How 77ap Collects, Uses, and Protects Your Personal Data
Your privacy matters to us. This Privacy Policy explains precisely what personal information 77ap collects when you use our platform, how we use it, who we share it with, and the rights you hold over your data at every stage of your journey with us.
SSL Encryption
All data transmitted between your device and 77ap's servers is protected by industry-standard 256-bit SSL encryption, ensuring that your personal and financial information cannot be intercepted in transit.
No Data Selling
77ap does not sell, rent, or lease your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to deliver and improve our services to you.
Minimal Data Principle
We follow a data minimisation approach, collecting only the information that is strictly necessary to provide our services, comply with legal obligations, and keep your account secure.
KYC and Verification
Identity verification documents submitted for KYC purposes are stored securely, accessed only by authorised compliance staff, and are never used for any purpose beyond account verification and fraud prevention.
Your Data, Your Control
You have the right to access, correct, export, and request deletion of your personal data at any time. Submit a request to our support team and we will respond within 10 business days.
Responsible Gaming Privacy
Information you provide when using self-exclusion, deposit limits, or responsible gaming tools is treated with the highest level of confidentiality and is never used for marketing or shared with third parties.
Section 1
Information We Collect
77ap collects personal information from you in several ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification partners.
Information You Provide Directly
When you register for a 77ap account or interact with our services, you may provide the following categories of personal information:
- Identity Data: Your full legal name, date of birth, and gender as provided during registration or KYC verification.
- Contact Data: Your mobile phone number (used as the primary account identifier and for bKash, Nagad, or Rocket payment linkage), and email address where provided.
- Verification Documents: Copies of your Bangladesh National Identity Card (NID), passport, driver's licence, or other government-issued documents submitted during KYC review.
- Financial Data: Your bKash wallet number, Nagad number, Rocket number, bank account details, or card information used for deposits and withdrawals. Note: 77ap does not store full card numbers — card payments are processed via PCI-DSS compliant payment gateways.
- Account Credentials: Your chosen username and an encrypted hash of your password. 77ap never stores your password in plain text.
- Communications: The content of messages you send to our live chat support, email correspondence to [email protected], and any feedback or complaints you submit.
- Responsible Gaming Data: Self-exclusion requests, deposit limit settings, session limit preferences, and cooling-off period requests you make via your account dashboard or through our support team.
Information Collected Automatically
When you access and use the 77ap platform, certain technical and behavioural data is collected automatically by our systems:
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, games launched, time spent per session, bet amounts and frequency, navigation paths, and feature interactions.
- Transaction Logs: A full record of all deposits, withdrawals, bonus claims, wagers placed, and game results associated with your account.
- Location Data: Country and city-level location inferred from your IP address. 77ap does not collect GPS or precise device location data.
- Cookie and Tracking Data: Data collected via cookies, local storage, and similar technologies as described in the Cookies section of this policy.
Information from Third Parties
77ap may receive personal data about you from the following third-party sources, where relevant to the provision of our services:
- Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) who confirm the status of payment transactions.
- Identity verification service providers who assist in validating the documents you submit during KYC.
- Fraud prevention and anti-money-laundering (AML) screening services that may flag accounts for enhanced review.
- Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who may share game-session data for dispute resolution purposes.
Section 2
How We Use Your Data
77ap uses your personal information only for the purposes described in this section. We process your data on one or more of the following legal bases: performance of a contract (i.e., the Terms & Conditions you accepted on registration), compliance with a legal obligation, our legitimate business interests (where these do not override your fundamental rights), or your explicit consent where required.
Account Management and Service Delivery
The primary purpose for which we collect your personal data is to create and manage your 77ap account, verify your identity and age, process your deposits and withdrawals, deliver games and sports betting services, and provide customer support. Without this data, we cannot provide you with a functional account.
Identity Verification and Compliance
We are legally and operationally required to verify the identity of our players to prevent underage gambling, fraud, and money laundering. We use your identity documents and personal details to conduct KYC checks, comply with AML obligations, and report suspicious activity where legally required. This processing is carried out on the basis of legal obligation and legitimate interest.
Payment Processing
Your financial data — bKash number, Nagad number, bank details — is used solely to process deposits you initiate and withdrawals you request. We do not charge your payment method without an explicit action on your part. Financial transaction records are retained as required by financial compliance obligations.
Personalisation and Service Improvement
Usage data and game interaction data help us personalise your experience on 77ap — for example, showing you games that match your play history, or surfacing promotions relevant to cricket during BPL season. This processing is based on our legitimate interest in improving the platform. You may opt out of personalised experiences by contacting our support team.
Responsible Gaming Monitoring
77ap uses your transaction history, session data, and gameplay patterns to identify signs of problematic gambling behaviour. Where our systems detect unusual patterns — such as rapidly escalating bet sizes, very long unbroken sessions, or frequent deposit reversals — we may proactively reach out with responsible gaming resources or apply protective account measures. This processing is carried out in your vital interest and our legitimate interest in promoting safe gambling.
