Your Privacy Matters at oo77

oo77 is an online betting and casino platform operating at https://oo77.io and serving players primarily in Bangladesh. oo77 is the data controller in respect of all personal data collected and processed through the platform. As data controller, oo77 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out in accordance with this Privacy Policy and applicable data protection principles.

If you have any questions about how oo77 handles your personal data, or if you wish to exercise any of your data rights, please contact our data protection team directly at [email protected]. All privacy-related enquiries are handled with strict confidentiality and are actioned within a reasonable timeframe, typically within 30 days of receipt.

oo77 collects personal data across several categories. The nature and extent of data collected depends on the type of interaction you have with the platform, ranging from a first visit to the website through to full account registration and active use. The primary categories of personal data we collect are:

• Identity Data: Full legal name, date of birth, and government-issued identification numbers (National ID, passport, or driving licence) collected during account registration and identity verification.
• Contact Data: Email address, mobile phone number, and residential address, used for account management and communications.
• Financial Data: Payment method identifiers including bKash account numbers, Nagad numbers, Rocket numbers, Upay numbers, and the last four digits of any Visa or Mastercard used to transact on the platform.
• Transaction Data: Full records of all deposits, withdrawals, bets, casino game rounds, bonus activations, and account balance changes.
• Technical Data: IP addresses, device identifiers, browser type and version, operating system, time zone, session timestamps, and login history.
• Usage Data: Records of your interactions with the platform, including pages visited, games played, betting patterns, session lengths, and feature engagement.
• Communication Data: Copies of all communications between you and oo77 support, including live chat transcripts, email correspondence, and complaint records.

oo77 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, placing bets, contacting support, or responding to surveys or promotions.
• Automated technologies: Technical and usage data collected automatically when you access and use the oo77 platform, including via cookies, server logs, and similar tracking technologies described in Clause 7.
• Third-party sources: Identity verification data provided by third-party KYC service providers engaged by oo77 to assist with age and identity verification obligations. Financial transaction data provided by payment processors including bKash, Nagad, Rocket, Upay, and card processing networks.
• Game Providers: Aggregated game round and return-to-player data provided by third-party Game Providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) to enable accurate account balance management and game history records.

oo77 uses the personal data it collects for the following purposes:

• To register and manage your oo77 account, including verifying your identity and age in compliance with our eligibility requirements.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate transaction records.
• To settle bets, calculate winnings, apply bonuses, and maintain a complete and accurate history of your betting and gaming activity on the platform.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other forms of prohibited conduct described in our Terms & Conditions.
• To operate our responsible gaming programme, including monitoring for signs of problem gambling behaviour and applying any deposit limits, cooling-off periods, or self-exclusion measures you have requested or that we are obliged to apply.
• To communicate with you regarding your account, including transaction confirmations, security alerts, support responses, and material changes to our Terms or this Policy.
• To send you promotional communications, bonus offers, and marketing materials where you have opted in to receive such communications. You may unsubscribe from marketing communications at any time by contacting [email protected].
• To improve and optimise the oo77 platform by analysing usage patterns, identifying technical issues, and understanding how players interact with our features and content.
• To comply with applicable legal, regulatory, and financial reporting obligations.

oo77 processes personal data only where a valid lawful basis exists. The lawful bases upon which oo77 relies are as follows:

• Contract performance: Processing that is necessary to fulfil the contractual relationship between oo77 and you as a registered player, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, know-your-customer (KYC) verification obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for oo77's legitimate business interests, including fraud detection, platform security, technical improvement, and responsible gaming monitoring — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your data for direct marketing communications, where your opt-in consent has been obtained. You retain the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

oo77 does not sell, rent, or trade your personal data to any third party for commercial gain. Your personal data may be shared with carefully selected third-party service providers and partners strictly where necessary to deliver the oo77 service, under the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing networks receive the minimum financial data necessary to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and age verification service providers receive identity data as required to fulfil our age and identity verification obligations.
• Game Providers: Third-party Game Providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive the minimum session and account data required to deliver their games through the oo77 platform.
• IT and security service providers: Technical infrastructure, hosting, and cybersecurity service providers who support the operation and security of the oo77 platform, operating under strict data processing agreements.
• Legal and regulatory authorities: Where oo77 is required by law, court order, or legitimate regulatory request to disclose personal data, we will do so in compliance with our legal obligations.

All third-party service providers engaged by oo77 are contractually required to process personal data only for specified, agreed purposes and to maintain security standards at least equivalent to those applied by oo77 itself.

