Privacy Policy for at777

at777 collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically through your use of the site, and occasionally from trusted third-party sources such as payment providers and identity verification services. The categories of personal data we collect are described below.

1.1 Registration & Identity Data

When you create an at777 account, we collect the following information:

• Full legal name as it appears on your official identity document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address, including district, city, and postal code within Bangladesh
• Email address
• Mobile phone number (used for OTP verification and account communications)
• Username and encrypted password credential

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to protect against fraud and underage gambling, at777 may request copies of the following documents before processing your first withdrawal or where our risk systems flag a review:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Birth Certificate (where NID or passport is unavailable)
• Proof of address (recent utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie photograph for liveness verification, where required

KYC documents are handled with the highest level of confidentiality and are stored in an encrypted, access-controlled document store. Access is restricted to authorised compliance personnel only.

1.3 Financial & Transaction Data

When you make a deposit or request a withdrawal, we collect:

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay, or SureCash account numbers registered in your name)
• Bank account details for bank transfer transactions (account holder name, account number, bank name and branch)
• Card details for Visa and Mastercard transactions — note that full card numbers are never stored on at777 servers; card tokenisation is handled by our PCI-DSS compliant payment processor
• Transaction amounts, currencies (BDT), timestamps, and reference IDs
• Deposit and withdrawal history associated with your account

1.4 Usage & Technical Data

When you access the at777 platform, our servers and analytics systems automatically collect:

• IP address and approximate geolocation (country and city level)
• Device type, operating system version, and browser type and version
• Pages visited, game sessions initiated, bet amounts placed, and navigation paths
• Session duration and login timestamps
• Referral URL (the page you visited immediately before arriving at at777)
• Error logs and crash reports

1.5 Communications Data

If you contact the at777 support team via live chat, email, or any other communication channel, we retain a record of that correspondence. This includes the content of your messages, any attachments submitted, the date and time of each interaction, and the resolution outcome. These records are retained to maintain service quality, resolve disputes, and meet our compliance obligations.

at777 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The table below sets out our processing purposes and the legal basis for each.

2.1 Marketing Communications

at777 will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive marketing communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by updating your account notification preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to receive essential account-related communications such as deposit confirmations, withdrawal updates, and security alerts.

at777 uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your preferences, to analyse how the platform is used, and to support our security systems. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute code, carry viruses, or access other information stored on your device.

3.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to operate. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
• Functional Cookies: These remember your preferences such as language selection, preferred payment method, and display settings. They allow the platform to deliver a more personalised experience without requiring you to re-enter preferences on every visit.
• Analytics Cookies: We use first-party analytics to understand how players navigate the platform — which pages are visited most, where users drop off, and which features are most engaged with. This data is aggregated and anonymised and is used solely to improve the at777 user experience.
• Security Cookies: These are used by our fraud detection and bot-prevention systems to distinguish genuine human users from automated scripts. They collect device fingerprint signals including screen resolution, browser plugin list, and timezone offset.

3.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to view all cookies stored on your device, block cookies from specific sites, or clear all cookies when you close the browser. Please note that disabling functional or analytics cookies may affect the quality of your experience on at777 but will not prevent you from accessing core platform features.

Instructions for managing cookies in the most common browsers are available via the help pages of Chrome, Firefox, Safari, Edge, and Opera respectively. at777 does not respond to browser-level "Do Not Track" signals as there is currently no universal standard for how websites should interpret these signals.

at777 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf in order to deliver the platform. These providers are contractually bound to use your data only for the specific purpose for which it was shared, to maintain appropriate security standards, and not to disclose it to unauthorised parties. Categories of service providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, SureCash, Visa/Mastercard acquiring banks, and correspondent banking partners who process financial transactions on the platform
• Identity verification providers — third-party KYC and document verification services used to confirm player identity and age
• Cloud infrastructure providers — hosting and content delivery network (CDN) services that store and transmit platform data
• Analytics providers — first-party analytics tools used to measure platform performance (data is anonymised before processing)
• Game content providers — licensed game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) who may receive session identifiers to authenticate gameplay — no personally identifiable information beyond a pseudonymous player ID is passed to game studios

4.2 Legal Disclosures

at777 may disclose your personal data to governmental authorities, law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required or compelled to do so. This includes disclosures made in connection with anti-money laundering (AML) investigations, fraud investigations, court orders, or other lawful requests. Where permitted by law, we will attempt to notify you of such disclosure requirements before complying.

