r5777 Privacy
Policy

01 Definitions

In this Privacy Policy, the following terms have the meanings set out below unless the context otherwise requires:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, mobile number, date of birth, payment account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, r5777 and its affiliated operating entities.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of r5777 under a written data processing agreement.
• "Player" means any natural person who registers, or has registered, an account on the r5777 platform.
• "Platform" means the r5777 website accessible at r5777.io, including all associated pages, services, and mobile-optimised interfaces.
• "Cookie" means a small text file placed on a Player's device by the Platform for the purposes described in Section 8 of this Policy.
• "KYC" means Know Your Customer identity verification procedures conducted by r5777 to confirm a Player's identity, age, and eligibility.

02 Data Controller

r5777 is the Data Controller in respect of all Personal Data collected from Players who access the Platform. As Data Controller, r5777 is responsible for determining the purposes for which, and the means by which, Personal Data is processed in connection with the operation of the Platform and the delivery of its services to Players in Bangladesh and elsewhere.

For all data-related enquiries, access requests, correction requests, or deletion requests, Players may contact the r5777 data team at the contact address provided in Section 15 of this Policy. r5777 commits to responding to all data subject requests within the timeframes set out in Section 11.

Where r5777 engages third-party service providers — such as payment processors (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi), or fraud prevention specialists — those providers act as Data Processors under contractual obligations that limit their use of Personal Data strictly to the provision of their contracted services. r5777 remains the Data Controller and retains responsibility for the lawful processing of your Personal Data at all times.

03 Personal Data We Collect

r5777 collects the following categories of Personal Data from Players:

3.1 Registration Data

When you create an account on the Platform, we collect: your full legal name, date of birth, mobile number registered in Bangladesh, and the password you select (stored in irreversibly hashed form — we never store plain-text passwords).

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, we may collect copies of your National Identity Card (NID), passport, birth certificate, or other government-issued identification documents, along with proof of residential address such as a utility bill or bank statement.

3.3 Financial Data

We collect details of your payment accounts — including bKash wallet numbers, Nagad wallet numbers, Rocket account details, and Upay account details — solely for the purpose of processing deposits and withdrawals. We do not store full payment card numbers where card payments are used; such data is handled by PCI-DSS-compliant payment processors.

3.4 Transactional Data

We maintain a complete record of all deposits, withdrawals, wagers, winnings, bonus credits, and account balance changes associated with your account. This data is required for financial record-keeping, dispute resolution, and AML compliance.

3.5 Technical & Device Data

When you access the Platform, we automatically collect: your IP address, device type, operating system, browser type and version, screen resolution, time zone, and session duration data. This information is used for security monitoring, fraud detection, and platform performance optimisation.

3.6 Behavioural & Usage Data

We collect data about how you use the Platform, including pages visited, games played, wager frequency, session length, and feature interactions. This data is used for responsible gaming monitoring, product improvement, and — where you have consented — personalised promotions.

3.7 Communications Data

We retain records of communications between you and r5777 customer support, including live chat transcripts, email correspondence, and WhatsApp message records, for quality assurance, dispute resolution, and staff training purposes.

04 How We Collect Personal Data

r5777 collects Personal Data through the following channels:

• Directly from you: when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or complete any other form or input on the Platform.
• Automatically via the Platform: when you access or navigate the Platform, our servers and analytics systems automatically log technical and behavioural data as described in Section 3.5 and 3.6.
• Via cookies and similar technologies: as described in Section 8, the Platform places cookies on your device to maintain your session, remember your preferences, and collect aggregate usage analytics.
• From payment service providers: when you initiate a deposit or withdrawal, we receive confirmation data from bKash, Nagad, Rocket, Upay, or other payment service providers to verify the transaction and update your account balance.
• From identity verification partners: where r5777 uses a third-party KYC verification service to validate documents submitted during the verification process, that partner may provide us with a verification result and associated identity data.
• From fraud prevention services: r5777 may receive risk signals and device fingerprint data from fraud prevention partners to assist in identifying suspicious account activity.

05 Legal Basis for Processing

r5777 processes Personal Data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between r5777 and the Player — including account management, transaction processing, game delivery, and customer support — is carried out on the basis of contractual necessity. Without this processing, r5777 cannot provide its services.
• Legal obligation: Processing required to comply with applicable legal obligations — including KYC verification, anti-money laundering record-keeping, age verification, and responses to legitimate law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product analytics is carried out on the basis of r5777's legitimate interests in operating a safe, fair, and compliant platform, where those interests are not overridden by the Player's privacy rights.
• Consent: Processing for optional personalised marketing communications — including promotional offers tied to events such as the BPL, Eid, Pohela Boishakh, or IPL — is carried out on the basis of your express consent. You may withdraw consent for marketing communications at any time by contacting [email protected].

