Privacy Policy — How i77 Protects Your Personal Data

1.1 Information You Provide Directly

When you create an i77 account, use our services, or contact our support team, you provide us with information that may include:

• Identity information: Full legal name, date of birth, gender, and nationality.
• Contact information: Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other locations in Bangladesh), email address, and mobile phone number.
• Account credentials: Your chosen username and a hashed version of your password (we never store passwords in plain text).
• Identity verification documents: Copies of government-issued identification documents (such as your National ID card or passport) and proof of address documents submitted during the Know Your Customer (KYC) verification process.
• Payment information: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), card details (Visa, Mastercard) processed securely via our payment partners, and transaction history on your i77 account.
• Communications: Messages exchanged with our customer support team via live chat or email, including any attachments or documents you share with us.
• Responsible gaming preferences: Self-exclusion settings, deposit limits, session time limits, and cool-off periods that you configure through your account settings.

1.2 Information Collected Automatically

When you access and use the i77 platform, certain technical and behavioural data is collected automatically by our systems:

• Device and connection data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, and screen resolution.
• Usage data: Pages visited on i77, games played, bets placed, time spent in sessions, click patterns, and navigation paths through the site.
• Session data: Login timestamps, session duration, logout events, and geographic region inferred from your IP address.
• Cookies and local storage: As described in Section 4 of this policy.

1.3 Information from Third Parties

i77 may receive information about you from trusted third-party sources where this is necessary to operate our services safely and in compliance with applicable laws:

• Payment providers: Transaction confirmation data, payment method ownership verification, and fraud flag data from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners.
• Identity verification services: Results of document authenticity checks and liveness verification from third-party KYC providers engaged by i77.
• Fraud prevention partners: Risk scores and flagged indicators from industry fraud detection networks that i77 subscribes to.

i77 uses the personal data we collect for the following specific purposes. We process your data only where we have a lawful basis to do so — either because the processing is necessary to fulfil our contract with you, because we are legally required to do so, because we have a legitimate interest that is not outweighed by your rights, or because you have given explicit consent.

i77 does not use automated decision-making processes that produce legal or similarly significant effects on players without human oversight. Where automated systems are used for fraud detection or responsible gaming monitoring, flagged accounts are reviewed by a member of our compliance team before any consequential action is taken.

If you have opted in to receiving promotional communications from i77, you may withdraw that consent at any time by contacting our support team at [email protected] or by using the unsubscribe option included in any marketing email. Withdrawing consent for marketing communications will not affect your ability to use any i77 service.

i77 may share your personal data with the following categories of third parties where strictly necessary:

3.1 Payment Processing Partners

To process deposits and withdrawals on your i77 account, we share the minimum necessary transaction and identification data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and our card payment gateway for Visa and Mastercard transactions. These partners are contractually obligated to handle your data securely and to use it only for the purpose of processing the specific transaction.

3.2 Identity Verification Providers

When we require you to complete KYC verification, your submitted identity documents and personal details are shared with our third-party identity verification provider. This provider performs document authenticity checks and liveness verification on our behalf. They are bound by strict data processing agreements and are not permitted to use your data for any purpose other than completing the verification requested by i77.

3.3 Game Providers

The casino and sports betting products available on i77 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. A pseudonymous player identifier (not your full name or contact details) is shared with these providers to facilitate game session management, bet settlement, and technical support. These providers operate under their own data protection policies and are required to maintain adequate security standards as a condition of their integration with i77.

3.4 Legal and Regulatory Disclosure

i77 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally compelled to do so by a valid court order, statutory obligation, or regulatory requirement. In such cases, we will disclose only the specific data requested and will notify you of the disclosure where we are legally permitted to do so.

3.5 Fraud Prevention and Industry Networks

To protect the integrity of the i77 platform and the wider online gambling ecosystem, i77 participates in industry fraud prevention networks. Certain anonymised or pseudonymised indicators of fraudulent behaviour may be shared with these networks to help identify and prevent fraud across participating platforms. No data shared in this context can be used to identify you directly.

i77 uses cookies and similar browser-based storage technologies on our platform. A cookie is a small text file placed on your device by a website you visit. Cookies serve a range of functions, from keeping you logged in to your account to helping us understand how players navigate our site so we can improve it.

i77 does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on the i77 platform that would track your activity across other websites.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential or fraud-prevention cookies may prevent certain features of the i77 platform from functioning correctly, including account login and game session management. Instructions for managing cookies are available in the help documentation of all major browsers.

In addition to cookies, i77 may use local storage and session storage in your browser to maintain game state and session data temporarily. This data is automatically cleared when you close your browser session and is not transmitted to external parties.

i77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account being open and active on i77.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents (KYC): Retained for a minimum of five (5) years following account closure or the last date of activity, as required by anti-money laundering regulations.
• Customer support communications: Retained for three (3) years from the date of the last communication, to allow resolution of any disputes or follow-up queries.
• Anonymised analytics data: Retained indefinitely in anonymised form, as it cannot be linked back to any individual player.
• Self-exclusion records: Retained indefinitely to prevent excluded players from re-registering, unless the exclusion was set for a fixed term and that term has expired.

When your personal data is no longer required, i77 will delete it securely or anonymise it so that it can no longer be associated with you as an individual. If you request deletion of your data while a legal retention obligation applies, we will restrict processing of your data to only those purposes required by law until the retention period expires, at which point it will be deleted.

i77 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and i77 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way cryptographic hashing algorithm before storage.
• Access controls: Access to systems containing personal data is restricted to authorised i77 personnel on a strict need-to-know basis. All access is logged and regularly audited.
• Database encryption: Sensitive fields in our databases (including payment identifiers and identity document data) are encrypted at rest.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection systems that alert our security team to anomalous activity in real time.
• Regular security reviews: Our technical security posture is reviewed periodically to identify and remediate vulnerabilities before they can be exploited.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, i77 will notify affected individuals without undue delay and will take all practicable steps to contain and remediate the breach. We will also notify relevant authorities as required by applicable law.

As an i77 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and we will respond within a reasonable timeframe, typically within 30 days.

• Right of access: You have the right to request a copy of the personal data i77 holds about you and to receive information about how it is being processed. We will provide this in a commonly used, machine-readable format upon request.
• Right to rectification: If any personal data i77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed promptly. You can update many of your details directly through your account profile.
• Right to erasure: You may request that i77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to our legal data retention obligations, which may require us to retain certain data for a minimum period.
• Right to restriction of processing: In certain circumstances, you may request that i77 restrict the processing of your personal data — for example, while a dispute over the accuracy of data is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on i77's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

i77 will not discriminate against you in any way for exercising your privacy rights. Exercising any of the rights listed above will not affect your ability to use any i77 service, provided your account remains open and in good standing.

i77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will update the "Effective" date shown at the top of this page and, where the changes significantly affect your rights or how we use your data, we will notify you directly via email or through a prominent notice on the i77 platform.

We encourage you to review this Privacy Policy periodically to stay informed about how i77 is protecting your personal data. Your continued use of the i77 platform after any amendment to this policy constitutes your acknowledgment of the updated version.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data i77 holds about you, please contact our Data Protection team using the details below:

• Email: [email protected] (please use the subject line "Privacy Enquiry")
• Live Chat: Available 24/7 on the i77 platform
• Response time: We aim to respond to all privacy-related enquiries within 2–4 business days

This Privacy Policy was last reviewed and updated in January 2026. It applies to all personal data collected by i77 from players in Bangladesh and any other jurisdiction from which the i77 platform is accessed.