ef777 Privacy Policy — How We Collect, Use & Protect Your Data

This Privacy Policy applies to all personal data processed by ef777 in connection with the operation of the ef777 online casino and sports betting platform, accessible at ef777.io and any associated mobile interfaces or APIs. It covers data collected from registered members, prospective members who interact with the registration flow, and any visitor who accesses the ef777 platform without completing registration.

This policy should be read alongside the ef777 Terms & Conditions and the ef777 Responsible Gaming Policy, both of which are incorporated by reference. In the event of any inconsistency between this Privacy Policy and another ef777 document specifically addressing data privacy, this Privacy Policy shall prevail.

ef777 is committed to handling all personal data in a manner that is lawful, transparent, and proportionate to the purposes for which the data is collected. We apply industry-standard technical and organisational security measures to protect all personal data against unauthorised access, loss, or disclosure.

ef777 collects personal data from members and visitors through a number of channels, including the account registration form, the KYC verification process, deposit and withdrawal transactions, platform activity, and direct communications with support. The categories of personal data we collect are described in the table below.

ef777 uses the personal data it collects exclusively for the purposes listed below. We do not process your personal data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your explicit consent or establishing a separate legal basis.

• Account Management: To create, maintain, and administer your ef777 member account, including processing login authentication and managing your account settings and preferences.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of our KYC obligations, which are integral to operating a safe and compliant platform.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and to maintain accurate financial records for your account.
• Service Delivery: To provide access to the full range of ef777 services including sports betting, live casino games, slots, and promotional offers, and to personalise your experience based on your stated preferences and platform activity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering activity, and other prohibited conduct as described in the ef777 Terms & Conditions.
• Responsible Gaming: To monitor account activity for indicators of problem gambling and, where such indicators are detected, to apply responsible gaming tools or initiate contact with the affected member in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your support enquiries, process complaints, and maintain records of our communications with you for quality assurance and dispute resolution purposes.
• Legal Compliance: To meet our obligations under applicable laws and regulations, including responding to lawful requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyse aggregate, anonymised behavioural data to improve the performance, stability, and user experience of the ef777 platform. This analysis is conducted on anonymised datasets that cannot be traced back to individual members.
• Promotional Communications: To send you relevant promotional offers, bonus notifications, and platform news, subject to your communication preferences and the consent framework described in Section 13.

ef777 processes your personal data on one or more of the following legal bases depending on the nature of the processing activity:

The majority of the personal data processing carried out by ef777 is necessary for the performance of the contract between you and ef777 — specifically, to operate your account, process transactions, and deliver the services you have registered to use. Without this processing, ef777 cannot provide its services to you.

ef777 processes certain categories of personal data — including technical data, behavioural data, and communications data — on the basis of its legitimate interests in operating a secure, compliant, and commercially viable platform. In each case, ef777 has assessed that its legitimate interests are not overridden by your interests, rights, or freedoms as a data subject.

Where ef777 is required to process personal data in order to comply with a legal obligation — such as retaining transaction records for a legally prescribed period, or disclosing information to a law enforcement authority pursuant to a valid legal order — such processing is carried out on the basis of legal obligation rather than consent or contract.

Where ef777 processes your personal data for purposes that are not strictly necessary for contract performance or legal compliance — such as sending you optional marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ef777 uses cookies and similar tracking technologies to ensure the proper functioning of the platform, to authenticate your session, to remember your preferences, and to gather anonymised analytical data about how members use the platform. The categories of cookies used by ef777 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the ef777 platform to function. They manage your login session, maintain your authentication state, and ensure that the platform can securely identify your account during a session. These cookies cannot be disabled without rendering the platform non-functional.
• Preference Cookies: These cookies remember your platform settings and preferences, such as your chosen language, display preferences, and notification settings, so that you do not have to re-enter them on each visit.
• Analytical Cookies: ef777 uses anonymised analytical tracking to understand aggregate patterns of platform use, identify pages or features that underperform, and inform development decisions. No analytical data is linked to individual member identities.
• Security Cookies: These cookies assist ef777's fraud detection and security systems by identifying unusual session patterns, multiple account detection indicators, and other signals that may indicate unauthorised access or prohibited conduct.

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your ef777 account and using the platform. ef777 does not use third-party advertising or targeting cookies for the purpose of delivering advertisements to you on other websites.

ef777 does not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial or marketing purposes. Your personal data may be shared with the following categories of recipients only to the extent necessary for the specified purposes, and always under contractual obligations that require the recipient to protect your data to at least the same standard as ef777:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and other supported Bangladeshi payment providers receive only the transaction data and payment method identifiers necessary to process your specific transaction. They do not receive your full profile or gaming history.
• KYC & Identity Verification Partners: Certified identity verification service providers receive copies of the identity documents you submit during the KYC process solely for the purpose of verifying their authenticity and your eligibility to hold an ef777 account.
• Game Technology Providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum session data necessary to deliver their games to your account. They are subject to data processing agreements that restrict their use of this data to service delivery only.
• Security & Fraud Prevention Services: Specialised third-party security services may receive technical and behavioural data in anonymised or pseudonymised form to support ef777's fraud detection and responsible gaming monitoring functions.
• Legal & Regulatory Authorities: ef777 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by a lawful and binding legal order, or where disclosure is necessary to protect the rights, safety, or property of ef777, its members, or the general public.

