gt777 Privacy Policy

1. Introduction & Data Controller

1.1 gt777 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at https://gt777.io. This Privacy Policy sets out how gt777 collects, processes, stores, shares, and protects personal data relating to individuals who visit or use the platform ("you", "the Player", "the User").

1.2 gt777 acts as the data controller in respect of the personal data you provide when registering an account and using our services. As data controller, gt777 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

1.3 This policy applies to all personal data collected via the gt777 website, mobile browser interface, any gt777 mobile application, customer support channels, and any other digital touchpoint operated by gt777.

1.4 This Privacy Policy should be read alongside the gt777 Terms & Conditions, available at https://gt777.io/terms-conditions, and the gt777 Responsible Gaming Policy, available at https://gt777.io/responsible-gaming. Together, these documents form the complete agreement governing the relationship between gt777 and its registered players.

1.5 This policy is published in English. In the event of any interpretive ambiguity arising from a translation, the English-language text of this document is the authoritative version.

2. Categories of Personal Data We Collect

2.1 gt777 collects personal data across the following categories. We collect only data that is necessary for the identified purpose. Where a category is marked as mandatory, failure to provide this data will prevent account creation or the specific service from being delivered.

Category	Examples	Mandatory?
Identity Data	Full legal name, date of birth, gender, nationality, National Identity Card (NID) number, copy of passport or driving licence	Yes — for KYC verification
Contact Data	Email address, mobile phone number, residential address (including city, district, and postcode within Bangladesh)	Yes — for account communication
Account Credentials	Username, hashed password (we never store your plaintext password)	Yes — for platform access
Financial Data	bKash or Nagad mobile wallet number, Rocket account reference, bank account details (BRAC Bank, Sonali Bank, Dutch-Bangla Bank, etc.), transaction history, deposit and withdrawal amounts in BDT (৳)	Yes — for payment processing
Gameplay & Betting Records	Game sessions, bet history, win/loss records, game preferences, tournament participation, sports betting selections (cricket BPL, IPL, T20, etc.)	Yes — for account integrity and responsible gaming
Technical & Device Data	IP address, browser type and version, operating system, device identifiers, screen resolution, time zone, referral URL, session timestamps	Yes — for security and fraud prevention
Usage Data	Pages visited, features used, click patterns, search queries on the platform, session duration, navigation path	No — collected via analytics only
Communications Data	Records of your correspondence with gt777 support (email transcripts, live chat logs), complaint history, feedback submitted	No — collected when you contact us
Marketing Preferences	Opt-in or opt-out status for promotional emails, SMS, and push notifications; preferred communication channel; language preference	No — only where you have opted in

2.2 gt777 does not intentionally collect sensitive categories of personal data (sometimes called "special category data") such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly required by applicable law or where you voluntarily provide such information in a support context. Any such data received incidentally will be deleted promptly and will not be used for any processing purpose.

3. How We Collect Your Data

3.1 gt777 collects personal data through the following channels:

Direct Collection — Data You Provide

When you register an account on gt777, complete identity verification, make a deposit, place a bet, participate in a promotion, contact our support team, or submit a feedback form, you directly provide personal data to us. The registration form collects your name, date of birth, email, mobile number, and preferred currency (BDT). Subsequent KYC verification collects identity and address documents.

Automated Collection — Data Generated by Your Use

When you access and navigate the gt777 platform, our servers and analytics systems automatically record technical and usage data including your IP address, device identifiers, browser information, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described in Section 9.

Third-Party Collection — Data from Partners

gt777 may receive personal data about you from regulated third-party partners in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks may provide transaction confirmation references and status updates that are linked to your gt777 account.
• Identity Verification Agencies: Where gt777 uses a third-party KYC provider to validate NID documents or address records, that provider returns a verification result which is stored against your account.
• Fraud Prevention Services: Fraud-scoring and anti-money-laundering (AML) screening providers may return risk assessments linked to your account activity, payment details, or device fingerprint.
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session and gameplay metadata for dispute resolution and fairness auditing purposes.

4. Legal Bases for Processing

4.1 gt777 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contract Performance: Processing that is necessary to deliver the services you have requested — including account creation, payment processing, game delivery, and withdrawal processing — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal Obligation: Certain processing activities — including identity verification, anti-money-laundering checks, and the retention of transaction records — are carried out because gt777 is required to do so by applicable law or regulation.
• Legitimate Interests: gt777 processes technical and usage data, fraud-prevention signals, and security logs on the basis of legitimate interests — specifically, the interests of maintaining a safe, secure, and well-functioning platform for all players. We have conducted legitimate-interest assessments to confirm that these interests are not overridden by your privacy rights.
• Consent: Marketing communications (promotional emails, SMS, push notifications) are sent only where you have given us explicit, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Personal Data

5.1 gt777 uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your player account, authenticate your login, maintain your account settings, and communicate account-related notices such as deposit confirmations, withdrawal approvals, and security alerts.
• Identity Verification (KYC): To verify your identity, age (21+), and residential address in compliance with anti-money-laundering and responsible gaming obligations. gt777 operates a strict 21+ policy and will not allow unverified players to make withdrawals.
• Payment Processing: To receive your deposits via bKash, Nagad, Rocket, Upay, and partner banks, and to process your withdrawal requests back to your verified payment method, all in Bangladeshi Taka (৳).
• Service Delivery: To provide access to cricket betting markets (BPL, IPL, T20 World Cup), casino games, slots, and live dealer games, and to record and settle your bets and game outcomes accurately.
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, account takeovers, multi-accounting, bonus abuse, money laundering, and other prohibited conduct listed in the gt777 Terms & Conditions.
• Responsible Gaming: To monitor betting and gaming patterns for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide you with assistance through our 24/7 English-language support team.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with gt777, identify bugs and performance issues, and improve the platform's design and functionality.
• Marketing (Consent-Based Only): To send you promotional offers, bonus notifications, and seasonal campaign communications (e.g., Eid promotions, Pohela Boishakh offers, IPL-season specials) where you have opted in. Each communication includes a clear and easy opt-out mechanism.
• Legal Compliance: To fulfil any legal obligation imposed on gt777, including responding to lawful requests from regulatory, law enforcement, or judicial authorities.

6. Data Sharing & Disclosure

6.1 gt777 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary.

6.1 Service Providers

gt777 engages regulated third-party service providers to assist in delivering our platform. These include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), identity verification providers, fraud-prevention and AML screening services, cloud infrastructure providers, and customer support platform operators. Each service provider is bound by a data processing agreement that restricts their use of your data to the specified service purpose only.

6.2 Game Studios

When you play casino games or slots provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session data is shared with those studios' servers to deliver the game in real time. Each studio operates under its own privacy policy and is subject to its own independent auditing and certification requirements.

6.3 Legal and Regulatory Disclosure

gt777 may disclose your personal data to courts, regulators, law enforcement agencies, or other governmental authorities where required to do so by applicable law, court order, or regulatory directive. gt777 will, where legally permitted, notify you of such a request before complying.

6.4 Business Transfers

In the event that gt777 undergoes a merger, acquisition, asset sale, or corporate restructuring, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any change in the identity of the data controller before the transfer takes effect.

7. International Data Transfers

7.1 gt777 primarily stores and processes personal data on servers located in data centres that serve the South and Southeast Asia region. Some of our third-party service providers — including cloud infrastructure operators and game studios — may store or process data in jurisdictions outside Bangladesh.

7.2 Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, gt777 ensures that appropriate safeguards are in place. These safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or the recipient's certification under a recognised international privacy framework.

7.3 By using the gt777 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh in accordance with the safeguards described in this section. If you have concerns about international transfers of your data, you may contact us at [email protected].

8. Data Retention

8.1 gt777 retains your personal data for as long as your account remains active and for such further period as is necessary to fulfil the purposes described in this policy or to comply with applicable legal obligations.

