th777 Privacy Policy

Section 1

Information We Collect

th777 collects personal data from players in Bangladesh in order to provide a safe, personalised, and legally compliant online casino and sports betting experience. We collect information in three ways: directly from you when you register or interact with the platform, automatically as you use our services, and occasionally from third-party verification partners. We collect only the minimum data necessary for each stated purpose.

The categories of personal data th777 may collect include:

We do not collect data from children. The th777 platform is strictly for persons aged 18 and above. If we discover that personal data has been submitted by or collected about a person under the age of 18, we will delete that data immediately and close the associated account.

Section 2

How We Use Your Data

th777 uses personal data only for lawful, specified, and transparent purposes. We do not sell your personal data to third parties under any circumstances. Every processing activity carried out by th777 is grounded in one or more of the following legal bases: contractual necessity, legitimate interest, legal obligation, or your explicit consent. The following table sets out our primary data processing activities and the legal basis for each.

th777 uses automated decision-making processes in limited circumstances, primarily for fraud detection and responsible gaming risk scoring. Where an automated decision has a significant effect on your account (such as triggering a withdrawal hold or a responsible gaming intervention), you have the right to request human review of that decision by contacting our support team.

Section 3

Data Sharing & Third Parties

th777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the safety and integrity of the platform. The categories of third parties with whom th777 may share your data are described below.

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment processors receive the minimum financial and identity data necessary to process your deposits and withdrawals securely.
• KYC / Identity Verification Partners: Third-party identity verification services may process your name, date of birth, and document images solely for the purpose of confirming your identity and age in compliance with our verification obligations.
• Game Technology Providers: Game studios and platform technology providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive session and technical data required to deliver their games within the th777 platform. These providers operate under strict data processing agreements.
• Analytics and Security Services: Technical and usage data may be shared with analytics and cybersecurity service providers that help us monitor platform performance, detect fraud, and improve user experience.
• Legal and Regulatory Authorities: th777 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, legal process, or in response to a lawful request from a competent authority.
• Business Successors: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and any changes to this Privacy Policy that result from it.

All third-party data processors engaged by th777 are subject to binding data processing agreements that require them to implement appropriate technical and organisational security measures, process data only on documented instructions from th777, and promptly notify th777 of any personal data breach affecting your information.

Section 4

Cookies & Tracking

th777 uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate the platform, remember your preferences, analyse usage patterns, and maintain your authenticated session. This section explains the types of cookies we use and how you can manage them.

You can control non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to block or delete cookies via the privacy or settings menu. Please note that disabling strictly necessary or security cookies may prevent you from logging in to your th777 account or using certain platform features.

Section 5

Data Retention

th777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. We do not retain data indefinitely — retention periods are reviewed regularly and data is securely deleted or anonymised once the retention period expires.

• Active Account Data: Retained for the full duration of your account and for a period of five (5) years following account closure, in line with standard financial record-keeping obligations.
• KYC / Verification Documents: Retained for a minimum of five (5) years from the date of verification, consistent with anti-money laundering record-keeping requirements.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for five (5) years from the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of each interaction, unless linked to an open dispute in which case they are retained until the dispute is fully resolved.
• Marketing Consent Records: Records of your marketing opt-in and opt-out actions are retained for the lifetime of your account and for three (3) years following account closure.
• Analytics and Technical Data: Aggregated, anonymised analytics data may be retained indefinitely as it no longer identifies any individual once anonymised.
• Self-Exclusion Records: Where you have requested self-exclusion from th777 for responsible gaming reasons, your exclusion record will be retained for a minimum of seven (7) years to prevent re-registration during the exclusion period.

When the applicable retention period expires, th777 will securely delete your personal data using industry-standard data destruction methods. Where complete deletion is not technically feasible (for example, where data is held in backup archives), the data will be isolated, protected from further processing, and deleted at the next scheduled archive purge cycle.

Section 6

Your Privacy Rights

As a player on th777, you have a number of rights in relation to your personal data. th777 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and include your registered account email address and the specific right you wish to exercise.

th777 will respond to all valid privacy rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period. We do not charge a fee for handling privacy rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Section 7

Data Security

th777 takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. While no online platform can guarantee absolute security, th777 maintains industry-standard protections that are regularly reviewed and updated.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, th777 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. Breaches meeting the applicable notification threshold will also be reported to the relevant competent authority in accordance with applicable data protection law.

• Passwords are stored using one-way cryptographic hashing — th777 staff cannot view your password in plain text.
• Access to personal data within th777 is restricted on a strictly need-to-know basis and subject to staff confidentiality obligations.
• Regular internal and third-party security audits and penetration testing are conducted to identify and address vulnerabilities.
• All payment transactions are processed through PCI-DSS compliant payment gateway partners — th777 does not store raw card data on its own servers.
• Data backups are encrypted and stored in geographically separate secure locations to ensure business continuity.

Section 8

Policy Updates & Contact

th777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or industry best practices. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify active players via their registered email address or through a prominent notice on the platform.

We encourage you to review this Privacy Policy periodically so that you remain informed about how th777 collects and uses your personal data. Your continued use of the th777 platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to any material change, you should stop using the platform and contact support to request account closure and data deletion where applicable.

th777 operates in English and serves the Bangladesh market. All privacy-related communications will be handled in English. Response times for privacy enquiries are typically within five (5) business days for general queries and within thirty (30) calendar days for formal privacy rights requests as described in Section 6 of this Policy.