da777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

da777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all players who use the da777 online betting and casino platform. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, stored, and used by da777.

We recognise that privacy is a fundamental right and take our responsibility as a data handler seriously. This Policy has been written in plain, formal English to ensure that players across Bangladesh — our primary market — can clearly understand how their data is managed. We encourage you to read this Policy carefully before using the da777 platform and to contact us at any time if you have questions or concerns regarding our data practices.

da777 operates the platform at da777.io and is the data controller responsible for your personal data as described in this Policy. Where da777 engages third-party processors to handle data on its behalf — such as payment partners including bKash, Nagad, Rocket, and Upay, or identity verification services — da777 remains accountable for ensuring that your data is handled appropriately by those parties.

This Policy is effective from January 2026 and supersedes all prior versions of the da777 Privacy Policy. The current version number is displayed at the top of this document. Material changes to this Policy will be communicated to registered players as described in Section 12.

da777 collects the following categories of personal data from players in the course of providing the da777 betting and casino platform:

2.1 Registration and Identity Data

When you create a da777 account, we collect: your full legal name, date of birth, gender, residential address (including district, division, and postal code), mobile phone number, and email address. This data is essential for creating and maintaining your account and for verifying your identity in line with our Know Your Customer (KYC) requirements.

2.2 Identity Verification Documents

To complete the KYC verification process, da777 may request copies of government-issued identity documents, including: National Identity Card (NID), passport, or driver's licence. We may also request a recent utility bill or bank statement as proof of address, and in some cases, a photograph or selfie to confirm that the identity document belongs to the account holder.

2.3 Financial Data

When you make deposits or request withdrawals, da777 collects payment method information. This may include: mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard). Full card numbers and mobile banking PINs are never stored by da777 — payment processing is handled via secure, encrypted third-party payment gateways.

2.4 Transaction and Betting History

da777 records all financial transactions associated with your account, including deposits, withdrawals, bets placed, games played, winnings, and bonus transactions. This data forms part of your permanent account record and is retained for fraud prevention, dispute resolution, and regulatory compliance purposes.

2.5 Technical and Usage Data

When you access the da777 platform, we automatically collect certain technical data, including: your IP address, browser type and version, operating system, device type and identifiers, referring URLs, pages visited on da777.io, session duration, and click/interaction patterns. This data is used for security monitoring, fraud detection, platform optimisation, and responsible gaming monitoring.

2.6 Communications Data

If you contact da777 customer support, we retain records of those communications, including the content of messages, the date and time of contact, the support channel used (live chat, email, phone), and the resolution of your query. These records are used for quality assurance, dispute resolution, and staff training purposes.

2.7 Marketing Preferences

Where you have opted in to receive marketing communications from da777, we record your consent along with the date and method of consent, your communication preferences (e.g., email, SMS), and any subsequent changes to those preferences.

da777 collects personal data through the following channels and methods:

• Direct submission by you: Data you enter when registering for a da777 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection during platform use: Technical and usage data collected automatically through cookies, log files, and similar technologies when you browse or interact with da777.io. See Section 7 for full details on cookies and tracking technologies.
• Third-party payment providers: Confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners when a transaction is initiated or completed. da777 does not receive your full mobile banking PIN or full card number from these providers.
• Identity verification partners: Where da777 uses a third-party identity verification service to confirm the authenticity of documents submitted during KYC, that partner may share verification status and risk scoring data with da777.
• Fraud prevention and AML screening services: da777 may receive risk indicators or watchlist screening results from third-party fraud prevention or anti-money laundering (AML) compliance services in connection with your account activity.
• Publicly available sources: In certain circumstances, and only where lawful, da777 may supplement account data with information from publicly available sources — for example, to verify an address or to conduct enhanced due diligence on high-value accounts.

