dd777 Privacy Policy – Your Data, Your Rights

Privacy Highlights – What You Need to Know

This Privacy Policy ("Policy") is issued by dd777 ("dd777", "we", "us", "our") and applies to all personal data processed in connection with your use of the dd777 website and online casino platform at dd777.onl, including all games, payment services, promotions, and customer support interactions. This Policy should be read alongside the dd777 Terms and Conditions.

dd777 is committed to handling all personal data in a manner that is transparent, fair, and proportionate to the purposes for which it was collected. We collect only the data that is necessary to provide our services to players across Bangladesh — including players in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur and Mymensingh — and we do not collect data beyond what is required for those purposes.

dd777 collects personal data in three main ways: information you provide directly when registering or transacting, information generated automatically by your use of the Platform, and information provided by third-party payment processors as part of transaction verification.

Information You Provide Directly

• Identity data: full legal name, date of birth, and a government-issued identification number provided during KYC verification.
• Contact data: mobile phone number, email address (if provided), and residential address, including district and division within Bangladesh.
• Account credentials: username and encrypted password hash. dd777 does not store passwords in plain text at any point.
• Support communications: the content of messages, emails, or chat transcripts you exchange with the dd777 customer support team.

Information Collected Automatically

• Device and network data: IP address, device type, operating system, browser version, mobile network operator (e.g. Grameenphone, Robi, Banglalink, Teletalk), and approximate geographic location derived from IP.
• Session and activity data: pages visited, time on page, game sessions started and completed, wagering activity, bonus claims, and deposit/withdrawal events.
• Cookie data: session cookies required for login state persistence, preference cookies for language and display settings, and analytics cookies that aggregate usage data. See Section 7 for full cookie details.
• Log data: server-side logs of all transactions, bets, game outcomes, and account actions. These logs are retained for security and dispute-resolution purposes.

Information from Third-Party Payment Processors

• When you deposit or withdraw using bKash, Nagad, Rocket, or Upay, the relevant payment provider may share with dd777 a transaction reference number, the mobile number associated with the wallet, and confirmation of the transaction amount and status. dd777 does not receive your full wallet PIN or authentication credentials from any payment provider.
• For Visa and Mastercard transactions, card data is processed by a PCI-DSS compliant payment gateway. dd777 does not store full card numbers, CVV codes, or card expiry dates on its own servers.

The following table sets out the purposes for which dd777 processes your personal data and the legal basis on which each processing activity rests.

dd777 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: processing required to fulfil the account registration, game play, deposit, and withdrawal services you have requested from dd777.
• Legal obligation: processing required to comply with anti-money laundering obligations, age verification requirements, and any applicable regulatory or law enforcement requirement.
• Legitimate interests: processing for fraud detection, security monitoring, platform improvement, responsible gaming analytics, and resolving disputes — where those interests are not overridden by your privacy rights.
• Consent: where dd777 sends you optional marketing communications about promotions and new games, we do so on the basis of your consent. You may withdraw consent at any time by contacting dd777 support.

dd777 does not sell, rent, trade or otherwise transfer your personal information to any third party for commercial or marketing purposes. Your data is shared externally only in the following limited circumstances:

Service Providers

• Payment processors (bKash, Nagad, Rocket, Upay, and card payment gateways) receive only the transaction data necessary to process your deposit or withdrawal. They are contractually prohibited from using your data for any other purpose.
• Game software providers (such as Evolution Gaming, Ezugi, Pragmatic Play) receive session identifiers and game stake data necessary to deliver the game experience and resolve disputes. They do not receive your full identity or payment details.
• Analytics and security technology providers may process aggregated, anonymised usage data to help dd777 improve platform stability, detect technical errors, and monitor for suspicious activity patterns. These providers have no access to your identity or financial information.

