Your Privacy Matters at 777q

Introduction

This Privacy Policy ("Policy") describes how 777q ("we", "us", "our"), the operator of the online betting and casino platform accessible at https://777q.im ("the Platform"), collects, uses, stores, shares, and protects personal data relating to users ("you", "your", "Player") of the Platform, including visitors who browse without registering an account.

777q is committed to protecting the privacy of all individuals who interact with our Platform. We handle all personal data in accordance with applicable data protection principles, including those relating to lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference. By accessing or using the 777q Platform, you confirm that you have read and understood this Policy and consent to the data practices described herein.

Data We Collect

777q collects the following categories of personal data in connection with the registration, operation, and improvement of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Residential address, including city, district, and postcode.
• Email address used for account registration and communications.
• Mobile phone number used for account verification and two-factor authentication.
• Copies of government-issued identity documents (National ID card, passport, or driving licence) submitted during the Know Your Customer (KYC) verification process.
• Proof of address documents (e.g., utility bill, bank statement) where required for KYC.

2.2 Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals.
• Bank account details where bank transfer is used as a payment method (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and others).
• Card details (Visa, Mastercard) where applicable — note that full card numbers are not stored by 777q; they are processed through a PCI-DSS compliant payment gateway.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.
• Account balance history and bonus fund records.

2.3 Gaming & Betting Activity Data

• Records of all bets placed, games played, and wagers made on the Platform.
• Game session data, including session start and end times, stake amounts, outcomes, and return amounts.
• Sports betting selections, odds accepted, and settlement outcomes.
• Responsible gaming settings applied to your account, including deposit limits, session time limits, and self-exclusion status.

2.4 Technical & Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser type and version.
• Unique device identifiers where applicable.
• Log data including pages visited, time spent on each page, click paths, and error logs.
• Cookie data and similar tracking technology data (see Section 7 for full details).

2.5 Communications Data

• Records of all communications between you and the 777q support team, whether by email, live chat, or any other channel.
• Feedback, complaints, and dispute records.
• Survey responses and promotion opt-in/opt-out preferences.

How We Collect Data

777q collects personal data through the following mechanisms:

• Direct submission: Data you provide when registering an account, completing the KYC verification process, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and device data collected automatically as you interact with the Platform, including through cookies and similar tracking technologies (see Section 7).
• Third-party sources: Identity and address verification data obtained from third-party KYC and anti-fraud service providers used to validate the information you have submitted directly.
• Payment processors: Transaction confirmation data received from mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment gateways in connection with your deposits and withdrawals.
• Fraud and risk monitoring systems: Behavioural and pattern data generated by our internal fraud detection systems in connection with your account activity.

How We Use Your Data

777q processes personal data for the following specific purposes. The table below maps each processing purpose to the corresponding data category and the legal basis relied upon (see Section 5 for details on legal bases):

Legal Basis for Processing

777q relies on the following legal bases when processing your personal data:

• Contract performance: Processing that is necessary to perform our contract with you — i.e., to operate your account, process your transactions, and provide you with gaming and betting services.
• Legal obligation: Processing that is required in order to comply with applicable legal obligations, including anti-money laundering (AML) obligations, age verification requirements, and fraud reporting duties.
• Legitimate interests: Processing carried out in pursuit of 777q's legitimate business interests, where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, customer support, and analytics for Platform improvement.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent, primarily for marketing communications. You may withdraw consent at any time without detriment.

Where 777q relies on legitimate interests as its legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. A summary of any such assessment is available on request by contacting [email protected].

Data Sharing & Disclosure

777q does not sell, rent, or trade your personal data. We share personal data only with the following categories of recipient, and only to the extent strictly necessary for the stated purpose:

6.1 Payment Processors

Transaction data is shared with mobile wallet operators (bKash, Nagad, Rocket, Upay), card payment networks (Visa, Mastercard), and banking partners (Dutch-Bangla Bank, BRAC Bank, and others) solely for the purpose of processing your deposits and withdrawals. These entities process your data in accordance with their own privacy policies and applicable financial regulations.

