m7777 Privacy Policy

1 Who We Are

m7777 operates the online casino and sports betting platform accessible at https://m7777.im (the "Platform"). For the purposes of this Privacy Policy, m7777 acts as the data controller — meaning we are responsible for determining the purposes and means by which your personal data is processed.

Our platform is designed to serve players based in Bangladesh, offering cricket betting, live casino games, slots, and a range of other entertainment products. All player-facing communications and support services are delivered in English. Our operations observe Bangladesh Standard Time (BST, UTC+6).

If you have any questions about this Privacy Policy or our data practices, you may contact our support team at any time. Contact details are provided in Section 13 of this document.

2 Data We Collect

m7777 collects personal data only where it is necessary for the lawful operation of the Platform, the delivery of services to you, and the fulfilment of our legal and regulatory obligations. The categories of personal data we collect are described below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless you voluntarily disclose such information in a support communication and it is directly relevant to your request (for example, disclosing a gambling-related health concern when seeking self-exclusion assistance).

3 How We Use Your Data

m7777 uses your personal data for the following specific purposes. Each purpose is paired with the legal basis upon which we rely, which is detailed fully in Section 4.

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and provide you with access to the Platform and all its features.
• Processing Transactions: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard, and to maintain an accurate record of your transaction history in BDT.
• KYC and Fraud Prevention: To verify your identity and age (21+), detect and prevent fraudulent activity, money laundering, and any other misuse of the Platform, and to comply with applicable financial crime regulations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate with you about your account through live chat, email, and WhatsApp.
• Platform Improvement: To analyse aggregate usage data in order to improve the Platform's performance, features, game selection, and user experience for players across Bangladesh.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to deliver responsible gaming interventions where appropriate.
• Legal Compliance: To fulfil obligations under applicable laws and regulations, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.
• Marketing Communications: To send you promotional emails, bonus notifications, and personalised offers — but only where you have provided explicit consent and have not subsequently withdrawn it. See Section 11 for opt-out details.

m7777 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight. Where automated tools are used in fraud detection or responsible gaming monitoring, a human review is applied before any account action is taken.

4 Legal Basis for Processing

m7777 processes your personal data under one or more of the following lawful bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing is required to perform the contract between you and m7777 — namely, the Terms & Conditions you accepted upon registration. This covers account management, game play, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial reporting obligations. This covers KYC data collection and transaction record-keeping.
• Legitimate Interests: Processing is necessary for m7777's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This covers fraud detection, platform security, IT infrastructure maintenance, and aggregate analytics for platform improvement.
• Consent: Processing is based on your freely given, specific, and informed consent. This applies exclusively to marketing communications and any optional data collection features you choose to enable. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Disclosure

m7777 does not sell, rent, or share your personal data with unaffiliated third parties for their own commercial purposes. We share data with third parties only in the following limited circumstances:

• Payment Processors: Financial data necessary to process your transactions is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard — solely for the purpose of completing your deposit or withdrawal. Each provider operates under its own privacy policy and data protection obligations.
• KYC and Identity Verification Partners: Identity and document data provided during the verification process is shared with our third-party KYC service provider. This provider processes your data on our behalf and is contractually prohibited from using it for any other purpose.
• Game Content Providers: Certain technical usage data (such as session identifiers and bet amounts) may be passed to game studio providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable game functionality and fairness auditing. No directly identifying personal data (such as your name or contact details) is shared with game studios.
• IT and Infrastructure Providers: m7777 uses third-party cloud hosting, database management, and cybersecurity services. These providers may technically access personal data stored on their infrastructure, but are bound by strict data processing agreements that limit their use of that data.
• Legal and Regulatory Authorities: m7777 may disclose personal data to law enforcement, financial intelligence units, or regulatory authorities where required by law, pursuant to a valid legal order, or where disclosure is necessary to protect the rights and safety of m7777, its players, or the public.

All third-party service providers engaged by m7777 are required to implement appropriate technical and organisational security measures to protect any personal data processed on our behalf. We conduct due diligence on all processors prior to engagement and review those relationships periodically.

6 Data Retention

m7777 retains personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account with m7777, plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML compliance obligations.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of seven (7) years in accordance with applicable financial regulations.
• KYC Documents: Identity verification documents (copies of NID, passport, proof of address) are retained for five (5) years following account closure or the last KYC verification event, whichever is later.
• Support Communications: Live chat transcripts, emails, and WhatsApp records are retained for three (3) years from the date of each communication.
• Technical and Usage Data: Log files, IP records, and session data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.
• Responsible Gaming Records: Self-exclusion records and deposit limit histories are retained for the duration of the restriction plus five (5) years, to prevent circumvention of responsible gaming controls.
• Marketing Consent Records: Records of your consent (or withdrawal of consent) to marketing communications are retained for the duration of your account plus two (2) years, to demonstrate compliance with consent requirements.

