Privacy Policy — How g77 Collects, Uses, and Protects Your Data

g77 ("g77", "we", "us", "our") operates the online casino and sports betting platform accessible at g77.lol. We take the privacy and security of your personal information extremely seriously. This Privacy Policy describes the types of personal data we collect from users of the g77 platform, the purposes for which we process that data, the legal bases we rely upon, the parties with whom we may share it, and the rights available to you as a data subject.

This Privacy Policy forms part of the g77 Terms & Conditions by reference. Defined terms used but not defined in this document carry the meanings given to them in the Terms & Conditions, accessible at g77.lol/terms-conditions.

g77 is committed to handling your personal data in a manner consistent with internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) framework, even where those regulations do not formally apply. We collect only the data we genuinely need, retain it only as long as necessary, and take reasonable technical and organisational measures to keep it secure at all times.

If you have any questions about this Privacy Policy or about how g77 processes your data, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week via live chat on the platform.

g77 collects personal data in the following categories. We collect only what is necessary for the specific purposes described in Section 4 of this Policy.

This includes your full legal name, date of birth, gender, nationality, and government-issued identification details (such as National ID number, passport number, or driving licence number) provided during the Know Your Customer (KYC) verification process.

This includes your email address, mobile telephone number, and residential address (including city, district, and postcode). For players based in Bangladesh, city-level location data (e.g., Dhaka, Chittagong, Sylhet) may be recorded where provided during registration or address verification.

This includes payment method identifiers associated with your account (for example, the mobile wallet numbers linked to bKash, Nagad, Rocket, or Upay), transaction records (deposits, withdrawals, bet settlements), and any source-of-funds documentation provided for compliance purposes. g77 does not store full card numbers; card payment processing is handled exclusively by PCI-DSS-compliant third-party processors.

This includes your username, hashed password, account preferences, session logs, betting history, game play history, bonus claim history, responsible gaming tool settings (deposit limits, self-exclusion periods), and any customer support communications associated with your account.

This includes your IP address, browser type and version, operating system, device identifier, screen resolution, referring URL, pages visited on the g77 platform, time and duration of visits, and clickstream data. This data is collected automatically via server logs and cookies as described in Section 6.

This includes the content of any communications you send to g77 via live chat, email ([email protected]), or any platform-based messaging feature, as well as records of notifications sent to you by g77 (promotional emails, account alerts, verification messages).

g77 does not intentionally collect sensitive special-category data (such as health information, religious beliefs, or biometric data) unless you voluntarily disclose it — for example, if you contact support to discuss a responsible gaming concern of a health-related nature. Where such information is disclosed, it is treated with the highest level of confidentiality and used solely to provide the support you have requested.

g77 collects personal data through the following channels:

• Direct submission: Data you actively provide during registration, KYC verification, deposit or withdrawal requests, form submissions, live chat sessions, or email correspondence with our support team.
• Automated collection: Technical data collected automatically when you access the g77 platform, including via server logs, session cookies, analytics scripts, and device fingerprinting technologies. See Section 6 for full details on cookies and tracking.
• Third-party sources: Identity and fraud-screening data received from our KYC verification partners and payment processors when you initiate a financial transaction. This data is used exclusively for the verification and compliance purposes described in Section 4.
• Responsible gaming disclosures: Information voluntarily provided when you set responsible gaming preferences, contact support regarding gambling-related concerns, or interact with self-exclusion tools on the platform.

g77 processes your personal data only where we have a valid legal basis for doing so. The primary purposes and associated legal bases are set out below:

g77 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your data only in the following limited and necessary circumstances:

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard network processors. These partners process your data solely to execute the requested financial transaction and are bound by their own data protection obligations.

To comply with age verification and anti-money-laundering obligations, we share identity and document data with authorised third-party KYC verification service providers. These providers process your data exclusively on g77's behalf and under g77's instructions, and are contractually prohibited from using your data for any independent purpose.

g77 uses specialist fraud detection and risk management tools that process technical and behavioural data (such as IP addresses, device identifiers, and session patterns) to identify and prevent fraudulent activity, bonus abuse, and account takeover attempts. Data processed by these tools is used solely for security and integrity purposes.

Where game-specific data (such as session identifiers and wagered amounts) needs to be transmitted to third-party game studios — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, Red Tiger, and Hacksaw Gaming — for the purpose of game delivery, such transmission is limited to the technical minimum required to operate the game and does not include your name, contact details, or payment information.

g77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory demand. In such cases, g77 will disclose only the data specifically required and will notify the affected user where legally permitted to do so.

In the event that g77 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, personal data held by g77 may be transferred to the successor entity as part of that transaction. Users will be notified of any such transfer and its implications for their data via the registered email address prior to the transfer taking effect.

g77 uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other data stored on your device beyond what is placed there by the g77 platform.

