c77 Privacy Policy

This Privacy Policy ("Policy") describes how c77 ("c77", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal information about individuals ("you", "your", "Player", "User") who access or use the c77 website at c77.cam and any associated services, games, betting markets, mobile interfaces, or features (collectively, the "Platform").

This Policy applies to all visitors, registered account holders, and any other persons who interact with the Platform regardless of the device or method of access used. It covers personal data collected online through the Platform as well as any data you provide to us directly via email or our support channels.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the agreement between you and c77. Where there is a conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail except in matters relating specifically to data protection, where this Policy shall govern.

For the purposes of applicable data protection legislation, c77 is the data controller in respect of the personal data it collects from users of the Platform. This means that c77 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where c77 engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification providers — those parties act as data processors and are contractually bound to process personal data only in accordance with c77's instructions and to maintain appropriate security standards.

All data protection enquiries, subject access requests, and complaints should be directed to c77's support team at [email protected], clearly marked with the subject line "Data Protection Enquiry".

3.1 Identity Data

When you register an account with c77, we collect your full legal name, date of birth, gender, and nationality. As part of our Know Your Customer (KYC) process — required to verify your identity and age before any withdrawal can be processed — we may also collect a copy of your Bangladesh National Identity Card (NID), passport, birth certificate, or other government-issued photo identification document, as well as a selfie or live photograph for biometric comparison purposes.

3.2 Contact Data

We collect your email address and mobile phone number at registration. These are used to communicate with you regarding your account, respond to support requests, deliver security alerts (such as login notifications), and — where you have opted in — send promotional communications about c77 offers.

3.3 Financial Data

To process deposits and withdrawals, we collect details of your chosen payment method. For bKash, Nagad, Rocket, and Upay transactions, this includes the mobile financial service (MFS) account number associated with your transaction. For cryptocurrency transactions, this includes your wallet address. We also maintain a full transaction history of all deposits, withdrawals, bets, and wins associated with your account.

3.4 Technical Data

When you access the Platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifier, screen resolution, referring URL, and time-zone setting. This data is used for security monitoring, fraud detection, and service diagnostics.

3.5 Usage Data

We collect data about how you interact with the Platform, including the pages and game titles you access, the duration of each session, bet amounts and outcomes, game preferences, and responsible gaming tool usage (e.g., deposit limit settings, cooling-off periods). This data informs our responsible gaming monitoring obligations and helps us improve the platform experience.

3.6 Communications Data

We retain records of your correspondence with c77's support team, including live chat transcripts, email exchanges, and any documents you submit in connection with a support request or complaint. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

c77 collects personal data through the following means:

• Direct interactions: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting support, or completing any other Platform feature that requires you to input information.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, through cookies, web beacons, server logs, and similar tracking technologies (see Section 10 — Cookies & Tracking).
• Third-party verification providers: Where c77 uses a third-party identity verification or AML screening service to assist with KYC, that provider may return enriched data — such as verification status or risk score — to c77. c77 does not receive additional personal data from these providers beyond what is necessary to confirm the outcome of the verification check.
• Payment processors: Confirmation and reference data returned by bKash, Nagad, Rocket, Upay, or cryptocurrency networks following a transaction. c77 does not store full MFS PIN numbers or private cryptocurrency wallet keys.

c77 uses the personal data it collects for the following purposes:

• To create, manage, and operate your c77 account and provide access to all Platform features.
• To verify your identity and age as required by our responsible gaming and anti-fraud obligations.
• To process your deposit and withdrawal transactions via your selected payment method.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problematic gambling behaviour, and to apply responsible gaming tools where appropriate.
• To communicate with you about your account, including security notifications, transaction confirmations, and responses to support requests.
• To send you promotional communications about c77 bonuses, new game releases, and special offers — but only where you have opted in to receive such communications.
• To improve, test, and optimise the Platform's features, game selection, and user experience based on aggregated and anonymised usage data.
• To comply with applicable laws, regulations, and court orders, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• To enforce our Terms & Conditions and protect the legal rights of c77 and its players.