da777 processes your personal data only where a valid legal basis exists for doing so. The primary legal bases on which da777 relies are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and da777 — specifically, the provision of the betting and casino services described in our Terms & Conditions. This includes account creation, transaction processing, bet settlement, and customer support.
• Legal obligation: Processing that is required for da777 to comply with applicable legal obligations, including anti-money laundering (AML) regulations, financial record-keeping requirements, and obligations to cooperate with relevant regulatory or law enforcement authorities.
• Legitimate interests: Processing that is necessary for da777's legitimate business interests, provided that those interests are not overridden by your privacy rights. This includes fraud prevention and security monitoring, platform performance analytics, responsible gaming monitoring, and service improvement activities.
• Consent: Processing that is carried out on the basis of your freely given, specific, informed, and unambiguous consent — specifically, the sending of marketing communications. You may withdraw your consent to marketing at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

da777 uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and managing your da777 player account, including processing account updates, password resets, and profile changes.
• Service delivery: Enabling you to place bets, access live casino games — including Dragon Tiger, Color Prediction, slots, and cricket betting — and make deposits and withdrawals through supported payment channels.
• Identity verification (KYC): Verifying your identity, age, and residential address to comply with age-gating requirements (21+), anti-money laundering obligations, and fraud prevention policies.
• Transaction processing: Facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and banking partners, and maintaining accurate financial records of all account transactions.
• Fraud prevention and security: Monitoring account activity and transaction patterns to detect and prevent fraudulent behaviour, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming monitoring: Using betting history, session data, and account activity to identify potential indicators of problem gambling and to apply responsible gaming measures — such as deposit limits and self-exclusion — where appropriate or requested.
• Customer support: Responding to your enquiries, resolving disputes, and managing formal complaints submitted to the da777 support team.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with da777.io and to improve the platform's performance, usability, and content offerings.
• Legal compliance: Meeting our obligations under applicable law, including maintaining financial records, responding to lawful requests from regulatory or law enforcement authorities, and complying with AML screening requirements.
• Marketing communications (opt-in only): Sending promotional offers, bonus notifications, new game announcements, and platform updates to players who have explicitly opted in to receive such communications.

da777 does not sell or rent your personal data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for each stated purpose:

6.1 Payment Processors

To process deposits and withdrawals, da777 shares necessary transaction data with our supported payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These parties receive only the data necessary to process the specific transaction and are bound by strict data processing terms.

6.2 Identity Verification Services

To complete KYC verification, da777 may share identity document data and personal details with authorised identity verification partners. These partners process data exclusively for the purpose of confirming your identity and returning a verification result to da777. They do not retain your data for their own purposes.

6.3 Fraud Prevention and AML Services

da777 may share account and transaction data with third-party fraud prevention or AML compliance services to screen for suspicious activity. These services are bound by confidentiality obligations and may only use shared data for the purpose of fraud and AML screening on behalf of da777.

6.4 Legal and Regulatory Disclosure

da777 may disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by a binding court order, or where da777 believes in good faith that such disclosure is necessary to prevent serious harm, fraud, or criminal activity.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving da777, player personal data may be transferred to the acquiring or successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

da777 uses cookies and similar tracking technologies on the da777.io website to deliver, secure, and improve our services. This section explains what cookies are, which types da777 uses, and how you can manage your cookie preferences.

7.1 What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognise your device on subsequent visits and to store certain preferences or session information. Cookies do not contain executable code and cannot access other files on your device.

7.2 Types of Cookies Used by da777

• Strictly necessary cookies: These cookies are essential for the da777 platform to function correctly. They enable core features such as user authentication, session management, and security. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences and settings — such as language selection and display options — to provide a more personalised experience when you return to da777.io.
• Analytics cookies: These cookies collect anonymised data about how visitors interact with da777.io, including pages visited, session duration, and navigation paths. This data is used to understand player behaviour and to improve the platform. Analytics data is aggregated and does not identify individual users.
• Security cookies: These cookies support da777's fraud detection and account security systems. They help identify unusual access patterns, multiple account activity, and potentially compromised sessions.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via their privacy or settings menus. Please note that disabling cookies may impair certain features of the da777 platform, including session persistence and personalisation features. da777 does not currently support a dedicated on-site cookie preference centre, but we will update this section if one is introduced in a future platform release.

