77apa Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by 77apa ("we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to individuals ("you", "the Player") who register for, access, or use the 77apa platform at https://77apa.bet and any associated mobile or progressive-web applications. By creating an account or otherwise using the 77apa platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside 77apa's Terms and Conditions, which form the overarching legal framework governing your use of the platform. In the event of any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail.

2 Personal Data We Collect

77apa collects personal data in the following categories. The table below summarises each category, the specific data points collected within it, and the primary purpose for which that data is collected:

77apa does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where identity documents contain such data as part of a standard KYC process), or health data, unless you have provided it voluntarily in connection with a responsible gaming support request.

3 How We Use Your Personal Data

77apa processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The specific purposes for which we process your data are:

• To create and manage your 77apa account, including verifying your identity and age to satisfy the 21+ eligibility requirement and applicable KYC obligations.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment channels, and to maintain accurate financial records of all transactions on your account.
• To deliver and personalise the gaming experience, including serving game recommendations, adjusting promotional content, and calculating bonus eligibility based on your activity on the platform.
• To operate responsible gaming tools, including setting, monitoring, and enforcing deposit limits, session time alerts, cool-off periods, and self-exclusions as configured in your Account Settings.
• To prevent, detect, and investigate fraudulent activity, money laundering, account takeover attempts, bonus abuse, and any other conduct that is prohibited under the Terms and Conditions.
• To respond to your customer support requests, process complaints, and communicate important account or service notices to you via the mobile number or email address registered on your account.
• To improve the technical performance, security, and content of the 77apa platform by analysing aggregated, anonymised usage data derived from Technical and Behavioural Data categories.

Where 77apa wishes to use your personal data for a materially new purpose not described above, we will notify you in advance and, where required, seek your fresh consent before commencing that processing.

4 Legal Basis for Processing

77apa relies on the following legal bases to process your personal data lawfully:

• Contractual necessity — processing that is required to perform the contract we have with you (i.e., providing you with a 77apa account and the services described in the Terms and Conditions), including identity verification, payment processing, and account management.
• Legal obligation — processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, age verification requirements, and record-keeping duties imposed by applicable financial regulation.
• Legitimate interests — processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where those interests are not overridden by your own privacy interests.
• Consent — where we rely on your consent as a legal basis (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Cookies and Tracking Technologies

77apa uses cookies and similar tracking technologies on the platform to enable core functionality, maintain your session state, detect fraudulent or automated activity, and improve platform performance. The following categories of cookies are in use:

• Strictly necessary cookies — session tokens, authentication state, and CSRF protection tokens that are essential for the platform to function securely. These cannot be disabled.
• Functional cookies — language preferences, theme settings, and remembered payment method selections that improve your experience across sessions. You may clear these via your browser settings.
• Analytics cookies — anonymised, aggregated page-view and interaction data used to understand how players navigate the platform and where usability improvements can be made. No personally identifiable information is transmitted via analytics cookies.
• Security cookies — bot-detection and rate-limiting signals used to protect the platform from automated abuse. These are strictly necessary and cannot be disabled.

You can manage your cookie preferences by adjusting the settings in your web browser. Please note that disabling functional cookies may impair certain features of the 77apa platform. 77apa does not use third-party advertising or retargeting cookies.

6 Sharing Your Personal Data

77apa does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the purposes described in this Policy:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other Bangladeshi payment processors. These providers receive only the transaction data required to execute your deposit or withdrawal request. They are contractually prohibited from using your data for any other purpose.
• Game content providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt, and other integrated game studios. These providers receive only the session identifiers and game-outcome data necessary to operate their games within the 77apa platform. They do not receive your identity or financial data.
• Identity verification and KYC service providers — third-party document verification platforms engaged to assist with age and identity checks where documentary proof is required. These providers are data processors acting under 77apa's instructions and are bound by strict data processing agreements.
• Law enforcement and regulatory authorities — where 77apa is legally required to disclose personal data in response to a valid court order, subpoena, regulatory request, or applicable law, we will do so. We will notify you of any such disclosure where we are legally permitted to do so.

