Privacy Policy — 77apa Protects Your Data

1. About This Policy

This Privacy Policy ("Policy") describes how 77apa ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to registered players, prospective players, and visitors to the website at https://77apa.io ("the Site"). This Policy applies to all services offered through the Site, including cricket betting, live casino, slot games, esports markets, fishing games, and all associated account, payment, and support functions.

By registering an account on 77apa, depositing funds, placing bets, playing casino games, or otherwise using any part of the Site, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this Policy, you must not create an account or use the Site.

This Privacy Policy should be read in conjunction with the 77apa Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into your overall agreement with the platform.

2. Data Controller

77apa acts as the data controller for all personal data collected through the Site and its associated services. As data controller, 77apa determines the purposes for which personal data is processed and the means by which it is processed. If you have any questions about data processing, or wish to exercise your privacy rights, the appropriate point of contact is the 77apa Data Protection team, reachable at [email protected] (plain text — not a clickable link). Please use the subject line "Data Protection Request" to ensure your query is routed correctly.

3. Data We Collect

77apa collects the following categories of personal data. Not all categories will apply to every individual — the data collected depends on your interaction with the platform.

3.1 Identity Data

This includes your full legal name, date of birth, nationality, and government-issued identification numbers (such as your Bangladesh National ID number or passport number). This data is collected at registration and during the KYC verification process and is required to confirm your identity and ensure compliance with the platform's 21+ age restriction.

3.2 Contact Data

This includes your email address, mobile phone number, and residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh). Contact data is used to communicate account information, deliver OTP authentication codes, route support tickets, and send promotional communications where you have opted in.

3.3 Financial Data

This includes details of the payment methods you use for deposits and withdrawals on 77apa, such as your bKash wallet number, Nagad mobile number, Rocket account number, Upay details, bank account numbers for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers, and the last four digits of any Visa or Mastercard used. Full card numbers are never stored by 77apa — card payments are processed directly through certified payment gateways.

3.4 Transaction Data

This includes records of all deposits and withdrawals in BDT (৳) or INR, all bets placed (including market, selection, stake, and settlement outcome), casino game session logs, and bonus redemption records. Transaction data is retained for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.

3.5 Technical & Usage Data

This includes your IP address, device identifier, browser type and version, operating system, connection type, session timestamps, pages visited on the Site, game titles played, betting markets accessed, and feature interaction logs. This data is collected automatically via server logs, cookies, and analytics tools when you use the Site.

4. How We Collect Your Data

77apa collects personal data through the following channels:

• Direct submission: Data you provide voluntarily when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and analytics tools as you browse and interact with the Site.
• Third-party verification providers: Identity and address data returned by our KYC verification partners when verifying your submitted documents.
• Payment processors: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, and card payment gateways when processing your deposits and withdrawals.
• Game providers: Session data and game result records returned by certified providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe.

5. Legal Basis for Processing

77apa processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 77apa — for example, processing your deposit so you can place a bet, or verifying your identity before releasing a withdrawal.
• Legal obligation: Processing required to comply with applicable law — for example, retaining transaction records for anti-money laundering (AML) compliance, or verifying age to enforce the 21+ restriction.
• Legitimate interests: Processing carried out in pursuit of 77apa's legitimate business interests where those interests are not overridden by your rights — for example, fraud detection, platform security, and platform analytics.
• Consent: Processing based on your freely given, informed consent — for example, sending promotional emails about seasonal offers such as BPL cricket bonuses, Eid promotions, or Pohela Boishakh specials. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. How We Use Your Data

77apa uses your personal data for the following purposes:

• Creating and managing your 77apa account
• Verifying your identity and age (21+) in compliance with our KYC requirements
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard
• Settling bets, awarding winnings, and managing bonus balances
• Providing customer support and resolving disputes
• Monitoring for fraud, money laundering, match-fixing, and prohibited conduct as defined in the Terms and Conditions
• Enforcing responsible gaming limits, cooling-off periods, and self-exclusion requests
• Sending mandatory account communications (security alerts, KYC requests, withdrawal confirmations)
• Sending promotional communications where you have opted in (e.g., BPL welcome offers, T20 World Cup boosted markets, seasonal Eid promotions)
• Improving platform performance, game selection, and user experience through aggregated analytics
• Complying with applicable legal and regulatory obligations

7. Sharing Your Data

77apa does not sell, rent, or trade your personal data. We may share your data with the following categories of third party, strictly for the purposes described:

• KYC & identity verification partners: To verify the identity documents you submit during the KYC process. These partners are contractually bound to process your data only for verification purposes.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Only the data necessary to complete the transaction is shared.
• Game content providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe receive session identifiers to manage your casino and betting game sessions. Full personal identity data is not shared with game providers.
• IT infrastructure and hosting providers: Server and cloud infrastructure partners who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or the legitimate request of a law enforcement authority. 77apa will notify you of such requests where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and accountants, under confidentiality obligations, where required to obtain professional advice.

