Section 1
Information We Collect
When you interact with the 4b777 platform — whether by registering an account, making a deposit, placing a wager, or contacting our support team — we collect certain categories of personal data. The specific data collected depends on how you engage with our services. Below is a comprehensive overview of the information we may hold about you.
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, National ID (NID) number or passport number | At registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city, district, and postal code in Bangladesh) | At registration and when updated by the player |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal amounts in ৳ | When deposits or withdrawals are initiated |
| Technical Data | IP address, browser type and version, device type, operating system, time zone (Bangladesh Standard Time, UTC+6), screen resolution, session duration | Automatically when you visit or use the 4b777 platform |
| Usage Data | Pages visited, games played, bets placed, odds viewed, search queries within the platform, click paths, session logs | Continuously during active platform sessions |
| Communications Data | Support chat transcripts, emails sent to [email protected], feedback submissions, complaint records | When you contact 4b777 support or submit a form |
| KYC Documents | Scanned or photographed copies of government-issued ID, proof of address documents (utility bill, bank statement), selfie verification images | During the KYC identity verification process |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes, except where strictly required by applicable law or fraud prevention obligations. We do not knowingly collect any personal data from individuals under the age of 18. If we discover that a minor has provided us with personal data, that account will be closed and the data deleted promptly.
Identity & Contact
Registration details and KYC documents are collected once and stored securely. We use this data solely to verify who you are and keep your account safe from unauthorised access.
Financial Records
Payment method details (bKash, Nagad, Rocket, Upay, bank card numbers) are collected to process your transactions. Card numbers are tokenised and never stored in plain text on 4b777 servers.
Platform Usage
Behavioural data — the games you play, the bets you place, and how you navigate 4b777 — helps us improve the platform experience and identify responsible gaming patterns that may need attention.
Section 2
How We Use Your Data
4b777 processes your personal data only where we have a lawful basis to do so. The lawful bases we rely on are: performance of a contract (operating your account), compliance with a legal obligation (KYC, anti-money-laundering checks), legitimate interests (fraud prevention, platform security, improving our services), and in limited cases, your explicit consent (marketing communications). Below is a plain-language explanation of each processing purpose.
- Account creation and management: We use your identity and contact data to set up your 4b777 account, authenticate your logins, and keep your account details current.
- Payment processing: Financial data is used to process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, and to fulfil withdrawal requests to your verified payment method.
- Identity verification (KYC): We are obligated to verify the identity of all players before processing withdrawals. KYC documents are used exclusively for this purpose and reviewed by authorised 4b777 compliance personnel only.
- Fraud prevention and security: Technical data, financial data, and usage data are analysed by our automated monitoring systems to detect unusual patterns that may indicate fraud, money laundering, or account compromise.
- Responsible gaming monitoring: Usage and financial data help us identify players whose behaviour may indicate problematic gambling, enabling us to offer support tools such as deposit limits, cooling-off periods, and self-exclusion.
- Customer support: Communications data is used to investigate and resolve your queries and complaints efficiently. Support records are retained to maintain quality and consistency of service.
- Platform improvement: Aggregated and anonymised usage data is analysed to understand which features players use most, identify technical issues, and guide product development decisions.
- Promotional communications (with consent): If you have opted in to marketing communications, we may use your email address or phone number to inform you of promotions, bonus offers, and seasonal events relevant to the Bangladesh market (BPL, IPL, Eid, Pohela Boishakh). You may withdraw this consent at any time by contacting [email protected].
Section 3
Data Sharing & Third Parties
4b777 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the limited, specific circumstances described below, and only to the minimum extent necessary for each purpose.
| Recipient | Purpose | Data Shared |
|---|---|---|
| Payment Processors | To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks | Name, payment account reference, transaction amount in ৳ |
| Game Providers | To deliver casino and sports games from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi | Anonymous session token, game stake and result data — no direct identity data |
| KYC Verification Partners | To assist with identity document verification where automated review is required | Name, date of birth, NID/passport number, document image |
| Fraud Prevention Services | To screen transactions and account activity for indicators of fraud or money laundering | IP address, device fingerprint, transaction metadata |
| Legal & Regulatory Authorities | Where required by a valid legal order, court order, or regulatory obligation applicable to 4b777's operations | Data specified in the legal request — minimum necessary only |
| IT Infrastructure Providers | Cloud hosting, database management, and security services that power the 4b777 platform | Encrypted data stored on behalf of 4b777 — providers act as data processors only |
All third parties with whom 4b777 shares personal data are bound by contractual data processing agreements that require them to handle your data in accordance with applicable data protection standards, use it only for the specified purpose, and implement appropriate technical and organisational security measures. 4b777 remains responsible for ensuring that these agreements are in place and adhered to.
Section 4
Cookies & Tracking Technologies
4b777 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse how the site is used. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies cannot execute code or deliver viruses — they are passive data files used to remember preferences and session state.
The following categories of cookies are used on the 4b777 platform:
- Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your account language preference (English), and ensure security features such as CSRF protection operate correctly. These cookies cannot be disabled without breaking core platform functionality.
- Performance and analytics cookies: These cookies collect anonymised information about how players navigate the 4b777 platform — which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve platform performance and is never tied to your personal identity.
- Functional cookies: These cookies remember your preferences — such as your preferred odds format, display settings, and last-visited game section — so you do not have to reconfigure them on every visit.
