Privacy Policy — How gb777 Protects Your Data

1 Who We Are

gb777 ("we", "us", "our", "the Platform") operates the online casino and sports betting website accessible at gb777.io. gb777 is committed to protecting the personal information of all registered players and website visitors in accordance with recognised data protection principles and applicable privacy law.

For the purposes of this Privacy Policy, gb777 acts as the data controller — meaning we determine the purposes and means by which your personal information is collected and processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors operating under our instructions and bound by contractual data protection requirements.

If you have any questions about how gb777 handles your personal information, you may contact our privacy team at any time. Contact details are provided in Section 14 of this Policy.

2 Information We Collect

gb777 collects personal information from players in several ways: information you provide directly during registration and account management; information generated automatically through your use of the platform; and information received from third parties involved in delivering our services.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number registered in Bangladesh, and residential address.
• Identity verification (KYC) documents: Copies of government-issued photo identification (National ID card, passport, or driving licence) and proof of address (utility bill, bank statement, or official correspondence).
• Payment information: Details of the payment method used for deposits and withdrawals, including mobile financial service account identifiers (bKash, Nagad, Rocket, Upay) or bank account details. Note: gb777 does not store full card numbers — card payments are processed through our PCI-DSS compliant payment partners.
• Support communications: Records of any communications you initiate with gb777's customer support team, including live chat transcripts, email correspondence, and submitted complaint or dispute records.
• Responsible gaming declarations: Any self-imposed limits, cooling-off requests, or self-exclusion applications you submit through your account settings.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, time spent on each page, clickstream data, game sessions played, bet history, deposit and withdrawal records, and session duration.
• Geolocation data: Approximate location derived from your IP address, used to verify geographic eligibility and detect access from restricted jurisdictions.
• Cookies and tracking technologies: Session cookies, persistent cookies, and similar technologies as described in Section 5 of this Policy.

2.3 Information Received from Third Parties

• Identity verification providers: Results of automated identity and document verification checks performed by our KYC partners.
• Payment service providers: Transaction status confirmations, fraud screening results, and payment method ownership verification data from bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud prevention services: Risk scores and flagging data from third-party fraud detection platforms used to protect the platform and its players.

3 How We Use Your Information

gb777 uses the personal information we collect for the following purposes. Each purpose is tied to a specific legal basis as described in Section 4.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to all gb777 services.
• Transaction processing: To process deposits and withdrawals via your chosen payment method, reconcile transaction records, and detect and prevent payment fraud.
• Identity and age verification: To confirm that you are who you say you are, that you are aged 21 or above, and that you are eligible to use our platform from your jurisdiction.
• Responsible gaming monitoring: To monitor your gameplay patterns for indicators of problem gambling behaviour, enforce any limits you have self-imposed, and intervene proactively where our responsible gaming obligations require it.
• Customer support: To respond to your queries, complaints, and requests; to investigate disputes; and to maintain a record of all support interactions for quality and compliance purposes.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, fraud prevention regulations, and any lawful requests from competent authorities.
• Platform security: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Service improvement: To analyse aggregated usage data, identify platform performance issues, develop new features, and improve the overall player experience on gb777.
• Marketing communications: To send you promotional offers, bonus notifications, and platform news — but only where you have given explicit consent or where we have a legitimate interest, and always subject to your right to opt out at any time.

4 Legal Basis for Processing

gb777 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions you accepted at registration — including account management, transaction processing, and identity verification.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering record-keeping requirements, age verification obligations, and responses to lawful authority requests.
• Legitimate interests: Processing where gb777 has a genuine business interest that does not override your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement through aggregated analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily applicable to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies and Tracking Technologies

gb777 uses cookies and similar tracking technologies to operate our website effectively, remember your preferences, maintain your logged-in session, and gather analytics data that helps us improve the platform. By continuing to use gb777 after reviewing this Policy, you consent to our use of cookies as described below.

5.1 Types of Cookies We Use

• Essential cookies: Required for the website to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. The site cannot function properly without these cookies.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display settings to provide you with a more personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform — including pages visited, time spent, and navigation paths — to help us identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, account takeovers, and suspicious login behaviour. These cookies may persist beyond a single session.

5.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the gb777 platform — in particular, disabling essential cookies will prevent you from logging in or conducting transactions. Instructions for managing cookies are available in the help documentation of all major browsers.