The oo77 platform uses cookies and similar tracking technologies to ensure the correct functioning of the platform, to improve the user experience, and to gather analytical information about how the platform is used. The categories of cookies used by oo77 are as follows:

• Strictly necessary cookies: Essential cookies required for the platform to function correctly. These include session management cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Cookies that remember your preferences (such as language settings and preferred games) to personalise your experience on the oo77 platform.
• Analytical cookies: Cookies used to collect aggregated, anonymised data about how players interact with the platform. This information helps us identify usability issues and improve platform performance.
• Security cookies: Cookies used to detect unusual login patterns, device changes, and suspicious session behaviour as part of our fraud prevention and account protection systems.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies (particularly strictly necessary cookies) may affect the functionality of the oo77 platform and your ability to use core features.

oo77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account registration and for a period of five years following permanent account closure, in accordance with financial record-keeping and AML compliance obligations.
• Transaction data: Full transaction records are retained for a minimum of five years following each transaction date, in line with financial compliance requirements.
• Communication data: Support communications and complaint records are retained for three years following the resolution of the relevant interaction, to support dispute resolution and service quality auditing.
• Technical and usage data: Aggregated and anonymised usage analytics are retained indefinitely. Raw technical logs including IP addresses and session data are retained for a maximum of 12 months from the date of collection.
• Marketing consent records: Records of your marketing consent or opt-out are retained for the duration of your account and for three years following account closure, to demonstrate compliance with applicable marketing regulations.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible, oo77 will ensure the data is isolated from active processing systems until it can be permanently removed.

oo77 takes the security of your personal data seriously and has implemented a range of technical and organisational security measures to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the oo77 platform, ensuring that your personal and financial data cannot be intercepted in transit.
• Encryption at rest for all stored personal data, ensuring that data held on oo77 servers is protected against unauthorised physical or logical access.
• Access controls: Role-based access controls that limit access to personal data to only those authorised oo77 staff and service providers who require it to perform their specific job functions.
• Multi-factor authentication for all administrative access to oo77 internal systems that contain personal data.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate potential vulnerabilities in our systems.
• Intrusion detection systems and 24/7 security monitoring to detect and respond to anomalous activity on the oo77 platform in real time.
• Staff training: All oo77 personnel who handle personal data receive regular data protection and information security training as a condition of their employment or engagement.

Despite these measures, no digital system can guarantee absolute security. In the unlikely event of a personal data breach that poses a material risk to your rights and freedoms, oo77 will notify affected players without undue delay and will take all necessary steps to contain the breach and prevent recurrence.

As a registered player, you hold the following rights in respect of your personal data held by oo77. These rights are described in plain terms below. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and email address to assist us in locating your records. oo77 will respond to all data rights requests within 30 days of receipt, and will not charge a fee for handling reasonable requests.

• Right of Access: You may request confirmation of whether oo77 holds personal data about you and, if so, a copy of that data along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate, out of date, or incomplete. Some corrections can be made directly through your oo77 account settings; others may require identity verification before they can be applied.
• Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your personal data where oo77 no longer has a legitimate lawful basis to retain it. Please note that certain data must be retained for legal and financial compliance purposes and cannot be deleted early.
• Right to Restriction of Processing: You may request that oo77 pauses processing of your personal data in certain circumstances, such as while an accuracy dispute is being resolved or while an objection to processing is being assessed.
• Right to Data Portability: You may request a structured, commonly used, machine-readable copy of personal data you have provided to oo77, for the purpose of transferring it to another service provider.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of oo77's legitimate interests, though such objections may be overridden where oo77 can demonstrate compelling legitimate grounds.
• Rights Related to Automated Decision-Making: Where oo77 makes decisions about your account using solely automated means (such as automated fraud scoring), you have the right to request human review of such decisions and to contest outcomes that have a significant effect on you.

oo77 reserves the right to update and amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. The "Last Updated" date displayed at the top of this page and in the table of contents sidebar will always reflect the date of the most recent revision.

Where changes to this Policy are material — meaning they significantly affect your rights, the categories of data we collect, or the purposes for which we process your data — oo77 will provide registered players with at least 7 days' advance notice of the change via email or a prominent notification on the platform before the revised Policy takes effect.

For minor, non-material amendments such as typographical corrections, formatting improvements, or clarifications that do not alter the substance of the Policy, oo77 may update this page without advance notice. In all cases, the current version of this Privacy Policy, as published at https://oo77.io/privacy-policy, governs the relationship between oo77 and its players in respect of personal data.

Your continued use of the oo77 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with any material change, you have the right to request account closure by contacting [email protected] before the revised Policy takes effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which oo77 handles your personal data, please do not hesitate to reach out to our data protection team. All communications relating to privacy matters should be made in English and directed to the contact details below.

oo77 is committed to resolving all privacy-related concerns fairly and transparently. Where a concern cannot be resolved through direct contact with our support team, you may escalate your complaint to a senior member of the oo77 compliance team by stating this clearly in your written communication to [email protected].

oo77 values the trust that players across Bangladesh place in our platform every day, and we are fully committed to maintaining the highest standards of personal data protection. Your privacy is not just a legal obligation — it is a core part of what makes oo77 a platform you can rely on.