777bad Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data 777bad collects, how we use it, who we share it with, and the rights you hold over your own information as a player on our platform.
Our Commitment to Your Privacy
Last Updated: 1 January 2026This Privacy Policy ("Policy") describes how 777bad ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal data of players and visitors who interact with our website at 777bad.onl and all related mobile interfaces operated under the 777bad brand. This Policy is incorporated by reference into the 777bad Terms & Conditions, which together form the complete agreement governing your use of the Platform.
By registering an account, making a deposit, or continuing to browse the Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact [email protected] to request account closure.
Plain Language Summary: We collect only the data we genuinely need to run your account securely. We do not sell your personal information to third-party marketers. We protect your data with SSL encryption and strict access controls. You have the right to access, correct, or request deletion of your data at any time by contacting our support team.
Our Six Data Principles
Everything 777bad does with personal data is guided by these core principles. They shape our internal data-handling policies and the practical choices our team makes every day.
We collect personal data only for the specific, legitimate purposes described in this Policy. We do not re-use your data for purposes that are incompatible with those original reasons without obtaining fresh consent.
All data in transit is protected by SSL/TLS encryption. Sensitive fields including passwords and payment details are stored using industry-standard hashing and encryption methods. Access to personal data is restricted to authorised 777bad personnel on a strict need-to-know basis.
We ask only for the information we genuinely need to create your account, verify your identity, process transactions, and keep the Platform safe. We do not collect excessive or irrelevant personal details.
We take reasonable steps to keep your personal data accurate and up to date. You can update your profile information at any time from within your account dashboard, or by contacting our support team directly.
We do not hold your personal data for longer than necessary. Account data is retained for the duration of your active account and for a defined period afterwards to satisfy legal and audit obligations. Inactive accounts are reviewed and data minimised on a rolling schedule.
You have the right to access the personal data we hold about you, request corrections, ask us to delete your data where no legitimate reason exists for continued retention, and withdraw consent where processing is consent-based. Contact [email protected] to exercise any of these rights.
Full Privacy Policy
1. Personal Data We Collect
When you interact with the 777bad Platform, we may collect the following categories of personal data depending on the specific service you use:
Registration and Identity Data:
- Full legal name as it appears on your national ID or passport.
- Date of birth (required to verify the 21+ age restriction).
- Residential address, including city, district, and postcode.
- Mobile phone number linked to your bKash, Nagad, Rocket, or Upay mobile wallet.
- Email address used during account registration.
- Username and hashed password (the raw password is never stored in plain text).
Identity Verification (KYC) Data:
- Copies of government-issued photo identification (National ID card, passport, or driving licence).
- Proof of address documents (utility bill, bank statement, or similar).
- Selfie or live photograph submitted for facial verification purposes where required.
Financial and Transaction Data:
- Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposits and withdrawals.
- Transaction history including deposit amounts, withdrawal requests, and dates.
- Bonus claim records, wagering activity summaries, and win/loss history.
Technical and Usage Data:
- IP address and approximate geographic location derived from it.
- Device type, operating system version, and browser or app version.
- Pages visited, games played, session duration, and clickstream data.
- Cookies and similar tracking technologies as described in Section 7 of this Policy.
Communications Data:
- Content of support tickets, live chat transcripts, and emails exchanged with our team.
- Responses to surveys or feedback requests where you voluntarily participate.
2. How We Use Your Personal Data
777bad uses the personal data we collect for the following purposes, each of which has a legitimate basis under standard data-protection principles:
- Account creation and management: To register your account, authenticate your identity on login, and maintain your account settings and preferences.
- Age and identity verification: To confirm that you meet the 21+ age requirement and that your identity matches the information provided at registration, in accordance with responsible gaming obligations.
- Payment processing: To facilitate deposits via bKash, Nagad, Rocket, and Upay, process withdrawal requests to the appropriate mobile wallet, and maintain a full and accurate transaction record for your account.
- Customer support: To respond to your enquiries, resolve disputes, and maintain a record of communications for quality and training purposes.
- Fraud prevention and security: To detect and investigate suspicious activity, prevent money laundering, protect the integrity of the Platform, and comply with applicable anti-fraud obligations.
- Responsible gaming compliance: To monitor gambling patterns that may indicate problem gambling behaviour, apply deposit limits or self-exclusion requests, and send welfare check-in messages where appropriate.
- Platform improvement: To analyse aggregated usage data, fix technical issues, improve game performance, and develop new features.
- Marketing communications: To send you bonus offers, promotional updates, and seasonal promotions via SMS or push notification — only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
- Legal compliance: To retain records for the periods required by applicable law and to respond to legitimate requests from competent authorities.
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual necessity: Processing your registration data, KYC documents, and transaction records is necessary to perform the contract between you and 777bad.
- Legitimate interests: Fraud prevention, security monitoring, and platform analytics are conducted on the basis of our legitimate interest in running a safe and reliable service.
- Consent: Marketing communications are sent only on the basis of your explicit opt-in consent, which you may withdraw at any time.
- Legal obligation: Certain data retention and reporting activities are required to comply with applicable law.
4. Sharing Your Personal Data
777bad does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only where strictly necessary:
- Payment service providers: bKash, Nagad, Rocket, Upay, and other approved payment partners receive the minimum data necessary to process your transactions securely.