8.2 The following retention periods apply as a general guide:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years following account closure, to satisfy AML record-keeping requirements.
• Financial and transaction data: Retained for a minimum of seven years from the date of each transaction, in accordance with financial record-keeping obligations.
• Gameplay and betting records: Retained for five years from the date of each session, or longer if required for dispute resolution or regulatory review.
• Customer support correspondence: Retained for three years from the date of the last communication in the relevant thread.
• Marketing preference records: Retained for two years from the date of your last opt-in or opt-out action, or until account closure, whichever is later.
• Technical and device data (server logs): Retained for twelve months from the date of generation, after which they are deleted or anonymised.

8.3 Upon expiry of the applicable retention period, gt777 will securely delete or anonymise your personal data so that it can no longer be attributed to you as an identified individual. Where complete deletion is not immediately technically practicable, data will be isolated from active processing systems pending secure deletion at the earliest opportunity.

9. Cookies & Tracking Technologies

9.1 gt777 uses cookies and similar tracking technologies on the gt777.io website. This section explains what cookies we use, why we use them, and how you can control them.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They enable the website to remember information about your visit — such as your login status and preferences — so that your next visit is easier and the site works more effectively. Cookies cannot execute code or deliver viruses; they are purely data storage files.

Types of Cookies Used by gt777

• Strictly Necessary Cookies: These cookies are essential for the gt777 platform to function. They maintain your login session, preserve your language preference, enable secure payment flows, and support responsible gaming features such as session time limits. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — for example, your preferred payment method, game category filter, or sports betting market — so that you do not need to re-enter them each time you visit.
• Analytics Cookies: gt777 uses privacy-respecting analytics tools to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify and fix performance issues and improve the user experience. Analytics data is never used to identify individual users.
• Security Cookies: These cookies support our fraud-detection systems by recording session fingerprints that help distinguish legitimate users from automated bots and fraudulent actors.

9.2 gt777 does not use third-party advertising or behavioural tracking cookies. We do not allow advertising networks to set cookies via the gt777.io domain.

9.3 You may control and manage cookies via your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in and using the gt777 platform. Disabling functional cookies will mean your preferences are not saved between sessions. Disabling analytics cookies will have no effect on your ability to use the platform.

10. Security Measures

10.1 gt777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, and accidental loss.

10.2 Our key technical security measures include:

• Transport Encryption: All data transmitted between your device and gt777's servers is encrypted using TLS 1.2 or higher (256-bit SSL), indicated by the padlock icon in your browser's address bar.
• Data-at-Rest Encryption: Sensitive data fields stored in gt777's databases — including payment references and identity document metadata — are encrypted at rest using industry-standard symmetric encryption.
• Password Security: Player passwords are never stored in plaintext. They are hashed using a strong, salted one-way hashing algorithm. gt777 support staff cannot retrieve your password; only a password reset function is available.
• Access Controls: Access to personal data within gt777's internal systems is restricted to authorised personnel whose job role requires such access. Access is logged and subject to regular review.
• Multi-Factor Authentication: Administrative access to gt777's back-end systems requires multi-factor authentication. gt777 encourages players to enable any available two-step verification features on their accounts for additional protection.
• Regular Security Audits: gt777's platform and infrastructure undergo regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: gt777 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to your rights, gt777 will notify affected players promptly, including a description of the breach, the data involved, and the steps being taken to address it.

10.3 While gt777 takes every reasonable technical precaution to protect your data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are also responsible for keeping your own account credentials confidential. If you suspect your account has been compromised, contact [email protected] immediately.

11. Children & Minors

11.1 gt777 is strictly an adults-only platform. No person under the age of 21 may register an account, access any service, or transmit personal data to gt777. This is an absolute restriction, not a recommendation.

11.2 gt777 does not knowingly collect personal data from individuals under the age of 21. If gt777 discovers or is notified that personal data belonging to a minor has been collected — whether through a false age declaration at registration or any other means — that data will be permanently deleted immediately and the associated account will be closed with any deposited funds returned to the payment source.