06 How We Use Your Personal Data

r5777 uses the Personal Data it collects for the following documented purposes:

1. To create, manage, and maintain your r5777 account, including processing your login credentials and enabling account recovery.
2. To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate records of all financial transactions associated with your account.
3. To verify your identity and age in compliance with our 21+ age policy, and to conduct ongoing KYC checks as required by AML obligations.
4. To deliver the games, betting markets, and other Platform features you access, including live casino content supplied by Evolution Gaming and Ezugi, slots from Pragmatic Play and NetEnt, and crash game content from Spribe.
5. To monitor your account for indicators of problem gambling and to apply responsible gaming interventions — including deposit limits, session warnings, and self-exclusion enforcement — where triggered.
6. To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
7. To provide customer support via live chat, email ([email protected]), and WhatsApp, and to resolve disputes and account queries.
8. To send you transactional notifications relating to your account, such as deposit confirmations, withdrawal status updates, and security alerts.
9. To send you promotional communications about bonuses, seasonal offers, and new features — only where you have provided consent, and only to the extent permitted by applicable law.
10. To improve the Platform through aggregate, anonymised usage analytics and A/B testing of new features.
11. To comply with applicable legal and regulatory obligations, and to respond to legitimate requests from law enforcement or regulatory authorities.

07 Data Sharing & Disclosure

r5777 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the following limited circumstances, and only to the extent necessary for each purpose:

7.1 Payment Service Providers

To process deposits and withdrawals, r5777 shares your payment account details and transaction amounts with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or another provider you select. These providers are independent data controllers for their own processing activities and are bound by their own privacy policies.

7.2 Game Content Providers

When you play a game supplied by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your account identifier and wager data may be transmitted to that provider's servers to deliver the game session. These providers process this data under their own privacy frameworks and are contractually prohibited from using it for purposes beyond game delivery.

7.3 KYC & Fraud Prevention Partners

r5777 may share identity documents and verification data with third-party KYC verification specialists, and may share device and behavioural data with fraud prevention services, for the sole purpose of verifying Player identity and detecting fraudulent activity. These partners are Data Processors bound by written data processing agreements.

7.4 Legal & Regulatory Disclosures

r5777 may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or in order to protect the rights, property, or safety of r5777, its Players, or the public. r5777 will notify affected Players of such disclosures where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of r5777's business, Personal Data held by r5777 may be transferred to the successor entity as part of the transaction. Affected Players will be notified of any material change to the identity of the Data Controller resulting from such a transaction.

08 Cookies & Tracking Technologies

The r5777 Platform uses cookies and similar tracking technologies to operate correctly and to improve the Player experience. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, preserve your language and display preferences, and ensure the security of your account during an active session. These cookies cannot be disabled without materially impairing your ability to use the Platform.

8.2 Analytical Cookies

r5777 uses aggregate, anonymised analytics cookies to understand how Players navigate the Platform — which pages are visited most frequently, where Players exit the site, and how long sessions last. This data is used solely to improve Platform performance and usability. Individual Player identity is not associated with analytical cookie data.

8.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred game category, notification settings, and responsible gaming tool configurations — so that you do not need to reconfigure them each time you visit the Platform.

8.4 Managing Cookies

You may configure your browser to refuse all cookies, or to alert you when a cookie is being placed on your device. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For analytical and functional cookies, you may opt out without affecting your core Platform access. Instructions for managing cookies are available in your browser's help documentation.

09 Data Security

r5777 implements a layered security architecture to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security: All data in transit between your device and r5777 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit encryption. The r5777 domain operates exclusively over HTTPS.
• Password Hashing: Account passwords are never stored in plain text. r5777 uses a recognised, computationally intensive hashing algorithm to store passwords in irreversible form. Even internal staff cannot retrieve a Player's plain-text password.
• Two-Factor Authentication (2FA): r5777 offers optional 2FA for all accounts, delivered via OTP to your registered mobile number. Players are strongly encouraged to enable 2FA to protect against unauthorised access.
• Access Controls: Internal access to Personal Data is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal access events are logged and monitored.
• Infrastructure Security: r5777's servers are hosted in access-controlled data centres with physical security controls, redundant power supplies, and regular third-party security audits.
• Intrusion Detection: r5777 operates automated intrusion detection and anomaly alerting systems that monitor for unusual access patterns, potential data exfiltration, or brute-force attacks in real time.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that is likely to result in risk to Players, r5777 will notify affected individuals without undue delay, and in accordance with applicable notification obligations.