- Identity verification providers: Third-party KYC technology partners process your identity documents on our behalf under strict data-processing agreements that prohibit any secondary use of your data.
- Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers required to deliver their games. They do not receive your full name, address, or payment details.
- Technical infrastructure providers: Hosting, content delivery, and security service providers process data on our behalf under contractual terms that require them to maintain confidentiality and security standards equivalent to our own.
- Competent authorities: We will disclose personal data to law enforcement, regulators, or courts where we are legally compelled to do so, or where we believe in good faith that disclosure is necessary to prevent fraud or protect the safety of persons.
All third parties with whom we share personal data are contractually required to handle it in a manner consistent with this Policy and to implement appropriate technical and organisational security measures.
5. Data Retention
We retain your personal data for as long as your account remains active and for a period after closure sufficient to satisfy our legal, audit, and dispute-resolution obligations. The following general retention periods apply:
- Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping best practices.
- KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
- Support communications: Retained for up to two (2) years from the date of the last interaction, after which they are anonymised or deleted.
- Marketing consent records: Retained for the duration of your marketing subscription and for one (1) year after opt-out, to demonstrate compliance with consent obligations.
- Technical and usage logs: Retained in identifiable form for up to twelve (12) months and thereafter in anonymised, aggregated form for analytical purposes.
Where no specific retention period is defined above, we apply the principle of retaining data only for as long as the original purpose for which it was collected reasonably requires, after which it is securely deleted or anonymised.
6. Your Privacy Rights
As a player on the 777bad Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered account details so we can verify your identity before acting on the request.
- Right of access: You may request a copy of the personal data we hold about you and receive a summary of the purposes for which it is being processed.
- Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct it without undue delay.
- Right to erasure: You may request deletion of your personal data where we no longer have a legitimate or legal reason to retain it. Note that this right does not override our legal obligations to retain financial and KYC records for minimum statutory periods.
- Right to restrict processing: You may ask us to restrict the processing of your data while a dispute about its accuracy or our grounds for processing is being resolved.
- Right to data portability: You may request a copy of personal data you have provided to us in a structured, machine-readable format where processing is carried out by automated means on the basis of consent or contract.
- Right to withdraw consent: Where we process your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Right to object to marketing: You may opt out of promotional SMS and push notifications at any time by contacting [email protected] or updating your account notification preferences.
We will respond to all rights requests within a reasonable timeframe. If for any reason we are unable to fulfil your request, we will explain the reason in our response.
7. Cookies and Tracking Technologies
777bad uses cookies and similar technologies (including local storage and session identifiers) to operate the Platform, remember your preferences, maintain your login session, and analyse how the site is used. The following categories of cookies are in use:
- Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking core site functionality.
- Functional cookies: Used to remember your language preference, preferred game categories, and other personalisation settings. These improve your experience but are not essential.
- Analytics cookies: Used to collect anonymised data about how visitors navigate the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve the site and is not linked to your individual identity.
- Session duration cookies: Used as part of our responsible gaming monitoring to track time spent on the Platform during a single session and to generate alerts where session time thresholds are exceeded.
You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may cause your session to be terminated.
8. Security Measures
The security of your personal data is a primary operational priority at 777bad. We implement the following technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction:
- All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) with a minimum of 128-bit encryption strength.
- Passwords are hashed using a one-way cryptographic algorithm before storage. We do not store raw passwords at any stage.
- Access to production databases containing personal data is restricted to a minimal set of authorised personnel and is protected by multi-factor authentication.
- Our systems are subject to regular security testing and vulnerability assessments.
- All staff with access to personal data receive data-protection training and are bound by confidentiality obligations.
Despite these measures, no digital system can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to mitigate harm.
9. Children and Minors
The 777bad Platform is strictly for persons aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we discover that an account has been registered by a minor, we will immediately close the account, delete all associated personal data (subject to any legal retention obligations), and withhold any balance held on the account. Parents or guardians who believe their child has created an account on 777bad should contact [email protected] immediately.
10. Third-Party Services
The Platform integrates with third-party game providers and payment processors to deliver its services. While these providers handle data on our behalf under contractual agreements, their own internal privacy practices are governed by their respective policies. 777bad is not responsible for the privacy practices of third-party studios or payment networks beyond what is stipulated in our data-processing agreements with them.
11. Changes to This Policy
777bad reserves the right to update this Privacy Policy at any time. When material changes are made, registered players will be notified via the mobile number or email address on file, or via a prominent notice on the Platform. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the Platform after a policy update constitutes your acceptance of the revised terms.
12. Contact and Data Enquiries
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the 777bad data team. Our support email is [email protected] (plain text — not a clickable link). We aim to respond to all privacy-related enquiries within 5 business days, Bangladesh Standard Time (BST, UTC+6).
Your data, your rights. 777bad is built on trust. We handle your personal information with care, use it only for the purposes described above, and never sell it to third-party marketers. If anything in this Policy is unclear, please reach out — we are happy to explain our practices in plain language.
Continue on 777bad
Now that you understand how we protect your data, feel free to log in to your account, explore our game categories, or review our other policy pages for complete peace of mind.
Log In to Your Account Read Terms & Conditions Responsible Gaming Visit Our FAQ