r77u Privacy Policy — How We Protect Your Personal Data

1. Introduction and Scope

This Privacy Policy ("Policy") describes how r77u ("we", "us", " "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the r77u platform, including the website at r77u.io, any associated mobile applications, and all gaming, betting, and related services offered therein (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of r77u, whether you are a registered account holder, a visitor browsing the Platform without an account, or a person who contacts our customer support team. By using the Platform, you acknowledge that you have read and understood this Policy and that your personal data will be processed in accordance with it.

This Policy should be read alongside the r77u Terms & Conditions, which govern the overall relationship between you and r77u. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2. Data Controller Information

r77u is the data controller responsible for the personal data collected through the Platform. As the data controller, r77u determines the purposes and means by which your personal data is processed. If you have any questions, concerns, or requests relating to this Policy or to the personal data r77u holds about you, please contact us using the details set out in Section 15 of this Policy.

Our designated point of contact for all privacy-related enquiries is the r77u Support Team, reachable at [email protected]. We aim to acknowledge all privacy-related communications within 48 hours and to resolve requests within 30 calendar days, except in cases of particular complexity which may require an extended response period.

3. What Personal Data We Collect

Depending on how you interact with the Platform, r77u may collect and process the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth;
• National Identity Card (NID) number or passport number (collected during verification);
• Scanned or photographed copies of identity documents submitted for Know Your Customer (KYC) purposes.

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address including district, division, and postal code.

3.3 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay) including the registered mobile number;
• Bank account numbers and branch details for Dutch-Bangla Bank, City Bank, BRAC Bank, and other accepted banking partners;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Account balance information.

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Browser type, version, and language settings;
• Device type, operating system, and unique device identifiers;
• Pages visited, time spent on pages, links clicked, and navigation paths;
• Session start and end times;
• Game activity logs including bets placed, games played, and outcomes.

3.5 Communications Data

• Records of correspondence between you and r77u customer support, including live chat transcripts, email threads, and support ticket content;
• Records of your preferences and settings as configured within your account.

4. How We Collect Your Data

r77u collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, updating your account profile, or contacting customer support;
• Automated collection: Technical and usage data collected automatically as you navigate the Platform, primarily through cookies, server logs, and similar tracking technologies (see Section 8);
• Third-party sources: Identity verification data returned by our KYC service providers; fraud-risk signals from our payment processing partners; and publicly available information used to validate the accuracy of data you have provided.

5. Legal Basis for Processing

r77u processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6. How We Use Your Personal Data

r77u uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and administering your r77u account, including processing login requests and account preference updates;
• Service delivery: Enabling you to access the Platform's gaming, betting, and casino services and to place bets and participate in promotions;
• Payment processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and our banking partners, and reconciling transaction records;
• Identity verification: Verifying your identity and age as required by our KYC procedures to ensure compliance with our minimum age policy (21+) and anti-money laundering obligations;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, and other prohibited activities;
• Responsible gaming: Monitoring gaming patterns to identify players who may be at risk and to action self-exclusion requests, deposit limit settings, and other responsible gaming tools;
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Platform improvement: Analysing anonymised usage data to understand how players use the Platform and to improve the quality, performance, and range of services offered;
• Marketing (with consent): Sending you promotional offers, bonus notifications, and news about new games or features, where you have opted in to receive such communications.

7. Sharing Your Personal Data

r77u does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), identity verification providers, fraud prevention systems, IT infrastructure providers, and customer support platform vendors. These providers act as data processors under contract with r77u and are not permitted to use your data for any purpose other than the specific service they provide to us.

7.2 Game Providers

Certain technical data (such as session identifiers and bet records) may be shared with our game technology providers — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — for the purpose of delivering their games and maintaining game integrity. These providers do not receive your full personal profile.

7.3 Legal and Regulatory Disclosure

r77u may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are required to do so by applicable law, court order, or formal regulatory request. In such cases, we will share only the minimum information required to comply with the legal obligation.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of r77u's assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and the privacy implications in advance.

8. Cookies and Tracking Technologies

r77u uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. They cannot be disabled without significantly impairing your use of the Platform.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics cookies: Collect anonymised data about how visitors interact with the Platform, helping us identify areas for improvement. No personally identifiable information is transmitted via analytics cookies.
• Marketing cookies: Used to deliver promotional content that is relevant to your interests, where you have consented to receive marketing communications.

8.2 Managing Cookies

You can control or disable non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform. Disabling strictly necessary cookies will prevent you from logging in and using the Platform's core features. For detailed guidance on managing cookies, refer to your browser's help documentation.

9. Data Security

r77u implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL 256-bit encryption for all data transmitted between your device and the r77u Platform;
• AES encryption for sensitive data stored in our databases, including financial data and identity document copies;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits conducted by independent third parties;
• Automated monitoring systems that flag unusual access patterns or potential data breach indicators in real time;
• Staff training on data protection obligations and incident response procedures.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you believe your account has been compromised, please contact us immediately at [email protected]. r77u will investigate and respond to confirmed data security incidents within 72 hours of becoming aware of them.

10. Data Retention

r77u retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for statistical or analytical purposes without restriction.

11. Your Rights

Subject to applicable law, you have the following rights in relation to the personal data r77u holds about you:

• Right of access: You may request a copy of the personal data r77u holds about you, together with information about how it is used;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to erasure: In certain circumstances you may request that r77u delete the personal data it holds about you. This right is subject to any overriding legal obligation to retain data (such as transaction records required for anti-money laundering compliance);
• Right to restrict processing: You may ask r77u to restrict the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed;
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing of your personal data where r77u relies on legitimate interests as its legal basis, and where your particular circumstances justify that objection;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity. We will respond within 30 calendar days. In cases of high complexity or volume, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

12. Marketing Communications

With your consent, r77u may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, seasonal promotions (such as Eid or Pohela Boishakh offers), and platform news. You may opt in to marketing communications during registration or at any time through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email you receive from r77u;
• Updating your notification preferences in your account settings; or
• Contacting our support team at [email protected] and requesting removal from our marketing list.

Withdrawing marketing consent does not affect your ability to continue using the Platform or to receive service-related communications such as transaction confirmations, security alerts, or responses to support requests. Service communications are sent on the basis of contractual necessity and are not subject to marketing opt-out.

13. Children and Minors

r77u is an adult-only platform. We do not knowingly collect or process the personal data of any person under the age of 21. Our registration process includes date-of-birth verification to screen out under-age applicants, and our KYC procedures provide a further safeguard by requiring documentary proof of age before any withdrawal is processed.

If r77u becomes aware that personal data belonging to a person under 21 has been collected — for example, as a result of a player misrepresenting their age during registration — we will promptly close the relevant account, return any deposited funds less any bonus amounts claimed, and securely delete all associated personal data. If you believe that a minor may have registered an account on r77u, please contact us immediately at [email protected].

14. Changes to This Privacy Policy

r77u reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a reasonable period following the update. The "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent changes.

Your continued use of the Platform following notification of an update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and contact our support team to close your account. Historical versions of this Policy are available upon request.

15. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data r77u holds about you, please reach out to us using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Response Time: Within 48 hours for privacy-related enquiries; within 30 calendar days for formal data subject rights requests

When submitting a privacy request, please include your full name, the email address registered to your r77u account, and a clear description of your request. We may ask for additional information to verify your identity before actioning a data subject rights request. This is a security measure to ensure that personal data is not disclosed to unauthorised parties.