10 Data Retention

r5777 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised. Anonymised aggregate data that can no longer be attributed to any individual may be retained indefinitely for statistical purposes.

11 Your Data Rights

As a Player whose Personal Data is processed by r5777, you have the following rights with respect to your data. To exercise any of these rights, please contact r5777 as described in Section 15.

r5777 will acknowledge all data subject requests within one business day and will resolve them within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day period expires.

12 Children's Privacy & Age Restriction

r5777 operates an absolute minimum age requirement of 21 years for all Players. The Platform is not directed at, and does not knowingly collect Personal Data from, any individual under the age of 21. This policy is stricter than many international standards and reflects r5777's commitment to responsible gaming in the Bangladesh market.

During account registration and KYC verification, r5777 verifies the stated date of birth of each applicant and requires documentary proof of age where required. Any account found to belong to a person under 21 years of age will be immediately suspended, all balances will be returned to the registered payment method, and all associated wager activity will be voided. r5777 reserves the right to permanently close any account where the Player is found to have provided a false date of birth.

If you have reason to believe that a person under the age of 21 has registered an account on the r5777 Platform, or is accessing the Platform using your account, please contact r5777 immediately at [email protected] so that appropriate action can be taken without delay.

Parents and guardians are encouraged to use parental control software to prevent underage individuals from accessing online gambling platforms. r5777 recommends tools such as Net Nanny, Gamblock, and CyberPatrol for this purpose.

13 International Data Transfers

r5777 is a platform that operates internationally, and some of its service providers — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — are located outside Bangladesh. When you play a game supplied by such a provider, limited session data (your account identifier and wager amount) may be transmitted to servers located in the provider's jurisdiction, which may be in a different country.

Where Personal Data is transferred outside Bangladesh to a country that does not provide an equivalent level of data protection, r5777 will ensure that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, binding corporate rules, or other legally recognised transfer mechanisms. By using the Platform, you acknowledge that such international transfers may occur as an inherent feature of using a globally distributed gaming platform.

r5777 does not transfer Personal Data internationally for purposes beyond those described in this Privacy Policy, and does not permit international recipients to use transferred data for their own independent commercial purposes.

14 Amendments to This Privacy Policy

r5777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform features, or data processing practices. The current version of this Privacy Policy, together with its effective date and version number, will always be available on this page at r5777.io/privacy-policy.

Where an amendment constitutes a material change to how r5777 processes your Personal Data — such as a new category of data being collected, a new third-party recipient being added, or a change to the legal basis for a key processing activity — r5777 will provide advance notice to all registered Players via a notification displayed in their account dashboard and, where feasible, via a message to their registered mobile number. The notice will be given at least 14 days before the amended Policy takes effect, giving Players the opportunity to review the changes and, where applicable, to exercise their right to object or to close their account before the changes apply.

Minor or administrative amendments — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without advance notice. The version number and last-reviewed date on this page will be updated to reflect all changes, including minor ones.

Your continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any amendment, you must cease using the Platform and may request deletion of your account by contacting [email protected].

15 Contact & Data Subject Requests

For all questions relating to this Privacy Policy, or to exercise any of your data rights as described in Section 11, please contact the r5777 data team using the details below. All data subject requests must be submitted in writing (email is acceptable) and must include sufficient information to verify your identity before r5777 can action the request.

15.1 Contact Details

• Email: [email protected] — please use the subject line "Data Privacy Request" for all data-related enquiries.
• Live Chat: Available 24/7 via the Platform at r5777.io — agents can log your request and escalate it to the data team.
• Support Hours: 00:00 – 24:00 Bangladesh Standard Time (BST, UTC+6), every day of the year.

15.2 Response Timeframes

• Acknowledgement of your request: within 1 business day of receipt.
• Resolution of your request: within 30 calendar days of receipt.
• Complex requests: may be extended by a further 30 days with prior notice to you.

15.3 Identity Verification

To protect the security of Player data, r5777 will verify your identity before actioning any data subject request. Verification may include confirming your registered mobile number, requiring you to log in to your account, or requesting a copy of an identity document. This verification step cannot be waived, as actioning a data request without verification could result in your data being disclosed to or deleted by an unauthorised party.

r5777 is committed to handling all data subject requests with professionalism, discretion, and respect for your privacy rights. We view transparency and accountability as core obligations, not merely compliance formalities.