6r77 Privacy Policy — How We Protect Your Personal Data

1 Information We Collect

When you register an account, use the 6r77 platform, or interact with our customer support team, we collect certain categories of personal data. The specific data we collect depends on how you interact with the platform and what is required to fulfil our legal and contractual obligations to you.

Registration & Identity Data

When you create a 6r77 account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create your account, verify your identity through our KYC process, and ensure you meet the minimum age requirement of 18 years.

Identity Verification (KYC) Documents

As part of our mandatory KYC process, we may collect copies of government-issued photo identification such as your National Identity Card (NID), passport, or driving licence, as well as supporting documents such as a utility bill or bank statement to confirm your residential address. These documents are stored securely and processed solely for the purpose of identity and age verification.

Financial Data

When you make deposits or withdrawals, we collect details of the payment method used, including mobile financial service account identifiers (for bKash, Nagad, Rocket, and Upay) and card details (where applicable). We do not store full card numbers on our servers; payment card data is tokenised and processed through PCI-DSS-compliant payment processors.

Transactional & Gaming Data

We maintain records of all transactions on your account, including deposits, withdrawals, bonus claims, game sessions, bet history, and wagering activity. This data is necessary for account management, dispute resolution, bonus tracking, and responsible gaming monitoring.

Technical & Device Data

When you access 6r77, our systems automatically collect certain technical data including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data

If you contact our support team via live chat or email, we retain a record of that correspondence including the content of messages, the date and time of contact, and the outcome of any support interaction. This data is used for quality assurance, dispute resolution, and training purposes.

2 How We Use Your Data

6r77 processes personal data only where a lawful basis exists for doing so. The following sets out the primary purposes for which we use the data we collect, along with the corresponding lawful basis for each processing activity.

• Account creation and management — Processing your registration data and maintaining your account is a contractual necessity. Without this data, we cannot provide the platform services to you.
• Identity and age verification (KYC) — Verifying your identity and confirming that you are at least 18 years of age is both a contractual requirement and a legal obligation. No withdrawal will be processed on an unverified account.
• Processing financial transactions — Deposits and withdrawals require us to process your payment data. This is a contractual necessity and, in the case of anti-money laundering checks, a legal obligation.
• Responsible gaming monitoring — We use your gaming activity data to identify indicators of problem gambling and, where appropriate, to intervene in accordance with our Responsible Gaming Policy. This processing is in both our legitimate interests and yours.
• Fraud and security monitoring — We process technical and transactional data to detect and prevent fraud, multi-accounting, bonus abuse, money laundering, and unauthorised account access. This is a legitimate interest of 6r77 and a legal obligation under applicable anti-fraud regulations.
• Customer support — Communications data is retained and used to resolve disputes, investigate complaints, and improve the quality of our support interactions. This is a legitimate interest of 6r77.
• Regulatory compliance and reporting — Certain data must be retained and, in some circumstances, disclosed to regulatory or law enforcement authorities. This is a legal obligation.
• Marketing communications — Where you have given us your explicit consent, we may send you promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, new game releases, and seasonal offers (such as BPL season promotions or Eid bonuses). You may withdraw your consent at any time by updating your notification preferences or contacting support.
• Platform analytics and improvement — Aggregated, anonymised usage data is analysed to understand how players interact with the platform, identify friction points, and improve the overall product experience. This processing uses data that cannot reasonably be linked back to any individual player.

3 Cookies & Tracking Technologies

6r77 uses cookies and similar tracking technologies to operate the platform, maintain session security, and understand how players use the site. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies cannot execute code or deliver viruses; they are simply data files that help websites function correctly and remember user preferences.

We use the following categories of cookies on the 6r77 platform:

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during an active session, CSRF protection tokens, and load-balancing cookies. Without these cookies, core platform functionality — including logging in, depositing, and playing games — would not work.
• Functional cookies: These cookies remember your preferences and settings (such as language preference and display settings) to provide a more personalised experience. They are not strictly necessary but significantly improve usability.
• Analytics cookies: We use anonymised analytics cookies to understand aggregate player behaviour — such as which pages are visited most frequently, where players drop off in the registration funnel, and how long sessions last. This data is used solely to improve the platform and is not linked back to individual player identities.
• Security cookies: These cookies support our fraud detection and security monitoring systems by tracking unusual patterns of activity (such as multiple failed login attempts from different IP addresses). They are a component of our legitimate interest in maintaining platform security.

Managing Your Cookie Preferences

You can control or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please be aware that disabling strictly necessary cookies will prevent you from logging into your 6r77 account and using the platform. Disabling functional or analytics cookies will not affect your ability to log in or play, but may result in a less personalised experience.

