eg77 Privacy Policy — How We Handle Your Data

This Privacy Policy applies to all personal data collected through the eg77 website, mobile browser experience, any communications you send to eg77 (including support emails and chat), and any transactions processed through the platform including deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.

This policy does not cover third-party websites or services that may be accessible via links within the platform. eg77 is not responsible for the privacy practices of external sites, and we encourage users to review the privacy policies of any third-party service before interacting with it.

When you create an eg77 account, we collect the following personal information which is necessary to establish and manage your account and to verify your identity in compliance with applicable anti-money laundering requirements:

• Full name as it appears on a government-issued identity document.
• Mobile phone number, which may be used for account verification, security alerts, and support communications.
• Date of birth, collected to verify that you meet the minimum age requirement of 21 years.
• A secure password of your choosing, stored in hashed form — eg77 never stores passwords in plain text.

When you make deposits or request withdrawals on eg77, we collect and process the following financial data, which is necessary to execute transactions and comply with financial regulations:

• Payment method identifiers, such as the registered mobile number linked to your bKash or Nagad account, or the last four digits and expiry date of a card.
• Transaction amounts, timestamps, and reference numbers for all deposits, withdrawals, bets placed, and game results.
• Records of bonus and promotional credits applied to your account and the associated wagering activity.

When you browse and use the eg77 platform, our systems automatically collect certain technical information. This data is used for security monitoring, fraud prevention, and improving the platform experience:

• IP address and approximate geolocation derived from that IP, used to detect access from restricted jurisdictions and to identify suspicious login patterns.
• Device type, operating system, browser version, and screen resolution, collected to optimise the platform layout and identify technically problematic configurations.
• Session duration, pages visited, features accessed, and game interactions, used to understand platform usage patterns and improve the user experience.

eg77 processes personal data only for the purposes described in this policy. We do not use personal data for purposes that are incompatible with the original purpose of collection. The primary purposes for which we use your data are:

• Account creation and management: to establish your eg77 account, verify your identity, maintain your account balance, and process deposits and withdrawals.
• Transaction processing: to execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment channels, and to maintain accurate transaction records.
• Security and fraud prevention: to detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct on the platform.
• Customer support: to respond to your enquiries, resolve disputes, and provide assistance related to your account or any transaction on the platform.
• Responsible gaming compliance: to monitor gameplay patterns, enforce account limits and self-exclusion requests, and comply with responsible gaming obligations.

eg77 does not use personal data to serve third-party advertising. We may send you platform-related communications such as account notifications, security alerts, or promotional offers from eg77 itself. You may opt out of promotional communications by contacting support.

eg77 processes personal data only where a valid legal basis exists. Depending on the nature of the processing activity, eg77 relies on one or more of the following legal grounds:

• Contractual necessity: processing required to fulfil the contract between you and eg77 — including account management, transaction processing, and delivering the platform services you have requested.
• Legal obligation: processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: processing for fraud prevention, security monitoring, and platform improvement, where those interests do not override your privacy rights.
• Consent: where we rely on your consent for specific processing activities (such as optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

eg77 does not sell, rent, or trade personal data. We share personal data only in the limited circumstances listed below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: data shared with bKash, Nagad, Rocket, Upay, and card payment networks strictly to the extent required to execute and confirm your transactions.
• Identity verification and KYC providers: where we are required to verify your identity or comply with anti-money laundering checks, we may share identifying documents with specialist KYC service providers operating under data processing agreements.
• Regulatory and law enforcement authorities: we are required to disclose data where mandated by law, court order, or a valid regulatory request. eg77 will notify you of any such request to the extent permitted by applicable law.
• Game technology providers: aggregated, anonymised game outcome data may be shared with game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi for game performance and fairness auditing. No personally identifiable information is included in these data sets.

eg77 requires all third parties who process personal data on our behalf to do so under a written data processing agreement that obligates them to handle your data securely, use it only for the agreed purpose, and delete it when no longer required.

eg77 takes the security of payment data seriously. Card numbers, full mobile banking credentials, and bank account numbers are never stored on eg77 servers. When you make a deposit via bKash, Nagad, Rocket, or Upay, the transaction is authenticated directly within the respective payment provider's secure environment. eg77 receives only a transaction confirmation reference and the amount — never your full payment credentials.

For card transactions processed via Visa and Mastercard, payment data is handled in accordance with applicable payment card industry security standards. eg77 does not store full card numbers or CVV codes. Saved payment method tokens, if any, are stored only in encrypted form and may be deleted at your request by contacting support.

The eg77 platform uses cookies and similar technologies to maintain your session, remember your preferences, and monitor platform security. We use the following categories of cookies:

• Essential cookies: strictly necessary to operate the platform, maintain your logged-in session, and protect against cross-site request forgery. These cannot be disabled without breaking core functionality.
• Analytics cookies: used to understand how users interact with the platform in aggregate — such as which pages are most visited and where users encounter errors. Data is anonymised before analysis.
• Security cookies: used to detect and record suspicious activity, failed login attempts, and patterns that may indicate automated bot access or account takeover attempts.

You may control cookie settings through your browser. Disabling essential cookies will prevent you from logging in to your eg77 account and using core platform features. eg77 does not use cookies to serve third-party advertising or to track your activity outside of the eg77 platform.

eg77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your account's active life plus a minimum period thereafter to comply with financial record-keeping and anti-money laundering regulations. Transaction records are typically retained for a minimum of five years from the date of the transaction.

When an account is closed, eg77 will delete or anonymise personal data that is no longer required for legal or regulatory purposes within a reasonable timeframe. Some data, such as transaction records and identity documents submitted for KYC verification, must be retained for the legally required minimum period even after account closure and cannot be deleted on request during that retention window.

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data eg77 holds about you. To exercise any of these rights, contact our support team at [email protected]:

• Right of access: you may request a copy of the personal data eg77 holds about you, including account details, transaction history, and communications records.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: you may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: in certain circumstances you may request that we restrict the processing of your personal data while a complaint or accuracy dispute is being resolved.
• Right to object: where processing is based on legitimate interests, you may object to that processing. eg77 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

eg77 will respond to data rights requests within a reasonable timeframe. Some requests may require identity verification before they can be processed. Where a request cannot be fulfilled in full (for example, because a legal retention obligation applies), eg77 will explain the reason and, where possible, fulfil the request partially.

eg77 implements technical and organisational security measures appropriate to the risk level of the data we process. These measures include SSL encryption for all data transmitted between your device and the eg77 platform, secure hashing of passwords, access controls that limit staff access to personal data on a need-to-know basis, and regular security reviews of platform infrastructure.

While eg77 takes reasonable steps to protect personal data, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, eg77 will notify you without undue delay and will take all reasonable steps to contain and remediate the breach. You can help protect your account by using a strong, unique password and not sharing your login credentials with anyone.

eg77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is shown at the top of this page. We encourage you to review this policy periodically.

Where a change to this policy is material — meaning it significantly affects how we collect or use your data — eg77 will endeavour to provide notice of the change through a notification on the platform or via the contact details registered on your account. Continued use of the platform following publication of an updated policy constitutes your acceptance of the revised terms.