- Fraud detection cookies: Short-lived cookies and local storage tokens help our security systems verify that requests originate from a legitimate browser session rather than an automated script or bot. These are essential for platform security and player fund protection.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the 4b777 platform. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.
Session Cookies
Temporary cookies that exist only for the duration of your browser session. They are deleted automatically when you close your browser and are used primarily to maintain your logged-in state securely while you play on 4b777.
Persistent Cookies
Cookies that remain on your device between sessions for a defined period (typically 30–90 days). Used to remember your display preferences and, with your consent, to keep you logged in across visits to the 4b777 platform.
Section 5
Data Security Measures
Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a core operational priority at 4b777. We implement a layered security architecture that combines technical controls, organisational procedures, and staff training to maintain the confidentiality and integrity of all data we hold.
- TLS/SSL encryption: All data transmitted between your device and the 4b777 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock symbol in your browser's address bar confirms that your connection is encrypted at all times.
- Data encryption at rest: Sensitive data fields — including identity document scans, payment account references, and KYC records — are encrypted at the database level using AES-256 encryption. Even in the unlikely event of a database breach, this data would be unreadable without the decryption keys.
- Access control: Personal data is accessible only to 4b777 personnel with a legitimate need to access it for their specific job function. Access is governed by role-based permission systems and reviewed quarterly. All access events are logged.
- Two-factor authentication (2FA): 4b777 strongly encourages all players to enable 2FA on their accounts. Internal staff systems also enforce 2FA for all personnel with access to player data.
- Penetration testing: The 4b777 platform undergoes regular independent security testing to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the event of a data security incident that poses a risk to your personal data, 4b777 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, in accordance with applicable data protection standards.
While 4b777 applies industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You also have a role to play: use a strong, unique password for your 4b777 account, never share your login credentials, and contact [email protected] immediately if you suspect your account has been accessed without your permission.
SSL Encryption
Every page of the 4b777 platform is served over HTTPS with TLS encryption, protecting your login credentials, payment details, and personal data from interception during transmission.
AES-256 at Rest
Sensitive stored data — KYC documents, NID records, payment references — is encrypted using AES-256 at the database level. Encryption keys are rotated regularly and stored in a separate, hardened key management system.
Access Control
Role-based access controls ensure that only authorised 4b777 staff — such as KYC analysts and compliance officers — can view sensitive player records, and only within the scope of their defined responsibilities.
Section 6
Your Privacy Rights
As a 4b777 player, you hold a set of rights with respect to your personal data. These rights reflect internationally recognised data protection principles and 4b777's commitment to transparent, player-first data governance. You may exercise any of these rights at any time by contacting us at [email protected] with the subject line "Privacy Rights Request".
- Right of access: You may request a copy of all personal data that 4b777 holds about you, along with information about how it is processed and the legal basis for that processing. We will respond within 30 days of receiving a verified request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For most contact details, you can update this information directly in your account settings panel.
- Right to erasure ("right to be forgotten"): You may request that 4b777 delete your personal data. This right is not absolute — we are legally required to retain certain records (including KYC documents and transaction history) for a defined period to meet our anti-money-laundering obligations. Where deletion is not possible due to legal retention requirements, we will inform you of the specific reason.
- Right to restrict processing: In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over erasure — you may ask us to pause processing of your data while the issue is resolved.
- Right to data portability: Where processing is based on your consent or the performance of a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for transfer to another service.
- Right to object: You have the right to object to processing of your personal data for direct marketing at any time, and we will cease that processing immediately upon receipt of your objection. You may also object to processing based on legitimate interests, in which case we will assess whether those interests override your rights.
- Right to withdraw consent: Where processing is based solely on your consent (for example, receiving promotional emails), you may withdraw that consent at any time by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Section 7
Data Retention Policy
4b777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation — anti-money-laundering and fraud prevention requirements |
| KYC Documents | Duration of account + 5 years after closure | Regulatory compliance — identity verification records must be retained for audit purposes |
| Transaction History | Duration of account + 5 years after closure | Financial record-keeping obligations and dispute resolution |
| Customer Support Records | 3 years from last interaction | Quality assurance and dispute resolution |
| Technical / Log Data | 12 months from collection | Security monitoring and fraud detection |
| Marketing Preferences | Until opt-out or account closure | Consent management — deleted immediately upon opt-out or erasure request |
| Cookie Data | Session cookies: deleted on browser close. Persistent: 30–90 days | Platform functionality and preference memory only |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (such as platform usage statistics) may be retained indefinitely for analytical purposes since it cannot be linked back to any individual player.
Section 8
Changes to This Policy
4b777 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. When we make material changes to this policy — that is, changes that affect how we collect, use, or share your personal data in a meaningful way — we will notify you by sending an email to your registered address at least 7 days before the updated policy takes effect.
Minor updates, such as corrections of typographical errors, clarifications of existing practices, or adjustments to non-material contact details, may be made without prior notice. The "Last updated" date at the top of this document always reflects when the most recent revision was made. It is your responsibility to review this Privacy Policy periodically to stay informed about how 4b777 protects your data.
Continued use of the 4b777 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the changes. If you do not agree with an updated policy, you should stop using the platform and contact [email protected] to request account closure. The most current version of this Privacy Policy is always available at https://4b777.app/privacy-policy.