e2777 Privacy Policy — How We Handle Your Data

e2777 (referred to in this document as "e2777", "we", "us", or "our") is an offshore-licensed online gaming and sports betting platform operating at e2777.io. The platform provides casino games, live dealer experiences, and sports betting services — including live cricket markets, slots, fishing games, and handball betting — to players aged 21 and above in Bangladesh and other permitted territories.

For all data protection matters, e2777 acts as the data controller in respect of the personal information it collects from users of the platform. If you have any questions regarding our data practices, you may contact our dedicated support team at [email protected].

e2777 collects personal data that falls into the following categories. We collect only what is reasonably necessary for the purposes described in this Policy.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by a legal obligation and with your explicit consent.

e2777 collects personal data through the following channels:

• Account Registration: When you create an e2777 account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• Identity Verification (KYC): During the verification process, you upload identity documents and may complete a liveness check. This data is processed by e2777 and, where applicable, our trusted third-party KYC verification partner.
• Deposits and Withdrawals: When you fund your e2777 account or request a withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, transaction data is shared between e2777 and the relevant payment provider.
• Platform Usage: We automatically collect technical and usage data as you navigate the e2777 website and play games. This is collected via server logs, cookies, and similar technologies (see Section 7).
• Customer Support Interactions: Any communication you send to e2777 via live chat or email is stored as part of your support record and may be used to improve service quality.
• Promotional Opt-Ins: If you choose to receive promotional communications from e2777, your contact details and marketing preferences are recorded for that purpose.

e2777 uses the personal data it collects for the following purposes:

• Account Creation and Management: To create, maintain, and administer your registered e2777 account, including processing your login credentials, account settings, and preferences.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by our anti-money-laundering (AML) and Know Your Customer (KYC) obligations.
• Payment Processing: To process deposits and withdrawals to and from your e2777 account securely, and to maintain accurate financial records of all transactions.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other unlawful conduct on the e2777 platform.
• Responsible Gaming: To monitor your playing behaviour and, where our responsible gaming tools detect patterns indicative of problem gambling, to reach out with support information or apply account restrictions in line with your self-set limits.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance related to your use of the e2777 platform.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable offshore gaming regulations, AML legislation, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data to improve the reliability, speed, and features of the e2777 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing Communications (with consent): If you have opted in to receive promotional emails or messages from e2777, we will use your contact details to send you relevant offers, bonus announcements, and seasonal promotions such as those tied to BPL season, Eid, or Pohela Boishakh. You may opt out at any time.

e2777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and e2777 — for example, managing your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML record-keeping, and lawful authority requests.
• Legitimate Interests: Processing carried out for e2777's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you marketing communications or processing optional profile data. You may withdraw consent at any time without affecting the lawfulness of prior processing.

e2777 does not sell or rent your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent strictly necessary:

• Payment Service Providers: We share the transaction data necessary to process deposits and withdrawals with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank). Each provider processes your data under its own privacy policy and data protection obligations.
• KYC and Identity Verification Partners: To fulfil our identity verification obligations, we may share identity document images and biometric liveness data with a trusted third-party KYC verification service provider. This data is processed solely for the purpose of verifying your identity.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session and bet data necessary to deliver their games within the e2777 platform. These providers do not receive your full personal profile.
• Fraud Prevention and AML Services: We may share data with third-party fraud screening and anti-money-laundering services to protect the integrity of the e2777 platform and its users.
• Legal and Regulatory Authorities: Where required by a lawful order, court direction, or statutory obligation, we will disclose personal data to the appropriate authority. We will notify you of such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of e2777's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms that will govern your data going forward.

e2777 uses cookies and similar tracking technologies on its website and mobile interface to support platform functionality, enhance the user experience, and analyse performance. The following types of cookies may be active during your visit:

• Essential Cookies: Required for the e2777 platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing basic platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred payment method, and game lobby layout selections.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how users navigate the e2777 platform. This information helps us identify areas for improvement and measure the effectiveness of new features. No personally identifiable information is included in analytics reports.
• Security Cookies: Used to detect and mitigate fraudulent activity, identify unusual login patterns, and protect your e2777 account from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use the e2777 platform. e2777 does not use third-party advertising cookies or behavioural tracking networks for external ad targeting.

e2777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered account on e2777, plus a minimum of five years following account closure to satisfy AML record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable regulations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction in compliance with standard financial record-keeping obligations.
• Customer Support Records: Retained for up to three years from the date of the last interaction, unless the record relates to an active dispute or legal matter.
• Marketing Preference Data: Retained until you withdraw consent to receive marketing communications, at which point your preferences are updated immediately and no further marketing is sent.
• Technical and Usage Logs: Raw server and security logs are typically retained for 90 days, after which they are aggregated, anonymised, or deleted.

