au77 Privacy Policy – How We Handle Your Data

Introduction

This Privacy Policy ("Policy") governs the collection, processing, storage, and use of personal data by au77 ("we", "us", "our") in connection with your use of the au77 online gaming platform at https://au77.ws. This Policy applies to all users who access the au77 platform from Bangladesh and any other location, and covers all services offered through the platform including online casino games, sports betting, payment processing, customer support, and promotional activities.

By using the au77 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform. We may update this Policy from time to time; when we do, we will display a notification on the platform and update the "Last Updated" date above. Continued use of the platform after an update constitutes acceptance of the revised Policy.

Information We Collect

au77 collects personal data from you in two primary ways: information you provide directly when using our services, and information collected automatically through your use of the platform. The categories of data we collect are described below.

Information You Provide Directly

• Registration data: your full legal name, date of birth, mobile phone number (used as your primary account identifier), and email address provided when you create your au77 account.
• Identity verification (KYC) documents: copies of government-issued identification (national ID card, passport, or driving licence), proof of residential address (utility bill, bank statement, or official letter dated within 90 days), and any additional documentation required to satisfy our Know Your Customer obligations under applicable anti-money laundering regulations.
• Payment information: details of the payment methods you register with your account, including bKash, Nagad, Rocket, or Upay mobile wallet numbers, bank account details for bank transfer methods, and card details (card number, expiry date, cardholder name) for Visa or Mastercard payments. Full card numbers are not stored by au77; card data is handled by our certified payment processor.
• Communications data: the content of messages you send to our customer support team via live chat or email, including any attachments, screenshots, or documentation you submit in connection with a support request, complaint, or dispute.
• Responsible gaming declarations: information you voluntarily provide when setting deposit limits, session time limits, cooling-off periods, or when requesting self-exclusion, including any self-assessment information related to your gambling habits.

Information Collected Automatically

• Device and technical data: your IP address, device type, operating system version, browser type and version, screen resolution, and device identifier. This information is collected automatically whenever you access the au77 platform and is used to ensure compatibility, detect fraud, and maintain platform security.
• Usage and gameplay data: your betting history, game session durations, wagering amounts, win/loss records, bonus usage, promotional offer interactions, and all other gameplay activity conducted through your au77 account. This data is retained as required for regulatory compliance, dispute resolution, and responsible gaming monitoring.
• Transaction data: a complete record of all deposits, withdrawals, bonus credits, and any other financial transactions processed through your au77 account, including the payment method used, the amount, the date and time (in Bangladesh Standard Time), and the transaction status.
• Cookies and similar tracking data: information collected through cookies, session tokens, and similar technologies used to maintain your login session, remember your preferences, analyse platform usage patterns, and detect suspicious activity. See the Cookies section of this Policy for more detail.

How We Use Your Information

The table below sets out the purposes for which au77 uses your personal data and the legal basis for each processing activity. We do not use your personal data for any purpose that is incompatible with the purposes set out below.

Legal Basis for Processing

au77 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contract performance: the majority of data processing by au77 is necessary to perform our contract with you — to provide you with an operating player account, process your deposits and withdrawals, make games available to you, and operate the VIP program. Without this processing, we cannot provide the service.
• Legal obligation: certain processing activities are required to comply with legal obligations, including identity verification (KYC), transaction monitoring (AML), responsible gaming record-keeping, and data retention for regulatory purposes. au77 must conduct this processing regardless of your consent.
• Legitimate interests: au77 processes certain data on the basis of legitimate interests, including fraud detection, platform security, abuse prevention, and improving our services. Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms.
• Consent: where we process your data for marketing and promotional communications, we do so on the basis of your consent. You may withdraw this consent at any time by contacting our support team or updating your account communication preferences. Withdrawal of consent does not affect any processing that took place before the withdrawal.

Sharing Your Information

au77 does not sell your personal data. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment service providers: we share payment-related data with bKash, Nagad, Rocket, Upay, and our card payment processor solely to process your deposits and withdrawals. These providers are contractually required to handle your data securely and may not use it for any other purpose.
• Game providers: game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session data (anonymous session tokens, wager amounts, game results) to operate their certified game software. These providers do not receive your full identity data.
• Regulatory and law enforcement authorities: we may be legally required to disclose your personal data to regulatory bodies, financial intelligence units, or law enforcement agencies in connection with anti-money laundering investigations, suspicious transaction reports, or other lawful demands. au77 will comply with all lawful requests and will notify you of any disclosure where legally permissible to do so.
• Technical service providers: we engage trusted third-party technical service providers (including hosting, infrastructure, security monitoring, and analytics providers) who process data on our behalf under binding data processing agreements. These providers are not permitted to use your data for their own purposes.

