	Contact data, usage data	Consent
Platform improvement and analytics	Usage data, device data	Legitimate interests

We will never use your personal data for purposes that are incompatible with those listed above. If we intend to process your data for a new purpose, we will notify you in advance and, where required, seek your consent.

3. Sharing and Disclosure

777rxy does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following limited and controlled circumstances:

3.1 Service Providers and Technology Partners

We work with carefully selected third-party service providers who assist us in operating the 777rxy platform. These include game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi; payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard; identity verification specialists; cloud hosting providers; and customer support infrastructure vendors. All such partners are bound by data processing agreements that restrict their use of your data to the specific service they provide on our behalf and require them to maintain appropriate security standards.

3.2 Legal and Regulatory Disclosure

777rxy may disclose your personal data to competent governmental authorities, law enforcement bodies, financial intelligence units, or courts where we are required or permitted to do so by applicable law. This includes disclosures related to the prevention, detection, or investigation of fraud, money laundering, terrorist financing, or other criminal activity. We will, where legally permissible, notify you of any such disclosure.

3.3 Business Transfers

In the event that 777rxy undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the data controller's identity before the transfer takes effect.

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 777rxy website. They allow us to recognise your device, remember your preferences, maintain your session, and analyse how you interact with the platform. We also use similar technologies such as web beacons, pixel tags, and local storage objects.

4.2 Categories of Cookies We Use

• Strictly necessary cookies: Essential for the website to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Help us understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymised wherever possible.
• Functional cookies: Remember your account preferences, language settings, and display options so you do not need to reconfigure them on every visit.
• Responsible gaming cookies: Store your session time limits, reminder settings, and cooling-off status locally to ensure these protections remain active across sessions.

4.3 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of the 777rxy platform. Strictly necessary cookies cannot be disabled, as they are required for the platform to operate securely. Your cookie preferences can also be updated via the cookie settings panel within your 777rxy account.

5. Data Retention and Storage

777rxy retains your personal data for as long as your account remains active and for a reasonable period thereafter, in accordance with our legal obligations and legitimate business needs. The specific retention periods applicable to the main categories of personal data we hold are outlined below:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required for financial audit and regulatory compliance purposes.
• KYC verification documents: Retained for the same five-year minimum period post-account-closure. Document images are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support communications: Retained for three (3) years following the resolution of the relevant support case, unless a longer period is required for an ongoing legal dispute.
• Usage and analytics data: Aggregated usage data is retained indefinitely in anonymised form. Individual-level usage logs are retained for up to twenty-four (24) months.
• Marketing consent records: Retained for as long as your consent remains active, plus three (3) years after withdrawal of consent, as evidence of the consent lifecycle.

All personal data is stored on servers utilising industry-standard encryption at rest. Where data is transferred outside of Bangladesh to international hosting infrastructure, we ensure that appropriate safeguards — including standard contractual clauses or equivalent mechanisms — are in place to protect your data.

6. Security Measures

777rxy employs a layered, defence-in-depth security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or app and our servers.
• Encryption at rest for all stored personal and financial data, using AES-256 or equivalent standards.
• Access controls ensuring that personal data is accessible only to authorised 777rxy personnel on a strict need-to-know basis, enforced through role-based access management.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all internal administrative access.
• Intrusion detection and prevention systems (IDS/IPS) monitoring platform traffic for anomalous activity in real time, around the clock.
• Regular independent security audits and penetration testing conducted by third-party cybersecurity specialists to identify and remediate vulnerabilities.
• Segregated data environments ensuring that production data, development environments, and analytics systems are isolated from one another.

7. Your Data Rights

As a player on the 777rxy platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our data privacy team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.

• Right of access: You may request a copy of all personal data we hold about you, together with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal retention obligations — we cannot erase data that we are required by law to retain.
• Right to restriction of processing: You may request that we restrict the processing of your data in specific situations, for example while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or on a contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

8. Policy Updates and Contact

8.1 Changes to This Policy

777rxy may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will post the updated Policy on this page with a revised "Last Updated" date and, where the changes are significant, we will send a notification to your registered email address. We encourage you to review this page periodically. Continued use of the 777rxy platform after any update constitutes your acceptance of the revised Policy.

8.2 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, or if you wish to exercise any of your data rights, please contact the 777rxy privacy team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

Email: [email protected]
Subject line for privacy queries: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 5 business days for general queries; within 30 days for formal data rights requests.
Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6).