Privacy Policy — ad77a Data Practices

When you interact with the ad77a platform — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing — we collect certain categories of information. The specific data collected depends on how you use the Services.

1.1 Information you provide directly

• Registration data: Full legal name, date of birth, residential address (including city, e.g., Dhaka, Chittagong, Sylhet), email address, and mobile phone number.
• Identity verification (KYC) documents: National Identity Card (NID), passport, or other government-issued identification documents and proof-of-address documents submitted during the verification process.
• Financial data: Payment method details including bKash account numbers, Nagad account numbers, Rocket numbers, Upay identifiers, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard). Note: ad77a does not store full card numbers; payment card data is tokenised by our payment processors.
• Communications data: Any messages, support tickets, live chat transcripts, or emails you send to ad77a's support team.
• Responsible gaming preferences: Deposit limits, loss limits, session time limits, and self-exclusion requests entered in your account dashboard.

1.2 Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, search queries within the platform, and features accessed.
• Transaction data: Deposit amounts, withdrawal requests, bet history, game round IDs, bonus redemptions, and wagering activity logs.
• Cookies and tracking data: Session identifiers, authentication tokens, preference cookies, and analytics data. See the Cookies section for full details.
• Geolocation data: Approximate location derived from your IP address, used to comply with jurisdictional requirements and detect suspicious access patterns.

1.3 Information from third parties

• Payment processors: Transaction confirmation data, fraud scores, and payment status updates from bKash, Nagad, Rocket, Upay, and card network processors.
• Identity verification providers: Document authenticity results and identity match scores from KYC service providers where automated verification is used.
• Fraud prevention services: Risk scores and flagged activity data from third-party anti-fraud platforms used to protect the integrity of the platform.

ad77a uses the personal data we collect for the following specific purposes. Each purpose is tied to a lawful basis for processing, which is detailed in Section 3 below.

Where ad77a relies on consent as the lawful basis (for example, to send you promotional emails or SMS messages about bonuses and new games), you may withdraw that consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing that occurred before the withdrawal.

ad77a processes personal data under the following lawful bases:

• Contract performance: Processing is necessary to deliver the Services you have requested when registering an account. This covers account creation, payment processing, game access, and customer support.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, tax reporting duties, and responsible gaming mandates.
• Legitimate interests: Processing is necessary for ad77a's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, analytics to improve the Services, and internal business record-keeping.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent. This applies principally to direct marketing communications. You may withdraw consent at any time without detriment to your access to the Services.

Where ad77a relies on legitimate interests as the lawful basis, we conduct a balancing test to confirm that our interests do not unduly override your fundamental rights and freedoms. You may request details of any such balancing test by contacting [email protected].

ad77a does not sell or commercially exploit your personal data. We share data only in the following limited, necessary circumstances:

• Payment processors: We share the minimum financial data required to process your deposits and withdrawals with our payment partners, including bKash, Nagad, Rocket, Upay, and card network processors. These partners are contractually bound to handle your data securely and solely for payment processing purposes.
• Identity verification providers: We share copies of KYC documentation with contracted identity verification services to confirm your identity. These providers operate under strict data processing agreements and are prohibited from using your documents for any purpose other than verification.
• Game providers: When you play games from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your account identifier and game session data are transmitted to that provider's servers to render the game. Game providers do not receive your full personal profile or payment details.
• Fraud prevention and security platforms: We share device fingerprint data, IP addresses, and transaction patterns with anti-fraud service providers to detect and prevent fraudulent activity, account takeovers, and money laundering.
• Analytics providers: Aggregated and anonymised usage data may be shared with analytics platforms to help us understand how players interact with the ad77a platform and identify areas for improvement. No personally identifiable information is included in analytics data sets.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of ad77a, our players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ad77a's business, player data may be transferred to the acquiring entity. You will be notified of any such transfer and your data rights remain unchanged.

