Privacy Policy — gd777

gd777 is an online betting and casino platform accessible at gd777.io, operated under an international gaming licence. The platform offers sports betting markets — with a particular focus on cricket events including the BPL, IPL, and T20 World Cup — alongside a comprehensive live casino, slot games, and crash titles including Monster Crash and BetterLive Live.

For the purposes of this Privacy Policy, gd777 acts as the data controller in respect of all personal information collected from registered users and visitors to gd777.io. As data controller, gd777 determines the purposes and means by which personal data is processed and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

All privacy-related correspondence and data subject requests should be directed to our support team at the contact details provided in Section 14 of this policy.

The categories of personal data that gd777 may collect and process about you are set out in the table below. The specific data collected will depend on which services you use and how you interact with the platform.

gd777 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing identity verification, submitting a support request, or updating your profile settings.
• Automated technical collection: Device and usage data collected automatically when you visit gd777.io, including IP address, browser fingerprint data, and session behaviour, collected via server logs, cookies, and analytics tools.
• Payment processors: Transaction reference data returned by payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you make a deposit or initiate a withdrawal.
• Identity verification providers: Confirmation data returned by third-party KYC service providers engaged to verify the authenticity of documents you submit during the account verification process.
• Third-party game providers: Session and game result data transmitted by game studio platforms including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi, for the purpose of recording your gaming activity and calculating account balances.
• Responsible gaming tools: Preferences and settings you configure within your account's responsible gaming dashboard, including self-imposed deposit limits and session time reminders.

gd777 processes personal data only for defined, legitimate purposes. The table below maps each processing activity to its purpose and the data categories involved.

gd777 relies on the following legal grounds to process your personal data:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered gd777 user, including account management, payment processing, and delivering the services you have requested. Without this processing, gd777 cannot provide its services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) checks, age verification obligations, fraud prevention reporting, and responses to lawful requests from law enforcement authorities.
• Legitimate interests: Processing carried out for purposes that are in gd777's legitimate business interests, provided those interests are not overridden by your privacy rights. This includes fraud detection, platform security, internal analytics, and responsible gaming monitoring. gd777 conducts a balancing assessment before relying on this basis.
• Consent: Where gd777 relies on your consent as the legal basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

gd777 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank receive the minimum data necessary to process your deposit or withdrawal transactions securely.
• Identity verification providers: Third-party KYC platforms receive copies of identity documents you submit for verification purposes. These providers are contractually bound to process your data only for the purpose of completing verification on gd777's behalf.
• Game studio providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios receive session identifiers and game-result data necessary to run the games you play. These studios operate under their own privacy frameworks and are independent data controllers in respect of their own game systems.
• Platform infrastructure providers: Cloud hosting, content delivery, and security service providers who store and process platform data on gd777's behalf under data processing agreements that restrict their use of your data to service provision only.
• Analytics and marketing tools: Anonymised or pseudonymised usage data may be shared with analytics platforms to help gd777 understand platform performance and improve user experience. No directly identifiable data is shared for this purpose.
• Law enforcement and regulatory bodies: gd777 will disclose personal data to competent authorities where required to do so by law, court order, or legitimate regulatory request, including in the context of AML investigations, fraud reports, or match-fixing enquiries.

gd777 uses cookies and similar tracking technologies on gd777.io to support platform functionality, maintain your session, and gather analytics data that helps us improve the service. The categories of cookies we use are described below:

• Strictly necessary cookies: These cookies are essential to the operation of the gd777 website. They maintain your login session, store your language and display preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without disrupting platform functionality.
• Analytics cookies: These cookies collect anonymised data about how visitors interact with gd777.io — including which pages are visited most frequently, how long sessions last, and where users navigate from. This information is used in aggregate form to improve the platform and is not used to identify individual users.
• Functional cookies: These cookies remember preferences you set on the platform, such as game settings, preferred payment method, and responsible gaming dashboard configurations, so that you do not need to re-enter them each time you visit.
• Performance cookies: These cookies assist in monitoring platform performance, identifying slow-loading pages, and detecting technical errors, enabling the engineering team to address issues promptly.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use gd777's services. For more information on managing browser cookie settings, consult your browser's help documentation.

gd777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements and to respond to any post-closure disputes or regulatory enquiries.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial regulations.
• Identity verification documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, or longer if relevant to an ongoing dispute or regulatory matter.
• Analytics and usage data: Anonymised or aggregated analytics data may be retained indefinitely for platform improvement purposes, as it contains no personal identifiers.
• Marketing consent records: Retained for the duration of active consent and for one (1) year following withdrawal of consent, as proof of lawful marketing activity.

