en77 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected, stored, and processed by en77 in connection with the operation of the en77 online casino and sports betting platform, accessible at en77.io and all associated subdomains, mobile-optimised interfaces, and services operated under the en77 brand (collectively, "the Platform").

en77 is committed to the responsible and transparent handling of personal data. We collect only the information that is necessary for the purposes described in this Policy and we take reasonable technical and organisational steps to ensure that your data is protected against unauthorised access, disclosure, alteration, or destruction.

This Policy applies to all registered players, prospective players who interact with the Platform prior to registration, and any other individuals whose data is processed in connection with en77's operations. It covers data collected through the website, live chat, email correspondence, payment processing, and any other channel through which you interact with en77.

Where this Policy refers to "personal data", we mean any information relating to an identified or identifiable natural person. This includes your name, contact details, financial information, device identifiers, and any other information that could be used, alone or in combination, to identify you as an individual.

For the purposes of this Privacy Policy, en77 acts as the data controller in respect of the personal data of its players and website visitors. As data controller, en77 determines the purposes and means of processing your personal data.

If you have any questions or concerns about how en77 processes your personal data, or if you wish to exercise any of your data rights as described in Section 10 of this Policy, you may contact our dedicated support team using the contact details provided in Section 14.

en77 takes its responsibilities as a data controller seriously and maintains internal records of all processing activities carried out under this Policy. These records are reviewed periodically to ensure that our data practices remain accurate, up to date, and aligned with our obligations under applicable data protection principles.

en77 collects personal data from you directly (when you provide it during registration, verification, or correspondence) and automatically (through your use of the Platform). The categories of data we collect include:

en77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data. If any such information is inadvertently included in documents you submit for KYC purposes, it will not be used for any purpose other than verifying the document's authenticity and will not be stored beyond what is necessary for that purpose.

en77 uses the personal data we collect for the following purposes, each of which is grounded in a recognised legal basis as described in Section 5:

• Account Registration and Management: To create and maintain your en77 player account, verify your identity and age (21+ requirement), and provide access to Platform features including games, betting markets, and the cashier.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods, and to maintain accurate transaction records in Bangladeshi Taka (BDT).
• KYC and Compliance: To comply with our Know Your Customer obligations, verify the authenticity of documents submitted, and prevent the use of the Platform by underage individuals or persons restricted from using gambling services.
• Anti-Money Laundering (AML): To monitor transaction patterns, detect suspicious activity, and fulfil our legal obligations in relation to the prevention of money laundering and the financing of illegal activity.
• Fraud Prevention and Security: To identify and prevent fraudulent account registrations, bonus abuse, collusion, use of automated software, and any other activity that threatens the integrity of the Platform or the safety of other players.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide 24/7 live chat and email support in connection with your en77 account.
• Responsible Gaming: To apply and monitor responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion, and to identify players who may be displaying signs of problem gambling.
• Personalisation and Analytics: To analyse your Platform usage, understand player behaviour, improve game recommendations, and enhance the overall quality and performance of the en77 services.
• Marketing Communications: To send promotional offers, bonus notifications, and news about en77 services to players who have opted in to receive marketing communications. You may opt out at any time via your account settings.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law-enforcement authorities, and protect the rights and interests of en77 and its players.

en77 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without human oversight. Where profiling is used (for example, to identify unusual betting patterns for security purposes), it is reviewed by trained personnel before any account action is taken.

en77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and en77 — including account creation, payment processing, game access, and customer support — is carried out on the basis that it is required to deliver the services you have requested.
• Legal Obligation: Processing carried out to comply with applicable legal requirements, including KYC verification, AML monitoring, age verification, and responses to lawful authority requests, is based on our legal obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, responsible gaming monitoring, and internal record-keeping is carried out on the basis of en77's legitimate interests in operating a safe, fair, and commercially viable platform, where those interests are not overridden by your data-protection rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

en77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of trusted third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: Including bKash, Nagad, Rocket, Upay, Visa, and Mastercard, for the purpose of processing deposits and withdrawals on your behalf. These providers are bound by their own data protection obligations and process your financial data only as necessary to complete transactions.
• Identity Verification Providers: Third-party KYC service providers who assist en77 in verifying the identity, age, and address of account holders. These providers are contracted to process data only for verification purposes and are prohibited from using it for any other purpose.
• Game Technology Providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios. Technical session data may be shared with providers to facilitate game delivery, resolve technical disputes, and ensure game integrity. Providers do not receive personally identifiable data beyond what is technically required.
• Fraud and Security Partners: Specialist third-party services that assist en77 in detecting and preventing fraudulent activity, money laundering, and the use of automated software on the Platform.
• Customer Support Platforms: Tools and platforms that support the delivery of en77's live chat and email customer service. Support agents access your data only to the extent necessary to resolve your enquiry.
• Analytics Providers: Services that help en77 understand aggregated player behaviour and Platform performance. Where possible, data shared with analytics providers is anonymised or pseudonymised before transmission.
• Legal and Regulatory Authorities: en77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of en77, its players, or third parties.

