Privacy Policy

1. Introduction

777top ("we", "us", "our") operates the online casino and sports betting platform accessible at https://777top.bio. This Privacy Policy describes how 777top collects, processes, stores, and protects the personal information of players and visitors ("you", "your") who interact with our platform.

By registering an account on 777top, making a deposit, placing a bet, or otherwise accessing any service provided through our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Privacy Policy forms part of the 777top Terms & Conditions and should be read alongside that document.

777top is committed to handling personal data with the care, transparency, and security that players in Bangladesh have a right to expect from a responsible online gaming platform. We apply the same data protection standards that a modern fintech or digital financial services provider would apply — because we believe players deserve nothing less.

2. Personal Data We Collect

777top collects personal data in two broad categories: data you provide directly, and data we collect automatically during your use of the platform.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, phone number, and chosen username collected during account creation.
• Identity verification (KYC) data: Government-issued photo identification (such as a National ID card or passport), proof of address documents, and selfie photographs submitted during the Know Your Customer verification process.
• Payment information: Mobile banking account numbers for bKash, Nagad, Rocket, and Upay; card details for Visa and Mastercard transactions; bank account details for bank transfer transactions. Note: full card numbers are never stored on 777top servers — card transactions are processed by PCI-DSS-compliant payment processors.
• Communication data: Messages, emails, and live chat transcripts exchanged between you and the 777top support team.
• Responsible gaming preferences: Deposit limits, cooling-off periods, and self-exclusion requests you submit through the platform or via support.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and connection type.
• Usage data: Pages visited, games played, session duration, click patterns, betting history, deposit and withdrawal history, and login timestamps.
• Cookie data: Session identifiers, preference settings, and analytics tracking data collected via cookies and similar technologies. See Section 9 for full details.
• Geolocation data: Country and city-level location data inferred from your IP address, used to enforce geographic access restrictions and comply with applicable regulations.

3. How We Collect Your Data

777top collects personal data through the following channels:

• Directly from you when you complete the account registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or submit a responsible gaming request.
• Automatically via server logs, cookies, and analytics tools when you browse or interact with the 777top platform.
• From payment processing partners when a transaction is initiated or a payment method is verified.
• From identity verification service providers during the KYC process, where automated document and facial recognition tools are used to cross-reference submitted documents against public and commercial databases.
• From fraud prevention and anti-money laundering (AML) screening services that check account activity against watchlists and sanctions databases.

4. Purpose of Processing

777top processes personal data for the following specific purposes:

Purpose	Data Used
Account creation and management	Registration data, KYC documents
Processing deposits and withdrawals	Payment information, identity data
Identity and age verification (18+ compliance)	KYC documents, date of birth
Fraud prevention and AML compliance	Transaction history, IP address, device data
Customer support and dispute resolution	Communication data, account activity
Platform security and abuse prevention	Technical data, usage data, login history
Responsible gaming tools and interventions	Betting history, responsible gaming preferences
Personalisation and platform improvement	Usage data, game preferences
Marketing communications (where consent given)	Email address, phone number, game preferences
Legal and regulatory compliance	All categories as required

5. Legal Basis for Processing

777top processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted on registration — including account management, payment processing, and customer support.
• Legitimate interests: Processing necessary for fraud prevention, platform security, AML compliance, responsible gaming monitoring, and analytics used to improve platform quality — where these interests are not overridden by your fundamental privacy rights.
• Legal obligation: Processing required to comply with applicable law, including identity verification, record-keeping, and cooperation with lawful regulatory or law-enforcement requests.
• Consent: Processing for direct marketing communications, non-essential cookies, and personalised recommendations — carried out only where you have given clear, specific, and freely withdrawable consent. You may withdraw marketing consent at any time by contacting support.

6. Sharing Your Personal Data

777top does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, and bank transfer settlement partners receive only the payment and identity data strictly necessary to process your transaction.
• Identity verification providers: KYC and document verification service providers receive identity documents and biometric data solely for the purpose of completing the verification process.
• Fraud and AML screening services: Transaction monitoring and watchlist screening tools receive transaction data and account metadata to detect suspicious activity.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe receive anonymised or pseudonymised session identifiers required to deliver game content; they do not receive your full identity data.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law-enforcement authority, 777top will disclose personal data to the extent legally required.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of the 777top business, personal data held by 777top may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

7. Data Retention

777top retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention standards:

• Active account data: Retained for the duration of the account relationship plus a minimum of five years following account closure, to comply with AML record-keeping obligations.
• KYC documents: Retained for a minimum of five years after the date of submission or account closure, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for two years from the date of the last interaction, unless the communication relates to an open dispute or legal proceeding, in which case retention continues until the matter is fully resolved.
• Marketing consent records: Retained until consent is withdrawn, plus an additional one year to evidence the consent history.
• Cookie and analytics data: Anonymised analytics data retained for up to 26 months; session cookies expire at the end of the browser session; persistent cookies expire within 12 months unless renewed by platform interaction.

On expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8. Security Measures

777top employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption is applied to all data in transit between your device and 777top servers.
• Data at rest encryption protects databases and file storage systems containing personal and financial data.
• Access controls restrict internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Two-factor authentication (2FA) is required for all internal administrative access to production systems.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists to identify and remediate weaknesses before they can be exploited.
• Incident response procedures are in place to detect, contain, and notify affected parties of any data breach in a timely manner.

While 777top takes every reasonable precaution to secure your data, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

777top uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytics data that helps us improve the user experience. The following categories of cookies are used:

Cookie Type	Purpose	Duration
Strictly necessary	Session management, login authentication, security tokens	Session (deleted on browser close)
Functional	Language preferences, display settings, responsible gaming tool states	Up to 12 months
Analytics	Page visit counts, navigation paths, feature usage patterns — data is aggregated and anonymised	Up to 26 months
Marketing	Tracking campaign source, attributing registrations to promotional channels — only where consent is given	Up to 30 days

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage your preferences for functional, analytics, and marketing cookies by contacting 777top support. Please be aware that disabling certain cookies may limit the functionality available to you on the platform.

10. Your Data Rights

As a player on the 777top platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request. We will respond in writing within 30 days.

• Right of access: You may request a copy of all personal data we hold about you, along with information on how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records (see Section 7).
• Right to restriction: You may request that we limit the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: You may request a copy of the personal data you provided to us in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11. Minors and Age Verification

The 777top platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration and KYC process. Where 777top becomes aware that personal data has been collected from a person under 18, that data will be deleted promptly and the associated account will be closed.

If you are a parent or guardian and believe that a minor has created an account on 777top, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay. We take underage access extremely seriously and cooperate fully with any reasonable parental inquiry in this regard.

12. Third-Party Services and Links

The 777top platform may reference or interact with third-party services, including payment gateways, identity verification tools, and game content delivery networks operated by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Each of these third-party providers operates under its own privacy policy and data processing terms. 777top is not responsible for the privacy practices of these third-party providers, though we take reasonable steps to ensure that any provider with whom we share personal data offers an adequate level of data protection.

Where 777top enters into data processing agreements with third-party providers, those agreements include contractual obligations requiring the provider to process personal data only for the purposes specified by 777top, to apply appropriate security measures, and to delete data upon the termination of the service relationship.

13. International Data Transfers

777top's primary operations serve players in Bangladesh and data is processed within systems designed to serve that market. Where personal data is transferred to, or processed by, service providers operating in other jurisdictions — such as identity verification or fraud screening providers with global infrastructure — 777top takes steps to ensure that such transfers are made subject to appropriate safeguards, including standard contractual clauses or equivalent data transfer mechanisms that provide a level of protection comparable to that applied within Bangladesh.

By using the 777top platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh where data protection laws may differ. In all cases, 777top contractually requires receiving parties to maintain the data protection standards described in this Privacy Policy.

14. Amendments to This Privacy Policy

777top reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your information. Your continued use of the platform following the publication of any amendment constitutes acceptance of the revised Privacy Policy.

15. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 777top, please contact our support team using the details below:

• Email: [email protected]
• Support availability: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response time: Written data requests acknowledged within 5 business days; substantive response provided within 30 days

When submitting a data-related request, please include your registered username, a clear description of your request or concern, and a copy of the identification document used during KYC. This allows us to verify your identity before acting on any request and ensures your data is disclosed only to the rightful account holder.