c77 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contract performance: Processing is necessary to perform the contract between you and c77 — specifically, to create and maintain your account, process bets, and handle deposits and withdrawals.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and regulatory record-keeping duties.
• Legitimate interests: Processing is necessary for c77's legitimate business interests — including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as the lawful basis — such as for marketing communications or non-essential cookies — we will obtain your explicit consent before commencing such processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

c77 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: bKash, Nagad, Rocket, Upay, and cryptocurrency network operators, to the extent necessary to process your transactions.
• Identity verification providers: Third-party KYC and AML screening services engaged by c77 to assist with account verification. These providers are bound by strict data processing agreements.
• Technology service providers: Cloud hosting, database management, and cybersecurity service providers who process data on c77's behalf under binding data processor agreements.
• Regulatory and law enforcement authorities: Where we are required by applicable law, court order, or regulatory direction to disclose your personal data to a government body, law enforcement agency, or other competent authority.
• Professional advisers: Legal, financial, or compliance advisers who require access to your data to provide professional services to c77, subject to professional confidentiality obligations.

c77 operates as an international platform and your personal data may be processed on servers located outside Bangladesh. Where personal data is transferred to a jurisdiction that does not offer the same level of data protection as your home country, c77 takes appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy.

Such safeguards may include contractual clauses based on internationally recognised model data transfer agreements, or transfers to recipients in countries that have been determined to offer adequate protection. If you would like further information about the specific safeguards in place for any particular data transfer, please contact us at [email protected].

c77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in order to satisfy AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping requirements.
• Support and communications records: Retained for 3 years from the date of the last communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Typically retained for 12 months in identifiable form, after which it is aggregated and anonymised for statistical analysis purposes.
• Marketing preferences: Retained until you withdraw consent or request deletion.

When data is no longer required, c77 will securely delete or permanently anonymise it in accordance with our internal data lifecycle procedures. Deletion requests submitted by players are processed within 30 days, subject to any applicable legal retention requirements that prevent earlier deletion.

c77 uses cookies and similar technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. c77 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations to provide a personalised experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently and where users encounter errors — to help us improve the service.
• Security cookies: Assist with fraud detection and prevention by identifying unusual access patterns or suspicious device configurations.

c77 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain Platform features, including logging in to your account.

Subject to applicable law, you have the following rights in respect of the personal data c77 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You may request a copy of all personal data c77 holds about you, together with information about how it is processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to our legal retention obligations.
• Right to restrict processing: You may request that we pause processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to our processing.
• Right to data portability: You may request that we provide your personal data to you in a structured, commonly used, machine-readable format, or transfer it directly to another service provider where technically feasible.
• Right to object: You may object to processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling based on legitimate interests. You may also object at any time to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing already carried out.

The c77 Platform is strictly intended for use by adults aged 18 years and above. c77 does not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has created an account or provided personal data to c77, please contact us immediately at [email protected]. We will investigate the matter promptly and, where a minor's account is confirmed, will immediately suspend the account, delete the associated personal data to the extent permissible by law, and return any deposits held where appropriate.

c77 employs mandatory age verification procedures at the point of registration and at the withdrawal stage to reduce the risk of minors accessing the Platform. Any account found to belong to a person under the age of 18 will be permanently closed and all associated winnings will be forfeited.

c77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the c77 Platform.
• Encrypted storage of sensitive data fields, including identity documents and payment references, at rest on our servers.
• Role-based access controls limiting access to personal data to staff members who require it for the performance of their specific job function.
• Two-factor authentication (2FA) available to all registered players and mandatory for internal staff accounts.
• Regular security audits and penetration testing by independent cybersecurity professionals.
• Intrusion detection systems and real-time monitoring of platform infrastructure for suspicious activity.

While c77 takes its security obligations seriously, no system is entirely immune from security incidents. In the event of a data breach that is likely to result in a risk to your rights and freedoms, c77 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.

The c77 Platform may contain references to third-party payment services such as bKash, Nagad, Rocket, and Upay. When you navigate away from the c77 Platform to interact directly with a third-party payment provider, that provider's own privacy policy and data practices will govern the processing of your personal data. c77 is not responsible for the privacy practices, content, or security standards of any third-party website or service.

We encourage you to review the privacy policy of any third-party service before providing your personal data to them. c77 has no control over, and assumes no responsibility for, the content or privacy practices of any third-party services accessed via links from the Platform.

c77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, we will notify registered users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version came into effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should discontinue your use of the Platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically to stay informed about how c77 is protecting your personal data. Archived versions of previous policies are available on request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way c77 processes your personal data, please contact our support team using the details below. We aim to respond to all data protection enquiries within 5 business days.

If you are not satisfied with c77's response to your data protection enquiry or complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. c77 takes all complaints seriously and will work constructively with any relevant authority to resolve outstanding concerns.

For issues specifically related to responsible gaming, account self-exclusion, or deposit limits, please refer to our Responsible Gaming page or contact support directly at [email protected]. All responsible gaming requests are treated as high priority and actioned within 24 hours.