au777 Privacy Policy

1 Information We Collect

au777 collects personal data through several channels as part of delivering a secure, compliant, and personalised online casino and sports betting experience to players across Bangladesh. The categories of personal data we collect, and the circumstances under which we collect them, are set out below.

Information you provide directly: When you register an au777 account, you voluntarily provide us with identity data (your full legal name, date of birth, and government-issued identification number), contact data (email address, mobile phone number, and residential address), and financial data (the payment method details required to process bKash, Nagad, Rocket, Upay, Visa, or Mastercard transactions). You may also provide additional information when contacting our customer support team, submitting a withdrawal request subject to enhanced verification, or participating in au777 surveys and feedback programmes.

Information collected automatically: When you access the au777 platform — whether via desktop browser or mobile device — we automatically collect technical data including your IP address, browser type and version, device type and operating system, screen resolution, session start and end timestamps, pages visited, navigation path, and referral source. This data is collected through server logs, cookies, and similar tracking technologies described in Section 5 of this policy.

Gameplay and transaction data: au777's platform systems automatically generate and retain records of all gameplay activity, including individual wager amounts, game titles played, session durations, win and loss outcomes, bonus redemptions, and responsible gaming tool activations. Similarly, all deposit and withdrawal transactions are logged with full metadata including amount, method, timestamp, and processing status.

2 How We Use Your Data

au777 uses the personal data it collects only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following describes how and why we process your personal data:

• Account creation and management: Your identity and contact data are used to create and maintain your au777 account, authenticate your logins, manage your account preferences, and ensure the account is operated by its registered holder.
• Payment processing: Your financial data is used exclusively to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), verify payment method ownership, and reconcile transaction records. au777 does not store full card numbers; payment card data is handled by PCI-DSS compliant payment processors.
• Identity verification and KYC compliance: au777 is required to verify the identity and age of all players prior to processing withdrawals above specified thresholds and on a periodic basis as part of our Know Your Customer (KYC) obligations. Your identity documents are processed by our verification partner and retained in accordance with the data retention schedule in Section 6.
• Responsible gaming monitoring: Your gameplay data — including session durations, wager frequency, and bet-to-balance ratios — is analysed by our responsible gaming systems to identify patterns that may indicate problem gambling behaviour. Where such patterns are identified, au777 may proactively contact you to offer support tools such as deposit limits, cooling-off periods, or self-exclusion.
• Anti-money laundering and fraud prevention: au777 analyses transaction data and account activity patterns to detect and prevent money laundering, fraud, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. Suspicious activity may be reported to relevant authorities as required by law.
• Customer support: When you contact au777's support team, we use your account data and the details of your enquiry to identify you, investigate your issue, and provide an accurate response. Support interactions are recorded for quality assurance and dispute resolution purposes.
• Personalised promotions and marketing communications: Where you have provided your consent, au777 may use your contact data, gameplay data, and marketing preferences to send you tailored promotional offers, bonus notifications, and VIP loyalty programme updates via email or SMS. You may withdraw this consent at any time by contacting [email protected].
• Platform improvement and analytics: Aggregate and anonymised usage data is used to analyse platform performance, identify navigation issues, prioritise feature development, and improve the overall user experience for players across Dhaka, Chittagong, Sylhet, and the rest of Bangladesh.

3 Legal Basis for Processing

au777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is required to perform our contractual obligations to you as a registered au777 player — including account management, payment processing, and game service delivery — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations — including anti-money laundering checks, identity verification, age verification, and record-keeping requirements — is conducted on the basis of legal obligation.
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, abuse detection, and aggregate platform analytics is conducted on the basis of au777's legitimate interests, provided those interests are not overridden by your own rights and interests.
• Consent: Processing for personalised marketing communications, non-essential cookies, and voluntary responsible gaming self-assessment tools is conducted on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Data Sharing & Disclosure

au777 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your personal data may be shared with carefully selected third parties only in the circumstances described below:

• Payment service providers: To process your deposits and withdrawals, au777 shares the minimum necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, and card-processing partners. These providers are contractually bound to process your data only for the purpose of completing your transaction and in compliance with applicable data protection standards.
• Game software providers: au777's casino games are supplied by licensed third-party developers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. To facilitate gameplay, basic session data (including your account identifier and bet amounts) is transmitted to the relevant game provider's servers. Game providers are not permitted to use this data for their own marketing purposes.
• Identity verification providers: To fulfil KYC and age verification requirements, au777 uses third-party identity verification service providers who process the identity documents you submit. These providers operate under strict data processing agreements and are not permitted to retain your documents beyond the period required to complete verification.
• Fraud prevention and security partners: au777 uses third-party fraud detection and cybersecurity services that analyse technical data (including IP addresses, device fingerprints, and login patterns) to identify and prevent unauthorised access, account takeover, and fraudulent transactions.
• Legal and regulatory authorities: au777 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and not beyond what is legally compelled.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of au777's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

