Privacy Policy — How 6777a Handles Your Data

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by 6777a ("we", "us", "our") in connection with the operation of the online casino and sports betting platform accessible at https://6777a.app (the "Platform"). This Policy forms part of, and must be read together with, the 6777a Terms & Conditions. By registering a player account or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

6777a is committed to handling all personal data in a manner that is lawful, fair, transparent, and proportionate. We apply industry-standard security measures across all systems that process personal data and we never use your information for purposes beyond those described in this Policy without first obtaining your separate, informed consent.

Data We Collect

6777a collects personal data through several channels: directly from you during registration and account usage, automatically through technical systems as you interact with the Platform, and occasionally from third-party verification and payment partners. The categories of personal data we collect are set out below.

Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the 18+ age requirement.
• Bangladesh mobile phone number (or international number where applicable) used for OTP verification and account communications.
• Email address used for account notifications, promotional communications (where opted in), and support correspondence.
• Residential address — required as part of Know Your Customer (KYC) verification for accounts that exceed certain transaction thresholds.

Identity Verification Data

• Copies of government-issued identity documents — such as a National Identity Card (NID), passport, or birth certificate — submitted during KYC verification.
• Selfie or facial image submitted alongside a document for liveness verification purposes, processed by a third-party verification provider.

Financial & Transaction Data

• Transaction records including deposit amounts, withdrawal amounts, payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction timestamps.
• Partial payment identifiers (e.g., last 4 digits of a card or the registered bKash number) retained for reconciliation and fraud prevention purposes. Full card numbers and mobile banking PINs are never stored by 6777a.

Usage & Technical Data

• IP address and approximate geographic location derived from IP at the time of login and during active sessions.
• Device type, operating system, browser type and version, and screen resolution.
• Session duration, pages visited, games launched, bet history, and in-platform navigation patterns.
• Device fingerprint data used to identify returning devices for fraud prevention and responsible gaming monitoring.

Communications Data

• Content of support tickets, live chat transcripts, and emails exchanged between you and the 6777a support team.
• Records of promotional communications sent to you and whether they were opened or acted upon (where email tracking is used).

Data Category	Collection Method	Required or Optional
Identity & Contact	Registration form	Required
Identity Verification (KYC)	Document upload	Required above thresholds
Financial & Transaction	Cashier & payment gateway	Required
Usage & Technical	Automatic (cookies, logs)	Required for platform operation
Communications	Support channels	Generated when you contact us
Marketing Preferences	Opt-in form / account settings	Optional

How We Use Your Data

6777a processes personal data only for specific, legitimate purposes. The lawful bases on which we rely are: performance of a contract (operating your account), compliance with a legal obligation, protection of vital interests, and — where specifically stated — your consent. We do not process personal data for any purpose that is incompatible with the purposes listed below.

Account Creation & Management

We use your identity and contact data to create and maintain your 6777a player account, authenticate your login sessions via OTP verification, manage your account preferences, and communicate service-related updates — including changes to these Terms or this Privacy Policy — to your registered email address.

Payment Processing & Financial Compliance

Transaction data is used to process your deposits and withdrawals through local Bangladesh payment channels (bKash, Nagad, Rocket, Upay) and international card networks, to reconcile your account balance, and to fulfil our obligations under applicable anti-money laundering (AML) regulations, which require us to maintain accurate transaction records for a minimum period.

Age Verification & KYC

6777a is strictly an 18+ platform. We use date-of-birth data and, where required, identity document data and facial verification to confirm that all registered players meet the minimum age requirement and to verify the identity of players who reach applicable transaction thresholds. This processing is a legal obligation and cannot be waived.

Fraud Prevention & Platform Security

Technical and usage data — including IP addresses, device fingerprints, and behavioural patterns — is processed by our automated fraud detection systems to identify suspicious activity, prevent multi-accounting, detect bonus abuse, and protect the platform and its users from financial crime and unauthorised access.

Responsible Gaming Monitoring

6777a uses session data, bet history, deposit frequency, and self-assessment responses to monitor for patterns that may indicate problem gambling behaviour. This processing supports the responsible gaming tools described on our Responsible Gaming page and is carried out in your vital interest as a player.

Customer Support

Communications data — including support ticket content and chat transcripts — is used to resolve your enquiries, train our support team, and improve our service quality. Support records are retained for a period consistent with the data retention schedule described in Section 5 of this Policy.

Marketing Communications

Where you have opted in to receive promotional communications, we use your contact data to send you information about 6777a bonuses, seasonal promotions (including BPL and IPL cricket season offers, Eid promotions, and Pohela Boishakh specials), and new game launches. You may withdraw your marketing consent at any time by updating your account communication preferences or by contacting support at [email protected].

Data Sharing & Third Parties

6777a does not sell your personal data. We do not share your personal data with third parties except in the limited circumstances described below, and in each case we apply contractual protections to ensure that shared data is handled consistently with this Policy.

Payment Processing Partners

To process deposits and withdrawals, we share necessary transaction data with certified payment gateway providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Visa/Mastercard network processors. These providers receive only the data required to execute and reconcile transactions. They are contractually prohibited from using your data for any purpose other than payment processing.

Identity Verification Providers

During KYC verification, we share identity document images and facial verification data with a certified third-party identity verification provider. This provider processes your data solely for the purpose of confirming your identity and age and is bound by strict data processing agreements. Verification data is not retained by the provider beyond the period necessary to complete the verification check.

