el777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how el777 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the el777 website at https://el777.io and all associated services, including online casino games, sports betting, and payment processing functionality.

el777 is committed to handling your personal information with care, transparency, and respect. This Policy is written in plain English to ensure that every player — regardless of technical background — can understand how their data is managed. We encourage you to read this Policy in full before registering an account or making a deposit.

This Policy should be read alongside el777's Terms & Conditions and Responsible Gaming Policy, both of which are accessible from the footer of every page on the el777 platform. In the event of any conflict between this Policy and those documents on matters specifically relating to data privacy, this Policy shall prevail.

By accessing el777, you confirm that you are at least 21 years of age and that you consent to the data practices described in this Policy. If you do not consent, you must not use the el777 platform.

2 Data We Collect

el777 collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and — in limited circumstances — from third-party verification and payment providers. The categories of personal data we collect are described below.

2.1 Registration and Identity Data

When you create an el777 account, we collect:

• Full name (as it appears on your national identity document)
• Date of birth (to verify you are aged 21 or above)
• Registered mobile number (used as your primary account identifier and for SMS authentication)
• City of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)
• Preferred language (English)

2.2 Identity Verification Data

For account verification and anti-money-laundering (AML) compliance purposes, we may additionally collect:

• A copy of your National Identity Card (NID) or passport
• A selfie photograph for face-match verification
• Proof of address (such as a utility bill or bank statement)
• Screenshot of your registered bKash, Nagad, Rocket, or Upay mobile wallet account confirming account ownership

2.3 Payment and Transaction Data

When you make deposits or withdrawals, we collect:

• Mobile wallet phone number (bKash, Nagad, Rocket, Upay) associated with the transaction
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Bangladeshi Taka (BDT)
• Transaction status and payment provider response codes

We do not store full mobile banking PINs, OTP codes, or payment passwords. These credentials are entered directly into your payment provider's secure interface and are never transmitted to or stored by el777.

2.4 Usage and Behavioural Data

As you use the el777 platform, we automatically collect:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Session start and end times
• Pages visited, games played, and betting markets accessed
• Bet placement history, game round outcomes, and account balance changes
• In-account live chat transcripts (where support is used)

2.5 Communications Data

If you contact el777's support team via email or live chat, we retain a record of that communication including your message content, the date and time of contact, and any resolution actions taken. This data is used to improve service quality and to maintain an audit trail for dispute resolution purposes.

3 How We Use Your Data

el777 uses the personal data it collects exclusively for the following purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register and maintain your el777 account, including processing your login credentials, verifying your identity, and managing your account settings and preferences.
• Age verification: To confirm that you are at least 21 years of age before permitting access to real-money gaming and betting services. This is a strict platform requirement and a responsible gaming obligation.
• Payment processing: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, and Upay; to reconcile transaction records; and to resolve payment disputes where they arise.
• Game and betting services: To operate casino games, sports betting markets, and related features on your behalf; to calculate and credit winnings; and to maintain an accurate record of your gaming history.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and other forms of financial crime. This includes automated monitoring of account activity patterns and manual review where suspicious behaviour is flagged.
• Customer support: To respond to your queries, resolve account issues, investigate complaints, and communicate decisions arising from our formal dispute resolution process.
• Responsible gaming: To monitor betting and gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide timely support to players who may be at risk.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the el777 platform and to improve game selection, navigation, performance, and user experience.
• Promotional communications: To send you relevant bonus offers, cricket betting promotions (including BPL, IPL, T20 World Cup), and seasonal promotions (Eid, Pohela Boishakh) where you have opted in to receive marketing communications. You may opt out at any time by contacting [email protected].
• Legal compliance: To comply with applicable legal obligations including record-keeping requirements, responses to lawful authority requests, and enforcement of el777's Terms & Conditions.

4 Legal Basis for Processing

el777 processes your personal data on the following legal bases:

• Contractual necessity: The majority of data processing described in this Policy is necessary to perform the contract between el777 and you as a registered player. Without collecting and processing identity, payment, and usage data, el777 cannot provide its services to you.
• Consent: Where el777 sends you optional promotional communications or uses cookies beyond those strictly necessary for platform operation, we do so on the basis of your consent. You may withdraw consent at any time.
• Legal obligation: el777 processes certain data — particularly identity verification data, transaction records, and AML-related information — because it is required to do so under applicable legal and compliance obligations.
• Legitimate interests: el777 processes usage and behavioural data for fraud detection, platform security, and service improvement on the basis of its legitimate interests in operating a secure, fair, and commercially sustainable platform, provided those interests are not overridden by your fundamental privacy rights.

5 Data Sharing and Disclosure

el777 does not sell or rent your personal data. We share your personal data only in the following limited and specific circumstances:

• Payment providers: Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to facilitate the processing of deposits and withdrawals. Each of these providers operates under its own privacy and security policies, which are independent of this Policy.
• Game providers: Usage data relating to specific game sessions may be shared with certified third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, to the extent necessary to operate and audit game outcomes. These studios are contractually bound to process such data only for the purposes of game operation and compliance.
• Identity verification services: Where automated or third-party-assisted identity verification is used, limited identity data (such as NID details) may be shared with a verification service provider acting as a data processor on el777's behalf, subject to strict data processing agreements.
• Legal and regulatory authorities: el777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal process, court order, or applicable legal obligation. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.
• Business transfers: In the event that el777's business is acquired, merged, or restructured, personal data held by el777 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data going forward.