When personal data is no longer required, it is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. If you request deletion of your data and no legal obligation prevents it, gd777 will complete the deletion within 30 calendar days of the verified request.

As a registered gd777 user, you hold the following rights in respect of your personal data. gd777 processes all valid rights requests free of charge and within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to a further 30 days, in which case we will notify you of the extension.

To exercise any of the rights listed above, please contact gd777 support at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing the request to protect against unauthorised access to your data.

gd777 operates a strict 21+ age policy. The platform is not intended for, and does not knowingly collect personal data from, any person under the age of 21. Age verification checks are carried out during the account registration process, and accounts that cannot confirm eligibility are not permitted to deposit or participate in real-money activities.

If gd777 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that your child may have registered on gd777 without your knowledge, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

gd777 implements a multi-layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. The technical and organisational measures in place include:

• TLS/SSL encryption: All data in transit between your device and gd777's servers is encrypted using current TLS standards.
• Encryption at rest: Sensitive personal data and financial records stored in gd777's databases are encrypted at rest using AES-256 or equivalent standards.
• Access controls: Internal access to personal data is governed by role-based access controls, ensuring that only authorised personnel with a legitimate operational need can view or process specific data categories.
• Intrusion detection: gd777's infrastructure is monitored continuously for anomalous access patterns, and automated alerts are triggered upon detection of potential security incidents.
• Regular security assessments: gd777 conducts periodic internal security reviews and engages third-party professionals to perform penetration testing and vulnerability assessments of its platform.
• Staff training: All gd777 personnel with access to personal data receive data protection and security awareness training relevant to their role.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, gd777 will notify affected users promptly and take all necessary steps to contain and remediate the incident.

As an internationally operated platform, gd777 may transfer your personal data to, and store it on, servers located outside of Bangladesh. This may occur when data is processed by our cloud infrastructure providers, game studio partners (such as Evolution Gaming or Pragmatic Play), or identity verification service providers, whose systems may be hosted in jurisdictions including but not limited to Europe, Singapore, and the United Kingdom.

Where personal data is transferred internationally, gd777 ensures that appropriate safeguards are in place to protect your privacy rights to a standard equivalent to the protections described in this policy. These safeguards include contractual data protection clauses in agreements with all third-party data processors, and regular reviews of the security and compliance posture of international service providers.

If you have concerns about the international transfer of your personal data, please contact us at the details provided in Section 14 and we will provide further information about the specific safeguards applicable to your data.

gd777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made in response to developments in data protection law, changes to our services, feedback from users, or shifts in industry best practice.

When material changes are made to this Privacy Policy — that is, changes that meaningfully affect how your personal data is collected, used, or shared — gd777 will notify registered users by email to the address associated with their account, and will display a prominent notice on gd777.io for a period of not less than 14 days prior to the changes taking effect.

Minor, non-material changes (such as formatting corrections, clarifications, or updates to contact details) may be made without advance notice. The "Last updated" date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed about how gd777 handles your data.

Your continued use of gd777's services following any change to this Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with a material change, you should discontinue use of the platform and contact support to discuss your account options.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how gd777 handles your personal data, please contact our support team using the details below. All privacy-related communications are handled by our dedicated data protection team.

When submitting a data rights request, please include your registered email address, a description of the right you wish to exercise, and any relevant context that will help us locate and process your data accurately. We may ask you to verify your identity before acting on the request.

gd777 is committed to resolving all privacy concerns fairly and promptly. If you are not satisfied with our response to a complaint or data rights request, you have the right to escalate the matter to the relevant supervisory authority in your jurisdiction.