o77 Privacy Policy

1. Introduction

This Privacy Policy describes how o77 ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your") who access or use the o77 platform at https://o77.bio, including all casino games, sports betting markets, payment facilities, promotional services, and customer support channels.

o77 takes the privacy of its players seriously. We process personal data only for legitimate, clearly defined purposes and apply appropriate technical and organisational safeguards to protect that data at every stage of its lifecycle. By registering an account or using any o77 Service, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read alongside the o77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into this document by reference.

2. Data Controller

For the purposes of this Privacy Policy, o77 acts as the data controller in respect of the personal data collected through the platform. The data controller is responsible for determining the purposes and means by which personal data is processed.

All formal data-related requests, including subject access requests, correction requests, and deletion requests, should be directed to the o77 support team using the contact details set out in Section 13 of this Policy.

3. Data We Collect

o77 collects the following categories of personal data, which are described together with the context in which they arise:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality	Account registration and KYC verification
Contact Data	Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet)	Account registration and support interactions
Identity Document Data	National ID card number, passport number, driving licence, selfie image	Identity verification (KYC) process
Financial Data	bKash account number, Nagad number, Rocket number, Upay number, bank account details, transaction amounts in ৳	Deposit and withdrawal processing
Transaction Data	Deposit history, withdrawal history, bet records, game session logs, bonus usage	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Automatically, upon each platform visit
Usage Data	Pages visited, games played, time spent per session, search queries within the platform	Automatically, during active sessions
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support and feedback interactions
Marketing Preferences	Consent status for promotional emails, preferred communication channel	Registration and preference updates

o77 does not collect any special category data (such as health data, biometric data used for identification, or data relating to criminal convictions) except where such data is volunteered by the player in the context of a responsible gaming self-exclusion request or a mandatory anti-money laundering check.

4. How We Collect Data

4.1 Directly from You. The majority of personal data processed by o77 is provided directly by you during account registration, identity verification, deposit and withdrawal requests, and communications with the support team.

4.2 Automatically. Technical and usage data is collected automatically by o77's platform infrastructure each time you access the site. This includes server log data, cookies, and analytics identifiers described in Section 8.

4.3 From Payment Providers. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a local bank transfer, the relevant payment provider may share transactional confirmation data with o77 to enable the crediting or debiting of your account balance.

4.4 From Game Providers. Third-party game studios — including Pragmatic Play, Evolution Gaming, Spribe, and others — may share game-round data, session identifiers, and RTP (return-to-player) records with o77 for the purposes of bet settlement, dispute resolution, and responsible gaming monitoring.

5. Purpose & Legal Basis for Processing

o77 processes personal data for the following purposes. For each purpose, the applicable legal basis is identified:

• Account creation and management — processing is necessary for the performance of the contract between you and o77.
• Identity verification (KYC) — processing is necessary for compliance with legal obligations relating to anti-money laundering and age verification.
• Processing deposits and withdrawals in Bangladeshi Taka (৳) — processing is necessary for the performance of the contract.
• Bet settlement and game-round completion — processing is necessary for the performance of the contract.
• Fraud prevention and security monitoring — processing is necessary for o77's legitimate interests in maintaining the integrity and security of the platform.
• Responsible gaming monitoring — processing is necessary for compliance with legal obligations and for o77's legitimate interests in preventing gambling harm.
• Customer support — processing is necessary for the performance of the contract and for o77's legitimate interests in resolving disputes and improving service quality.
• Sending promotional communications — processing is based on your prior consent, which may be withdrawn at any time.
• Platform analytics and performance optimisation — processing is based on o77's legitimate interests in improving the platform experience for all players.

6. Sharing Your Data

6.1 Payment Processors. Personal and financial data is shared with payment processors — including bKash, Nagad (Axiata Digital Services), Dutch-Bangla Bank (Rocket), and other authorised local banking partners — solely for the purpose of processing your deposit and withdrawal transactions. These processors act as independent data controllers in respect of their own platforms.

6.2 Game Providers. Session identifiers and bet records may be shared with licensed third-party game providers for the purposes of game-round completion and independent audit trail maintenance.

