asc77 Privacy Policy — How We Protect Your Data

1. Introduction

This Privacy Policy ("Policy") sets out how asc77 ("asc77", "we", "us", "our"), the operator of the online casino and sports betting platform at asc77.org, collects, uses, stores, and protects the personal data of players and users ("you", "your") who access or use the asc77 platform. asc77 is committed to protecting your privacy and handling your personal data with transparency, care, and in full compliance with applicable data protection principles.

By creating an account on asc77, making a deposit, placing a bet, or otherwise using the asc77 platform, you acknowledge that you have read this Policy and understand how your personal data will be used. If you do not agree with any aspect of this Policy, please do not use the asc77 platform. You may contact us at any time with questions about your personal data or this Policy using the contact details provided in Section 14 of this document.

asc77 serves players located in Bangladesh, including but not limited to players in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All personal data is processed and stored securely in accordance with the data protection standards described in this Policy. asc77 does not target players under the age of 21 and takes reasonable technical and organisational steps to prevent underage access to the platform.

2. Data Controller

For the purposes of this Policy, the data controller responsible for your personal data is asc77, the operator of the online gaming platform at asc77.org. As data controller, asc77 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to the processing of your personal data by asc77, you may contact our support team using the details provided in Section 14. asc77 aims to respond to all data-related enquiries within 30 days of receipt.

3. Information We Collect

asc77 collects personal data from you directly (when you provide it to us) and indirectly (when it is generated automatically through your use of the platform). The categories of personal data we collect are described below.

Data Collected Directly From You

Data Collected Automatically

When you access and use the asc77 platform, we automatically collect technical and usage data through cookies, log files, and similar tracking technologies, including:

• Device data: device type, operating system version, browser type and version, screen resolution, and device identifier.
• Connection data: IP address, mobile network operator (e.g. Grameenphone, Robi, Banglalink, Teletalk), and approximate geographic location derived from IP address.
• Usage data: pages and features accessed, time spent on each page, referral source, and navigation path through the platform.
• Session data: login and logout timestamps, session duration, and any error events recorded during a session.

4. How We Use Your Information

asc77 uses your personal data only for legitimate, specific purposes that are directly related to the provision, operation, and improvement of the asc77 platform and services. We use your personal data for the following purposes:

• Account creation and management: to register your account, verify your identity, manage your account settings, and process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• KYC compliance: to verify that you meet the eligibility requirements for using the asc77 platform, including age verification (21+) and identity authentication as required by our compliance obligations.
• Game and betting services: to provide casino games, sports betting markets, live dealer tables, and all other gaming services available on the asc77 platform; to record game outcomes and settle bets accurately.
• Responsible gaming: to operate responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion; to monitor account activity for signs of problem gambling and take protective action where warranted.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bot activity, and other prohibited conduct; to maintain the security and integrity of the asc77 platform.
• Customer support: to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance relating to your asc77 account or use of the platform.
• Platform improvement: to analyse aggregate, anonymised usage data in order to improve the asc77 platform's performance, user experience, payment processes, and game catalogue. No individual player is identifiable from this aggregate analysis.

asc77 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human oversight. Where automated tools are used in fraud detection or responsible gaming monitoring, a human review is conducted before any significant action (such as account suspension or self-exclusion) is taken.

5. Legal Basis for Processing

asc77 processes your personal data on the following legal bases, depending on the specific purpose of processing:

Contractual Necessity

Processing your personal data is necessary for asc77 to perform its contractual obligations to you as a registered player. This includes account registration, payment processing (deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard), providing gaming services, and managing your account settings and balances.

Legal Obligation

asc77 is required to process certain personal data to comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) identity verification, anti-money laundering (AML) checks, age verification (21+), and fraud prevention requirements. These obligations cannot be waived by either party.

Legitimate Interests

asc77 processes certain data on the basis of its legitimate interests as a platform operator, where those interests are not overridden by your rights and interests. This includes platform security monitoring, fraud detection, responsible gaming monitoring, and aggregate data analysis for platform improvement. In each case, asc77 has assessed that its legitimate interest is proportionate and does not unduly override the privacy interests of individual players.

Consent

Where asc77 sends you direct marketing communications about promotions, bonuses, or new features (such as seasonal offers around BPL, Eid, or Pohela Boishakh), we will do so only where you have given your express consent to receive such communications. You may withdraw consent at any time by contacting asc77 support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

6. Cookies and Tracking Technologies

asc77 uses cookies and similar tracking technologies on the asc77 platform to deliver a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly necessary cookies: these cookies are essential for the asc77 platform to function. They enable core features such as secure login sessions, account authentication, and payment processing. These cookies cannot be disabled without disrupting the platform's operation.
• Performance and analytics cookies: these cookies collect anonymised data about how players use the asc77 platform — for example, which pages are visited most frequently and where errors occur. This data helps asc77 improve platform performance and user experience.
• Functional cookies: these cookies remember your preferences (such as your language setting and responsible gaming tool configuration) so that you do not need to reset them each time you visit the platform.
• Security cookies: these cookies support asc77's fraud detection and platform security systems. They help identify suspicious patterns of access and protect against unauthorised account access, bot activity, and CSRF attacks.