When personal data is no longer required, e2777 securely deletes or anonymises it in accordance with current best-practice data destruction standards.

e2777 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the e2777 platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including identity document references and financial details — are encrypted at rest in e2777's secure database infrastructure.
• Access Controls: Access to personal data is restricted to authorised e2777 personnel on a strict need-to-know basis. All internal access is logged and audited regularly.
• Two-Factor Authentication: e2777 supports and encourages the use of two-factor authentication (2FA) on your account to provide an additional layer of login security.
• Intrusion Detection and Monitoring: e2777's infrastructure is monitored continuously for suspicious activity, attempted breaches, and anomalous behaviour patterns.
• Regular Security Audits: e2777 conducts periodic internal security reviews and works with independent security professionals to assess and strengthen its data protection posture.

While e2777 employs robust security measures, no online system can be guaranteed as completely impenetrable. In the event of a data breach that affects your personal information, e2777 will notify you promptly and take all reasonable steps to mitigate the impact.

As an e2777 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verifiable requests within a reasonable timeframe and no later than 30 days of receipt.

• Right of Access: You may request a copy of the personal data that e2777 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data held by e2777 is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: In certain circumstances, you may request that e2777 delete your personal data. This right is subject to our legal retention obligations — for example, we are required to retain KYC and transaction records for a minimum period regardless of your deletion request.
• Right to Restriction of Processing: You may request that e2777 restricts its processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: You may request that e2777 provide your personal data to you in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Withdraw Consent: Where e2777 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to e2777 processing your personal data based on legitimate interests where you believe your rights and freedoms override those interests.

e2777 will never discriminate against you for exercising your data rights. Exercising any of the rights listed above will not affect your access to the platform, provided your account remains active and in good standing.

e2777 operates exclusively for adults. Players must be at least 21 years of age to register an account, deposit funds, or participate in any gaming or betting activity on the platform. This age restriction is strictly enforced through our KYC identity verification process.

e2777 does not knowingly collect, use, or retain personal data from individuals under the age of 21. If we become aware that an account has been registered by a person under 21, we will immediately suspend the account, void any associated bets or transactions, and securely delete all personal data associated with that account.

If you are a parent or guardian and believe that a minor has registered an account on e2777, please contact us immediately at [email protected] so we can take appropriate action.

The e2777 platform may contain references to third-party services such as game providers (Pragmatic Play, Evolution Gaming, Spribe, and others) and payment partners (bKash, Nagad, Rocket). These third parties operate under their own privacy policies and data protection standards, which are independent of e2777's policy.

e2777 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policy of any third-party service you interact with in connection with the e2777 platform. Our responsibility is limited to the data e2777 itself collects and controls.

e2777 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, legal obligations, or regulatory guidance. The effective date at the top of this document reflects the most recent revision.

When we make material changes to this Policy — changes that meaningfully affect how we collect or use your personal data — we will notify you by posting a prominent notice on the e2777 platform and, where appropriate, by sending a notification to your registered email address. For minor or clarificatory changes, the updated Policy will simply be published at this page.

Your continued use of the e2777 platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any update, please discontinue use of the platform and contact [email protected] to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which e2777 handles your personal data, please reach out to us using the following contact details:

• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries.
• Live Chat: Available 24/7 from within your e2777 account dashboard. Our English-speaking support team can handle general privacy questions in real time.
• Response Time: Email enquiries are typically responded to within 2–6 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

e2777 is committed to resolving all privacy concerns fairly and promptly. If you feel your concern has not been addressed adequately after contacting us, you may seek further guidance from an appropriate data protection authority in your jurisdiction.