• Strictly Necessary Cookies: Essential for the operation of the platform. These cookies enable core functions such as user authentication (keeping you logged in), session management, fraud prevention signals, and secure payment processing. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Allow the platform to remember your preferences, such as language settings, responsible gaming tool configurations, and display preferences. Disabling these cookies may result in a less personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised information about how users interact with the g77 platform — including pages visited, time spent, navigation paths, and error events. This information helps us improve the platform experience. Analytics data is not linked to individually identifiable profiles.
• Marketing Cookies: Used to deliver relevant promotional content to users who have opted in to marketing communications. These cookies track whether a user has previously seen a particular promotional message in order to avoid repetition. Marketing cookies are only placed with your consent.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notifications before cookies are placed. Please note that disabling strictly necessary cookies will affect your ability to use core platform features including logging in and placing bets. Instructions for managing cookies in common browsers are available via each browser's official help documentation.

g77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and gaming data: Retained for the duration of your account's active status plus five (5) years following permanent account closure, to satisfy anti-money-laundering record-keeping requirements and to resolve any post-closure disputes.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with international financial compliance standards.
• KYC documents: Retained for five (5) years following account closure or the completion of the last financial transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the final communication in a support thread, to support quality assurance and dispute resolution.
• Technical and analytics data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Individually identifiable technical data (such as IP logs) is retained for twelve (12) months.
• Marketing preferences: Retained until you withdraw consent. Records of consent and withdrawal are retained for five (5) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with g77's internal data destruction procedures.

As a user of the g77 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username. We will respond within 30 days of receiving a verified request.

• Right of Access: You have the right to request a copy of all personal data held by g77 about you, along with information about the purposes for which it is processed and any third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data held by g77 that is inaccurate or incomplete. You may update certain account details (such as email address and mobile number) directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to g77's legal obligations to retain certain records as described in Section 7.
• Right to Restriction of Processing: You may request that g77 restricts the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

g77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the g77 platform, ensuring that login credentials, payment details, and personal data are protected in transit.
• Password hashing using industry-standard one-way hashing algorithms. g77 does not store plaintext passwords. Even in the unlikely event of a database breach, stored passwords cannot be directly read or reversed.
• Role-based access controls (RBAC) limiting access to personal data to only those g77 personnel who require it to perform specific operational functions. All staff with access to personal data are bound by confidentiality obligations.
• Regular security audits and penetration testing conducted by qualified security professionals to identify and remediate vulnerabilities in the platform's infrastructure.
• Secure server infrastructure hosted in data centres with physical access controls, environmental protections, and redundant systems to ensure data availability and integrity.
• Anomaly detection systems that monitor for unusual account activity, login patterns, or transaction behaviour that may indicate unauthorised access or fraudulent activity, with automated alerts and intervention protocols.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, g77 will notify affected users without undue delay via the registered email address, consistent with applicable data breach notification obligations.

The g77 platform is strictly for adults aged 18 years and above. g77 does not knowingly collect personal data from any individual under the age of 18. Registration on the g77 platform by a person under 18 constitutes a breach of the Terms & Conditions and is prohibited.

If g77 discovers or is informed that personal data has been collected from a person under the age of 18, that data will be immediately deleted and the associated account will be permanently closed. Any deposits made by an underage user will be handled in accordance with applicable regulations, which may result in the funds being held pending investigation or returned to the originating payment method after identity verification.

If you are a parent or guardian and you believe your child has created an account on the g77 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

The g77 platform may contain references to third-party services, payment providers, and game content studios. This Privacy Policy applies solely to data processed by g77 in connection with the g77 platform. It does not extend to the privacy practices of third-party services that you access independently, including the websites or applications of bKash, Nagad, Rocket, Upay, Visa, Mastercard, or any game provider studio.

When you interact with a third-party payment provider to complete a deposit or withdrawal, you are subject to that provider's own terms of service and privacy policy. g77 encourages you to review the privacy policies of any third-party service you use in connection with your g77 account. g77 bears no responsibility for the privacy practices or content of any third-party service.

g77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The current version of this Privacy Policy will always be available at g77.lol/privacy-policy, with the effective date of the most recent revision displayed at the top of the document.

For material changes — meaning changes that substantively alter the way g77 processes your personal data or that affect your data rights — g77 will provide advance notice of at least 14 days via your registered email address and/or a prominent notice on the platform prior to the changes taking effect.

Your continued use of the g77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and request account closure before the revised Policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by g77, please contact our dedicated data support team using the details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 via the g77 platform at g77.lol
• Response Time: Email responses within 4 hours during normal operating periods; data rights requests responded to within 30 days of verified receipt.