12. Your Privacy Rights

12.1 As a player whose personal data is processed by gt777, you hold the following rights in respect of your data. To exercise any of these rights, please submit a written request to [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. gt777 will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data gt777 holds about you, together with information about how it is being used. We will provide this in a structured, commonly used, machine-readable format.
• Right to Rectification: If any personal data gt777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account contact details, many fields can be updated directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request that gt777 delete your personal data. This right is subject to certain exceptions — for example, we are required to retain financial and identity records for legally mandated periods even after account closure. We will inform you of any applicable exceptions when we respond to your request.
• Right to Restriction of Processing: You have the right to ask gt777 to pause processing your personal data in certain circumstances — for example, while a dispute is being investigated — without deleting the data.
• Right to Data Portability: You have the right to receive the personal data you provided to gt777 in a structured, machine-readable format, and to transfer that data to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for fraud-prevention purposes. gt777 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

12.2 gt777 will not charge a fee for handling data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. If a request is complex or voluminous, the 30-day response period may be extended by up to a further 60 days, and you will be informed of the extension within the initial 30-day period.

13. Marketing Communications

13.1 gt777 will send you promotional communications — including welcome bonus offers, reload promotions, seasonal campaigns (Eid, Pohela Boishakh, Victory Day, IPL and BPL cricket season specials), and personalised game recommendations — only where you have given explicit opt-in consent during registration or at a subsequent point via your account settings.

13.2 You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" or "opt out" link included in every promotional email gt777 sends.
• Updating your communication preferences in the Notifications section of your gt777 account settings.
• Contacting the gt777 support team at [email protected] with a written opt-out request.

13.3 Opting out of marketing communications will not affect essential transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and policy update notices — which are sent on the basis of contract performance and legal obligation rather than consent.

13.4 gt777 does not engage in unsolicited cold outreach via SMS or telephone. If you receive a call or SMS purporting to be from gt777 that you did not consent to, please report it to [email protected] immediately.

14. Third-Party Links

14.1 The gt777 platform may contain references to third-party game studios, payment providers, and industry bodies. While gt777 takes reasonable care to avoid linking to sites with poor privacy practices, we have no control over the content or privacy practices of third-party websites. Once you navigate away from gt777.io, this Privacy Policy no longer applies.

14.2 gt777 is not responsible for the privacy policies or data handling practices of third-party service providers such as bKash, Nagad, Rocket, Upay, or any game studio whose software is hosted on our platform. We encourage you to read the privacy policies of any third-party service you use in connection with your gt777 account.

14.3 The inclusion of a third-party brand name or payment method on the gt777 platform does not constitute an endorsement of that third party's privacy or security practices beyond the contractual obligations imposed by gt777's data processing agreements with those partners.

15. Amendments to This Privacy Policy

15.1 gt777 reserves the right to amend, update, or replace this Privacy Policy at any time. Such changes may reflect updates to our data processing activities, changes in applicable law or regulatory guidance, operational changes to the platform, or feedback from our player community.

15.2 When material changes are made to this Privacy Policy, gt777 will notify registered players via email to the address associated with their account and via a prominent notice on the gt777.io homepage. The notification will describe the nature of the changes and the date on which the revised policy takes effect.

15.3 Minor or administrative amendments — such as correcting typographical errors or updating formatting — may be made without prior notice. The "Last Updated" date at the top of this document will always reflect the date of the most recent change, whether material or minor.

15.4 Your continued use of the gt777 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

16. Contact & Complaints

16.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or gt777's data processing practices, please contact our Data Protection team using the details below:

16.2 gt777 is committed to resolving all privacy-related complaints promptly, fairly, and transparently. If you raise a complaint, we will acknowledge receipt within 3 business days and provide a substantive response within 30 calendar days. Where a complaint requires additional investigation, we will keep you informed of progress throughout the process.

16.3 If you are not satisfied with gt777's response to your complaint, you retain the right to escalate the matter to any applicable data protection supervisory authority or to seek judicial remedy through the courts of competent jurisdiction. gt777 will cooperate fully with any such regulatory investigation.

16.4 All communications regarding data protection matters should be submitted in English to ensure they are handled by our specialist Data Protection team without delay. Communications submitted in other languages may take longer to process as they will require translation before review.