ad77a Privacy Policy
How We Handle Your Data

01 Introduction

ad77a ("we", "us", "our") is the operator of the online gaming platform accessible at https://ad77a.io, offering casino games, sports betting, and related services to players in Bangladesh and other eligible jurisdictions. We are committed to protecting the personal data of all individuals who interact with our platform.

This Privacy Policy applies to all personal data collected through the ad77a website, mobile browser experience, and any other digital touchpoint operated by ad77a. It covers data collected during account registration, ongoing platform use, customer support interactions, and any marketing communications you have opted into.

This policy is incorporated by reference into the ad77a Terms & Conditions. By accepting those Terms, you also accept this Privacy Policy. Where this policy refers to "personal data", we mean any information that can identify you as an individual, either on its own or in combination with other information we hold.

02 Data We Collect

ad77a collects personal data in the following categories, depending on how you interact with the platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification by a regulated third-party KYC provider involves document image processing. In such cases, the document images are processed solely for verification purposes and are not retained beyond the verification period.

03 How We Use Your Data

Personal data collected by ad77a is used exclusively for the following purposes:

• Account management: Creating, maintaining, and administering your player account, including processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay.
• Identity verification (KYC): Confirming your identity, age (21+), and eligibility to use the platform in accordance with our Terms & Conditions and applicable legal obligations.
• Service delivery: Providing access to casino games, sports betting markets, live dealer tables, and all other platform features.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account sharing, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify problem gambling indicators and enforcing any self-exclusion or deposit limits set by you or required by applicable guidelines.
• Customer support: Responding to your queries, complaints, and support tickets promptly and effectively via live chat or email.
• Promotions and bonuses: Administering welcome bonuses, reload offers, cashback promotions, and tournament prizes, where you have not opted out of promotional communications.
• Legal compliance: Meeting our obligations under applicable anti-money laundering regulations, responding to lawful requests from competent authorities, and maintaining records as required by law.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and game offering of the platform. Individual player profiles are not used for this purpose without your consent.

04 Legal Basis for Processing

ad77a processes personal data under the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account creation, game provision, and payment processing — is carried out on the basis that it is necessary to perform the contract between us.
• Legal obligation: Certain processing activities — including identity verification, transaction record-keeping, and reporting of suspicious activity — are required by applicable law and are carried out on that basis regardless of your consent.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and anonymised analytics is carried out on the basis of ad77a's legitimate interest in operating a safe, fair, and compliant platform. Such processing is always balanced against your rights and interests.
• Consent: Processing for optional marketing communications (promotional emails, bonus notifications) is carried out only where you have given clear, informed, and freely given consent. You may withdraw this consent at any time via your account settings or by contacting support.

05 Data Sharing

ad77a does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Where KYC document verification is required, your identity documents may be processed by a regulated third-party verification service. These providers are contractually bound to process data solely for verification purposes.
• Game providers: Providers including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming may receive an anonymised player identifier and session token to facilitate game delivery. They do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law or where we are legally compelled to do so by a valid court order or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ad77a business, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections being maintained.

All third-party service providers who process personal data on our behalf are bound by written data processing agreements that require them to implement appropriate security measures and to process data only on documented instructions from ad77a.

06 Cookies & Tracking Technologies

ad77a uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No personal data is shared with third parties through these cookies.
• Functional cookies: These remember your preferences such as language, game lobby filters, and table layout choices. They improve your experience but are not required for core platform functions. You may disable them in your browser settings, though some features may not work as expected.
• Analytics cookies: We use anonymised analytics data to understand how players navigate the platform, which games are most popular, and where users encounter friction. This data is aggregated and does not identify individual players.
• Security cookies: These help detect and prevent fraudulent activity, account takeovers, and bot traffic. They are considered strictly necessary and cannot be disabled.

ad77a does not use third-party advertising or cross-site tracking cookies. You can manage cookie preferences via your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to your account.

07 Data Retention

ad77a retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

08 Data Security

ad77a takes data security seriously and implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security architecture includes:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for all sensitive data fields stored at rest, including passwords (stored as salted hashes only — never in plain text), payment account references, and identity document metadata.
• Role-based access controls ensuring that only authorised personnel with a documented operational need may access personal data.
• Regular third-party penetration testing and security auditing of the platform infrastructure.
• 24/7 automated intrusion detection and anomaly monitoring with human escalation protocols.
• Segregated player fund accounts ensuring that your deposited BDT balance is held separately from ad77a operating funds.

While we implement industry-standard security measures, no online platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong password, not sharing your login credentials with anyone, and notifying us immediately at [email protected] if you suspect unauthorised access to your account.

09 Your Rights

As a player on the ad77a platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all data rights requests within 30 days.

• Right of access: You may request a copy of all personal data that ad77a holds about you, free of charge, once per 12-month period. Additional requests within the same period may be subject to a reasonable administrative fee.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Please note that correcting identity data may require re-verification of your account.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data. This right is not absolute — we may be required by law to retain certain data (such as transaction records) for a defined period even after account closure.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of your data or object to a particular use — you may request that we limit how we process your data while the matter is resolved.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), applicable to data processed on the basis of contract or consent.
• Right to object: You may object at any time to processing carried out on the basis of legitimate interests. You may also withdraw consent for marketing communications at any time via your account settings.

10 Children & Minors

The ad77a platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. All account registrations require confirmation that the applicant is at least 21 years old, and identity verification is conducted on all accounts before withdrawal privileges are granted.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the account, investigate the matter, and permanently delete the associated personal data from our systems. Any winnings accumulated on an underage account will be forfeited in full.

If you are a parent or guardian and believe that a minor in your care has registered on the ad77a platform, please contact us immediately at [email protected] so that we can take prompt action.

11 International Data Transfers

ad77a's primary server infrastructure is located in data centres that maintain high standards of physical and digital security. Where data is processed by third-party service providers whose systems are located outside Bangladesh, ad77a ensures that appropriate safeguards are in place prior to any such transfer.

Safeguards used for international transfers include contractual data processing agreements with standard data protection clauses, requiring recipient organisations to apply data protection standards no less stringent than those described in this Privacy Policy.

Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming may process anonymised session data on servers in their respective hosting jurisdictions. As noted in Section 5, these providers receive only an anonymised player identifier and do not receive personally identifiable information.

12 Policy Updates

ad77a reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. The "Last Updated" date at the top of this document will be revised whenever a new version takes effect.

Where changes are material — meaning they meaningfully affect your privacy rights or how we process your personal data — we will notify you by email to your registered address at least 14 days before the new version takes effect, and will display a prominent notice on the platform. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of the policy), the updated policy will take effect immediately upon publication without advance notice.

Archived versions of this Privacy Policy are available on request by contacting the support team. Your continued use of the platform after the effective date of any update constitutes your acknowledgement of the revised policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please reach out to the ad77a team using the details below. All privacy-related requests and queries are treated with strict confidentiality.

• Email: [email protected]
• Live Chat: Available 24/7 from your account dashboard — average response time under 3 minutes
• Response Time for Data Rights Requests: Within 30 days of receipt
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered username and a brief description of your request to help us locate and process your data efficiently. For account deletion requests, please also confirm your registered bKash or Nagad number so we can process any outstanding balance before closure.