6.2 Identity Verification & KYC Providers

Identity documents and related personal data are shared with third-party KYC and identity verification service providers for the purpose of verifying your identity and confirming that you meet the 777q eligibility requirements. These providers are contractually bound to process your data only for the stated KYC purpose and to implement appropriate security safeguards.

6.3 Fraud Prevention & Anti-Money Laundering

Where required by applicable law or where there is a reasonable suspicion of fraud, money laundering, or other financial crime, 777q may disclose relevant personal data and transaction records to competent authorities, financial intelligence units, or specialist third-party fraud prevention services.

6.4 Legal & Regulatory Obligations

777q may disclose personal data to law enforcement agencies, courts, regulatory authorities, or other public bodies where required to do so by law, court order, or other binding legal process. We will, where permitted, notify you of any such disclosure.

6.5 Platform Service Providers

We engage third-party service providers to support the operation of the Platform, including cloud hosting infrastructure, data analytics providers, customer support software providers, and game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers act as data processors on behalf of 777q and are permitted to process your personal data only in accordance with our documented instructions and subject to appropriate data processing agreements.

Cookies & Tracking Technologies

The 777q Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, analyse Platform usage, and support fraud prevention. The following categories of cookies are used:

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For further information on managing cookies in your specific browser, consult your browser's help documentation.

Data Retention

777q retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in order to comply with applicable anti-money laundering and record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping requirements.
• Gaming and betting activity records: Retained for a minimum of five (5) years from the date of the relevant activity.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Customer support communications: Retained for a minimum of three (3) years from the date of the last communication in a support thread.
• Technical and device data (logs): Retained for a maximum of twelve (12) months from the date of collection, except where retained for a longer period in connection with an active security investigation or legal proceeding.
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Data Security

777q implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 777q Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive personal data stored in 777q's systems is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted to authorised 777q personnel on a strict need-to-know basis. All access is logged and subject to regular audit review.
• Password security: Account passwords are stored using a one-way cryptographic hashing algorithm. 777q support staff cannot retrieve your plain-text password.
• Two-factor authentication: 777q offers two-factor authentication (2FA) as an additional account security measure. Players are encouraged to enable 2FA to protect their accounts.
• Security testing: The Platform undergoes periodic security testing and vulnerability assessments to identify and remediate potential weaknesses.
• Incident response: 777q maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay.

Your Rights

As a data subject, you have the following rights with respect to your personal data held by 777q. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data that 777q holds about you, together with information about how and why it is being processed.
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data we hold about you be corrected or completed without undue delay.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to overriding legal retention obligations (see Section 8).
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Children & Minors

The 777q Platform is strictly intended for adults aged 21 years and above. 777q does not knowingly collect, process, or retain personal data from any individual under the age of 21. If 777q becomes aware that personal data from a person under the age of 21 has been collected, the relevant account will be closed immediately, all associated funds will be forfeited in accordance with the Terms & Conditions, and the personal data will be deleted as promptly as possible.

If you are a parent or guardian and believe that a minor under your care has opened an account on the 777q Platform, please contact us immediately at [email protected] so that we can take prompt remedial action. 777q cooperates fully with any lawful investigation into underage gambling or underage data processing.

Third-Party Services

The 777q Platform integrates with third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment processors (including bKash, Nagad, Rocket, and Upay). When you interact with games or payment interfaces powered by these third-party providers, those providers may collect certain technical and session data directly in accordance with their own privacy policies.

777q is not responsible for the privacy practices of third-party providers. We strongly encourage you to review the privacy policies of any third-party service providers whose services are integrated into the 777q Platform before submitting personal data to those providers directly. The inclusion of third-party game content or payment services on the Platform does not constitute an endorsement of those providers' privacy practices.

Changes to This Policy

777q reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — we will notify registered players by email to their registered email address and by displaying a prominent notice on the Platform for a period of not less than 14 days before the updated Policy takes effect.

For minor or administrative changes that do not materially affect your rights, the updated Policy will be published on this page with the "Last Updated" date revised accordingly. Your continued use of the 777q Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We recommend that you review this Privacy Policy periodically to stay informed of any changes. Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 777q handles your personal data, please contact our Data Privacy team using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Policy Enquiry"
• Response time: We aim to acknowledge all enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.
• Platform: https://777q.im