You may configure your browser or device settings to block or delete cookies. However, disabling strictly necessary cookies will prevent the asc77 platform from functioning correctly and may make it impossible to log in, make deposits, or play games. asc77 does not use third-party advertising cookies and does not share cookie-derived data with advertising networks.

7. Data Sharing and Disclosure

asc77 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your personal data with third parties only in the following limited and controlled circumstances:

Service Providers and Technology Partners

asc77 engages third-party service providers to assist with operating the platform. These include payment processors (for facilitating bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions), game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), identity verification providers, fraud detection vendors, and cloud hosting services. All third-party service providers are bound by contractual data processing agreements that require them to protect your personal data, use it only for the purposes for which it was disclosed, and not to share it further without authorisation.

Legal and Regulatory Disclosure

asc77 may disclose your personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or regulatory requirement. This includes disclosures made in connection with anti-money laundering investigations, fraud investigations, or other matters of legal compulsion. asc77 will, where legally permissible, notify you of such a disclosure requirement before complying.

Business Transfers

In the event that asc77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. Where such a transfer is anticipated, asc77 will notify affected players in advance and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy.

Protection of asc77 and Its Users

asc77 may share personal data with third parties where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of asc77, its players, or the public — for example, to investigate a suspected fraud, to enforce our Terms and Conditions, or to respond to a security incident affecting player accounts.

8. Data Security

asc77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, asc77 applies industry-standard protections that are appropriate to the nature and sensitivity of the data we process.

Our security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the asc77 platform, protecting your login credentials, payment data, and personal information in transit.
• Encrypted storage of sensitive personal data at rest, including KYC documents and payment method details. Card data is stored only in tokenised form in compliance with payment card industry security standards.
• Role-based access controls ensuring that asc77 staff can only access player personal data to the extent necessary for their specific job function. All staff with access to personal data are trained in data protection and confidentiality obligations.
• Continuous security monitoring and intrusion detection systems to identify and respond to security threats in real time. Regular security audits and penetration testing are conducted to identify and remediate vulnerabilities before they can be exploited.

9. Data Retention

asc77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal and regulatory retention obligations. Retention periods vary depending on the category of data and the purpose for which it is held. As a general principle: account data and transaction records are retained for a minimum of 5 years following account closure, in accordance with standard financial record-keeping requirements. KYC verification documents are retained for a minimum of 5 years following the last transaction or account closure, whichever is later, to meet anti-money laundering compliance requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the individual's identity. Where data has been anonymised, the anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.

10. Your Data Protection Rights

As a player using the asc77 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact the asc77 support team using the contact details in Section 14. asc77 will respond to valid rights requests within 30 days of receipt.

• Right of access: you have the right to request a copy of the personal data that asc77 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: if any personal data that asc77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: you may request that asc77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to asc77's legal retention obligations.
• Right to restriction of processing: in certain circumstances, you may request that asc77 restrict the processing of your personal data — for example, while a rectification request is being assessed, or where you have objected to processing based on legitimate interests and that objection is under review.
• Right to object: where asc77 processes your data on the basis of legitimate interests, you have the right to object to that processing. asc77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.
• Right to withdraw consent: where processing is based on your consent (for example, direct marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred before the withdrawal.

asc77 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or the request may be refused. asc77 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised person.

11. Children's Privacy

The asc77 platform is intended exclusively for adults aged 21 years and above. asc77 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the account registration process, and asc77 applies additional verification checks where there is reason to suspect that a player may be underage.

If asc77 becomes aware that personal data has been collected from a person under the age of 21 without the requisite age verification having been completed, that account will be immediately suspended, all associated personal data will be deleted, and any funds held in the account will be returned via the original deposit method to the extent practicable. If you are a parent or guardian and believe that a person under your care has registered an asc77 account, please contact us immediately using the details in Section 14.

12. Third-Party Links and Services

The asc77 platform may contain links to third-party websites or services (for example, game provider help pages or payment gateway information pages). These third-party sites operate independently of asc77 and have their own privacy policies, which asc77 does not control and is not responsible for. asc77 recommends that you review the privacy policy of any third-party site before providing any personal data to that site. The inclusion of a link on the asc77 platform does not constitute an endorsement of the linked site or its privacy practices.

13. Changes to This Privacy Policy

asc77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the asc77 platform. Where a change is material — for example, a change that significantly affects how your personal data is used or shared — asc77 will provide reasonable advance notice to registered players via their registered mobile number or through a prominent notice on the platform prior to the change taking effect.

The version of this Privacy Policy currently displayed at asc77.org/privacy-policy is the governing version. The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Policy periodically to remain informed of how asc77 protects your personal data.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how asc77 has handled your personal data, please contact the asc77 support team. Our support team is available 24 hours a day, 7 days a week to assist you.

Data protection enquiries email: [email protected] (plain text only — not a clickable link). asc77 aims to respond to all data protection enquiries within 30 days of receipt. For urgent matters relating to suspected unauthorised access to your account or a data breach affecting your personal data, please use the live chat feature on the platform for an immediate response.