0k77 Privacy Policy

1 Introduction

0k77 (referred to in this document as "0k77", "the Platform", "we", "us" or "our") is an online betting and casino entertainment platform serving adult players in Bangladesh and other permitted regions. As part of delivering our services — including sports betting, live casino, slots, and specialty games — we necessarily collect and process certain personal information about our registered users.

This Privacy Policy sets out in full and transparent terms: the categories of personal data we collect; the purposes for which that data is processed; the legal bases on which we rely to process it; the circumstances under which we may share it with third parties; and the rights you hold in respect of your own personal information.

This Privacy Policy forms part of our wider legal framework and should be read alongside our Terms & Conditions and our Responsible Gaming policy. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall take precedence.

2 Data Controller

For the purposes of applicable data protection legislation, 0k77 is the data controller in respect of all personal data collected from users of the Platform. As data controller, 0k77 determines the purposes and means by which personal data is processed.

If you have any questions, concerns or requests relating to the processing of your personal data, you may contact the 0k77 data team at:

• Email: [email protected]
• Response Language: English
• Availability: 24 hours a day, 7 days a week

Please include your registered mobile number and a clear description of your data-related query so that our team can handle your request efficiently and within the applicable response timeframe.

3 Data We Collect

0k77 collects personal data from you in three primary ways: data you provide to us directly during registration and account use; data we collect automatically as you use the Platform; and data we receive from third parties in connection with identity verification and payment processing.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, mobile phone number registered in Bangladesh, and a user-chosen account password;
• Identity verification (KYC) data: Copies of government-issued identification documents such as your National Identity Card (NID), passport or driving licence; and in some cases, proof of address;
• Payment data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to fund your account or receive withdrawals. Full card numbers are not stored by 0k77 — payment data is handled directly by our certified payment processors;
• Support communications: Any messages, emails, chat transcripts or other communications you send to the 0k77 support team.

3.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution;
• Session data: Login timestamps, session duration, pages visited, navigation paths, and feature interactions within the Platform;
• Transaction data: Records of all deposits, withdrawals, bets placed, games played, bonus credits and related financial activity on your account;
• Cookie and tracking data: Session identifiers and analytics data collected via cookies as further described in Section 7 of this policy.

3.3 Data Received from Third Parties

• KYC verification providers: Results of identity and age verification checks conducted by our third-party KYC partners;
• Payment processors: Transaction confirmation data, payment status, and any fraud-screening results returned by our payment partners including bKash, Nagad, Rocket, Upay, Visa and Mastercard networks;
• Fraud prevention services: Risk scores or indicators returned by fraud detection systems used to protect the integrity of the Platform.

Summary of Data Categories

4 How We Use Your Data

0k77 uses the personal data we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register and maintain your account, authenticate your identity on each login, and manage your account preferences and settings;
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records associated with your account;
• Identity verification: To carry out KYC checks required to verify your age (21+), identity, and to comply with our anti-money laundering (AML) obligations;
• Customer support: To respond to your queries, resolve complaints, and manage any disputes relating to your account or transactions;
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where requested or where required by our responsible gaming policy;
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, account takeover attempts, and other unlawful or abusive behaviour on the Platform;
• Platform improvement: To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the 0k77 Platform;
• Legal and regulatory compliance: To comply with applicable laws, regulatory requirements, court orders or requests from law enforcement authorities;
• Promotional communications: To send you information about 0k77 promotions, bonuses and offers that may be relevant to you, where you have not opted out of receiving such communications.

5 Legal Basis for Processing

0k77 relies on the following legal bases to process your personal data, depending on the specific processing activity involved:

• Performance of a contract: Processing that is necessary to provide you with the services you have registered for — including account management, transaction processing, and customer support — is carried out on the basis that it is necessary for the performance of the contract between you and 0k77;
• Legal obligation: Processing necessary for 0k77 to comply with its legal and regulatory obligations — including KYC/AML verification, age verification, and responses to law enforcement requests — is carried out on the basis of legal obligation;
• Legitimate interests: Processing carried out to detect and prevent fraud, improve Platform security, analyse aggregated usage patterns, and protect the integrity of the Platform is carried out on the basis of 0k77's legitimate interests, provided those interests are not overridden by your rights and freedoms;
• Consent: Where processing is based on your consent — such as sending you optional promotional communications — you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

6 Sharing Your Data

0k77 does not sell, rent or trade your personal data to any third party. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose involved.

• Payment processors: Your payment account references and transaction data are shared with bKash, Nagad, Rocket, Upay, Visa and Mastercard processing networks solely to process your deposits and withdrawals;
• KYC and identity verification providers: Your identity documents and personal details are shared with our certified KYC partners to conduct the age and identity verification checks required before account activation or withdrawal processing;
• Game providers: Where technically necessary, certain account-level session data may be shared with game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) to enable you to participate in their games. No financial data is shared directly with game providers;
• Fraud and risk management services: Technical and behavioural data (including IP address and device fingerprint) may be shared with fraud detection service providers to identify and prevent abusive activity on the Platform;
• Legal authorities: In response to a valid court order, law enforcement request, or other legally mandated obligation, 0k77 may be required to disclose personal data to the relevant authority. Where permitted by law, we will notify you of any such request.

All third parties with whom 0k77 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they are providing to 0k77.

