o777 Privacy Policy

1 Introduction

o777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who uses our services. This Privacy Policy describes how o777 collects, processes, stores, shares, and protects personal information in connection with the use of our online casino, sports betting, and related services, which are available to players in Bangladesh and accessible at o777.io.

This policy is written in plain, accessible English and is intended to give you a clear and honest picture of how your data is handled. It should be read alongside the o777 Terms & Conditions, which also form part of your agreement with us. If any part of this Privacy Policy is unclear, please contact us at [email protected] before using the platform.

o777 takes a privacy-by-design approach, meaning that data protection considerations are built into every aspect of the platform from the ground up — not added as an afterthought. We collect only what we need, use it only for the purposes stated, and protect it with industry-standard technical and organisational measures.

---

2 Data Controller

For the purposes of this Privacy Policy, o777 acts as the data controller in respect of the personal data it collects from players. This means that o777 determines the purposes for which, and the means by which, personal data is processed.

If you have any questions about how your personal data is processed, or if you wish to exercise any of your data rights described in this policy, you may contact the o777 data team using the email address below. All data-related enquiries are handled in English and are responded to within a reasonable timeframe, generally within five business days (Bangladesh Standard Time, UTC+6).

Contact: [email protected]

---

3 Data We Collect

3.1 Registration Data

When you create an o777 account, we collect the information you provide during the registration process. This typically includes your full name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and the username and password you choose for your account.

3.2 Identity Verification Data

To comply with know-your-customer (KYC) obligations and to enforce the 21+ age requirement, o777 may request copies of identity documents. These may include a national identity card, passport, or driving licence. We may also request proof of address (a recent utility bill or bank statement) and, where relevant, proof of payment method ownership.

3.3 Financial Data

o777 collects transaction records associated with your account, including deposit amounts, withdrawal requests, and betting history. Payment method identifiers — such as a bKash wallet number, Nagad number, or bank account reference — are recorded for payment processing and fraud prevention purposes. Full payment credentials (e.g., full bank account numbers or PIN codes) are never stored by o777.

3.4 Usage & Technical Data

When you interact with the o777 platform, we automatically collect certain technical data. This includes your IP address, device type, browser type and version, operating system, session duration, pages visited, games played, bet amounts, and in-platform navigation patterns. This data helps us maintain platform security, improve user experience, and detect unusual activity.

3.5 Communications Data

If you contact o777's support team, submit a complaint, or communicate with us through any channel, we retain records of that correspondence. This includes the content of messages, timestamps, and any attachments provided.

3.6 Responsible Gaming Data

Where you use o777's responsible gaming tools — such as deposit limits, session reminders, cooling-off periods, or self-exclusion — we record the settings you apply and the dates on which they were activated. This data is used solely to enforce your chosen restrictions and to support our duty of care obligations.

---

4 How We Use Your Data

o777 uses the personal data we collect for the following specific purposes:

o777 does not use automated decision-making processes that produce legal or similarly significant effects on players, unless we have separately notified you and provided an opportunity to contest such a decision.

---

5 Legal Basis for Processing

o777 processes personal data on the basis of one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and o777 — for example, processing your deposits and withdrawals, maintaining your account, and delivering the games and betting services you have requested.
• Legal obligation: Processing that is required by applicable law — for example, identity verification to comply with anti-money laundering (AML) requirements and age verification to enforce the 21+ minimum age requirement.
• Legitimate interests: Processing that is necessary for o777's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security monitoring, and improving the user experience.
• Consent: Processing based on your explicit consent — for example, sending you promotional communications or special offers. You may withdraw consent at any time by contacting [email protected] or updating your notification preferences within your account settings.

---

6 Data Sharing

6.1 Third-Party Service Providers

o777 shares personal data with carefully selected third-party service providers who assist in the delivery of our services. These include game software providers (such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, and Ezugi), payment processing partners, identity verification services, and cloud infrastructure providers. All third-party providers are contractually required to handle your data securely and only for the specific purposes for which it has been shared.

6.2 Payment Partners

To facilitate deposits and withdrawals in BDT, o777 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other Bangladeshi financial institutions as applicable. These entities operate under their own privacy and data security frameworks.

6.3 Legal and Regulatory Disclosures

o777 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of o777, its players, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of o777's business, personal data held by o777 may be transferred to the acquiring entity. You will be notified of any such transfer and your continued use of the platform will constitute acceptance of the updated terms.