da777 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: All personal data associated with an active da777 account is retained for the duration of the account's active status and for a defined period after account closure.
• Financial and transaction records: Transaction history, deposit and withdrawal records, and KYC documentation are retained for a minimum of five (5) years from the date of the relevant transaction or account closure, in line with standard financial record-keeping requirements and AML obligations.
• Communications and support records: Customer support communications are retained for a minimum of three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing data: Marketing consent records and communication preferences are retained for the duration of the marketing relationship and for a period of three (3) years following the withdrawal of marketing consent, to demonstrate compliance with consent obligations.
• Technical and log data: Server log files, IP address records, and session data are typically retained for up to twelve (12) months for security and fraud prevention purposes, unless a longer retention period is required in connection with an active investigation.

When data is no longer required for any lawful retention purpose, it is securely deleted or anonymised in accordance with da777's internal data disposal procedures.

da777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and da777.io is encrypted using industry-standard SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception during transmission.
• Encrypted data storage: Sensitive personal data — including identity documents and financial records — is stored in encrypted form in our secure data environment. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within the da777 organisation is strictly limited to staff members who require it for their specific job function, on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Account security features: da777 provides players with secure password hashing and encourages the use of strong, unique passwords. Players are responsible for maintaining the security of their own login credentials as set out in our Terms & Conditions.
• Regular security assessments: da777 conducts periodic reviews of our security systems and practices to identify and address potential vulnerabilities. Where third-party security specialists are engaged, they are bound by strict confidentiality terms.
• Incident response: In the event of a data security incident that may affect player personal data, da777 will take immediate containment action and, where required, notify affected players and relevant authorities within the timeframes required by applicable law.

While da777 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their da777 accounts and to contact support immediately if they suspect any unauthorised access to their account.

As a player on the da777 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact the da777 support team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data that da777 holds about you, along with information about how it is processed, stored, and shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by da777 be corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is found to be unlawful. This right is subject to da777's legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to restriction of processing: You have the right to request that da777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on da777's legitimate interests. da777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: Where you have consented to receiving marketing communications from da777, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of prior communications.

da777 will respond to all valid data rights requests within a reasonable timeframe. In certain cases — for example, where a request is complex or where da777 receives a large volume of concurrent requests — a response time of up to one calendar month may apply. If an extension is required, da777 will notify you within the initial response period and explain the reason for the delay.

The da777 platform is strictly intended for adults aged 21 and above. da777 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the da777 account registration process, and accounts found to belong to individuals under 21 will be permanently closed in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a person under the age of 21 has created a da777 account or submitted personal data to da777 without your knowledge, please contact us immediately at [email protected]. da777 will investigate all such reports promptly and will permanently close any underage account identified, along with securely deleting any personal data associated with it to the extent permitted by law.

da777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform services. The version number and effective date displayed at the top of this document will be updated whenever a new version is published.

Where changes to this Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — da777 will notify registered players by email or via a prominent notice on the da777.io platform at least fourteen (14) days before the changes take effect. Non-material amendments, such as corrections of typographical errors or clarifications that do not alter the substance of the Policy, may be made without advance notice.

Your continued use of the da777 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any changes to this Policy, you should cease using the da777 platform and contact [email protected] to request account closure.

All prior versions of this Privacy Policy are available upon request by contacting [email protected] with the subject line "Prior Privacy Policy Version Request". da777 maintains an archive of all historical versions of this document for transparency and accountability purposes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way da777 handles your personal data, please contact us using the following details:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy enquiries: "Privacy Policy Enquiry"
• Response time: da777 aims to respond to all privacy-related enquiries within 5 business days. Complex data rights requests may take up to 30 calendar days.

When contacting da777 regarding a data rights request, please include your registered account username or email address, a clear description of the right you wish to exercise or the nature of your enquiry, and any relevant supporting information. This will help us locate your records and respond to your request as quickly as possible.

da777 is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy enquiry or data rights request, you have the right to escalate your complaint through appropriate legal or regulatory channels available in your jurisdiction.