All third-party data processors engaged by en77 are required to handle personal data in accordance with applicable data protection principles and to implement appropriate technical and organisational security measures. en77 maintains data processing agreements with its key processors and reviews these relationships periodically.

en77 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy KYC, AML, and legal record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the account relationship and for a minimum of five years following account closure. Documents are stored securely and access is restricted to authorised personnel.
• Customer Support Records: Live chat transcripts and email correspondence are retained for up to three years from the date of the interaction, unless a longer period is required for an ongoing dispute or legal matter.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications, at which point your marketing preferences will be updated promptly.
• Technical and Usage Data (Logs): Retained for up to 12 months from collection for security and performance monitoring purposes, after which they are anonymised or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, data is deleted in accordance with en77's secure data disposal procedures.

en77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the en77 Platform is encrypted using industry-standard 256-bit SSL/TLS technology. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Secure Data Storage: Personal data is stored on secure servers with access controls that restrict data access to authorised personnel only. Production databases are not directly accessible from public networks.
• Access Controls and Authentication: en77 employees and contractors who access personal data are required to do so using role-based access controls. Access to sensitive data categories is restricted to personnel with a demonstrated need to access that data for their job function.
• Intrusion Detection and Monitoring: en77 employs ongoing security monitoring, intrusion detection systems, and anomaly detection tools to identify and respond to potential security incidents in a timely manner.
• Regular Security Reviews: en77 conducts periodic reviews of its security infrastructure, data handling procedures, and access controls to identify and address potential vulnerabilities.
• Staff Training: All en77 personnel who handle personal data receive appropriate data security training and are bound by confidentiality obligations.

Whilst en77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely secure. en77 cannot guarantee absolute security and accepts no liability for data breaches that result from events beyond our reasonable control, such as attacks on your own device or network. You are responsible for maintaining the security of your en77 login credentials.

In the event of a personal data breach that poses a risk to your rights and freedoms, en77 will notify affected players without undue delay, consistent with applicable data protection obligations.

en77 uses cookies and similar tracking technologies (such as pixel tags and local storage objects) on the Platform to enhance your browsing experience, maintain your session, and gather analytics data. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain security tokens, and enable core features such as the cashier and game loading. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your account preferences, language settings, and previous interactions with the Platform, allowing us to provide a more personalised experience.
• Analytics Cookies: These cookies collect aggregated information about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This information helps en77 improve the Platform's performance and content. Analytics data is anonymised where possible before processing.
• Marketing Cookies: With your consent, en77 may use cookies to track whether you arrived at the Platform via a promotional link, to measure the effectiveness of marketing campaigns, and to limit the frequency with which promotional content is displayed to you. These cookies are only set where you have provided explicit consent.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your en77 account and may significantly impair your Platform experience. Detailed browser-specific instructions for managing cookies are available through your browser's help documentation.

en77 does not use cookies to sell your data to third parties or to build detailed personal profiles for advertising purposes outside of the en77 Platform.

Subject to applicable law and en77's legitimate interests in operating a secure and compliant platform, you have the following rights in relation to your personal data held by en77:

• Right of Access: You have the right to request confirmation of whether en77 holds personal data about you, and to receive a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request that en77 corrects any inaccurate or incomplete personal data we hold about you. You may also update certain details directly via your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that en77 deletes your personal data. This right is subject to limitations where we are required to retain data for legal, regulatory, or fraud-prevention purposes. Erasure requests will be assessed on a case-by-case basis.
• Right to Restrict Processing: You have the right to request that en77 restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending a determination of whether our legitimate interests override yours.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of en77's legitimate interests, including profiling for fraud-prevention purposes. en77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your preferences in your account settings or contacting en77 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact en77 support via live chat or by emailing [email protected]. en77 will respond to all valid data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request, particularly for access and erasure requests, to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.

en77 does not charge a fee for processing data rights requests in ordinary circumstances. Where requests are manifestly unfounded, excessive, or repetitive, en77 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.

The en77 Platform is strictly intended for use by adults aged 21 years and above. en77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the en77 registration and KYC process, and accounts where age cannot be verified to our satisfaction will be suspended pending documentary confirmation.

If en77 becomes aware that personal data belonging to an individual under the age of 21 has been collected — whether as a result of a fraudulent registration or otherwise — the account will be closed immediately, any winnings will be voided, deposits will be returned to the payment method used, and the personal data collected will be deleted in accordance with our retention policies, except to the extent that we are required to retain records for compliance or legal purposes.

If you are a parent or guardian and believe that a minor under your care has registered an en77 account or provided their data to en77, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

en77 operates as an international online gaming platform and, in the ordinary course of providing its services, may transfer personal data to third-party processors or service providers located outside Bangladesh. Such transfers may be required, for example, to facilitate game delivery by providers such as Pragmatic Play, Evolution Gaming, or NetEnt, or to process payments through international card networks such as Visa and Mastercard.

Where personal data is transferred internationally, en77 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data, consistent with applicable data protection standards. These safeguards may include contractual clauses requiring the recipient to apply data protection standards equivalent to those described in this Policy, or reliance on the recipient's own recognised data protection frameworks.

By using the en77 Platform and providing your personal data, you acknowledge that your data may be transferred to, stored in, and processed in countries outside Bangladesh. en77 will always handle such transfers responsibly and in accordance with this Privacy Policy.

en77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last Reviewed" date displayed at the top of this Policy will be updated whenever material changes are made.

Where changes are significant — for example, where we introduce a new category of data collection, a new processing purpose, or a new type of third-party sharing — en77 will endeavour to notify registered players in advance by posting a prominent notice on the Platform or by contacting you via your registered email address.

Your continued use of the en77 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should cease using the Platform and may contact support to request account closure. It remains your responsibility to review this Policy periodically to stay informed of how en77 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact the en77 support team through the following channels:

• Live Chat: Available 24/7 via your en77 account dashboard. Average response time: 2–5 minutes. Operating on Bangladesh Standard Time (BST, UTC+6).
• Email: [email protected] — please include your registered username and a clear description of your query or request. Email responses are typically provided within one business day.

For formal data rights requests (access, erasure, rectification, portability), please email us with the subject line "Data Rights Request" and include sufficient information to allow us to verify your identity and locate your account records. en77 will acknowledge all formal requests promptly and provide a substantive response within a reasonable timeframe.

en77 does not provide telephone or postal support at this time. All privacy-related queries and formal data rights requests should be directed to the email address above.