Privacy Policy

77apc ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who accesses or uses the services available at https://77apc.io. This Privacy Policy ("Policy") sets out in plain, transparent terms exactly what personal data we collect, the purposes for which we use it, the circumstances under which it may be shared with third parties, and the rights you hold with respect to your own data.

This Policy applies to all users of the 77apc platform, including registered account holders, visitors browsing the site without an account, and any person who interacts with 77apc's customer support channels. By registering an account or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

We reserve the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, a notice will be displayed on the platform. The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the platform following any update constitutes acceptance of the revised Policy.

77apc collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party service providers where this is necessary to fulfil our legal and operational obligations. The categories of data we collect are summarised in the table below.

We do not knowingly collect sensitive personal data beyond what is required for identity verification and AML compliance (e.g., government-issued ID). We do not collect biometric data, health data, or political opinions.

77apc uses your personal data for the following purposes. We process data only to the extent necessary to fulfil each stated purpose and do not use data for any purpose that is incompatible with those listed below.

• Account Registration & Management: To create, maintain, verify, and administer your 77apc player account, including processing logins, managing your balance, and applying responsible gaming restrictions you have set.
• Transaction Processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions associated with your account.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the 21+ age requirement, and that you are permitted to use the platform under applicable law. KYC checks are carried out by us directly or through trusted third-party identity verification providers.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns for signs of money laundering, fraud, or terrorist financing, and to report suspicious activity to relevant authorities as required by law.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with account, payment, or game-related matters via live chat or email.
• Platform Security & Fraud Prevention: To detect and prevent fraudulent activity, account compromise, prohibited conduct (as defined in the Terms & Conditions), and abuse of the platform's promotional offers.
• Service Improvement: To analyse aggregated, anonymised usage data to understand how players use the platform, identify areas for improvement, and develop new features and products.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails, platform notifications, and personalised offers relating to 77apc products and services. You may withdraw this consent at any time.
• Legal Obligations: To comply with any legal obligation, court order, regulatory requirement, or lawful request from a competent authority that requires us to process, retain, or disclose your personal data.

77apc processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and 77apc — specifically, to provide the betting and gaming services you have registered to use. Without this processing, 77apc cannot operate your account or fulfil its service obligations.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and any legally mandated data disclosure to authorities.
• Legitimate Interests: Processing is necessary for the legitimate interests of 77apc, including platform security, fraud detection, responsible gaming monitoring, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

77apc does not sell, rent, or trade your personal data with unaffiliated third parties for their own commercial purposes. Your data may be shared with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive the minimum financial and identity data necessary to process your BDT deposit and withdrawal requests. These providers operate under their own privacy policies and are bound by their regulatory obligations as licensed mobile financial services providers in Bangladesh.
• KYC & Identity Verification Providers: Third-party identity verification specialists may receive copies of your identity documents and personal details to conduct age verification and document authenticity checks on our behalf. All such providers are contractually bound to process data only for the stated verification purpose.
• Game Studios & RNG Providers: Certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data to facilitate game delivery and fair-play certification. These studios do not receive your name, contact details, or financial data.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and DDoS protection providers may have access to technical data (such as IP addresses and server logs) in the course of providing infrastructure services to 77apc. All such providers are bound by strict data processing agreements.
• Legal & Regulatory Authorities: 77apc will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal obligation, court order, or lawful request. Such disclosures will be made to the minimum extent required.

77apc uses cookies and similar technologies (such as local storage tokens and session identifiers) on the platform. Cookies are small text files placed on your device that help the platform function correctly and improve your experience. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, preserve your account preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without disrupting your use of the platform.
• Functional Cookies: These cookies remember your settings and preferences (such as language selection or odds format) so you do not need to reset them each time you visit. They are not strictly necessary but improve your experience.
• Analytics Cookies: 77apc uses first-party analytics to understand aggregate platform usage — for example, which game categories are most popular, how long sessions last, and where users encounter friction. Analytics data is anonymised and aggregated; it is not used to identify individual players.

77apc does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place tracking cookies on the 77apc platform. You can control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies may prevent you from logging in or using core platform features.