All third-party service providers with whom au777 shares personal data are subject to written data processing agreements that impose obligations consistent with the principles of this Privacy Policy, including restrictions on further disclosure and requirements to implement appropriate technical and organisational security measures.

5 Cookies & Tracking Technologies

au777 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to ensure the platform functions correctly, remember your preferences, maintain your login session, and collect aggregate analytics data. The following categories of cookies are used on the au777 platform:

To manage or disable non-essential cookies, you can adjust the cookie settings in your browser. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent the au777 platform from functioning correctly and may prevent you from accessing your account.

6 Data Retention

au777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention periods apply to the main categories of personal data held by au777:

• Account and identity data: Retained for the full duration of your active account and for a minimum period of five (5) years following the date of permanent account closure. This retention period reflects standard record-keeping obligations applicable to online gaming and financial services.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with anti-money laundering record-keeping requirements. Certain high-value or flagged transactions may be retained for longer periods where required by a regulatory authority.
• Identity verification documents: Scanned copies of government-issued identification, proof of address, and payment method verification documents are retained for five (5) years from the date of verification completion or account closure, whichever is later.
• Gameplay records: Individual gameplay session records, wager histories, and responsible gaming interaction logs are retained for five (5) years from the date of each record's creation.
• Customer support records: Support interaction transcripts and email correspondence are retained for three (3) years from the date of the interaction, or for the duration of any ongoing dispute or legal proceedings, whichever is longer.
• Marketing preference records: Records of your marketing consent status and opt-in/opt-out history are retained for the full duration of your active account and for three (3) years following account closure, to demonstrate compliance with consent obligations.
• Cookie and usage data: Aggregated and anonymised analytics data may be retained indefinitely. Individual-level technical data (such as IP address logs) is retained for a maximum of twelve (12) months.

Upon expiry of the applicable retention period, au777 will securely delete or irreversibly anonymise your personal data. Where anonymisation is technically more appropriate than deletion (for example, to preserve aggregate statistical records), the anonymised data will no longer be capable of identifying you and is therefore no longer personal data for the purposes of this policy.

7 Your Privacy Rights

As a registered au777 player, you hold a number of rights with respect to the personal data au777 holds about you. These rights are set out below, together with guidance on how to exercise them:

To exercise any of your privacy rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Privacy Rights Request". Please include your registered account username and email address so we can verify your identity before processing your request. au777 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be informed of any such extension.

8 Data Security

au777 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and au777's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. This ensures that your login credentials, payment information, and personal data cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal data stored on au777's servers — including identity verification documents and financial data — is encrypted at rest using strong encryption algorithms. Database access is restricted to authorised personnel only.
• Access controls: au777 employs strict role-based access controls to ensure that only authorised employees and contractors with a legitimate business need can access personal data. Access rights are reviewed regularly and revoked promptly upon termination of employment or contract.
• Two-factor authentication: Two-factor authentication via SMS one-time password (OTP) is available to all registered au777 players and is strongly recommended. au777 staff accounts that have access to personal data are required to use multi-factor authentication.
• Regular security audits: au777's platform undergoes periodic security assessments, penetration testing, and vulnerability scanning conducted by qualified cybersecurity professionals. Identified vulnerabilities are remediated on a priority basis.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, au777 will take immediate containment measures and notify affected players without undue delay, providing clear information about the nature of the breach and the steps you should take to protect yourself.

While au777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You play an important role in protecting your own data — please choose a strong, unique password for your au777 account, enable two-factor authentication, and contact us immediately at [email protected] if you suspect unauthorised access to your account.

9 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or au777's handling of your personal data, please contact our Data Protection Officer using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

au777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email and display a prominent notice on the platform for a minimum of 30 days. Your continued use of the au777 platform after notification of a material change constitutes your acknowledgement of the updated policy. The effective date at the top of this document indicates when the current version was last revised. We encourage you to review this policy periodically to stay informed about how au777 protects your personal data.