All third-party data processors engaged by ad77a are required to sign data processing agreements that mandate appropriate technical and organisational security measures and restrict the use of your data to the specified processing purpose only.

ad77a uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

Types of cookies we use:

• Essential cookies: These are strictly necessary for the platform to function. They maintain your login session, store your authentication token, and remember your account settings between pages. Without these cookies, the platform cannot operate correctly. These cookies cannot be disabled while you are using the Services.
• Functional cookies: These remember your preferences, such as your preferred language, currency display (BDT / ৳), and game lobby layout. They improve your experience but are not essential to core functionality.
• Analytics cookies: We use first-party analytics cookies to understand how players navigate the platform — which pages are visited most, where players encounter friction, and how long sessions last. This data is used exclusively to improve ad77a and is not shared with advertising networks.
• Security cookies: These cookies help detect and prevent fraudulent login attempts, bot activity, and automated abuse of the platform. They record device characteristics and session behaviour patterns to identify anomalous activity.

What we do not use: ad77a does not use third-party advertising cookies, cross-site tracking pixels, social media retargeting tags, or any cookie that follows your activity outside of the ad77a platform. We do not participate in programmatic advertising networks.

Managing cookies: You may configure your browser to refuse or delete cookies at any time. However, disabling essential cookies will prevent you from logging in and using the platform. Instructions for managing cookies are available in the help documentation of your specific browser. For mobile users accessing ad77a via a browser on Android or iOS, cookie settings are managed within the browser application itself.

By continuing to use the ad77a platform after reviewing this notice, you acknowledge our use of cookies as described above.

ad77a retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations, whichever period is longer. The following retention periods apply as a general guide:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for statistical and business analysis purposes.

All personal data is stored on servers protected by industry-standard physical and digital security controls. Access to stored personal data is restricted to authorised ad77a personnel and contracted service providers on a strict need-to-know basis.

ad77a respects your rights over your personal data. You may exercise any of the following rights by contacting us at [email protected] with the subject line "Privacy Rights Request":

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this information within 30 calendar days of receiving a verified request, free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will honour this request where no overriding legal obligation requires us to retain the data. Note that AML and financial record-keeping laws require us to retain certain transaction and identity data for the periods specified in Section 6, which may mean full erasure is not possible immediately following account closure.
• Right to restriction of processing: You may request that we pause processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or where you have objected to processing based on legitimate interests and we are assessing that objection.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object: You have the right to object to processing based on legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time through your account dashboard or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

All privacy rights requests are processed within 30 calendar days. In cases of unusual complexity, we may extend this by a further 30 days, in which case we will notify you in advance. We may need to verify your identity before actioning a request to prevent unauthorised disclosure of your data.

ad77a implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• Transport encryption: All data transmitted between your device and ad77a's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment details, and personal information from interception during transmission.
• Data-at-rest encryption: Sensitive personal data stored in our databases, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised personnel only, managed through role-based access controls, multi-factor authentication, and regular access reviews. No single employee has unrestricted access to all data categories simultaneously.
• Intrusion detection and monitoring: Our infrastructure is monitored 24 hours a day, 7 days a week by automated intrusion detection systems that flag anomalous access patterns, unusual data transfers, and potential security incidents for immediate review.
• Penetration testing: ad77a commissions regular independent security assessments and penetration tests to identify and remediate vulnerabilities in the platform before they can be exploited.
• Payment card tokenisation: Full card numbers are never stored on ad77a's servers. All card payment data is immediately tokenised by our PCI-DSS-compliant payment processors, and only the token is retained for transaction processing purposes.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, ad77a will notify affected players without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken to address it.

Despite these measures, no platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ad77a account, to enable any available two-factor authentication, and to log out of your account when using shared or public devices.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ad77a's data handling practices, please contact our support team using the details below. All privacy-related communications are treated with strict confidentiality and are handled by our dedicated compliance team.

• Email (plain text — not a clickable link): [email protected]
• WhatsApp (plain text — not a clickable link): +880 1700 000 777
• Live chat: 24/7 via your account dashboard on the ad77a platform

When contacting us about a privacy matter, please include your full name, registered email address, and a clear description of your query or request. We aim to acknowledge all privacy enquiries within 2 business days and to resolve them within 30 calendar days.

This Privacy Policy was last updated in January 2026. ad77a reserves the right to amend this policy at any time. Material changes will be notified to registered players via email to their registered address and via a notice on the platform. Your continued use of ad77a following such notification constitutes acceptance of the revised policy. The current version is always available at https://ad77a.app/privacy-policy.

For related legal documents, please also review our Terms & Conditions and our Responsible Gaming policy, both of which contain provisions relevant to how we manage your account data and personal information.