77apa does not share your personal data with advertising networks, data brokers, social media platforms, or any third party for commercial marketing purposes. All third-party data processors engaged by 77apa are bound by contractual data processing agreements that prohibit secondary use of your data.

7 Data Retention

77apa retains your personal data only for as long as is necessary for the purpose for which it was collected, or for as long as we are required to retain it by applicable law or regulation. The following retention periods apply:

• Account data (identity, contact, and financial data) — retained for the lifetime of your account and for a minimum of 5 years following account closure, to meet AML record-keeping obligations and to handle any post-closure disputes.
• Transaction records — retained for a minimum of 5 years following each transaction to satisfy financial reporting and AML record-keeping requirements.
• Technical and behavioural data — retained in identifiable form for up to 24 months following your last login. After that period, this data is either deleted or anonymised and retained only in aggregate form for platform analytics purposes.

When your personal data is no longer needed, 77apa will securely delete or destroy it in accordance with our internal data disposal procedures. Where full deletion is not immediately possible (for example, because data resides in backup systems), the data will be isolated and protected from further processing until deletion is possible.

8 Data Security

77apa implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and the 77apa platform, encryption at rest for sensitive stored data fields, access controls that restrict internal data access to personnel with a documented business need, regular security assessments and penetration testing of the platform's infrastructure, and automated fraud-detection systems that monitor transactions and session activity in real time.

While 77apa maintains strong security practices, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for the security of the device you use to access the platform. If you suspect that your account has been compromised, please contact [email protected] immediately.

9 Your Data Rights

As a player whose personal data is processed by 77apa, you hold the following rights. You may exercise any of these rights at any time by contacting 77apa at [email protected]. We will respond to all verified rights requests within 30 calendar days of receipt.

• Right to access — you may request a copy of the personal data that 77apa holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared.
• Right to rectification — if any personal data that 77apa holds about you is inaccurate or incomplete, you may request that it be corrected or completed. For some data fields (such as your registered phone number), you can update these directly via the Account Settings page.
• Right to erasure — you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the processing is unlawful. Please note that this right is subject to our legal retention obligations — we may be required to retain certain data for up to 5 years even after account closure.
• Right to restrict processing — in certain circumstances (for example, where you contest the accuracy of the data, or where you have objected to processing pending verification of our legitimate interests), you may request that we restrict the processing of your data to storage only.
• Right to data portability — where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.
• Right to object — you may object at any time to the processing of your personal data where that processing is based on 77apa's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds for it that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

To exercise any of the above rights, please send a written request to [email protected] with the subject line "Data Rights Request" and include your registered mobile number so that we can verify your identity before processing the request. There is no charge for exercising your data rights.

10 Children's Privacy

If you are a parent or guardian and you believe that a person under 21 has registered an account on 77apa using false age information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11 Third-Party Links and Integrations

The 77apa platform integrates with third-party game providers and payment processors as described in Section 6 of this Policy. These integrations involve only the minimum data exchange required for service delivery. 77apa is not responsible for the privacy practices of any third-party service whose products are integrated into the platform. We recommend that you review the privacy policies of Pragmatic Play, Evolution Gaming, bKash, Nagad, and other integrated providers directly to understand how they handle data within their own systems.

12 Changes to This Privacy Policy

77apa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made to this Policy, we will publish the revised Policy on this page with an updated "Last Updated" date and, where practicable, notify active players via their registered contact details.

Your continued use of the 77apa platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with a revised Policy, you must stop using the platform and may request account closure by contacting [email protected].

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact 77apa's support team by email at [email protected]. Our team operates in Bangladesh Standard Time (UTC+6) and aims to acknowledge all privacy-related enquiries within 24 hours and resolve them within 30 days.

✦ Your Privacy at a Glance

Six principles that define how 77apa handles your personal data every day.

▶ Continue Exploring 77apa

Now that you have reviewed our Privacy Policy, explore 77apa's games and services with full confidence that your data is safe.