6 Data Sharing and Third Parties

gb777 does not sell, rent, or trade your personal data to any third party for their own commercial gain. We share personal data only in the following limited and controlled circumstances:

6.1 Service Providers and Data Processors

We engage carefully selected third-party companies to perform services on our behalf. These providers act as data processors and are contractually bound to process your data only on our instructions and in accordance with this Privacy Policy. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, banking institutions, Visa/Mastercard processing networks)
• Identity and age verification (KYC) service providers
• Fraud detection and anti-money laundering screening platforms
• Game software providers (Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi, and others) — who may receive your player session data to facilitate gameplay
• Customer support platform operators (live chat and ticketing system providers)
• Website analytics and performance monitoring services
• Cloud hosting and data storage infrastructure providers

6.2 Legal and Regulatory Disclosures

gb777 may disclose your personal information to law enforcement agencies, regulatory authorities, courts, or other government bodies where we are legally required to do so, or where disclosure is necessary to protect the safety of our players, prevent fraud, or enforce our Terms and Conditions.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gb777's business, personal data held by gb777 may be transferred to the acquiring or successor entity as part of the business assets. You will be notified of any such transfer that materially affects how your personal data is used.

7 Data Retention

gb777 retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data may be retained indefinitely for analytical purposes.

8 Security Measures

gb777 takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards to protect it against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption: All data in transit between your device and gb777's servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. gb777 staff and service provider personnel are granted data access only to the extent required for their specific role.
• Two-factor authentication: Player accounts benefit from optional two-factor authentication (2FA) to provide an additional layer of protection against unauthorised login attempts.
• Regular security testing: gb777's platform undergoes regular penetration testing and vulnerability assessments conducted by qualified information security professionals.
• Incident response: gb777 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, you will be notified without undue delay where required by applicable law.

9 Your Data Rights

As a registered gb777 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our privacy team using the details in Section 14. We will respond to all valid requests within 30 days.

• Right of access: You have the right to request a copy of all personal data that gb777 holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to overriding legal retention obligations — for example, we are legally required to retain AML records for five years and cannot delete them upon request.
• Right to restrict processing: You may ask gb777 to restrict (pause) the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including any profiling carried out for fraud prevention or responsible gaming monitoring purposes. gb777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (primarily marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal can be done via the unsubscribe link in any marketing email or by contacting support.

10 Children and Underage Users

gb777 is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal information from individuals under the age of 21. Our registration process includes date-of-birth verification and KYC document checks specifically designed to prevent underage individuals from accessing our platform.

If gb777 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated data will be reviewed, and the account will be permanently closed. Any funds held in the account will be returned to the original deposit source after verification.

11 Marketing Communications

gb777 may send you promotional communications including bonus offers, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season campaigns), and platform news. We will only send you marketing communications where:

• You have explicitly consented to receiving them during registration or account management, or
• You have an existing player relationship with gb777 and we have a legitimate interest in informing you of offers that may be relevant to you, subject always to your right to opt out.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from gb777
• Updating your communication preferences in your account settings
• Contacting our support team at [email protected] and requesting removal from all marketing lists

Opting out of marketing communications does not affect transactional communications — you will continue to receive important account-related messages such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts regardless of your marketing preferences.

12 International Data Transfers

gb777's platform and services involve the use of third-party service providers who may process personal data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, gb777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards for international transfers include contractual data protection clauses (Standard Contractual Clauses or equivalent instruments) included in all agreements with third-party processors located outside Bangladesh, adequacy assessments of the data protection standards in the receiving jurisdiction, and technical safeguards including encryption and access controls applied irrespective of where data is stored or processed.

If you would like further information about the specific international transfers that apply to your personal data and the safeguards in place, please contact our privacy team using the details in Section 14.

13 Changes to This Policy

gb777 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — changes that affect your rights or how we handle your data in a meaningful way — we will notify registered players via the email address on file prior to the changes taking effect. Minor clarifications or formatting corrections may be made without individual notification, though the updated Policy will always be published on this page with the revised effective date.

Your continued use of gb777 following notification of a material change constitutes acceptance of the updated Privacy Policy. If you do not agree with a change, you have the right to close your account before the change takes effect by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb777 handles your personal data, please contact our privacy and data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Rights Request" in the subject line of your email so we can route it to the correct team promptly.
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.
• Language: English.