at77 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which at77 ("the Platform", "we", "us", "our") collects, uses, stores, and discloses personal information obtained from individuals ("you", "the Player", "the User") who access or use the at77 website at https://at77.io and all associated services, including sports betting, live casino, slots, and payment facilities.

at77 is committed to protecting the privacy of all users on the platform. We recognise that when you register with us, deposit funds, or place a bet, you are entrusting us with personal data that is important to you. This Policy explains precisely what data we collect, why we collect it, how it is used, and what controls you have over it.

By creating an account on at77, accessing the platform, or otherwise using our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the at77 platform.

For the purposes of applicable data protection law, at77 acts as the data controller in respect of the personal data it collects from players and website visitors. As data controller, at77 determines the purposes for which and the means by which personal data is processed.

at77 operates the online betting and casino platform at https://at77.io, serving players in Bangladesh. All transactions on the platform are conducted in Bangladeshi Taka (৳). The platform is operated exclusively for players aged 21 and above.

For all data protection enquiries, including requests to exercise your data rights, please contact us at:

at77 collects the following categories of personal data from users of the platform. We only collect data that is necessary for the specific purposes described in this Policy — we do not collect data beyond what is reasonably required to operate the platform safely and in compliance with applicable requirements.

at77 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing identity verification, submitting a deposit or withdrawal request, contacting the support team, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically when you access the at77 website, including your IP address, browser type, device identifiers, and session activity logs. This data is collected via server logs and, where applicable, cookies (see Section 9 below).
• Payment processor data: When you conduct a transaction via bKash, Nagad, Rocket, Upay, or a card payment provider, the relevant processor shares transaction confirmation data — including the wallet number or masked card reference and transaction amount — with at77 for the purpose of crediting your account or processing your withdrawal.
• Third-party identity verification services: Where at77 uses a third-party KYC provider to verify your identity or age, that provider may share the outcome of the verification check (pass/fail) and certain identity data with at77. This is done only with your knowledge and consent at the point of submitting your verification documents.
• Game studio data feeds: Certified game providers supply at77 with game outcome data, session duration data, and RTP statistics for audit and compliance purposes. This data is associated with your at77 account identifier, not with your personal identity, within the game provider's systems.

at77 uses the personal data we collect for the following specific purposes. For each purpose, we identify the lawful basis on which we rely to process your data:

• Account creation and management — to create and maintain your at77 player account, verify your identity, and manage your account settings. Lawful basis: contractual necessity.
• Age verification (21+) — to confirm that you meet the minimum age requirement before you are permitted to place bets or access casino games on the platform. Lawful basis: legal obligation and contractual necessity.
• Transaction processing — to process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and card payment methods, and to maintain accurate financial records of all transactions denominated in Bangladeshi Taka (৳). Lawful basis: contractual necessity.
• Fraud prevention and anti-money laundering — to detect and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as described in the at77 Terms & Conditions. Lawful basis: legitimate interests and legal obligation.
• Responsible gaming monitoring — to monitor betting patterns and account activity that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to respond to responsible gaming concerns raised by players or third parties. Lawful basis: legitimate interests and legal obligation.
• Customer support — to respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and complaints handling purposes. Lawful basis: contractual necessity and legitimate interests.
• Platform improvement — to analyse aggregated, anonymised usage data to improve the performance, design, and content of the at77 platform. Lawful basis: legitimate interests.
• Promotional communications — to send you information about at77 promotions, bonuses, and offers where you have opted in to receive marketing communications. Lawful basis: consent. You may withdraw this consent at any time by contacting [email protected].
• Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from competent authorities, and exercise or defend legal claims. Lawful basis: legal obligation.

at77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only with the following categories of recipients, and only to the extent necessary for the specific purpose stated:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank — to process your deposit and withdrawal transactions. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC and age verification services engaged by at77 to confirm your identity and age at the point of registration or when requested during your account lifetime. These providers are contractually bound to process your data only for the purpose of completing the verification check.
• Game studios and platform providers: Certified game providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and others require certain session and account data to deliver their games to you within the at77 platform. These providers are not permitted to use your personal data for any purpose beyond delivering their services to at77.
• IT and security service providers: Hosting, cloud infrastructure, and cybersecurity providers who support the operation of the at77 platform. These providers act as data processors under at77's instruction and may not use your data for their own purposes.
• Law enforcement and regulatory authorities: Where at77 is under a legal obligation to disclose personal data — for example, pursuant to a lawful order from a court or law enforcement authority — we will comply with that obligation. at77 will, where legally permissible, notify you of such disclosure.

at77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law. The following retention periods apply to the main categories of data held by at77:

• Account and identity data: Retained for the duration of your active account and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations and to enable us to respond to any retrospective legal or regulatory enquiries.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction, in line with standard financial record-keeping requirements.
• Betting and gaming history: Retained for the duration of your active account and for three (3) years following account closure, for dispute resolution and responsible gaming monitoring purposes.
• Support and communications data: Retained for three (3) years from the date of the last communication in a given support thread, unless a longer retention period is required for an ongoing dispute or legal matter.
• Technical and log data: Retained for twelve (12) months, after which time it is either deleted or anonymised.
• Marketing preference data: Retained until you withdraw your consent or close your account, whichever is earlier.