8. International Data Transfers

77apa operates as a cross-border South Asia platform serving players in Bangladesh using BDT and INR currencies. In the course of operating the platform, some of your personal data may be transferred to, or processed by, servers or third-party partners located outside Bangladesh. Where such transfers occur, 77apa takes appropriate steps to ensure that an adequate level of data protection is maintained, including requiring all data processors and sub-processors to adhere to contractual data protection standards equivalent to those applied by 77apa itself. By using the Site, you acknowledge and consent to such transfers as described in this Policy.

9. Data Retention

77apa retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. The general retention periods applied by 77apa are summarised in the data table above in this page. Where your account is closed, 77apa will begin the data deletion or anonymisation process at the end of the applicable retention period. Some data categories — particularly financial transaction records — are subject to extended retention under AML and financial record-keeping requirements and may be retained for up to seven years following account closure.

You may request early deletion of your personal data by contacting [email protected]. Please note that requests for early deletion may not be fulfilled where 77apa is required to retain the data by law, where the data is required to resolve an ongoing dispute, or where retaining the data is necessary to protect 77apa's legitimate legal interests.

10. Cookies & Tracking Technologies

77apa uses the following categories of cookies and similar technologies on the Site:

• Essential cookies: Required for core platform functionality including user authentication, session management, and security. These cookies cannot be disabled without impairing your ability to use the Site.
• Functional cookies: Used to remember your preferences such as language settings and display options, so you do not need to reconfigure them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Site — for example, which game categories are most visited, average session length, and deposit funnel completion rates. This data is used exclusively for platform improvement and cannot be used to personally identify you.

77apa does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in or using the betting and casino features of the Site.

11. Your Privacy Rights

As a player on 77apa, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold. For name, date of birth, or address corrections, updated KYC documentation may be required.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention obligations described in Section 9.
• Right to restriction: You may request that we restrict processing of your data while a rectification request is pending, or where you contest the lawfulness of our processing.
• Right to data portability: Where processing is based on your consent or contract, you may request a machine-readable copy of the data you have provided to us.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., promotional emails), you may withdraw that consent at any time by updating your account communication preferences or emailing [email protected].

To exercise any of these rights, contact [email protected] with the subject line "Data Protection Request" and your registered account username. We will verify your identity before processing the request and respond within 30 calendar days.

12. Data Security

77apa implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 77apa servers
• Encryption of sensitive data fields at rest in our database infrastructure
• Role-based access controls ensuring that only authorised personnel can access player data, limited to the minimum necessary for their function
• Multi-factor authentication required for all staff access to production systems
• Regular penetration testing and vulnerability assessments by independent security auditors
• Secure document vaulting for KYC materials with access logging
• Automated fraud and anomaly detection systems operating continuously

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, 77apa will notify affected players as promptly as practicable and take all reasonable steps to mitigate the impact of the breach. Players are also encouraged to take their own precautions: use a strong, unique password for your 77apa account, enable SMS 2FA, and never share your login credentials with any third party.

13. Children & Minors

77apa is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been provided by or on behalf of a person under 21 — whether through registration, KYC verification, or any other means — we will immediately suspend the relevant account, freeze all associated funds, and delete or quarantine the data pending investigation.

If you are a parent or guardian and you believe that your child may have registered on or accessed 77apa, please contact [email protected] immediately. We take child protection seriously and will act on all such reports with the utmost urgency.

14. Third-Party Services & Game Providers

The 77apa platform integrates content and services from certified third-party game providers including Evolution Gaming, Pragmatic Play, Pragmatic Play Live, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game hosted by one of these providers, your game session data (session token, bet amounts, game results) is exchanged with the provider's servers to enable gameplay. This is a technical necessity of delivering the game and does not constitute a sale or broad sharing of your personal profile. Each provider operates under its own privacy framework and is independently certified. 77apa recommends reviewing the privacy policies of these providers if you have specific questions about how they handle session data at their end.

Payment processing for bKash, Nagad, Rocket, Upay, and card transactions is handled via certified payment gateway partners. These partners receive only the data necessary to execute and confirm the transaction. Full financial credentials are processed directly on the payment provider's secure infrastructure and are not stored on 77apa servers.

15. Changes to This Policy

77apa reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made — for example, adding a new category of data collection or a new sharing arrangement — registered players will be notified by email to the address held on their account at least seven calendar days before the changes take effect. Non-material amendments, such as clarifications of existing practices or correction of typographical errors, may be made without prior notice. The effective date displayed at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Site after the effective date of any amendment constitutes acceptance of the updated Policy.

16. Contact & Data Requests

For all privacy-related enquiries, data subject rights requests, or concerns about how 77apa handles your personal information, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Protection Request"
• Subject line for responsible gaming: "Responsible Gaming Request"
• Response time: Within 30 calendar days for data subject rights requests; within 48 hours for general privacy enquiries
• Support hours: 24 hours a day, 7 days a week
• Language: English
• Time zone: Bangladesh Standard Time (BST, UTC+6)

This Privacy Policy was last reviewed and updated in January 2026. 77apa is committed to maintaining the highest standards of data protection for all players in Bangladesh and across South Asia. 21+ only. Please gamble responsibly.