k3777 Privacy Policy

1 Who We Are

k3777 (referred to throughout this policy as "k3777", "we", "us", or "our") operates the online casino and sports betting platform accessible at https://k3777.io. We are the data controller responsible for the personal data collected through this platform. As data controller, we determine the purposes and means by which your personal data is processed.

k3777 serves players across Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. Our platform is operated exclusively for adults aged 21 and above. If you believe you have received communications from k3777 in error or if you are under 21 years of age, please contact us immediately at [email protected] so we can remove your data from our systems.

2 Data We Collect

k3777 collects several categories of personal data depending on how you interact with our platform. The table below sets out each category, specific data points, and the context in which they are typically collected.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or detailed health data beyond what is strictly required for responsible gaming assessment purposes (e.g., self-declared problem gambling history when a player contacts us for support).

3 How We Collect Your Data

k3777 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your profile settings.
• Automated Technologies: Data collected automatically as you navigate the k3777 platform, including via cookies, web beacons, pixel tags, and similar tracking technologies. This includes your IP address, device identifiers, session duration, and pages visited.
• Payment Providers: Confirmation data received from payment processors such as bKash, Nagad, Rocket, and Upay following a deposit or withdrawal transaction. This typically includes transaction reference numbers, amounts, and timestamps — we do not receive your full payment credentials from these providers.
• Game Providers: Game session data, including bet amounts, game outcomes, and session timestamps, provided to us by our licensed game providers (such as Pragmatic Play, Evolution Gaming, PG Soft, JILI, Microgaming, NetEnt, Spribe, and Ezugi) in order to maintain accurate account records.
• Identity Verification Services: During KYC review, we may use authorised third-party identity verification services to cross-check the documents you submit against official records. These services return only a verification outcome — they do not provide us with additional personal data beyond what you have already submitted.
• Fraud Prevention Partners: Risk scoring data from authorised fraud detection services, used to identify potentially suspicious account behaviour and protect the integrity of the k3777 platform.

4 Purposes & Legal Basis for Processing

k3777 processes your personal data only where a clear lawful basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each.

Where we rely on your consent as the legal basis for processing — such as for marketing communications or non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, adjust your account communication preferences or contact us at [email protected].

5 Cookies & Tracking Technologies

k3777 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged into your account session, and to improve the overall user experience. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for core platform functionality including secure login sessions, account authentication tokens, and anti-fraud session markers. These cookies cannot be disabled without breaking core platform features.
• Functional Cookies: Store your platform preferences such as display settings, game lobby layout choices, and responsible gaming reminder intervals. These improve your experience but are not essential.
• Analytics Cookies: Collect anonymised data about how players navigate the k3777 platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used to improve platform performance and content relevance.
• Marketing Cookies (opt-in): Where you have provided consent, these cookies allow us to show you relevant k3777 promotions and personalised game recommendations based on your activity. You may opt out at any time via your account settings.

You can manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the k3777 platform, including logging into your account.

6 Data Sharing & Third Parties

k3777 does not sell your personal data. We may share your data with the following categories of authorised third parties, strictly to the extent necessary for each stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum transaction data required to process your deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, PG Soft, JILI, Microgaming, NetEnt, Spribe, Ezugi, and other licensed studios receive your account identifier and session data necessary to deliver their games within the k3777 platform.
• KYC & Identity Verification Services: Authorised third-party services may receive copies of the documents you submit during KYC review for the sole purpose of verifying their authenticity. These providers are contractually prohibited from using your data for any other purpose.
• Fraud Detection & Risk Management Services: Specialist fraud prevention providers may receive technical data (IP address, device fingerprint, session patterns) to generate risk scores that protect the platform and all players from fraudulent activity.
• IT & Cloud Infrastructure Providers: Secure hosting, database management, and content delivery services that process data strictly on our documented instructions and under data processing agreements that bind them to confidentiality and security obligations.
• Law Enforcement & Regulatory Authorities: Where required by applicable law, court order, or regulatory instruction, k3777 may be obligated to disclose personal data to competent Bangladeshi authorities. We will only comply with such requests where they are lawfully made and properly documented.

All third-party service providers engaged by k3777 are required to maintain appropriate technical and organisational security measures, to process data only on our documented instructions, and to delete or return all data upon the conclusion of their engagement with us.