Cookies and Tracking Technologies

au77 uses cookies and similar session-management technologies to operate the platform. Because au77 is a browser-based platform (no app download required), cookies are essential to maintain your logged-in session and ensure the platform functions correctly on your device. The cookies we use fall into the following categories:

Types of Cookies We Use

• Strictly necessary cookies: these cookies are essential for the platform to function. They maintain your login session, remember your language preference, store your shopping cart during a deposit flow, and prevent cross-site request forgery attacks. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Performance and analytics cookies: these cookies collect anonymised usage data about how players use the au77 platform — which pages are visited most frequently, how long sessions last, where players encounter errors, and similar performance metrics. This data helps us improve the platform. No personally identifying information is collected through analytics cookies.
• Fraud detection and security cookies: au77 uses session fingerprinting and device recognition cookies to detect duplicate accounts, bot activity, and suspicious login patterns. These cookies are a core component of our fraud prevention system and cannot be disabled without compromising platform security.

Most web browsers allow you to manage cookie settings, including deleting existing cookies and blocking new ones. Please note that blocking strictly necessary and security cookies will prevent you from logging in to your au77 account. Instructions for managing cookies can be found in your browser's help documentation. au77 does not use cross-site tracking or advertising cookies

Data Retention

au77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply as a general guide: active account data is retained for the lifetime of your account plus a minimum of five (5) years after account closure; KYC and identity verification records are retained for a minimum of five (5) years from the date of the relevant transaction or from the date your account is closed, whichever is later; transaction records are retained for a minimum of five (5) years in line with anti-money laundering record-keeping requirements; responsible gaming records (including self-exclusion requests and deposit limit history) are retained for a minimum of five (5) years from the date the relevant record was created.

When your personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its continued retention, au77 will securely delete or anonymise the data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data au77 holds about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe and at no charge to you, unless a request is manifestly unfounded or excessive.

• Right of access: you have the right to request a copy of the personal data au77 holds about you, together with information about how we use it, who we share it with, and how long we retain it.
• Right to rectification: if any personal data au77 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account registration details, you may be able to update some information directly through your account settings.
• Right to erasure: in certain circumstances, you may request that au77 delete your personal data. This right is not absolute — we may be required by law to retain certain data even after you request erasure. Where a legal retention obligation applies, we will inform you of this when responding to your request.
• Right to restrict processing: you may request that au77 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and that objection is pending assessment.
• Right to data portability: where au77 processes your data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of the data you have provided to us in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where au77 processes your data on the basis of consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing that took place before the withdrawal.

To submit a data rights request, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number and a brief description of your request. We may need to verify your identity before processing your request to ensure we are disclosing data to the correct person.

Data Security

au77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our platform, encryption at rest for sensitive stored data including KYC documents and payment records, role-based access controls limiting staff access to personal data to those with a legitimate operational need, regular security assessments and vulnerability testing of platform infrastructure, and multi-factor authentication requirements for administrative access to platform systems.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, au77 will notify you without undue delay and will take immediate steps to contain the breach, assess its scope, and mitigate its impact.

Children and Minors

The au77 platform is strictly for adults aged 21 and above. au77 does not knowingly collect, process, or retain the personal data of any individual under the age of 21. If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the source payment method. If you believe that an underage person has created an account with au77 using false information, please report this immediately to [email protected] so that we can take prompt action.

Changes to This Privacy Policy

au77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When we make material changes, we will display a prominent notice on the au77 platform for a period of at least 14 days before the changes take effect, and where practicable, we will send a notification to the email address or mobile number registered on your account. The updated Policy will be identified by the revised "Last Updated" date at the top of this page. Your continued use of the au77 platform after the effective date of any revised Policy constitutes your acceptance of the changes.

Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how au77 handles your personal data, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and in a transparent manner. When contacting us about a privacy matter, please include your registered mobile number (for account identification purposes) and a clear description of your query or concern.

Your Privacy at a Glance

The six cards below summarise the key commitments au77 makes to you regarding your personal data. For full details, please refer to the relevant sections of this Policy above.