es77 Privacy Policy

es77 operates Bangladesh's premier online sports betting and casino platform at es77.io. As the data controller for the personal information you provide when using our services, es77 is committed to handling your data responsibly, transparently, and in accordance with applicable data protection principles.

This Privacy Policy applies to all personal data collected by es77 through the Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and general browsing of the website. It applies to all registered players and to visitors who have not yet created an account.

This Policy should be read together with our Terms and Conditions and our Responsible Gaming policy, both of which form part of your agreement with es77.

es77 collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes, or health information, unless specifically required by a legal obligation applicable to our operations.

es77 collects personal data through the following channels:

• Direct submission: Data you voluntarily provide during account registration, KYC document upload, deposit and withdrawal requests, or when contacting our customer support team via live chat or email.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools each time you access the Platform. This data is collected without requiring any action on your part beyond visiting the site.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment processors when you initiate a deposit or withdrawal. We receive confirmation references and amounts but never store full payment credentials.
• Identity verification partners: Where we use third-party KYC or fraud-prevention services to verify the identity documents you submit, those partners may return verification status data to us which is added to your account record.
• Responsible gaming tools: If you activate deposit limits, self-exclusion, or cooling-off periods, the settings and activation timestamps are recorded in your account data.

es77 processes your personal data only where a clear and legitimate purpose exists. The table below sets out the primary purposes for which we use your data and the corresponding legal basis for each:

es77 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session while you are logged in, and to gather anonymised analytics data that helps us improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality including session management, login authentication, and security token validation. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool configurations. These persist across sessions to improve your experience.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages and game categories are most visited, average session duration, and error occurrences. This data helps our development team prioritise improvements.
• Fraud prevention cookies: Assist in detecting suspicious login behaviour, unusual wagering patterns, and potential account takeover attempts by establishing a baseline device and behaviour fingerprint for your account.

You may manage non-essential cookies through your browser settings. Please note that disabling cookies may impair some Platform features. es77 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving advertisements on other websites.

es77 does not sell your personal data. We share data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to execute deposit and withdrawal transactions on your behalf. These providers operate under their own privacy policies and contractual obligations to maintain data confidentiality.
• KYC and identity verification providers: Third-party identity verification partners receive the KYC documents you submit for the sole purpose of confirming your age and identity. They are contractually prohibited from using this data for any other purpose.
• Game content providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe receive your account session token to enable live game participation. They do not receive your full identity data or financial information.
• Fraud prevention and security services: Specialised third-party tools that help es77 detect account takeovers, collusion, and money laundering activity may receive anonymised technical and behavioural data for analysis.
• Legal and regulatory obligations: es77 may disclose personal data to competent authorities where required to do so by law, court order, or in connection with a legitimate law enforcement investigation.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, personal data held by es77 may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party partners with whom es77 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified in their agreements with es77.

The es77 Platform serves players located in Bangladesh and processes the majority of data within the regional infrastructure serving South Asia. However, some of our technology partners and game content providers operate servers located in other jurisdictions.

Where personal data is transferred outside Bangladesh, es77 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. Such safeguards include contractual data protection clauses, technical encryption measures, and access control restrictions that limit which personnel of the receiving entity can view the transferred data.

If you have questions about the specific safeguards applied to any international data transfer, please contact our support team at the details provided in Section 14 of this Policy.

es77 retains personal data for defined periods that are tied to the purpose for which the data was collected and to any applicable legal retention obligations. The following retention schedules apply:

• Account data: Retained for the duration of your active account relationship with es77, plus a minimum period of five years following permanent account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of submission, or longer where required by applicable law or ongoing legal proceedings.
• Transaction records: All deposit and withdrawal records, including amounts in BDT and payment method references, are retained for a minimum of five years to satisfy financial record-keeping obligations.
• Support communications: Live chat transcripts and email correspondence are retained for three years from the date of the last interaction, after which they are securely deleted or anonymised.
• Technical and usage data: Anonymised analytics data is retained for up to 24 months. Personally identifiable technical data (such as IP address logs) is retained for 12 months and then deleted.
• Responsible gaming records: Self-exclusion records, deposit limit settings, and cooling-off period logs are retained for the duration of the exclusion or limit period, plus five years, to prevent circumvention of protective measures.

Upon expiry of the applicable retention period, data is either securely and permanently deleted or rendered permanently anonymous such that it can no longer be linked to an identified or identifiable individual.

You have the following rights in relation to the personal data es77 holds about you. To exercise any of these rights, please contact our support team using the details in Section 14. We will respond to all valid requests within 30 days of receipt.

Please note that certain rights may be limited where es77 is required to retain data to comply with a legal obligation, to establish or defend a legal claim, or where the exercise of your rights would adversely affect the rights or freedoms of another person.

es77 employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• TLS 1.3 encryption for all data in transit between your browser or device and our servers.
• AES-256 encryption for sensitive personal data stored at rest in our databases.
• Role-based access controls ensuring that only authorised es77 personnel with a specific operational need can access personal data, on a strictly need-to-know basis.
• Multi-factor authentication for all internal system access by es77 staff and contractors.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals to identify and remediate weaknesses before they can be exploited.
• Automated intrusion detection systems that monitor for unusual access patterns and trigger alerts for immediate investigation.
• Secure data disposal procedures ensuring that data is rendered unrecoverable when its retention period expires.

While es77 takes all reasonable precautions to protect your data, no system is entirely immune to risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, es77 will notify affected players without undue delay in accordance with applicable notification obligations.

The es77 platform is strictly intended for individuals aged 21 years and above. es77 does not knowingly collect personal data from anyone under the age of 21. Our registration process includes mandatory age declaration and our KYC verification process is designed to detect and reject under-age registration attempts.

If es77 discovers or reasonably suspects that an account has been registered by or on behalf of an individual under the age of 21, the account will be immediately suspended, all associated balances will be frozen pending investigation, and the personal data associated with the account will be securely deleted after the completion of any required regulatory reporting.

If you believe that es77 may have inadvertently collected personal data from a minor, please contact our support team immediately so that we can investigate and take appropriate action.

The es77 Platform does not contain links to third-party websites as a matter of policy. However, in the event that any third-party content or tool is integrated into the Platform in the future, please be aware that es77 has no control over the privacy practices of external websites or services and is not responsible for their content or data-handling behaviour.

This Privacy Policy applies solely to personal data collected and processed by es77 through the es77.io Platform. It does not extend to data collected by any third-party service, including payment processors, game providers, or identity verification partners operating under their own independent privacy policies.

es77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice via a prominent notice on the Platform and, where possible, by email to the address registered on your account.

The effective date shown at the top of this Policy and in the notification banner above will be updated to reflect the date on which the new version takes effect. We encourage you to review this Policy periodically to stay informed about how es77 protects your information.

Your continued use of the es77 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should stop using the Platform and contact our support team to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data es77 holds about you, please contact our support team using the following details:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 via the on-platform chat widget for registered players
• Response Time: All privacy-related requests are acknowledged within 24 hours (Bangladesh Standard Time, UTC+6) and fully resolved within 30 calendar days of receipt.

When submitting a data rights request, please include your registered account username and a brief description of the data in question to enable our team to locate your records and process your request efficiently.