ed77 Privacy Policy

1.1 This Privacy Policy ("Policy") describes how ed77 ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your") of the ed77 platform, accessible at ed77.io and through any associated mobile-optimised interfaces.

1.2 ed77 operates as a premium online casino and sports betting platform built primarily for the Bangladeshi market. As part of delivering our services — including cricket betting, live casino, slots, crash games, and related account and payment features — we necessarily process certain personal data about our registered players.

1.3 We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection standards. Our security infrastructure includes 256-bit SSL encryption across all data transmissions between your device and ed77.io.

1.4 This Policy should be read alongside the ed77 Terms & Conditions, which form part of the overall agreement governing your use of the platform. Together these documents define the full scope of your rights and responsibilities as an ed77 player.

1.5 If you have any questions about this Policy or how ed77 handles your data, please contact our support team at [email protected]. Contact details are provided in plain text form — our email address is not a clickable link and cannot be used to initiate automated data requests.

2.1 ed77 collects personal data in several distinct categories, depending on how you interact with the platform. The table below summarises the types of data we collect and the purpose for which each category is primarily used.

2.2 Certain categories of data are mandatory for account registration and ongoing platform use. If you decline to provide mandatory data — particularly identity and contact information required for KYC verification — ed77 may be unable to open or maintain your account.

2.3 ed77 does not intentionally collect special-category sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers) unless you voluntarily provide such information in the context of a support interaction or responsible gaming self-declaration. Any such data disclosed voluntarily will be handled with heightened confidentiality.

3.1 Directly from you. The majority of personal data ed77 holds is provided directly by you during the account registration process, during KYC identity verification, when initiating deposit or withdrawal transactions, when contacting our support team, or when configuring responsible gaming tools such as deposit limits or self-exclusion.

3.2 Automatically through platform use. When you access ed77.io, our systems automatically collect certain technical data about your device and browsing session. This includes your IP address, device identifiers, browser fingerprint, session timestamps, pages visited, games accessed, and in-session click-path data. This collection is necessary for platform security, fraud detection, and service performance monitoring.

3.3 Through cookies and tracking technologies. ed77 uses cookies and similar first-party tracking technologies to maintain session integrity, store your login state, and collect aggregate usage analytics. A full description of our cookie practices is provided in Section 9 of this Policy.

3.4 From third-party identity verification providers. To fulfil our Know Your Customer (KYC) obligations, ed77 may engage specialist identity verification services that cross-reference the information you provide against trusted data sources. The results of these checks — which may include a match/no-match confirmation — are retained as part of your verification record.

3.5 From payment processors. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, the relevant payment processor provides ed77 with a transaction confirmation record, including a masked identifier for the payment account used. ed77 does not receive or store full card numbers or full mobile banking PINs.

4.1 ed77 uses personal data only for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those described here without first obtaining your explicit consent. The primary purposes for which we use personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage account settings including responsible gaming preferences.
• Service delivery: To process bets, settle wagers, operate casino games, handle deposits and withdrawals, and provide access to all platform features available to verified players.
• KYC and age verification: To confirm that you are 21 years of age or older and that your identity matches the information provided at registration. This is a strict compliance requirement on the ed77 platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, bonus abuse, and other forms of platform misuse.
• Financial compliance: To satisfy anti-money laundering (AML) obligations by monitoring transaction patterns and, where required, filing reports with relevant authorities.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and maintain accurate records of all support interactions.
• Responsible gaming: To monitor player activity for signs of problem gambling, to administer voluntary self-exclusion periods and deposit limits, and to provide appropriate intervention where risk indicators are identified.
• Platform improvement: To analyse aggregated, anonymised usage data that helps us understand how players interact with ed77.io and where the platform experience can be improved.
• Direct marketing (opt-in only): To send you promotional communications about ed77 bonuses, new games, and seasonal offers — but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected].

4.2 ed77 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on individual players, except where such processing is strictly necessary for fraud detection or AML compliance. Where automated fraud flags are generated, a human review is conducted before any account action is taken.

5.1 ed77 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the ed77 Terms & Conditions — for example, processing your deposit, settling a bet, or verifying your identity for account access.
• Legal obligation: Processing required for compliance with applicable laws — including KYC identification requirements, AML transaction monitoring, and record-keeping obligations.
• Legitimate interests: Processing necessary for ed77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests do not override your fundamental rights.
• Consent: Processing based on your specific, freely given consent — such as the sending of promotional and marketing communications. Consent may be withdrawn at any time without penalty.