When personal data is no longer required for any legitimate purpose, at77 will securely delete or anonymise it. Anonymised data (data that can no longer be linked to an identifiable individual) may be retained and used for statistical analysis and platform improvement on an indefinite basis.

at77 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the at77 platform is protected by industry-standard SSL/TLS encryption. This ensures that your login credentials, financial details, and personal data cannot be intercepted during transmission.
• Encrypted data storage: Sensitive data — including payment wallet numbers, identity document references, and account passwords — is stored in encrypted form on at77's secured servers. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access controls: Access to personal data within at77's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement are granted access, and all access is logged and audited.
• OTP authentication: Account login and sensitive account operations (such as withdrawal requests and password changes) are protected by one-time password (OTP) verification delivered to your registered mobile number.
• Intrusion detection: at77 employs automated intrusion detection and anomaly monitoring systems to identify and respond to potential security threats in real time.
• Regular security reviews: at77 conducts periodic reviews of its security practices and infrastructure to identify and address vulnerabilities proactively.

While at77 implements robust security measures, no platform can guarantee absolute security against all possible threats. You also have a responsibility to protect your own account by using a strong, unique password and by not sharing your login credentials or OTPs with any third party. If you suspect that your account has been compromised, contact [email protected] immediately.

at77 uses cookies and similar tracking technologies to support the operation of the platform and to improve your experience. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the at77 platform:

• Strictly necessary cookies: These cookies are essential for the at77 platform to function correctly. They enable core features such as secure login sessions, account authentication, and the shopping cart functionality used in the casino cashier. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised or aggregated data about how visitors use the at77 platform — for example, which pages are visited most frequently, how long sessions last, and which features are used. This data is used solely to improve the platform and is not linked to your personal identity.
• Functionality cookies: These cookies remember your preferences — such as your preferred language setting and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.
• Security cookies: These cookies support fraud detection and security monitoring by helping at77 identify suspicious session behaviour and protect against account takeover attempts.

at77 does not use third-party advertising or retargeting cookies that track your activity across other websites for commercial advertising purposes. We do not share cookie-derived data with advertising networks.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to key platform features.

at77 respects your rights in relation to the personal data we hold about you. The following rights are available to all at77 players:

• Right of access: You have the right to request a copy of the personal data that at77 holds about you. We will provide this within 14 calendar days of receiving a verified request.
• Right to rectification: If you believe that any personal data at77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly from your account dashboard; for changes that require manual intervention, contact [email protected].
• Right to erasure: You may request that at77 delete your personal data. Note that this right is not absolute — where at77 is required by law to retain certain data (for example, financial transaction records for anti-money laundering compliance), we are unable to delete that data prior to the expiry of the legally mandated retention period.
• Right to restrict processing: You may request that at77 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, while at77 verifies the correction.
• Right to data portability: You may request a copy of the personal data you have provided to at77 in a structured, commonly used, machine-readable format (such as CSV), where technically practicable.
• Right to withdraw consent: Where at77 processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You may object to the processing of your personal data where at77 relies on legitimate interests as the lawful basis for processing. at77 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the rights listed above, contact at77 at [email protected]. We will verify your identity before processing any data rights request to protect your account security. All requests are processed free of charge unless they are manifestly unfounded or excessive.

The at77 platform is strictly operated for individuals aged 21 and above. at77 does not knowingly collect personal data from persons under the age of 21. If at77 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to:

• Close the relevant account without notice.
• Void all bets and casino game rounds placed by the underage account holder.
• Return any net deposits (deposits less withdrawals already processed) to the payment method used, less any costs necessarily incurred in the course of the investigation.
• Permanently delete the personal data associated with the underage account, subject to any legal obligation to retain evidence of the age violation for compliance purposes.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on at77, please contact us immediately at [email protected]. at77 will treat such reports as a priority and investigate them promptly.

at77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or operational changes to the platform. Where updates are material — meaning they meaningfully alter your rights or the way in which we use your data — at77 will provide advance notice by publishing the updated Policy on the at77 website and, where practicable, by notifying registered players via their registered contact details prior to the effective date of the change.

Minor updates — such as typographical corrections, clarifications that do not alter the substance of any provision, or formatting changes — may be made without advance notice and will take effect immediately upon publication.

Your continued use of the at77 platform following the effective date of any update to this Policy constitutes your acknowledgement and acceptance of the revised Privacy Policy. If you do not accept the updated Policy, you must cease using the platform and may request voluntary account closure by contacting [email protected].

The date shown at the top of this Policy ("Effective Date") always reflects the date on which the most recent version came into force. We encourage you to review this Policy periodically to stay informed about how at77 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which at77 handles your personal data, please contact us through the following channel:

at77 is committed to resolving all data privacy concerns promptly and fairly. If, after contacting us, you remain unsatisfied with our response to a data privacy concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions.