Privacy Policy — at77 Online Casino

1. Information We Collect

at77 collects personal data through several channels in the course of providing its online casino and sports betting services to players in Bangladesh. The categories of personal data we collect are as follows:

1.1 Registration Data

When you create an at77 account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used for age verification in accordance with the 18+ requirement)
• Email address (your primary account identifier and communication channel)
• Mobile phone number registered in your name
• Residential address in Bangladesh (city, district, postal code)
• Chosen username and encrypted password

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer obligations and to protect against fraud and money laundering, at77 may request documentary evidence at various stages of the account lifecycle. KYC documents collected may include:

• Scanned copies or photographs of government-issued identity documents (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence issued within 90 days)
• Proof of payment method ownership (screenshot or statement from bKash, Nagad, Rocket, or bank account)
• Selfie or live photograph for identity confirmation where required

1.3 Financial Transaction Data

When you make deposits or withdrawals through at77, we record transaction data necessary to process and audit those payments, including:

• Transaction amounts in BDT (৳)
• Payment method type (bKash, Nagad, Rocket, Upay, or bank transfer)
• Transaction reference numbers and timestamps
• Account numbers or mobile numbers associated with your payment method
• Deposit and withdrawal history for your at77 account

at77 does not store full card numbers or full mobile banking PINs. Payment authentication is handled directly by the relevant payment service providers (bKash, Nagad, etc.) and at77 receives only a tokenised confirmation of successful transactions.

1.4 Gameplay and Activity Data

at77 automatically records data relating to your use of the platform, including:

• Games played, bet amounts, wager outcomes, and session duration
• Bonus redemptions, wagering progress, and promotional participation
• Login timestamps, session lengths, and device types used to access at77
• Customer support interactions, including live chat transcripts and email correspondence

1.5 Technical and Device Data

When you access at77 through a web browser or mobile device, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, referring URL, and device identifiers. This data is used for security monitoring, fraud detection, and platform performance optimisation.

Data Category	Examples	Collection Method
Registration Data	Name, email, date of birth, address	Provided by player at sign-up
KYC Documents	NID scan, proof of address, selfie	Uploaded by player on request
Financial Data	Transaction amounts, payment method, timestamps	Generated automatically on each transaction
Gameplay Data	Bets, game history, session length	Recorded automatically during play
Technical Data	IP address, browser, device type	Collected automatically on site access

2. How We Use Your Data

at77 processes your personal data only for the purposes described in this Policy. We rely on one or more of the following legal bases for each processing activity: performance of a contract (providing the at77 service you signed up for), compliance with a legal obligation (KYC and anti-fraud requirements), legitimate interests (platform security and fraud prevention), and consent (where you have opted in to marketing communications).

2.1 Account Management and Service Delivery

The primary use of your personal data is to create and maintain your at77 account, authenticate your identity when you log in, process your deposits and withdrawals, track your gameplay and bonus balances, and provide customer support when you contact us. Without this data, at77 cannot deliver its services to you.

2.2 Identity Verification and Fraud Prevention

at77 uses your registration and KYC data to verify that you meet the 18+ age eligibility requirement, to confirm that you are who you claim to be, to detect and prevent fraudulent account activity, and to comply with anti-money-laundering obligations. This processing is a legal requirement for operating a responsible online gambling platform.

2.3 Payment Processing

Transaction data is used to process your deposits and withdrawals accurately and within the stated processing timelines, to reconcile your at77 wallet balance, to investigate disputed transactions, and to maintain auditable financial records. at77 retains transaction records for the period required by applicable financial record-keeping obligations.

2.4 Responsible Gaming Monitoring

at77 analyses gameplay and session data to identify patterns that may indicate problematic gambling behaviour, such as unusually large or rapid increases in bet size, extended uninterrupted play sessions, or repeated attempts to withdraw self-exclusion restrictions. This monitoring is carried out as part of at77's commitment to player welfare and is not used for any commercial profiling purpose.

2.5 Marketing and Promotional Communications

With your consent, at77 may use your email address and mobile number to send you information about promotions, bonuses, seasonal offers (such as Eid or Pohela Boishakh specials), and new game launches. You may withdraw your consent to marketing communications at any time by updating your preferences in your at77 account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

2.6 Platform Security and Abuse Prevention

Technical and device data — including IP addresses, login timestamps, and session patterns — is used by at77's security systems to detect and block unauthorised access attempts, to identify accounts operating in violation of the one-account policy, and to prevent the use of automated bots or prohibited software on the platform.

3. Data Sharing & Disclosure

at77 does not sell, rent, or trade your personal data. We share your data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, at77 must share relevant transaction information with the payment service providers you have chosen, including bKash, Nagad, Rocket, Upay, and partner banking institutions such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. Each payment provider operates under its own privacy policy and data protection obligations. at77 shares only the data fields required to execute and confirm the transaction.

3.2 Game Technology Providers

at77's casino games are powered by third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may process limited gameplay session data (such as bet amounts and game round identifiers) in order to operate the game software and settle game outcomes. Game providers do not receive your name, contact details, or payment information.

3.3 Identity Verification Partners

at77 may engage third-party KYC verification service providers to assist with the review and validation of identity documents submitted by players. These partners process document data solely for verification purposes and are contractually prohibited from retaining, reusing, or disclosing that data for any other purpose.

3.4 Legal and Regulatory Disclosure

at77 may disclose your personal data to competent authorities, law enforcement agencies, or other bodies where we are required to do so by applicable law, court order, or regulatory directive. In such cases, at77 will disclose only the specific data fields required by the request and will notify the affected player where permitted by law.

3.5 Business Transfers

In the event that at77 undergoes a merger, acquisition, or transfer of all or substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. at77 will notify registered players of any such transfer via their registered email address prior to the transfer taking effect, and the successor entity will be bound by the terms of this Privacy Policy with respect to data collected prior to the transfer.

4. Cookies & Tracking Technologies

at77 uses cookies and similar tracking technologies on its website to provide core platform functionality, remember your preferences, analyse site usage, and maintain session security. The following categories of cookies are used:

4.1 Strictly Necessary Cookies

These cookies are essential for the at77 website to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, security cookies that protect your account from cross-site request forgery attacks, and load-balancing cookies that ensure consistent platform performance. Without these cookies, at77 cannot operate.

4.2 Functional Cookies

Functional cookies remember choices you have made on the at77 platform — such as your preferred display settings, recently played games, or active bonus selections — so that you do not need to reconfigure them on each visit. These cookies do not track activity across other websites.

4.3 Analytics Cookies

at77 uses privacy-respecting analytics tools to understand how players navigate the platform, which pages are most visited, and where technical errors occur. Analytics data is aggregated and anonymised before analysis; it is not used to build individual player profiles for commercial purposes.

4.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your at77 account. Instructions for managing cookies in major browsers are available in each browser's help documentation. Continuing to use at77 without changing your browser cookie settings indicates your acceptance of our use of cookies as described in this section.

5. Data Security Measures

at77 applies a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, alteration, and disclosure. Our security measures include the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and at77's servers is encrypted using 256-bit TLS/SSL protocols. This applies to registration, login, payment transactions, and all account management actions.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard one-way cryptographic algorithms. at77 staff cannot view your password and will never ask you to share it.
• Access Controls: Access to personal data within at77's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations.
• Intrusion Detection: at77's infrastructure is monitored around the clock for anomalous access patterns, brute-force login attempts, and other indicators of security compromise.
• Secure Document Storage: KYC documents submitted by players are stored in encrypted, access-controlled document management systems. They are not accessible via the public internet.
• Regular Security Reviews: at77 conducts periodic reviews of its security posture, including vulnerability assessments of the platform and third-party integrations.

6. Data Retention

at77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention periods apply:

Data Category	Retention Period	Basis for Retention
Account Registration Data	Duration of account + 5 years after closure	Legal obligation and dispute resolution
KYC Documents	Duration of account + 5 years after closure	Anti-money-laundering compliance
Financial Transaction Records	7 years from transaction date	Financial record-keeping obligation
Gameplay History	3 years from last session	Dispute resolution and responsible gaming
Customer Support Records	3 years from interaction date	Service quality and dispute resolution
Analytics Data	12 months (anonymised after 30 days)	Platform improvement (legitimate interests)
Marketing Preferences	Until consent is withdrawn or account closed	Consent

Upon expiry of the applicable retention period, at77 will securely delete or permanently anonymise the relevant data so that it can no longer be attributed to any individual player. Where deletion is not technically immediately possible (for example, data held in encrypted backup archives), at77 will isolate that data from further active processing until deletion can be completed.

7. Your Privacy Rights

As a registered at77 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". at77 will respond to all verified privacy rights requests within thirty (30) days.

7.1 Right of Access

You have the right to request a copy of the personal data that at77 holds about you, together with information about how that data is being used. at77 will provide this information in a clear, structured format within 30 days of receiving a verified access request.

7.2 Right to Rectification

If any personal data at77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data fields (such as your registered email address or phone number), you may update these directly from within your at77 account settings. For other fields (such as your full name or date of birth on your identity record), correction requires a support request and may require documentary evidence.

7.3 Right to Erasure

You may request that at77 delete your personal data. at77 will action erasure requests where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. Please note that at77 is required by financial regulation to retain certain transaction and identity data for defined periods regardless of an erasure request — in such cases, at77 will inform you of what data must be retained and why.

7.4 Right to Restrict Processing

In certain circumstances, you may request that at77 restrict the processing of your personal data — for example, while a rectification request is being investigated, or where you have objected to a processing activity and a decision on that objection is pending. During a restriction period, at77 will store the relevant data but will not actively process it for other purposes.

7.5 Right to Object to Marketing

You may object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing emails and SMS messages from at77, update your communication preferences in your account settings or contact support. at77 will action all marketing opt-out requests within five (5) business days.

7.6 Right to Data Portability

Where at77 processes your personal data on the basis of consent or contract performance, and where technically feasible, you may request that at77 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.

8. Policy Updates & Contact

at77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. All updates will be published on this page with a revised "Last Updated" date. Where a change is material — meaning it meaningfully affects the rights or obligations of registered players — at77 will send a notification to the email address registered on your account at least seven (7) days before the change takes effect.

We encourage you to review this Privacy Policy periodically. Your continued use of at77 following the publication of an updated Policy constitutes your acceptance of the revised terms with respect to data collected after the update date.

8.1 Contact Details for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way at77 handles your personal data, please contact our dedicated privacy support team using the details below. All privacy enquiries are handled in English and responses are typically provided within five (5) business days.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Platform: Live chat available 24/7 from your at77 account dashboard
• Response time: Within 5 business days for standard enquiries; within 30 days for formal privacy rights requests