5.2 Where processing is based on legitimate interests, ed77 conducts a balancing assessment to ensure that the processing is proportionate and that player privacy rights are respected. These assessments are reviewed periodically.

6.1 Payment processors. To process your bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank transactions, ed77 shares the minimum necessary transaction data with the relevant payment service provider. These providers operate under their own data protection obligations and process your payment data solely to execute the requested transaction.

6.2 Identity verification partners. ed77 engages specialist KYC and identity verification service providers to assist with age verification and the validation of identity documents. These providers receive only the data necessary to perform the verification check and are prohibited from using this data for any other purpose.

6.3 Game studios and platform providers. The casino games available on ed77 are operated by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. When you access a game, your session data (including your account identifier and stake information) is shared with the relevant studio's game server to operate the game. Game studios operate under their own privacy standards and are required to maintain appropriate data security measures.

6.4 Legal and regulatory authorities. ed77 may disclose personal data to law enforcement agencies, regulatory bodies, or judicial authorities where required to do so by applicable law, or where such disclosure is necessary to protect the safety of ed77 players or the integrity of the platform. In such cases, ed77 will disclose only the minimum data necessary to satisfy the legal requirement.

6.5 Business transfers. In the event of a merger, acquisition, or sale of all or part of ed77's business operations, personal data held by ed77 may be transferred to the acquiring entity as part of that transaction. In such circumstances, ed77 will notify affected players and ensure that the acquiring entity agrees to be bound by data protection commitments at least as protective as those set out in this Policy.

6.6 ed77 does not share your personal data with third-party advertising networks, data brokers, social media platforms, or behavioural analytics companies for their own commercial purposes.

7.1 ed77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following retention periods apply as general guidelines:

• Active account data: Retained for the lifetime of your account and for a period of 5 years following permanent account closure, to satisfy regulatory record-keeping and AML compliance requirements.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, or longer where required by applicable financial crime prevention laws.
• Transaction records: Retained for a minimum of 5 years following the date of the transaction, in accordance with financial record-keeping obligations.
• Support communications: Retained for 3 years from the date of the interaction, unless the matter has given rise to an ongoing dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Marketing consent records: Retained for as long as you hold an active account, and for 2 years following account closure, as evidence of the consent basis for any marketing communications sent.
• Technical and session logs: Retained for 12 months from the date of generation, after which they are deleted or anonymised.

7.2 When personal data is no longer required for any legitimate purpose and has exceeded its applicable retention period, ed77 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

7.3 Where you have exercised your right to erasure (see Section 10), ed77 will assess whether retention is still required for legal compliance purposes before honouring the request. In cases where legal retention obligations apply, ed77 will restrict the active processing of your data to the minimum necessary while retaining it solely for compliance purposes.

8.1 ed77 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and ed77.io, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive personal and financial data held at rest within ed77's infrastructure, using industry-standard encryption algorithms.
• Access controls that restrict internal access to player data to authorised personnel only, on a strict need-to-know basis. Access is logged, audited, and reviewed regularly.
• Two-factor authentication (2FA) for all internal staff accessing player data management systems, reducing the risk of insider threats and credential-based attacks.
• Intrusion detection systems and real-time security monitoring tools that flag unusual access patterns, brute-force attempts, and other security anomalies for immediate review.
• Regular security audits and penetration testing conducted periodically to identify and address platform vulnerabilities before they can be exploited.
• Secure data backup procedures that ensure player data can be recovered in the event of a system failure, with backups encrypted and stored separately from primary production systems.

8.2 While ed77 maintains robust security practices, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials, including your password and any two-factor authentication codes. Do not share your ed77 login details with anyone. If you believe your account has been compromised, contact [email protected] immediately.

8.3 In the event of a data security incident that is likely to result in a risk to your rights and freedoms, ed77 will notify affected players without undue delay and will take all reasonable steps to contain, investigate, and remediate the incident.

9.1 ed77 uses cookies and similar first-party tracking technologies on ed77.io. Cookies are small text files placed on your device by your browser when you visit the platform. They serve several important functions, as described in the table below.

9.2 ed77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. The cookies deployed on ed77.io are first-party cookies operated solely by ed77 for the purposes described above.