Game Content Providers

Live casino and RNG game content is delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to facilitate game delivery and resolve disputes. They do not receive your full name, contact details, or payment information.

Fraud Prevention & AML Compliance

Where required by law, or where we detect activity that indicates financial crime, we may share relevant account and transaction data with financial intelligence authorities, law enforcement agencies, or court-appointed officers. This disclosure is a legal obligation and does not require your consent.

Technology Infrastructure Partners

6777a uses cloud hosting and content delivery network (CDN) infrastructure provided by reputable technology companies. These infrastructure partners may process data as part of routine system operations (e.g., server logs) under the terms of our data processing agreements with them. They act as data processors under our instruction and have no independent right to use your data.

Cookies & Tracking Technologies

6777a uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform to ensure it functions correctly, to protect account security, and to analyse how players use the Platform so we can continue improving it. This section explains the types of Cookies we use and how you can manage them.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, CSRF protection, load balancing. Cannot be disabled without breaking core functionality.	Session / up to 24 hours
Functional	Remembers your language preference, display settings, and last-visited game categories to personalise your experience.	Up to 90 days
Analytical	Collects anonymised usage statistics (pages visited, session duration, game launches) to help us understand platform performance and improve the user experience.	Up to 13 months
Security & Fraud Prevention	Device fingerprinting tokens used to identify returning devices and detect suspicious login patterns, supporting our fraud prevention systems.	Up to 12 months

Managing Cookies

You may control and manage cookie settings through your browser's privacy or settings menu. Most modern browsers allow you to block or delete cookies, restrict specific cookie types, or be notified before a cookie is placed. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling functional or analytical cookies will not affect your ability to play games or make transactions, but may result in a less personalised experience.

Instructions for managing cookies in common browsers used in Bangladesh are available in each browser's official help documentation. 6777a does not control browser-level cookie management functionality.

Data Retention & Storage

6777a retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold.

Data Category	Retention Period	Basis for Retention
Account registration & identity data	Duration of account + 5 years after closure	AML compliance, legal obligation
KYC verification documents	Duration of account + 5 years after closure	Regulatory requirement
Transaction records	7 years from transaction date	Financial recordkeeping obligation
Support communications	3 years from last interaction	Dispute resolution, service improvement
Usage & technical logs	13 months from collection	Security monitoring, analytics
Marketing consent records	Until consent is withdrawn + 2 years	Proof of consent
Self-exclusion records	Minimum 7 years	Responsible gaming compliance

Data Storage Location

6777a's platform data is stored on secured cloud infrastructure hosted within data centres that implement physical access controls, redundant power and cooling, and 24/7 security monitoring. Where data is processed outside of Bangladesh, we ensure that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Data Deletion

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data (e.g., statistical reports on game performance or deposit volumes) may be retained indefinitely as it no longer constitutes personal data.

Your Privacy Rights

As a 6777a player, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at [email protected]. We will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to our legal retention obligations — for example, transaction records required under AML regulations cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format (e.g., CSV) and to transmit it to another service provider.
• Right to Object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, where you believe your rights and interests override ours in a specific situation.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Data Security Measures

6777a implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our principal security measures include the following.

Technical Controls

• TLS Encryption in Transit: All data exchanged between your browser or app and the 6777a platform is encrypted using current Transport Layer Security (TLS) protocols. Connections using outdated SSL/TLS versions are rejected.
• Encryption at Rest: Sensitive data fields — including identity document references, payment identifiers, and authentication credentials — are encrypted at the database level using AES-256 encryption.
• OTP Authentication: Account login and sensitive account changes require one-time password (OTP) verification sent to your registered Bangladesh mobile number, providing a second authentication factor beyond your password.
• Automatic Session Expiry: Inactive sessions are automatically terminated after a defined period to reduce the risk of unauthorised access from unattended devices.
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection systems that alert our security team to anomalous access patterns in real time.

Organisational Controls

• Access to personal data is restricted on a strict need-to-know basis. Employees and contractors who require access to personal data to perform their roles are granted the minimum level of access necessary.
• All staff with access to personal data undergo data protection training as part of their onboarding and on an annual basis thereafter.
• 6777a conducts periodic internal reviews of data access logs to detect and investigate any anomalous internal data access patterns.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and interests, 6777a will notify affected players without undue delay via the email address registered to their account. Our incident response team maintains documented procedures for breach containment, investigation, and notification. Players are encouraged to report any suspected security incident to [email protected] immediately.

Policy Updates & Contact

Updates to This Policy

6777a reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. Material changes — those that significantly affect your privacy rights or the way we use your personal data — will be communicated to registered players via email to the address on file at least 7 days before taking effect. Non-material changes (such as clarifications of existing language) may take effect immediately upon publication.

The most current version of this Privacy Policy will always be available at https://6777a.app/privacy-policy. The effective date displayed in the Hero section of this page reflects the date of the most recent version. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected data security incident, please contact our Data Protection team using the details below. Our team responds to all privacy-related enquiries within 2 business hours during peak hours (08:00–24:00 Bangladesh Standard Time, UTC+6).

• Email: [email protected]
• Subject Line: Please use "Privacy Request — [Your Account Username]" for data rights requests to ensure prompt routing to the correct team.
• Response Time: All data rights requests are acknowledged within 48 hours and responded to in full within 30 calendar days of receipt.

For questions about your account, deposits, withdrawals, or game-related issues, please contact our general support team via the same email address. General support queries are separate from data rights requests and are handled by a dedicated support team with an average response time of under 1 hour during peak hours.