gt77 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how gt77 ("gt77", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use the gt77 online betting and gaming platform at gt77.io.

This Policy forms part of the broader agreement between you and gt77, alongside the Terms & Conditions and the Responsible Gaming Policy. By creating a gt77 account or using any feature of the platform, you acknowledge that you have read this Policy and understand how your personal data will be handled.

gt77 is committed to handling personal data in a manner that is transparent, fair, and proportionate. We take data protection seriously as both a legal obligation and an expression of respect for the players who trust us with their information.

For the purposes of this Policy, gt77 is the data controller responsible for personal data collected through the gt77.io platform. As data controller, gt77 determines the purposes and means of processing personal data, and is responsible for ensuring that such processing is conducted lawfully and transparently.

All data-related enquiries, access requests, and deletion requests should be directed to: [email protected] (please use the subject line "Privacy / Data Request" to ensure prompt routing to the appropriate team).

gt77 collects personal data from players through three primary channels: information provided directly by the player, information generated automatically through platform use, and information received from third-party service providers such as payment processors and identity verification agencies.

gt77 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity verification photographs), or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request.

gt77 uses personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, and maintain accurate account records.
• Service delivery: To enable you to place bets, play games, deposit and withdraw funds, and access all features of the gt77 platform.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, and to maintain accurate financial records.
• Identity and age verification: To comply with our obligation to verify that all players are aged 21 years or above, and to confirm the legitimacy of identity documents provided.
• Anti-fraud and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other unlawful conduct on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide platform assistance.
• Responsible gaming: To monitor for signs of problem gambling behaviour and to facilitate the use of self-exclusion, deposit limit, and time-out tools.
• Platform improvement: To analyse usage patterns and technical performance in order to improve the reliability, speed, and content of the gt77 platform.
• Regulatory compliance: To fulfil any obligations imposed by applicable laws and regulations relating to online gambling and financial services.
• Direct communications: To send you account notifications, security alerts, and — where you have given consent — promotional offers relevant to your use of gt77.

gt77 will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent.

gt77 processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil the contract between you and gt77, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering checks, and financial record-keeping requirements.
• Legitimate interests: Processing that serves gt77's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where gt77 relies on your consent — for example, to send you promotional communications — you may withdraw that consent at any time by contacting [email protected].

The gt77 platform uses cookies and similar tracking technologies to maintain session state, remember user preferences, analyse platform traffic, and detect fraudulent access patterns. Cookies are small text files stored on your device by your browser.

The categories of cookies used by gt77 include:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform, enabling gt77 to identify areas for improvement.

Most browsers allow you to control or delete cookies through their settings. Disabling strictly necessary cookies will impact your ability to use the platform. gt77 does not use cookies to serve third-party advertising.

gt77 does not sell personal data to third parties. We share personal data only with the following categories of recipients, and only to the extent required for the specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and other approved payment providers receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC agencies receive identity document data and photographs for the purpose of verifying player age and identity.
• Fraud prevention services: Aggregated technical and behavioural data may be shared with fraud detection partners to identify and prevent platform abuse.
• IT and infrastructure providers: Cloud hosting and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, gt77 may disclose personal data to relevant authorities.

All third-party recipients are subject to contractual data processing obligations that restrict their use of your data to the specific purposes for which it was shared with them.

Some of gt77's service providers and infrastructure partners may be located outside Bangladesh. Where personal data is transferred internationally, gt77 takes appropriate steps to ensure that your data is afforded a level of protection consistent with this Policy, including through the use of contractual data transfer safeguards with the receiving party.

By using the gt77 platform, you acknowledge that your personal data may be transferred to, stored, and processed in countries outside Bangladesh in connection with the provision of the platform services described in this Policy.

gt77 retains personal data for as long as your account is active and for a period thereafter as required by applicable regulatory obligations. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in line with standard financial services record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support correspondence: Retained for a minimum of two years from the date of the interaction.
• Analytics and usage data: Retained in anonymised or aggregated form indefinitely for platform improvement purposes. Individually identifiable usage data is deleted within 24 months of collection.
• KYC verification documents: Retained for a minimum of five years from the date of verification.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players may request early deletion of certain data categories subject to our legal obligations — see Section 10 for details.

As a player on the gt77 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". gt77 will respond within a reasonable timeframe and will verify your identity before processing any request.

gt77 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the gt77 platform.
• Encryption of personal data stored on gt77 servers.
• Cryptographic hashing of all account passwords — passwords are never stored in readable form.
• Strict access controls ensuring that gt77 staff can access personal data only on a need-to-know basis relevant to their specific role.
• Regular security assessments of platform infrastructure and third-party integrations.
• Incident response procedures for the detection, containment, and reporting of any personal data breaches.

While gt77 takes all reasonable precautions, no digital platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential. If you suspect that your account has been compromised, contact [email protected] immediately.

The gt77 platform is strictly intended for adults aged 21 years and above. gt77 does not knowingly collect personal data from individuals under the age of 21. Where gt77 becomes aware that personal data has been submitted by a person under 21, that data will be deleted promptly and the associated account will be permanently closed.

If you believe that a minor has registered an account on the gt77 platform, please report this to [email protected] immediately. gt77 takes this issue seriously and will investigate all such reports without delay.

gt77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform functionality. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the gt77 platform. The updated Policy will specify a revised effective date at the top of the document.

Your continued use of the gt77 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the platform and may request account closure by contacting [email protected].

For any questions regarding this Privacy Policy, or to exercise any of your data rights described in Section 10, please contact the gt77 data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy / Data Request" or "Data Rights Request"
• Support hours: 24 hours a day, 7 days a week
• Response time: Within 12 hours on average, Bangladesh Standard Time (UTC+6)
• Identity verification: gt77 will verify your identity before processing any data access, rectification, or deletion request

gt77 is committed to resolving all privacy-related concerns promptly and transparently. If you feel that your privacy concern has not been adequately addressed, you may seek further recourse through applicable legal channels in your jurisdiction.