ec77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how ec77 ("ec77", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the ec77 online gaming platform at https://ec77.io, including its website, mobile interface, games, betting services, and customer support channels (collectively, the "Platform").

ec77 is committed to handling personal data responsibly and transparently. We apply data protection principles aligned with international best practice — including data minimisation, purpose limitation, storage limitation, and the security principle — across all our data processing activities. Our Platform is designed for the Bangladesh market and all communications, including those relating to data privacy, are conducted in English.

By registering an account on ec77 or otherwise using the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2 Data We Collect

ec77 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers. The categories of personal data we collect are set out below.

2.1 Registration & Identity Data

When you create an ec77 account, we collect:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you are 21 years of age or older)
• Bangladesh mobile phone number
• Email address
• Username and encrypted password
• Residential address in Bangladesh

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may additionally collect:

• Copy of your National Identity Card (NID) or valid passport
• Proof of address document (utility bill, bank statement, or equivalent)
• Proof of ownership of your payment method (bKash, Nagad, Rocket, Upay, or bank account)
• Selfie photograph alongside your identity document, where required by our compliance team

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in BDT and timestamps
• Mobile wallet identifiers (bKash/Nagad/Rocket/Upay account numbers) and bank account details used for transactions
• Payment method type (Visa, Mastercard, Bank Transfer)
• Transaction reference numbers and processing statuses

2.4 Gaming & Betting Activity Data

• Game history, bet records, wager amounts, and win/loss outcomes
• Bonus and promotion usage history
• Session start and end times
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

2.5 Technical & Usage Data

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the Platform
• Referral source (how you arrived at ec77.io)
• Error logs and crash reports (anonymised where possible)

2.6 Communications Data

• Records of your correspondence with ec77 customer support via email or live chat
• Feedback and survey responses you submit voluntarily
• Promotional email opt-in preferences

2.7 Summary Table

3 How We Use Your Data

ec77 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and secure your ec77 player account, including authentication and password recovery.
• Identity & Age Verification: To verify that you are who you say you are and that you are at least 21 years of age before allowing deposits, withdrawals, or continued gameplay.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bank Transfer in Bangladeshi Taka.
• Game Delivery: To provide access to casino games, sports betting markets, live dealer studios, and instant games on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Legal Compliance: To fulfil our obligations under applicable anti-money-laundering (AML) and Know Your Customer (KYC) requirements, including record-keeping and reporting.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other prohibited activities defined in our Terms and Conditions.
• Responsible Gaming: To monitor gambling behaviour patterns and proactively apply responsible gaming interventions where our systems identify potential problem gambling indicators.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the ec77 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about ec77 — but only if you have actively opted in to receive such communications. You may opt out at any time.

ec77 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where such processing is required by law or explicitly consented to by you.

4 Legal Basis for Processing

ec77 processes personal data only where a valid legal basis exists. The legal bases we rely upon for our processing activities are as follows:

Where ec77 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your rights and interests, taking into account the nature of the data, the context of processing, and the safeguards we apply.

5 Data Sharing & Third Parties

ec77 does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each specific purpose.

5.1 Service Providers (Data Processors)

ec77 engages carefully selected third-party service providers to perform specific functions on our behalf. These providers act as data processors and are contractually obligated to process your data only on ec77's instructions, to maintain appropriate security measures, and not to use your data for their own purposes. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard gateway providers — to process deposits and withdrawals.
• KYC & Identity Verification: Third-party document verification services that assist with NID/passport validation and liveness checks.
• Cloud Infrastructure: Hosting and database providers that store ec77's platform data on encrypted, access-controlled servers.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive your player session token and stake data to deliver game content. They do not receive your full identity profile.
• Customer Support Platforms: Live chat and ticketing system providers that facilitate your communications with the ec77 support team.
• Analytics Tools: Aggregated, anonymised usage analytics providers that help ec77 understand Platform performance.

5.2 Legal & Regulatory Disclosures

ec77 may disclose your personal data to governmental authorities, law enforcement agencies, or regulators where required to do so by applicable law, court order, or binding regulatory directive. We will notify you of any such disclosure where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ec77's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified in advance of any such transfer and of any material changes to how your data will be handled by the new entity.

5.4 No Third-Party Advertising

ec77 does not share your personal data with advertising networks, social media platforms, or data analytics companies for the purpose of serving you targeted advertisements on third-party platforms. Any marketing communications you receive come exclusively from ec77 directly, and only if you have opted in.

6 Cookies & Tracking Technologies

ec77 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Below is a description of the cookie categories we use.

6.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, enable secure payment flows, and protect against cross-site request forgery (CSRF). Strictly necessary cookies cannot be disabled without breaking core Platform functionality.

6.2 Functional Cookies

Functional cookies remember your preferences such as your selected language, default stake amounts in games, and responsible gaming reminder settings. Disabling these cookies will not prevent you from using the Platform but may reduce your experience quality.