6.3 IT and Security Service Providers. o77 may engage third-party technical service providers — including hosting providers, cybersecurity firms, and fraud-detection services — who process personal data on o77's behalf as data processors, subject to contractual data processing agreements.

6.4 Legal and Regulatory Authorities. o77 will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory obligation.

6.5 No Sale of Data. Under no circumstances does o77 sell, rent, lease, or otherwise transfer personal data to third parties for commercial purposes unrelated to the direct provision of o77 Services.

7. Data Retention

7.1 o77 retains personal data for as long as your account remains active and for a further period following account closure as required by applicable anti-money laundering legislation, tax law, and dispute resolution obligations. In practice, this means that account and transaction records are typically retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.

7.2 Personal data that is no longer required for any lawful purpose will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

7.3 Technical and usage data collected via cookies and platform analytics is retained for a shorter period, typically not exceeding 24 months from the date of collection, unless a longer retention period is required for fraud investigation or dispute resolution purposes.

7.4 Where you have exercised your right to deletion (see Section 10), o77 will delete or anonymise your personal data within 30 days of receiving and validating your request, subject to any overriding legal retention obligations.

8. Cookies

8.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. o77 uses cookies and similar technologies (such as local storage identifiers) to ensure the platform functions correctly and to understand how players use the site.

8.2 Types of Cookies Used by o77. The following categories of cookies are used on the o77 platform:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to understand how players navigate the platform — for example, which game categories are most frequently visited and how long sessions last on average. Data collected via these cookies is aggregated and anonymised where possible.
• Functional Cookies: Used to remember your preferences such as language setting, preferred deposit method, or the last game category you browsed, so that these can be pre-selected on your next visit.

8.3 Third-Party Advertising Cookies. o77 does not use third-party advertising or retargeting cookies. No cross-site tracking of your browsing activity outside of the o77 platform is conducted.

8.4 Cookie Management. You may manage cookie settings through your browser preferences. Note that disabling strictly necessary cookies will prevent you from logging into your o77 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9. Security Measures

o77 applies the following technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure:

• All data in transit between your device and o77 servers is protected by SSL/TLS encryption with a minimum of 256-bit key length.
• Account passwords are stored using one-way cryptographic hashing algorithms; o77 staff cannot retrieve your plain-text password.
• Access to personal data within o77's internal systems is restricted on a need-to-know basis and is subject to role-based access controls and audit logging.
• o77's infrastructure is hosted in data centres that maintain physical security controls including access-controlled server rooms and 24/7 monitoring.
• Regular internal security reviews and vulnerability assessments are conducted to identify and remediate security risks before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, o77 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

10. Your Rights

As a data subject, you have the following rights in respect of the personal data o77 holds about you. To exercise any of these rights, please contact the o77 support team using the details in Section 13:

• Right of Access: You may request a copy of the personal data o77 holds about you, together with information about how it is being used.
• Right to Rectification: If any personal data held by o77 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request that o77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to o77's legal retention obligations.
• Right to Restrict Processing: You may request that o77 temporarily suspend the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that o77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing based on o77's legitimate interests, including profiling for platform analytics purposes. o77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

o77 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, of which you will be notified.

11. Minors

The o77 platform is strictly intended for use by adults aged 18 and above. o77 does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to o77, please contact the support team immediately. Upon verification, o77 will close the account and securely delete all associated personal data.

o77 employs age verification measures at the point of registration and reserves the right to request identity documentation at any time to confirm that an account holder meets the minimum age requirement. For more information, please see the Responsible Gaming page.

12. Policy Changes

o77 may update this Privacy Policy from time to time to reflect changes in applicable law, platform functionality, or data processing practices. Material changes will be communicated to registered players via their registered contact address and by means of a prominent notice on the platform no less than seven (7) days before the updated Policy takes effect. The "Last updated" date at the top of this document will be revised accordingly.

Your continued use of the o77 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you must stop using the platform and contact the support team to close your account.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data o77 holds about you, please contact our support team. The team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays (e.g., Eid, Victory Day, Independence Day, Pohela Boishakh).

Contact email: [email protected] (plain text — not a clickable link)

Please include your registered username and a brief description of your request so that our team can locate your account record and respond as efficiently as possible. All privacy-related correspondence is treated as confidential and handled by designated support personnel only.