7 International Data Transfers

Some of the third-party service providers used by k3777 — particularly game providers such as Pragmatic Play, Evolution Gaming, and others — operate from jurisdictions outside Bangladesh. Where personal data is transferred to a third country, k3777 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by k3777.
• Transfers only to recipients in countries or jurisdictions that maintain recognised data protection frameworks.
• Transfer of the minimum data set necessary to fulfil the specific service purpose, with no authorisation for the recipient to use the data for any other objective.

If you have questions about the specific safeguards applied to any international data transfer made by k3777, you may request further information at [email protected].

8 Data Retention

k3777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your k3777 account being open and active.
• Transaction & Bet Records: Retained for a minimum of 5 years following the date of the transaction, in line with standard financial record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date the account is closed or the last transaction is made, whichever is later.
• Customer Support Correspondence: Retained for 3 years from the date the support ticket or interaction is closed.
• Marketing Consent Records: Retained for the duration of your opt-in consent plus 2 years after withdrawal of consent, to demonstrate compliance.
• Technical & Log Data: Retained for up to 12 months, after which it is anonymised or deleted.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual. Data that is no longer required for its original purpose but must be retained for legal reasons is archived with restricted access controls applied.

9 Your Data Rights

As a k3777 account holder, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days.

Please note that some rights are subject to limitations. For example, we cannot delete transaction records that we are legally required to retain, and we cannot provide data portability for data that is not held in a structured digital format. Where a limitation applies, we will explain the specific reason in our response to your request.

10 Children & Minors

The k3777 platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data belonging to any individual under the age of 21. Our registration process includes age verification steps designed to prevent underage access.

If k3777 discovers or is notified that personal data belonging to a person under 21 has been collected — whether through a misrepresentation during registration or any other means — we will immediately and permanently close the associated account, delete all collected personal data to the extent not required by legal retention obligations, and take appropriate steps to prevent future access from that individual. If you are a parent or guardian and believe your child has registered with k3777, please contact us immediately at [email protected].

11 Security Measures

k3777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the k3777 platform.
• AES-256 encryption for sensitive data stored in our databases, including financial credentials and identity document records.
• Role-based access controls ensuring that only authorised k3777 personnel with a documented need can access personal data relevant to their function.
• Regular third-party security audits and penetration testing of the k3777 platform infrastructure.
• Real-time fraud monitoring systems that flag unusual account activity patterns for human review.
• Multi-factor authentication options available to players for additional account security.
• Strict data processing agreements with all third-party vendors, requiring equivalent security standards.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, k3777 will notify you and any relevant authorities without undue delay and in accordance with applicable legal requirements.

12 Links to Third-Party Sites

The k3777 platform may display references to or content from third-party game providers and payment partners. Where game interfaces are delivered by providers such as Pragmatic Play, Evolution Gaming, or Spribe within the k3777 environment, those interactions are subject to the data practices of those providers in addition to this Privacy Policy. k3777 is not responsible for the privacy practices of external websites or services that are not operated by us. We encourage you to review the privacy policies of any third-party services you interact with directly.

13 Changes to This Privacy Policy

k3777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification email to the address registered on your k3777 account at least 7 days before the revised policy takes effect.
• Display a prominent notice on the k3777 platform for a minimum of 7 days prior to the changes becoming effective.

Your continued use of the k3777 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

14 Contact & Data Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or the personal data k3777 holds about you, please contact our data protection team using the details below:

• Email: [email protected] (subject line: "Privacy / Data Request")
• WhatsApp: +880 1700 000000 (plain text messages only — not a voice line)
• Response Time: We aim to acknowledge all data rights requests within 3 business days and provide a full response within 30 calendar days. Complex requests may require up to 60 days; we will inform you if an extension is needed.
• Verification: To protect your data, we will ask you to verify your identity before processing any data access, rectification, or deletion request. Acceptable verification methods include confirming your registered email address, submitting a copy of your NID or passport, and confirming recent account activity.

All correspondence relating to data protection matters is handled confidentially by a dedicated member of the k3777 compliance team. We do not use automated systems to respond to formal data rights requests — every request receives a reviewed, human-authored reply.