9.3 You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Please be aware that blocking strictly necessary cookies will impair platform functionality, including your ability to log in and place bets. Instructions for managing cookies are available in the help documentation of your chosen browser.

10.1 As a player on the ed77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ed77 in writing at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You may request a copy of the personal data ed77 holds about you. We will respond within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account details such as your registered email address and mobile number can also be updated directly in your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the processing is unlawful. Note that certain data must be retained to comply with legal obligations even following an erasure request.
• Right to restrict processing: You may request that ed77 restrict the active processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case ed77 will assess whether its legitimate interests override your rights in the specific circumstances.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

10.2 ed77 will acknowledge all rights requests within 5 business days and will endeavour to fulfil verified requests within 30 calendar days. Where a request is complex or ed77 receives a high volume of simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension in advance.

10.3 ed77 will not charge a fee for handling data rights requests unless the requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

11.1 ed77 enforces a hard minimum age of 21 years for all registered players. Age verification is conducted as a mandatory step during the account registration process and on an ongoing basis as part of our KYC compliance obligations. Players who cannot demonstrate that they are 21 or older will not be permitted to access any real-money features of the platform.

11.2 In the event that ed77 discovers or is notified that personal data has been collected from an individual who was under 21 at the time of registration, we will take the following steps: immediately suspend the account, purge all personal data associated with the account to the extent permitted by legal obligations, and decline to process any pending or future transactions associated with the account.

11.3 We encourage parents and guardians to make use of parental control software and browser-level content filtering tools to prevent underage individuals from accessing online gambling platforms. While ed77 implements strict age verification procedures, technology-based parental controls add an additional layer of protection.

12.1 The ed77 platform integrates with a number of third-party service providers to deliver its full range of features. These include game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank), identity verification providers, and platform infrastructure suppliers.

12.2 Each third-party service provider engaged by ed77 is required to process personal data only for the specific purpose for which they have been engaged, to maintain appropriate data security standards, and to handle personal data in accordance with their own published privacy policies and applicable data protection requirements.

12.3 ed77.io does not contain links to third-party websites or platforms. If you navigate away from ed77.io to a third-party site through any means, your activity on that third-party site is governed by that site's own privacy policy and terms. ed77 has no responsibility for the data practices of third-party websites.

12.4 ed77 conducts due diligence on all third-party data processors before engaging them and reviews their data protection commitments periodically. Processors that do not meet ed77's data security standards will not be retained or will have their engagement terminated.

13.1 As ed77 engages global game studios and payment infrastructure providers, some personal data may be processed on servers located outside Bangladesh. Where such transfers occur, ed77 ensures that appropriate safeguards are in place to protect the transferred data to a standard equivalent to that described in this Policy.

13.2 Safeguards for international data transfers include: contractual data processing agreements with all third-party processors that impose data protection obligations consistent with this Policy; the use of service providers that maintain internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II); and limiting the personal data transferred to the minimum necessary for the third party to fulfil its function.

13.3 If you wish to obtain more information about the international data transfers that ed77 conducts and the specific safeguards in place, please contact [email protected] with a written request.

14.1 ed77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the services we provide. The most current version of this Policy will always be available at ed77.io/privacy-policy.

14.2 Where a revision to this Policy is material — for example, where we introduce a new purpose for processing your data, engage a new category of third-party processor, or make changes that significantly affect your rights — ed77 will notify registered players by email and/or by displaying a prominent notice on the platform prior to the revised Policy taking effect.

14.3 Your continued use of the ed77 platform following the effective date of any revised Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Policy, you should cease using the platform and may request account closure in accordance with the ed77 Terms & Conditions.

14.4 The effective date shown at the top of this document identifies when the current version of this Policy came into force. Previous versions of this Policy are available upon request by contacting [email protected].

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to ed77's data processing practices, please contact our dedicated support team using the details below. All privacy-related correspondence should be submitted in English and should include your registered account username or email address, along with a clear description of your query or request.

15.2 Support Email: [email protected] (plain text — not a clickable link)

15.3 ed77's support team is available 24 hours a day, 7 days a week. For formal privacy rights requests, please allow up to 30 calendar days for a full response. Acknowledgement of your request will be sent within 5 business days of receipt.

15.4 For responsible gaming concerns, including requests to set deposit limits, activate self-exclusion, or seek guidance on problem gambling resources, please visit the Responsible Gaming page or contact support directly.