At the end of each applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. We conduct an annual data audit to identify and action data that has exceeded its retention period.

7 Cookies and Tracking Technologies

m7777 uses cookies and similar technologies on the Platform. Cookies are small text files stored on your device that help us deliver a consistent and functional experience across sessions. We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and ensure the security of your account. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymous, aggregate information about how players use the Platform — such as which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve Platform performance. No individual user is identified through these cookies.
• Functional Cookies: These cookies remember your Platform preferences — such as your preferred game lobby view or notification settings — so you do not need to reconfigure them on each visit.

m7777 does not deploy advertising cookies, retargeting cookies, or any cross-site tracking technologies. We do not allow third-party advertisers to set cookies on the Platform.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging in to your account. For specific instructions on managing cookies in your browser, refer to your browser's help documentation.

8 Data Security

m7777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes, but is not limited to, the following measures:

• TLS/SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data fields stored at rest, including financial data and identity document references.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified third-party security professionals.
• Multi-factor authentication requirements for all internal staff accounts that have access to production systems containing personal data.
• Automated monitoring and alerting for unusual access patterns or potential data breach indicators, with incident response procedures in place.
• Regular staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, m7777 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — by email to the address registered on your account. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures we have taken or propose to take to address the breach.

While m7777 employs robust security practices, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your m7777 account and to enable two-factor authentication where available.

9 Your Data Rights

As a registered player on m7777, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 13. We will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) days.

• Right of Access: You have the right to request a copy of all personal data that m7777 holds about you. We will provide this in a commonly used electronic format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Please note that this right is subject to legal retention obligations — we may be required to retain certain data (such as financial transaction records) for regulatory compliance purposes even following an erasure request.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object at any time to processing of your personal data where that processing is based on our legitimate interests. You also have an absolute right to object to processing of your data for direct marketing purposes, which will be actioned immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

10 Children and Minors

m7777 operates a strict 21+ policy. The Platform is not directed at, and is not intended to be used by, any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

If we become aware that an account has been registered by, or personal data has been collected from, an individual under the age of 21, we will immediately suspend the account, delete all associated personal data, and — where applicable — report the matter to relevant authorities in accordance with our legal obligations.

If you are a parent or guardian and believe that your child has registered an account on m7777 or provided us with personal information without your consent, please contact our support team immediately at [email protected]. We take such reports seriously and will act promptly upon receipt.

11 Marketing Communications

m7777 may send you promotional communications — including bonus offers, seasonal promotions tied to events like Eid, Pohela Boishakh, or major cricket tournaments such as the BPL and T20 World Cup — but only where you have given explicit consent to receive such communications at the time of registration or at a later date through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in the footer of every marketing email we send.
• Updating your communication preferences in your m7777 account settings.
• Contacting our support team via live chat or at [email protected] with a clear request to opt out.

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent as part of our contractual obligations to you and cannot be disabled while your account is active.

m7777 does not share your contact details with third-party marketers. All promotional communications originate solely from m7777 and relate exclusively to the m7777 Platform and its services.

12 Changes to This Privacy Policy

m7777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services offered on the Platform. The effective date shown in the hero section of this page will be updated whenever a material revision is made.

Where changes are material — meaning they substantively affect how we collect, use, or share your personal data, or alter your rights in a significant way — we will notify you by email to the address registered on your account at least seven (7) days before the changes take effect. For minor or administrative changes (such as correcting typographical errors or updating contact details), we may update the policy without advance notice.

We encourage you to review this Privacy Policy periodically to stay informed about how m7777 protects your information. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

Archived versions of previous Privacy Policy documents are available upon request by contacting [email protected] with the subject line "Privacy Policy Archive Request".

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way m7777 handles your personal data, please contact our Data Support team through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line for faster routing. Responses within four hours for standard enquiries.
• Live Chat: Available 24 hours a day, 7 days a week directly through the Platform. Ideal for time-sensitive requests or immediate clarifications.
• WhatsApp: Details available upon account registration. Response time under 15 minutes during operating hours (BST UTC+6).

Our support team is available around the clock, including on Bangladesh national holidays such as Victory Day (December 16), Independence Day (March 26), and Eid. All communications are handled in English.