6 Cookies and Tracking

el777 uses cookies and similar tracking technologies on its website to ensure proper platform functionality, maintain session security, and analyse aggregate usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the el777 website to function. They enable core features such as session authentication, account login state, and navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional cookies: These cookies remember your platform preferences such as preferred language, display settings, and recently viewed game categories. They improve your experience but are not essential to core functionality.
• Analytical cookies: el777 uses first-party analytical tools to collect aggregated, anonymised data about how players navigate the website, which games are most visited, and how platform performance can be improved. This data does not identify you personally.
• Session security cookies: These cookies help detect and prevent session hijacking, cross-site request forgery (CSRF), and other common web security threats. They are strictly necessary and cannot be disabled.

el777 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertisers. You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair core platform functionality including account login.

7 Data Retention

el777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Active account data: Personal data associated with an active el777 account is retained for the duration of the account relationship and for a period of five years following account closure. This retention period reflects AML compliance requirements for financial record-keeping.
• Identity verification documents: Copies of NID, passport, and proof of address documents are retained for five years from the date of submission or from account closure, whichever is later.
• Transaction records: Deposit and withdrawal records are retained for five years from the date of the transaction.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the communication, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved plus two years.
• Analytical data: Aggregated, anonymised usage analytics data that cannot be used to identify any individual player is retained indefinitely for platform improvement purposes.
• Marketing consent records: Records of your marketing opt-in or opt-out status are retained for the lifetime of your account and for two years following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with your identity.

8 Your Rights

As a registered el777 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the el777 support team at [email protected] with the subject line "Data Rights Request" and your account username. We will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data that el777 holds about you. We will provide this in a clear, structured format.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your registered mobile number and city of residence can also be updated directly from your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on the basis of legitimate interests. Note that this right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain.
• Right to restrict processing: You may request that el777 restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You have the right to receive a copy of the personal data you provided to el777 in a structured, commonly used, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of el777's legitimate interests, including profiling. If you object, el777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9 Data Security

el777 implements a layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Key security measures include:

• Transport encryption: All data transmitted between your device and el777's servers is encrypted using 256-bit SSL/TLS protocols. The el777 website enforces HTTPS at all times; plain HTTP connections are automatically redirected.
• Data storage encryption: Sensitive personal data stored on el777's servers — including identity documents, verified account credentials, and payment records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within el777's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role.
• SMS two-factor authentication: All el777 player accounts support SMS-based two-factor authentication (2FA) to provide an additional layer of login security. Players are strongly encouraged to enable 2FA from their account security settings.
• Fraud monitoring: el777 operates automated systems that continuously monitor account activity for patterns indicative of unauthorised access, account takeover attempts, and financial fraud. Suspicious activity triggers immediate alerts for manual review.
• Staff training: el777 personnel who handle personal data receive regular training on data protection principles, security protocols, and the proper handling of player information.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your el777 account has been compromised, please contact our support team immediately at [email protected].

10 Third-Party Services

The el777 platform integrates with a number of third-party service providers to deliver its full range of gaming, payment, and operational services. Each of these providers operates under their own independent privacy policies and data protection frameworks. el777 is not responsible for the privacy practices of third-party providers, though it selects partners who maintain standards consistent with el777's own data protection commitments.

Third-party service providers whose platforms interact with el777 player data include:

• Payment providers: bKash, Nagad, Rocket, Upay — for mobile wallet deposit and withdrawal processing.
• Game studios: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi — for the operation of live casino, slots, crash games, and other casino game products.
• Identity verification: Third-party KYC (Know Your Customer) verification tools used to validate player identity documents where automated verification is employed.
• Analytics: First-party analytics infrastructure used to process aggregated, anonymised platform usage data. el777 does not use Google Analytics or other third-party analytics platforms that share data externally.

The el777 website does not contain links to external third-party websites. Players who independently navigate to external websites (for example, the website of a payment provider) do so outside the scope of this Privacy Policy, and el777 accepts no responsibility for those websites' data practices.

11 Children and Minors

el777's services are strictly for adults aged 21 years and above. el777 does not knowingly collect personal data from any person under the age of 21. The platform's registration process includes a date-of-birth verification step specifically designed to prevent underage individuals from creating accounts.

If el777 discovers that it has inadvertently collected personal data from a person under the age of 21, it will immediately close the associated account, delete all collected personal data relating to that minor, and reverse any financial transactions associated with the account.

If you are a parent or guardian and believe that a minor in your care has registered an account on el777, please contact our support team immediately at [email protected] so that we can take prompt remedial action.

12 Policy Updates

el777 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The following procedure applies when this Policy is updated:

• The revised Policy will be published on this page at https://el777.io/privacy-policy, with the "Last Updated" date revised to reflect the date of the most recent change.
• Where changes are material — meaning they substantively affect how your personal data is collected, used, or shared — registered account holders will be notified via SMS to the mobile number on their account, at least 14 days before the changes take effect.
• Continued use of the el777 platform after the effective date of any material policy update constitutes your acceptance of the revised Privacy Policy.
• Minor updates — such as corrections of typographical errors, clarifications that do not alter the substantive meaning of any section, or updates to contact information — may be made without advance notice.

We encourage you to review this Privacy Policy periodically to stay informed about how el777 is protecting your personal data. If you have any questions about a policy update, contact our support team before the effective date of the change.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to el777's handling of your personal data, please contact the el777 support team through the following channels:

• Email: [email protected] — For data rights requests, use the subject line "Data Rights Request" and include your account username and a clear description of your request. Responses are provided within 30 days of receipt.
• Live Chat: Available 24 hours a day, seven days a week via the in-account live chat function. Average response time during Bangladesh Standard Time (BST, UTC+6) peak hours is under five minutes.

el777 does not operate a telephone support line. Please do not include sensitive personal data such as your full NID number, payment PINs, or passwords in email or live chat communications. el777 staff will never request your password.

el777's support team operates on Bangladesh Standard Time (BST, UTC+6). All communications should be in English to ensure accurate and timely handling of your query.