Security and Fraud Prevention
Device data, IP addresses, login timestamps, and behavioural patterns are analysed to detect fraudulent account activity, collusion, bonus abuse, and unauthorised access attempts. We may cross-reference this data with third-party fraud prevention databases. This processing is based on our legitimate interest in maintaining a safe and fair platform for all players.
Marketing Communications
With your explicit consent, we may send you promotional messages about 77ap bonuses, seasonal promotions (e.g., Eid offers, Pohela Boishakh promotions, BPL cricket bonuses), and new game launches via your registered mobile number (SMS) or messaging platforms. You may withdraw your consent to marketing communications at any time by contacting us at [email protected] or by using the opt-out mechanism in any marketing message you receive. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Legal Proceedings and Dispute Resolution
Where necessary, your data — including transaction records, communication logs, and game session data — may be used to investigate and resolve disputes, respond to legal claims, or comply with court orders, regulatory requests, or law enforcement inquiries. This processing is carried out on the basis of legal obligation and legitimate interest.
Legal Bases Summary
- Contract performance
- Legal obligation (KYC/AML)
- Legitimate interests
- Explicit consent (marketing)
- Vital interests (RG monitoring)
Section 4
Data Sharing and Disclosure
77ap does not sell your personal data. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Payment Service Providers
To process your deposits and withdrawals, we share your relevant financial identifiers (e.g., bKash wallet number, Nagad number, bank account details) with the payment service providers you choose to use. These providers operate under their own privacy policies and are independently responsible for the data they receive in connection with payment processing. 77ap shares only the data required to initiate and confirm transactions.
Identity Verification Partners
Where we use a third-party KYC service to assist in verifying your identity documents, that provider will receive the documents and personal details you submit for verification. These partners operate under binding data processing agreements with 77ap and are contractually prohibited from using your data for any purpose other than identity verification on our behalf.
Game Providers
When you launch a game from a third-party provider (such as Pragmatic Play, Evolution Gaming, or Spribe), a unique session token and your player ID are shared with that provider to enable the game session. Game providers may receive information about your in-game actions during the session for game-mechanics and dispute-resolution purposes. No sensitive personal information (such as your NID or full financial details) is shared with game providers.
Fraud Prevention and AML Services
77ap may share limited personal data — such as device identifiers, IP addresses, transaction patterns, and account registration details — with fraud prevention and AML screening services. This is done to protect all players on the platform and to meet our legal obligations in relation to anti-money-laundering compliance.
Legal Authorities and Regulators
77ap will disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where we determine in good faith that disclosure is necessary to protect the rights, property, or safety of 77ap, our players, or the public. We will notify you of such a disclosure where legally permitted to do so.
Business Transfers
In the event that 77ap undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via a prominent notice on our platform prior to your data being transferred and becoming subject to a different privacy policy.
What We Will Never Do
- Sell, rent, or lease your personal data to third-party marketers or data brokers.
- Share your responsible gaming information (self-exclusion status, deposit limits) with any third party for commercial purposes.
- Disclose your KYC documents to any party not directly involved in identity verification on our behalf.
- Transfer your data to a country with lower data protection standards without implementing appropriate safeguards.
Who We May Share With
- Payment processors (bKash, Nagad, banks)
- KYC / identity verification partners
- Game providers (session tokens only)
- Fraud & AML screening services
- Legal authorities (when required by law)
Section 5
Data Retention
77ap retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The specific retention periods for different categories of data are outlined below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration details (name, mobile, DOB) | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC / identity documents | Duration of account + 5 years after closure | AML compliance, regulatory requirements |
| Financial transaction records | Duration of account + 7 years after closure | Financial compliance and tax obligations |
| Game session and betting history | Duration of account + 3 years after closure | Dispute resolution, responsible gaming review |
| Support communications (chat, email) | 3 years from the date of the communication | Quality assurance, dispute resolution |
| Responsible gaming records | Duration of exclusion period + 7 years | Player protection, legal obligation |
| Analytics and usage data (anonymised) | Up to 24 months on a rolling basis | Platform improvement (anonymised — no individual impact) |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent for compliance purposes |
When the retention period for a particular data category expires, 77ap will securely delete or anonymise that data so that it can no longer be associated with you as an individual. Anonymised, aggregated data that cannot identify any individual may be retained indefinitely for statistical and business intelligence purposes.
Where you request deletion of your data before the expiry of the applicable retention period, 77ap will comply with that request to the extent permitted by law. In cases where we are legally required to retain certain records (for example, financial transaction records required by AML regulations), we will inform you of the specific categories of data we are required to retain and the reason for doing so.
Section 6
Data Security Measures
77ap takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure.
Technical Security Controls
- 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and 77ap's servers is encrypted using industry-standard TLS 1.2 or higher.
- Encrypted Data Storage: Sensitive data fields — including identity document references, financial identifiers, and password hashes — are encrypted at rest using AES-256 encryption on our database servers.
- Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes using a modern hashing algorithm. Plaintext passwords are never stored, logged, or transmitted by 77ap systems.
- Two-Factor Authentication (2FA): 77ap supports optional two-factor authentication for account login, providing an additional layer of protection against unauthorised account access.
- Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection and prevention systems (IDS/IPS) that alert our security team to any anomalous activity in real time.
- Access Controls: Access to production systems and player data is restricted to a small number of authorised personnel on a strict need-to-know basis. All access is logged and audited.
- Regular Security Audits: 77ap's platform undergoes periodic security assessments including vulnerability scanning and penetration testing by qualified security professionals.
Organisational Security Controls
- All 77ap staff who handle personal data receive regular data protection and security training.
- Third-party vendors with access to personal data are vetted for security compliance before onboarding and are bound by contractual data processing agreements.
- 77ap maintains an incident response plan. In the event of a data breach that is likely to pose a risk to your rights and freedoms, we will notify affected players promptly and take all necessary steps to contain and remediate the breach.
Your Role in Security
While 77ap takes comprehensive measures to protect your data, you also play an important role. You are responsible for keeping your 77ap account credentials secure, not sharing your password with any person, and logging out of your account when using a shared device. If you suspect that your account has been compromised, contact our support team immediately via live chat or at [email protected] so we can take protective action.
Section 7
Your Privacy Rights
As a player on 77ap, you hold the following rights in relation to your personal data. These rights can be exercised at any time by contacting us at [email protected] with your registered mobile number and a clear description of your request. We will respond to all valid requests within 10 business days.
Right of Access
You have the right to request a copy of all personal data that 77ap holds about you. We will provide this in a structured, readable format. The first copy is provided free of charge; subsequent copies within a 12-month period may attract a reasonable administrative fee.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain account details directly via your account settings. For corrections to KYC-verified information (such as your legal name or date of birth), you will need to provide supporting documentation.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing carried out on the basis of legitimate interests and there are no overriding legitimate grounds. We will comply with erasure requests to the extent permitted by law. Data subject to mandatory legal retention periods (e.g., financial records) cannot be deleted prior to those periods expiring.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being assessed. During a restriction period, we will continue to store your data but will not actively process it for other purposes.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests or is carried out for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately and without requiring justification. Where you object to processing based on legitimate interests, we will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent
Where processing is based on your consent (for example, consent to receive marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent, contact us at [email protected] or use the opt-out mechanism provided in any marketing communication.
How to Exercise Your Rights
To exercise any of the rights described above, send a written request to [email protected] with the subject line "Privacy Rights Request". Include your full name, your registered mobile number, and a clear description of the right you wish to exercise and the data it relates to. We may need to verify your identity before processing the request. We will respond within 10 business days of receiving a valid, complete request.
Your Rights at a Glance
- Access your data
- Correct inaccurate data
- Request erasure
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent
Section 8
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 77ap has handled your personal information, please contact our privacy team using the details below. We take all privacy concerns seriously and are committed to resolving them promptly and fairly.
Privacy Contact Details
You may reach 77ap's privacy team by email at [email protected]. Please use the subject line "Privacy Enquiry" for general questions or "Privacy Rights Request" for formal data rights requests. Include your registered mobile number in all correspondence so we can identify your account efficiently.
For urgent account security issues — such as suspected unauthorised access — please contact our 24/7 live chat support directly from the platform for the fastest response.
Formal Complaints Process
If you are not satisfied with how 77ap has responded to a privacy concern, you may submit a formal complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". All formal complaints will be:
- Acknowledged within 24 hours of receipt.
- Assigned a unique complaint reference number for tracking purposes.
- Investigated thoroughly by a member of our compliance team.
- Responded to with a substantive resolution within 10 business days.
If you remain dissatisfied with our response to a formal complaint, you may escalate the matter to an appropriate external body or authority in your jurisdiction. 77ap will cooperate fully with any such process.
Updates to This Privacy Policy
77ap reviews this Privacy Policy at least annually and whenever significant changes occur in how we process personal data. The effective date at the top of this page reflects the date of the most recent revision. Where changes are material — for example, if we introduce a new category of data processing or a new third-party sharing arrangement — we will notify registered players via their registered mobile number or by displaying a prominent notice on the 77ap platform for a minimum of 14 calendar days before the change takes effect.
We encourage you to review this Privacy Policy periodically to stay informed about how 77ap protects your personal information. Your continued use of the 77ap platform after the effective date of any revision constitutes your acknowledgement of the updated policy.
Children and Minors
77ap is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our platform, please contact us immediately at [email protected] so we can investigate and act promptly.
Support Channels
- 24/7 Live Chat (platform)
- Email: [email protected]
- WhatsApp: +880 1700 000000
- Hours: 08:00–24:00 BST
Your Privacy Is Protected
Explore 77ap With Confidence
Now that you understand how 77ap safeguards your data, dive into everything our platform has to offer — from BPL cricket betting to live casino games and hundreds of slots.