7 Cookies & Similar Technologies

0k77 uses cookies and similar browser-based technologies on the Platform. Cookies are small text files placed on your device that allow us to recognise your browser across sessions and collect certain usage information. We use cookies for the following strictly defined purposes:

• Essential / Session cookies: These are required for the Platform to function correctly. They maintain your login session, preserve your account state across pages, and enable secure authenticated access. These cookies cannot be disabled without breaking core Platform functionality;
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks;
• Analytics cookies: Used to collect anonymised, aggregated data about how users navigate the Platform — such as which pages are visited most frequently and where users encounter errors. This data is used exclusively to improve Platform performance and user experience;
• Preference cookies: Used to remember certain display preferences you may have set during your session, such as language settings.

0k77 does not use advertising cookies, third-party tracking pixels, or any technology designed to build a behavioural profile of you for advertising purposes. We do not share cookie data with ad networks.

You may control cookie behaviour through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your 0k77 account. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

8 Data Retention

0k77 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or for the duration required by applicable legal or regulatory obligations, whichever is longer.

• Active account data: Personal data associated with an active 0k77 account is retained for the full duration of the account relationship;
• Closed account data: Following account closure — whether initiated by you or by 0k77 — your personal data is retained for a minimum period of five (5) years to comply with our anti-money laundering record-keeping obligations and to enable resolution of any post-closure disputes;
• Transaction records: Records of all financial transactions are retained for a minimum of five (5) years from the date of the transaction;
• Support and communications records: Records of support interactions and complaints are retained for three (3) years from the date of the last interaction;
• KYC documents: Copies of identity documents submitted during KYC verification are retained for five (5) years from the date of submission or account closure, whichever is later.

Once the applicable retention period has expired, 0k77 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Anonymised, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.

9 Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data that 0k77 holds about you. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a clear description of your request.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay;
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where the data has been unlawfully processed. This right is subject to our legal obligation to retain certain data as described in Section 8;
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified or while a complaint is under review;
• Right to object: Where processing is based on 0k77's legitimate interests, you have the right to object to that processing. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.

0k77 will respond to all valid data rights requests within thirty (30) days of receipt. In cases of particular complexity or volume, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reason for it.

10 Data Security

0k77 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the 0k77 Platform is encrypted using industry-standard SSL/TLS protocols;
• Encryption at rest: Sensitive data stored on 0k77 servers — including identity documents and financial records — is encrypted at rest using AES-256 or equivalent encryption standards;
• Access controls: Access to personal data within 0k77's internal systems is strictly limited to staff who need it to perform their job functions. All internal access is logged and subject to periodic review;
• Password security: Account passwords are stored in hashed and salted form. 0k77 staff are unable to view your password in plain text;
• Regular security assessments: 0k77's systems are subject to regular vulnerability assessments and security audits to identify and remediate potential weaknesses;
• Incident response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, 0k77 will notify affected users as soon as reasonably practicable after becoming aware of the incident.

While 0k77 takes all reasonable steps to protect your data, no transmission over the internet and no method of electronic storage can be guaranteed to be 100% secure. You also have a responsibility to protect your account by keeping your login credentials confidential and notifying us immediately of any suspected unauthorised access.

11 Third-Party Links

The 0k77 Platform may, from time to time, contain references or links to third-party services — such as payment providers or game studios — that operate independently of 0k77. This Privacy Policy applies solely to personal data collected and processed by 0k77 in connection with the 0k77 Platform. It does not extend to the privacy practices of any third-party service provider.

When you interact with a third-party service — such as initiating a bKash or Nagad transfer — you are subject to that provider's own privacy policy and terms of use. 0k77 has no control over and accepts no responsibility for the content, privacy practices, or data handling of third-party services. We encourage you to review the privacy policies of any third party whose services you use in connection with your 0k77 account.

12 Children and Minors

The 0k77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the minimum age threshold, we will delete that data immediately and close the associated account.

If you believe that a minor has registered on the 0k77 Platform or that we hold personal data belonging to a person under the age of 21, please contact us immediately at [email protected] so that we can take the appropriate steps. The safety and protection of minors is a non-negotiable element of 0k77's responsible gaming commitment.

13 International Data Transfers

As an online Platform serving players primarily in Bangladesh, 0k77 may store or process your personal data on servers or through service providers located outside of Bangladesh. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as the country in which it was collected, 0k77 will ensure that appropriate safeguards are in place to protect your data.

Such safeguards may include contractual clauses that require the recipient to handle your data in accordance with standards equivalent to those applied by 0k77, or reliance on the recipient's adherence to internationally recognised data protection frameworks. By using the 0k77 Platform, you acknowledge that your personal data may be processed in locations outside your home country, subject to these safeguards.

14 Changes to This Privacy Policy

0k77 reserves the right to update or revise this Privacy Policy at any time. Where a material change is made — particularly one that affects the scope of data collected, the purposes for which it is used, or your rights as a data subject — we will notify registered users via their registered mobile number or by displaying a prominent notice on the Platform prior to the change taking effect.

The date at the top of this document will always reflect the date on which this Privacy Policy was most recently updated. Your continued use of the 0k77 Platform after any revision to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should discontinue your use of the Platform and may request account closure in accordance with the Terms & Conditions.

We recommend that you review this Privacy Policy periodically to stay informed about how 0k77 is protecting your personal data.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which 0k77 handles your personal data, please contact our support and data team using the details below:

• Email: [email protected]
• Response Language: English
• Availability: 24 hours a day, 7 days a week

When submitting a data-related query or rights request, please include your registered mobile number, a clear description of your request or concern, and any relevant account or transaction references. This will help our team respond to your query accurately and within the applicable timeframe.

For matters relating to responsible gaming, self-exclusion or problem gambling support, please visit our Responsible Gaming page or raise your concern directly with the support team at the email address above.