6.5 No Sale of Data

o777 does not sell, rent, or trade personal data to third parties for marketing or commercial profiling purposes under any circumstances.

---

7 Payment Data

All financial transactions on o777 are conducted in Bangladeshi Taka (BDT). When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, the transaction is routed through the relevant payment provider's secure infrastructure. o777 does not store complete payment credentials on its own servers. Only the minimum identifying reference — such as the last four digits of a bKash wallet number or a masked bank account reference — is retained by o777 for transaction record-keeping and fraud prevention purposes.

All payment data transmitted between your device and o777's servers is protected by SSL encryption. o777 applies internal access controls to ensure that financial data is accessible only to personnel with a legitimate operational need.

---

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. o777 uses cookies and similar tracking technologies to maintain your session, remember your preferences, analyse platform usage, and deliver a consistent user experience across visits.

8.2 Types of Cookies Used

• Strictly necessary cookies: Required for core platform functions such as user authentication and session management. These cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Remember your preferences, such as language settings and game lobby layout, to personalise your experience.
• Analytical cookies: Collect aggregated, anonymised data about how players navigate the platform, which helps o777 identify areas for improvement.
• Security cookies: Help detect fraudulent activity, protect against account takeover, and enforce responsible gaming restrictions.

8.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the o777 platform. Detailed instructions for managing cookies are available in the help documentation of all major browsers.

---

9 Data Retention

o777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account data: Retained for the lifetime of your account and for a period of five years following account closure, in line with standard record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for the duration of your account relationship and for five years thereafter, unless a longer period is required by applicable law.
• Customer support correspondence: Retained for three years from the date of the last interaction, unless the correspondence relates to a dispute that remains unresolved.
• Self-exclusion records: Retained for a minimum of seven years to ensure that self-excluded players are not permitted to re-register during an active exclusion period.

When data is no longer required for any lawful purpose, it is securely deleted or irreversibly anonymised. Anonymised data (from which individuals cannot be identified) may be retained indefinitely for analytical and platform improvement purposes.

---

10 Your Rights

As a player on the o777 platform, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data o777 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data held by o777 is inaccurate or incomplete, you may request that it be corrected.
• Right to erasure: You may request that o777 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restriction: You may request that o777 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests, including direct marketing, at any time.

To exercise any of these rights, please contact o777 at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe and in any case within 30 days of receiving your request.

---

11 Data Security

o777 employs a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include 256-bit SSL encryption for all data in transit, encrypted storage for sensitive data at rest, role-based access controls limiting data access to authorised personnel only, and regular security audits of platform infrastructure.

o777 maintains an internal incident response procedure. In the event of a data breach that is likely to result in a risk to your rights, o777 will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

While o777 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You also play a role in keeping your account safe — please use a strong, unique password for your o777 account and do not share your login credentials with anyone.

---

12 Children & Minors

o777 is strictly an adults-only platform. The minimum age to register and use any o777 service is 21 years. o777 does not knowingly collect or process personal data relating to individuals under the age of 21. If o777 discovers that it has inadvertently collected data from an individual under the minimum age, that account will be immediately suspended, all data will be securely deleted, and any funds will be returned to the payment source where feasible.

Parents and guardians who believe a minor may have accessed o777 services are encouraged to contact us immediately at [email protected] so that the matter can be investigated and resolved promptly.

---

13 Third-Party Links

The o777 platform may contain references to third-party game providers, payment services, and sports data feeds. While o777 takes reasonable care in selecting its partners, we are not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies solely to data collected and processed by o777. We encourage you to review the privacy policies of any third-party services you use in connection with o777.

---

14 Changes to This Privacy Policy

o777 reserves the right to update or revise this Privacy Policy at any time. Where changes are material, o777 will notify active players via email or a prominent in-platform notification before the changes take effect. The updated policy will always be accessible on this page with the effective date clearly indicated at the top.

Your continued use of the o777 platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should discontinue use of the platform and may request closure of your account by contacting [email protected].

---

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way o777 handles your personal data, please reach out to the o777 support team. All privacy-related enquiries are handled in English and are treated with strict confidentiality.

Email: [email protected]

The email address above is displayed as plain text only and is not a clickable link. Please copy it manually into your email client. We aim to respond to all data-related enquiries within five business days (Bangladesh Standard Time, UTC+6).