6.3 Analytics Cookies

With your consent, ec77 uses anonymised analytics cookies to understand how players navigate the Platform — which pages are most visited, where users encounter friction, and how features are used. This data is processed in aggregate and does not identify you personally. You may opt out of analytics cookies through your browser settings at any time.

6.4 Managing Cookies

You can control and delete cookies through your browser settings. Instructions for the most common browsers are available from the respective browser's help documentation. Please note that disabling all cookies may prevent you from logging in to your ec77 account, as session cookies are strictly necessary for authentication.

7 Data Security

ec77 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security practices include:

• Encryption in Transit: All data transmitted between your device and ec77 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms that your connection to ec77.io is encrypted.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, payment details, and KYC records — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ec77 staff who do not require access to personal data as part of their role cannot access it. Access logs are maintained and regularly audited.
• Password Security: Player passwords are stored as salted cryptographic hashes. ec77 never stores passwords in plaintext and cannot retrieve your password — only reset it.
• Two-Factor Authentication (2FA): ec77 supports and encourages the use of 2FA for all player accounts to provide an additional layer of login security.
• Penetration Testing: ec77 commissions periodic independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: ec77 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

8 Data Retention

ec77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The retention periods we apply to the main categories of personal data are as follows:

When a retention period expires and no ongoing legal obligation requires continued storage, ec77 securely deletes or irreversibly anonymises your personal data. Anonymised aggregate data (from which you cannot be identified) may be retained indefinitely for statistical and Platform improvement purposes.

9 Your Data Rights

As an ec77 player, you have the following rights in relation to your personal data. These rights may be subject to certain limitations under applicable law, which we will explain if relevant when you exercise a right.

• Right of Access: You have the right to request a copy of the personal data ec77 holds about you, along with information about how it is being used. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to Erasure ("Right to be Forgotten"): You may request that ec77 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that ec77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to direct marketing communications at any time.
• Right Not to be Subject to Automated Decisions: You have the right not to be subject to a decision based solely on automated processing that produces significant legal effects on you, without human review.

To exercise any of these rights, contact ec77's data team at [email protected] with the subject line " Data Rights Request" and your registered username or email address. We will verify your identity before processing any request and will respond within 30 days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you.

10 Children & Age Restriction

The ec77 Platform is strictly intended for adults aged 21 years and above. ec77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ec77 registration and KYC process — you must confirm your date of birth and provide valid identity documentation confirming you are at least 21 years old before your account is fully activated.

If ec77 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, reverse any transactions where possible, and report the matter to our compliance team for investigation. Any winnings generated on an account found to belong to a minor will be forfeited.

If you are a parent or guardian and believe that your child has registered on the ec77 Platform without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

11 Third-Party Links

The ec77 Platform may contain references to game providers and payment partners whose names appear on our pages. ec77 does not include outbound links to third-party websites within its Platform pages. However, if you independently navigate to any third-party website — for example, the website of a game studio or payment provider — please be aware that ec77 has no control over and accepts no responsibility for the privacy practices or content of such third-party sites.

We encourage you to review the privacy policy of any third-party service you use in connection with your ec77 activities, including the mobile wallet apps for bKash, Nagad, Rocket, and Upay, which are independent services with their own data practices.

12 International Data Transfers

ec77 primarily stores and processes personal data on servers located within or close to the Asia-Pacific region to ensure low latency for players in Bangladesh. However, some of our service providers — including certain cloud infrastructure, KYC verification, and game content partners — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, ec77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh. These safeguards include contractual data processing agreements with all international service providers, incorporating data protection obligations that mirror the principles set out in this Policy.

ec77 does not transfer personal data to jurisdictions that do not provide adequate data protection standards without first implementing appropriate contractual or technical safeguards. If you have questions about international data transfers, please contact us at [email protected].

13 Updates to This Privacy Policy

ec77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, applicable law, or regulatory guidance. When we make material changes to this Policy, we will notify registered players by email (to the address on file for your account) and post a prominent notice on the ec77.io homepage for a period of at least 30 days prior to the changes taking effect.

For non-material changes — such as clarifications of existing practices or minor wording adjustments — we may update the Policy without individual notification, but the "Effective Date" at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed of how ec77 handles your personal data.

Your continued use of the ec77 Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may close your account by contacting [email protected].

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way ec77 handles your personal data, please contact us in the first instance using the details below. We aim to resolve all privacy-related enquiries within 5 business days.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your concern to the relevant data protection authority or consumer protection body in Bangladesh. ec77 is committed to cooperating fully with any such authority in resolving privacy disputes.

For urgent security concerns — including suspected unauthorised access to your account or a potential data breach — please mark your email with the subject line URGENT: Security Concern and our team will prioritise your case accordingly. You can also reach our support team via live chat on the Platform for immediate assistance.