4.3 Business Transfers

In the event that at777 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered to your account before your personal data is transferred and becomes subject to a materially different privacy policy.

4.4 No Cross-Border Transfers Without Safeguards

Where personal data is transferred to service providers located outside Bangladesh, at777 ensures that appropriate contractual safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. We do not transfer personal data to jurisdictions that do not offer adequate data protection standards without such safeguards.

at777 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The retention periods set out below reflect our standard data lifecycle policy.

When the applicable retention period expires, personal data is securely deleted from all live systems. Where immediate deletion is not technically feasible (for example, data held in encrypted backup archives), the data is isolated from active processing and scheduled for deletion at the next available backup rotation cycle.

as a player on the at777 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with a clear description of the right you wish to exercise and verification of your identity. We will respond within ten (10) business days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that at777 holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of personal data we hold about you. This right is subject to exceptions where retention is required by law (for example, AML and financial record-keeping obligations), in which case we will inform you of the specific legal basis for continuing to retain the data.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified — without deleting the data itself.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including profiling for responsible gaming assessment purposes. We will cease processing unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

at777 implements a layered approach to data security, combining technical controls, operational policies, and staff training to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• TLS/SSL Encryption: All data in transit between your browser and at777 servers is encrypted using TLS 1.2 or higher. Our domain enforces HTTPS across all pages.
• Data Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Password Security: User passwords are never stored in plain text. We apply a salted cryptographic hashing algorithm to all password credentials before storage. Even in the event of a database breach, passwords cannot be reverse-engineered from stored hash values.
• Two-Factor Authentication (2FA): at777 applies OTP-based two-factor authentication for logins from new or unrecognised devices, providing an additional layer of account protection beyond your password alone.
• Access Controls: Internal access to personal data is strictly limited to staff who require it to perform their job functions. Access is managed via role-based permissions and reviewed on a regular basis. All access is logged and auditable.
• Security Monitoring: Our infrastructure is monitored continuously for anomalous access patterns, intrusion attempts, and data exfiltration indicators. Automated alerts are investigated by our security team around the clock.
• Penetration Testing: at777 engages third-party security specialists to conduct periodic penetration testing and vulnerability assessments of the platform. Identified vulnerabilities are remediated on a risk-prioritised schedule.
• Incident Response: In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of affected players, at777 will notify affected individuals without undue delay, providing details of the nature of the breach, categories of data affected, and steps taken to mitigate the impact.

at777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will update the "Last Updated" date displayed at the top of this document and, where appropriate, notify registered players via the email address associated with their account.

We encourage you to review this Privacy Policy periodically to stay informed about how at777 protects your personal data. Your continued use of the platform following any update to this Privacy Policy constitutes your acceptance of the revised version. If you do not agree to the revised Privacy Policy, you should stop using the platform and may request account closure by contacting [email protected].

8.1 Scope of This Policy

This Privacy Policy applies solely to personal data collected and processed by at777 through the platform accessible at https://at777.im. It does not apply to third-party websites or services that may be linked from the platform. at777 is not responsible for the privacy practices of any third-party operator, game studio, or payment provider, and encourages you to review the privacy policies of those parties independently.

8.2 Contact the Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which at777 handles your personal data, please contact us using the following details. Please note that our email address is provided as plain text only and is not a clickable link — copy and paste it into your email client:

• Privacy & Support Email: [email protected]
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy requests acknowledged within 2 business days; fully resolved within 10 business days