4 Data Sharing & Disclosure

6r77 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in the course of operating the platform, we share certain categories of personal data with trusted third-party service providers and, in certain circumstances, with authorities as required by law. All third parties with whom we share data are contractually bound to use it only for the specific purpose for which it was shared and to maintain appropriate data security standards.

The categories of third parties with whom 6r77 may share personal data are as follows:

• Payment processors and mobile financial services: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive the minimum financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: We use reputable third-party KYC technology providers to assist with identity document verification. These providers process your identity documents on our behalf and under our instruction; they do not retain your data beyond the verification workflow.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to power their game engines within the 6r77 platform. These providers do not receive your full name, contact details, or financial data.
• IT infrastructure and cloud services: Our platform is hosted on secure cloud infrastructure. Our hosting provider has access to server data only in their role as an infrastructure operator and is contractually prohibited from accessing or using player data for any other purpose.
• Regulatory and law enforcement authorities: Where we are required to do so by applicable law, court order, or regulatory instruction, 6r77 will disclose personal data to the relevant authority. We will notify affected players of such disclosures where we are legally permitted to do so.
• Anti-fraud and anti-money laundering networks: We may share data with shared fraud-prevention databases where we have a legitimate interest or legal obligation to report suspected fraudulent activity or money laundering. This sharing is limited to what is strictly necessary for the prevention and detection of crime.

5 Data Retention

6r77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply to the primary categories of data we hold:

When personal data is no longer required, 6r77 securely deletes or anonymises it in accordance with recognised data destruction standards. Where anonymisation is used rather than deletion, the resulting anonymised dataset cannot reasonably be linked back to any individual and is no longer treated as personal data.

Where a player requests deletion of their personal data and we are under no overriding legal obligation to retain it, we will action that request within 30 days and confirm the deletion in writing to the player's registered email address. Where a legal obligation prevents full deletion (for example, where we are required to retain financial records for 7 years), we will inform the player of which categories of data must be retained and why, and ensure that all other data is deleted promptly.

6 Your Privacy Rights

As a 6r77 player, you have a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" along with your registered account email address and a description of your request.

We will respond to all verifiable privacy rights requests within 30 calendar days. In complex cases we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the end of the initial 30-day period. We will not charge a fee for processing a rights request unless the request is manifestly unfounded or excessive.

7 Data Security

The security of your personal data is of the highest importance to 6r77. We implement a multi-layered security framework to protect player data from unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 6r77 platform is encrypted using modern TLS protocols, preventing interception of data in transit.
• Encryption at rest: Sensitive data — including identity documents, financial records, and authentication credentials — is stored in an encrypted format on our servers. Encryption keys are managed under strict access control policies.
• Access controls: Access to personal data within 6r77's internal systems is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and undergo regular data protection training.
• Two-factor authentication: Administrative access to systems containing player data requires multi-factor authentication. We strongly recommend that players also enable any available account security features on their 6r77 account.
• Regular security testing: Our platform undergoes regular penetration testing and vulnerability assessments conducted by qualified security professionals. Critical vulnerabilities are remediated on an expedited basis.
• Incident response procedures: In the event of a data breach that poses a risk to player rights or freedoms, 6r77 has established incident response procedures in place to contain the breach, assess its scope, and notify affected players without undue delay.

While 6r77 takes all reasonable technical and organisational measures to protect your data, no internet transmission or electronic storage system is 100% secure. You are also responsible for protecting your own account by keeping your login credentials confidential and using a strong, unique password. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

8 Changes to This Privacy Policy

6r77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. Any changes to this policy will be posted on this page with a revised effective date clearly indicated at the top of the document.

For material changes — that is, changes that significantly affect how we collect or use your personal data, or that meaningfully impact your privacy rights — we will provide additional notice by sending an email to your registered email address at least 14 days before the updated policy takes effect. For non-material changes (such as minor clarifications or corrections of typographical errors), we may update the policy without advance email notification, relying on the posting of the revised policy on this page as sufficient notice.

Your continued use of the 6r77 platform after any revised Privacy Policy takes effect constitutes your acknowledgment of the updated terms. If you do not agree with any changes, you should discontinue use of the platform and contact [email protected] to request account closure and data deletion where applicable.

Contact for Privacy Matters: If you have any questions, concerns, or complaints about how 6r77 handles your personal data, please contact our support team at [email protected] with the subject line "Privacy Enquiry". Our team is available 24 hours a day, 7 days a week, and will acknowledge all privacy-related enquiries within 1 business day and provide a full response within 30 days.