77apc retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for as long as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being open and active on the platform, plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML compliance obligations.
• Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the date the document was submitted, whichever is later, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: All BDT deposit and withdrawal records are retained for a minimum of five (5) years following the date of the transaction.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years following the date of the communication, or until any associated complaint or legal matter is fully resolved, whichever is later.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the lifetime of your account plus two (2) years, to allow us to demonstrate compliance in the event of a complaint.
• Technical & Log Data: Server logs and technical data are retained for up to twelve (12) months, after which they are deleted or permanently anonymised.

When the applicable retention period expires, personal data is securely deleted or permanently anonymised in accordance with our internal data destruction procedures.

77apc implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. Key security measures in place include:

• Transport Encryption: All data in transit between your device and the 77apc servers is protected by 256-bit TLS/SSL encryption. The padlock icon in your browser confirms this connection is active during your session.
• Data at Rest Encryption: Sensitive data stored in 77apc databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the 77apc organisation is strictly controlled on a need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role. All access is logged and subject to periodic audit.
• Password Security: Account passwords are hashed using a one-way cryptographic algorithm. 77apc staff cannot see or recover your password. If you forget your password, you must use the account recovery process to set a new one.
• Intrusion Detection: 77apc employs automated intrusion detection and monitoring systems to identify and respond to suspicious activity targeting the platform's infrastructure in real time.
• Third-Party Security Audits: The platform's security posture is subject to periodic third-party penetration testing and vulnerability assessments to identify and remediate weaknesses before they can be exploited.

Despite our robust security measures, no internet-based system can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, 77apc will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

As a player on the 77apc platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or by email at [email protected]. We will respond to all verified data rights requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data that 77apc holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data 77apc holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Some updates (such as a legal name change) may require documentary evidence before they can be applied.
• Right to Erasure ("Right to be Forgotten"): You may request that 77apc delete your personal data. This right is not absolute — we are obliged to retain certain data for AML compliance, financial record-keeping, and other legal purposes for a defined period even after account closure. We will inform you of any data that cannot be erased and the reason why.
• Right to Restrict Processing: You may request that 77apc restrict the processing of your personal data in certain circumstances — for example, while you dispute the accuracy of data we hold, or while we are assessing a legitimate interests objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.

The 77apc platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. Registration is not permitted for minors, and 77apc employs age verification procedures as part of the KYC process to enforce this restriction.

If 77apc discovers or is notified that an account has been created by a person under the age of 21, the account will be immediately suspended, all personal data associated with that account will be securely deleted (subject to any legal retention obligation), and the matter will be handled in accordance with applicable law.

If you believe that a minor has registered on the 77apc platform, please contact us immediately at [email protected] so that we can take prompt action.

77apc primarily serves players located in Bangladesh, and personal data is processed by our core infrastructure within secure data centre environments. Some of our trusted third-party service providers — including certified game studios such as Pragmatic Play, Evolution Gaming, and NetEnt, as well as cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, 77apc ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. Safeguards used include:

• Contractual data processing agreements that impose binding data protection obligations on the recipient.
• Transfer only to recipients whose jurisdictions or internal standards provide a comparable level of data protection.
• Minimisation of data transferred to the bare minimum required to deliver the contracted service.

By using the 77apc platform, you acknowledge that your data may be transferred to and processed in these jurisdictions for the purposes described in this Policy.

77apc reserves the right to update or amend this Privacy Policy at any time. When we make changes, the revised Policy will be published on this page with an updated "Last Updated" date at the top of the document. Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — we will provide a more prominent notice on the platform, such as a notification on your account dashboard upon your next login.

Your continued use of the 77apc platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact support to request account closure. We recommend that you review this Policy periodically to stay informed about how we handle your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way 77apc handles your personal data, please get in touch through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the 77apc platform. Live chat is the fastest way to reach the support team for all account and data-related enquiries.
• Email: [email protected] — For formal data rights requests, written complaints, or any matter where you need a documented response. Please allow up to 24 hours for an initial acknowledgement and up to 10 business days (Bangladesh Standard Time, UTC+6) for full resolution.

When submitting a data rights request, please include your registered account username and the email address associated with your account. This allows us to verify your identity before processing the request and ensures we are acting on a genuine instruction from the account holder.