Some of ef777's technology and service partners — including game providers and security service providers — operate infrastructure located outside Bangladesh. Where your personal data is transferred to a recipient in a country that does not provide an equivalent level of data protection, ef777 ensures that appropriate safeguards are in place prior to the transfer. Such safeguards include contractual clauses that impose data protection obligations on the recipient that are consistent with the standards applied within ef777's operating jurisdiction.

ef777 maintains a register of all international data transfers and reviews the adequacy of safeguards in place for each transfer on a periodic basis. If you have concerns about the international transfer of your personal data, please contact our support team at [email protected] for further information.

ef777 retains personal data for the periods set out in the table below. Retention periods are based on the nature of the data and the legal, contractual, and operational requirements that necessitate its retention. Upon expiry of the applicable retention period, personal data is securely deleted from ef777 systems or, where deletion is not technically feasible, permanently anonymised.

Where an account is closed following a self-exclusion request or as a consequence of a breach of the ef777 Terms & Conditions, ef777 will retain sufficient data to enforce the exclusion or suspension and to prevent re-registration by the same individual for the duration of the exclusion or suspension period, even if this extends beyond the standard retention periods listed above.

As an ef777 member, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of the right you wish to exercise. ef777 will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that ef777 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as email address or phone number updates, you may make changes directly in your account settings.
• Right to Erasure: Subject to our legal retention obligations, you may request that ef777 delete your personal data. We will fulfil erasure requests to the maximum extent permitted by law. Where data must be retained for legal or regulatory reasons, we will inform you of the specific retention obligation that prevents full erasure.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of your data while we verify it — you may request that ef777 restrict its processing of your personal data to storage only, pending resolution of the underlying issue.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that ef777 provide your personal data in a structured, commonly used, machine-readable format, suitable for transfer to another service provider.
• Right to Withdraw Consent: Where any processing activity relies on your consent as its legal basis, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to Object: You may object to ef777's processing of your personal data where such processing is based on legitimate interests. ef777 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

The ef777 platform is strictly for adults aged 21 and above. ef777 does not knowingly collect personal data from any person under the age of 21. If ef777 discovers, or receives credible information, that an account has been registered by a person under 21 years of age, the account will be immediately suspended, all personal data associated with the account will be securely deleted (subject to any mandatory legal retention obligations), and winnings derived from the underage account will be forfeited.

Parents and guardians who believe that a minor under their care has registered an ef777 account are encouraged to contact [email protected] immediately. ef777 will investigate and act on all such notifications as a priority matter. ef777 also recommends the use of parental control software to prevent minors from accessing online gambling platforms.

ef777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and ef777 servers is encrypted using industry-standard TLS protocols, preventing interception of data in transit.
• Password Hashing: Account passwords are stored exclusively in salted, one-way cryptographic hash form. No ef777 staff member can read your password; if you forget it, it must be reset rather than retrieved.
• Access Controls: Access to personal data held on ef777 systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data necessary for their specific role. Access rights are reviewed on a regular basis.
• Infrastructure Security: ef777 servers are hosted in secure data centre facilities with physical access controls, redundant power and network infrastructure, and 24/7 monitoring.
• Intrusion Detection: ef777 employs automated intrusion detection and anomaly monitoring systems that generate real-time alerts for suspicious access patterns or data exfiltration indicators.
• Penetration Testing: ef777's platform infrastructure and application layer undergo periodic security assessments by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All ef777 staff who handle personal data receive mandatory data protection training upon onboarding and on a recurring annual basis, covering secure data handling, phishing awareness, and incident response procedures.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected members, ef777 will notify affected members without undue delay, providing a clear description of the nature of the breach, the categories of data affected, and the steps ef777 is taking to address the breach and mitigate its effects.

The ef777 platform may from time to time contain references to or integrations with third-party services, including game providers, payment gateways, and verification partners. Where such third-party services are accessed via links or embedded interfaces, those third parties operate under their own independent privacy policies and data practices, for which ef777 accepts no responsibility.

ef777 encourages members to review the privacy policies of any third-party service they access through or in connection with the ef777 platform. The presence of a third-party integration within ef777 does not constitute an endorsement of that party's data practices by ef777.

With your consent, ef777 may send you promotional communications relating to bonuses, special offers, new game releases, sporting event promotions, and other platform news via email, SMS, or in-platform notification. You will be asked for your communication preferences during the account registration process, and you may update your preferences at any time through your account settings or by contacting [email protected].

ef777 will not send you marketing communications if you have not provided your consent, or after you have withdrawn consent, except for transactional communications that are strictly necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, and account policy updates. These service communications are not marketing and cannot be opted out of while your account remains active.

ef777 does not share your contact details with third parties for their own marketing purposes under any circumstances.

ef777 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, changes in our data processing activities, or improvements to our privacy practices. Where an amendment is material — meaning it affects the categories of data collected, the purposes of processing, or the rights available to members — ef777 will notify all active members via a prominent notice on the ef777 platform homepage at least 14 days before the amendment takes effect.

Non-material amendments, such as corrections to typographical errors, clarifications of existing provisions, or updates to contact information, may be made without prior notice. The effective date displayed at the top of this document will always reflect the date of the most recent revision, whether material or non-material.

Your continued use of the ef777 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with a material amendment, you must discontinue use of the platform and may request account closure by contacting [email protected] before the amendment takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ef777 handles your personal data, please contact our Data Protection team using the details below. ef777 is committed to responding to all privacy-related enquiries within 30 calendar days of receipt.

When submitting a data rights request or privacy enquiry, please include your registered ef777 email address and a clear description of your request or concern. For identity verification purposes, ef777 may ask you to confirm additional account details before processing a data access, rectification, or erasure request.