Legal and Regulatory Disclosure

dd777 will disclose personal data to law enforcement authorities, regulators, or other government bodies where required to do so by applicable law, court order, or where dd777 reasonably believes disclosure is necessary to prevent or report fraud, money laundering, or other criminal activity. In such cases dd777 will disclose only the minimum data required to satisfy the legal obligation.

dd777 treats payment-related personal data with the highest level of care. All deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa and Mastercard are processed through secure, encrypted channels. Financial transaction records — including deposit amounts, withdrawal requests, and payment method references — are retained in accordance with the data retention schedule in Section 8, primarily to support dispute resolution, fraud investigation, and compliance with financial record-keeping obligations.

If you believe that a payment transaction involving your dd777 account has been processed in error, or that your payment credentials have been compromised, you should contact dd777 support immediately and, where appropriate, contact your payment provider (bKash, Nagad, your bank, or card issuer) directly. dd777 will cooperate fully with any investigation by a payment provider or financial institution in connection with a suspected fraudulent transaction.

dd777 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, remember your preferences, and understand how players use the site so we can improve it. The following categories of cookies are used:

• Essential cookies: strictly necessary for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how players navigate the Platform, which game categories are most visited, and where technical errors occur. This data is used solely to improve dd777's service and is never used to identify individual users.
• Preference cookies: used to store your language selection (English or Bengali) and any display preferences you have set. These are first-party cookies and are not shared with any third party.

dd777 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform. You may manage or clear cookies through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in to your dd777 account.

dd777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Active account data (identity, contact, and preference data): retained for the full duration of your account's active status and for a minimum period of 5 years following account closure, to support AML compliance, dispute resolution, and regulatory audit requirements.
• Transaction records (deposit, withdrawal, and wagering history): retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping best practice.
• Support communications: retained for 2 years from the date of the last communication in a support thread, to allow for follow-up and dispute resolution. Communications related to a formal complaint or legal claim are retained until the matter is fully resolved.

You have the following rights with respect to the personal data that dd777 holds about you. To exercise any of these rights, please contact the dd777 support team through the official support channel. dd777 will respond to all valid requests within a reasonable timeframe and in any event within 30 days of receipt.

• Right of access: you may request a copy of the personal data that dd777 holds about you, together with an explanation of why we hold it and how it is used.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For account details such as name and date of birth, correction may require documentary verification.
• Right to erasure: you may request deletion of your personal data where the data is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations. Note that dd777 may be required by law to retain certain transaction and identity records even after account closure.
• Right to object: you may object to processing of your personal data for direct marketing purposes at any time and at no cost. You may also object to processing carried out on the basis of legitimate interests where you believe your privacy rights override those interests.
• Right to withdraw consent: where dd777 processes your data on the basis of consent (for example, for optional marketing messages), you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

dd777 will not charge a fee for handling a valid rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. Where dd777 is unable to comply with a request — for example, because doing so would conflict with a legal obligation — we will explain the reason in writing.

dd777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and dd777 servers, encrypted storage of sensitive data including identity documents and financial records, access controls limiting internal system access to authorised personnel only, regular security assessments and vulnerability testing of the Platform, and monitoring for anomalous account activity that may indicate unauthorised access or fraud.

Despite these measures, no platform can guarantee absolute security. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, dd777 will notify affected players without undue delay and will take all reasonable steps to contain the incident, investigate its cause, and prevent recurrence. Players are encouraged to maintain strong, unique passwords for their dd777 account and to log out after each session, especially when using a shared or public device.

dd777 is a platform strictly for adults aged 21 and above. dd777 does not knowingly collect personal data from any person under the age of 21. If dd777 becomes aware that personal data has been collected from a person below the minimum age, that data will be deleted and the associated account will be closed immediately. If you are a parent or guardian and believe that a minor has registered an account on dd777, please contact support immediately so that the account can be reviewed and closed.

dd777 reserves the right to update this Privacy Policy at any time. When material changes are made, the "Last updated" date at the top of this page will be revised. We encourage you to review this Policy periodically. Continued use of the Platform after a Policy update constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data has been handled by dd777, please contact the support team using the official contact email address listed on the Platform. All privacy-related enquiries are handled confidentially by the dd777 data team.