it777 Privacy Policy

This Privacy Policy ("Policy") describes how it777 ("Company", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "your") who access or use the it777 website, mobile platform, and all associated services (collectively, the "Platform"). it777 is committed to handling your personal data responsibly and in accordance with applicable data protection standards. By registering an account or accessing the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected through your use of the Platform, regardless of the device used or the location from which the Platform is accessed. It should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are published on the Platform. Where this Policy uses the term "personal data", it refers to any information that identifies you or could be used to identify you, either directly or in combination with other information.

it777 collects personal data through a number of channels, including account registration, identity verification, payment processing, customer support interactions, and your activity on the Platform. The categories of data we collect, and the manner in which we collect them, are summarised in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where such information is voluntarily disclosed by you in the context of a responsible gaming support request, in which case it is used solely for the purpose of providing that support.

it777 uses the personal data we collect for specific, identified purposes only. We do not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected, except where you have given your consent to additional use or where we are required to do so by law. The principal purposes for which we use your personal data are as follows:

• Account creation and management: to register your account, verify your identity and age, maintain your account settings, and process your login requests.
• Service delivery: to process deposits and withdrawals, settle bets and gaming outcomes, and provide access to games, sports betting markets, and other Platform features.
• Legal and regulatory compliance: to fulfil our obligations under applicable law, including KYC requirements, anti-money-laundering obligations, and age verification requirements. Compliance data is retained for the periods required by applicable law.
• Customer support: to respond to your queries, complaints, and requests, to process self-exclusion and responsible gaming requests, and to maintain records of our support interactions for quality and compliance purposes.
• Security and fraud prevention: to monitor account activity for patterns consistent with fraud, money laundering, or abuse of the Platform; to investigate suspicious activity; and to take appropriate enforcement action where required.
• Platform improvement: to analyse aggregate, anonymised usage data to understand how our Platform is used, to identify technical issues, and to improve the user experience for all Bangladesh players.

Where it777 wishes to use your personal data for a purpose not listed above, we will seek your explicit consent before doing so and will provide you with clear information about the proposed use and your right to decline.

it777 processes your personal data only where it has a lawful basis for doing so. The lawful bases on which it777 relies are:

• Contract performance: processing that is necessary to enter into or perform the contract between you and it777, including registering your account, processing deposits and withdrawals, and settling gaming transactions.
• Legal obligation: processing that is necessary for it777 to comply with applicable legal requirements, including KYC identity verification, anti-money-laundering checks, and age verification.
• Legitimate interests: processing for purposes such as fraud prevention, Platform security, and aggregate analytics, where those interests are not overridden by your rights and interests.
• Consent: where it777 relies on your consent as the basis for processing, such as sending you marketing communications, you may withdraw that consent at any time by contacting customer support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

it777 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: it777 shares financial transaction data with bKash, Nagad, Rocket, and other payment processors solely to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are contractually required to use your data only for payment processing purposes.
• Game providers: it777 shares session and gameplay data with third-party game studios and providers (such as Pragmatic Play, Evolution Gaming, Spribe) to the extent necessary to deliver the relevant game and to maintain game integrity. Game providers do not receive your full personal profile.
• Law enforcement and regulatory authorities: it777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order. Where permitted, it777 will notify you of such a disclosure.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of it777's business assets, personal data held about Platform users may be transferred to the relevant successor entity. We will notify you of any such transfer and the successor's privacy commitments before it takes effect.

When you make a deposit or request a withdrawal on the it777 Platform, your financial transaction data is transmitted securely to our payment processing partners. it777 does not store full payment account credentials on its own servers. For bKash and Nagad transactions, it777 retains only the mobile number associated with the transaction and the transaction reference number, which are used for reconciliation, dispute resolution, and anti-money-laundering compliance purposes.

All financial data held by it777 is encrypted at rest and in transit. Access to financial data is restricted to authorised it777 personnel on a strict need-to-know basis. Transaction records are retained for the periods required by applicable financial crime prevention legislation and are not used for any purpose other than those described in this Policy.

it777 uses cookies and similar tracking technologies on the Platform to provide essential functionality, analyse Platform usage, and deliver relevant content. The categories of cookies and tracking technologies we use are described below:

You may control cookie settings through your browser. Disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling analytics or preference cookies will not affect your ability to use core Platform features.

it777 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable law. Our retention periods are guided by the following principles:

• Active account data: personal data associated with an active it777 account is retained for the duration of the account and for a period of five years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC documentation: identity verification documents submitted as part of the KYC process are retained for the period required by applicable financial crime prevention legislation, which is typically five years from the date of the last transaction on the account.
• Support records: customer support interaction records are retained for three years from the date of the interaction, to allow for complaint follow-up and quality review purposes.

When the applicable retention period expires, it777 will securely delete or anonymise the relevant personal data. Where anonymisation is used, the resulting anonymised data set is no longer personal data and may be retained indefinitely for statistical and analytical purposes.

As a user of the it777 Platform, you have rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified rights requests within 30 days of receipt. The rights available to you are:

it777 will not charge a fee for responding to a rights request unless the request is manifestly unfounded or excessive, in which case a reasonable fee reflecting administrative costs may be applied. Where it777 is unable to fulfil a rights request due to a conflicting legal obligation, we will inform you of the reason and of any alternative steps available to you.

it777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL / TLS encryption for all data transmitted between your device and the it777 Platform, ensuring that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Access controls restricting access to personal data systems to authorised personnel only, with role-based permissions and multi-factor authentication required for administrative access to sensitive data systems.
• Encryption at rest for sensitive personal data categories stored on it777 servers, including identity documents, financial records, and KYC materials.
• Regular security reviews and vulnerability assessments of our Platform infrastructure, conducted to identify and remediate potential weaknesses before they can be exploited.

While it777 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that is likely to result in a high risk to the rights and freedoms of affected individuals, it777 will notify affected users without undue delay and will take all necessary steps to contain and remediate the breach.

The it777 Platform is strictly intended for adults aged 21 and above. it777 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the account registration process, and it777 uses both automated and manual checks to prevent the registration of underage accounts.

If it777 discovers that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, the relevant account will be immediately closed and all associated personal data will be deleted from our systems. If you believe that a minor has registered an account on the Platform, please contact us at [email protected] immediately.

The it777 Platform may contain references to third-party services, including game providers and payment processors. This Policy applies only to data collected and processed by it777 directly. Where the Platform facilitates your interaction with a third-party service (such as initiating a bKash payment), your data may also be processed by that third party in accordance with their own privacy policy. it777 is not responsible for the privacy practices of third-party services and recommends that you review the privacy policies of any third-party services you access through the Platform.

it777 may send you promotional communications about bonuses, new games, seasonal promotions (including those tied to events such as Eid, Pohela Boishakh, BPL, and the T20 World Cup), and Platform news, where you have provided your consent to receive such communications at registration or subsequently through your account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting customer support. Opting out of marketing communications does not affect the delivery of transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts, which are sent as part of the service.

it777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of our business. When a material change is made to this Policy, it777 will publish the revised Policy on the Platform with an updated effective date and will make reasonable efforts to notify registered users through the Platform or by communication to their registered contact details.

Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and contact our support team to close your account. We recommend that you review this Policy periodically to stay informed of how we are protecting your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to submit a data access or deletion request, please contact our support team. We aim to respond to all data rights requests within 30 days of receipt. To help us process your request efficiently, please include your registered mobile number and a clear description of your request when you contact us.

Email (plain text — not a link): [email protected]

Our support team is available 24 hours a day, 7 days a week, and is able to assist with all data rights requests, account queries, and general privacy inquiries in connection with your use of the it777 Platform.