fr77 Privacy Policy — Your Data, Your Rights

Introduction and Scope

This Privacy Policy ("Policy") describes how fr77 ("fr77", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", or "Player") who access or use the fr77 online betting and casino platform available at fr77.io (the "Platform").

This Policy applies to all personal data collected through: (a) the fr77 website and all associated pages; (b) the account registration and verification process; (c) all deposits, withdrawals, and financial transactions conducted through the Platform; (d) all betting, gaming, and wagering activity on the Platform; (e) communications between you and fr77 support; and (f) any promotional or bonus participation activity.

By registering for an Account on the fr77 Platform, you acknowledge that you have read and understood this Policy in its entirety and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside the fr77 Terms & Conditions, which are available at fr77.io/terms-conditions. In the event of any conflict between this Policy and the Terms & Conditions on data-related matters, this Policy shall prevail.

Data Controller Information

For the purposes of applicable data protection law, fr77 acts as the data controller in respect of all personal data collected through the Platform. As data controller, fr77 determines the purposes for which personal data is processed and the means by which that processing takes place.

All data rights requests, privacy queries, and data-related complaints should be directed to fr77 using the contact details below:

• Data Controller: fr77
• Platform URL: fr77.io
• Privacy Contact Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Acknowledged within 1 hour; substantive response within 5 business days for data rights requests

Where fr77 engages third-party processors to handle personal data on its behalf — for example, payment processors and identity verification providers — those parties act as data processors under written agreements that impose obligations consistent with this Policy. fr77 remains responsible for ensuring that such processors handle your data appropriately.

Data We Collect

fr77 collects the following categories of personal data, grouped by the context in which they are collected:

3.1 Registration Data

When you create an Account on the fr77 Platform, we collect the personal data you provide during the registration form, including: full name, date of birth, email address, mobile number, and preferred payment method. This data is mandatory — the Account cannot be created without it.

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, fr77 may collect copies of government-issued identity documents (National ID card, passport, or driving licence), proof of address documents (utility bills, bank statements), and photographic selfies for identity confirmation. KYC data is processed solely for verification purposes and is stored securely with strict access controls.

3.3 Financial Transaction Data

When you make deposits or request withdrawals, fr77 collects transaction data including: payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and payment reference numbers. We do not store full card numbers or mobile wallet PINs — sensitive payment credentials are handled exclusively by our payment processing partners.

3.4 Betting and Gaming Activity Data

fr77 records all betting and gaming activity conducted through your Account, including: games played and sports markets bet upon, stake amounts and bet outcomes, session durations, and betting history. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention.

3.5 Technical and Device Data

When you access the Platform, fr77 automatically collects certain technical data including: IP address, device type and operating system, browser type and version, screen resolution, referring URL, and pages visited within the Platform. This data is used for security, fraud detection, and Platform optimisation purposes.

3.6 Communications Data

When you contact fr77 support by email or any other channel, we retain records of those communications, including the content of your messages and our responses. This data is used for quality assurance, dispute resolution, and continuous service improvement.

The table below summarises the main data categories, their source, and their primary purpose:

Legal Basis for Processing

fr77 processes personal data only where a valid legal basis exists for that processing. The legal bases on which fr77 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform our contractual obligations to you under the fr77 Terms & Conditions — for example, processing your registration data to create your Account, processing transaction data to execute deposits and withdrawals, and processing betting data to settle wagers.
• Legal Obligation: Processing that is required to comply with applicable legal obligations — for example, retaining KYC and financial transaction records for anti-money laundering (AML) compliance purposes and responding to lawful requests from regulatory authorities.
• Legitimate Interests: Processing that is necessary for fr77's legitimate interests, provided those interests are not overridden by your rights and interests — for example, fraud detection and prevention, Platform security, responsible gaming monitoring, and general business analytics.
• Consent: Where fr77 relies on your consent as a legal basis — for example, for optional marketing communications — you may withdraw that consent at any time by contacting fr77 support at [email protected], without affecting the lawfulness of processing carried out before the withdrawal.

Where processing is based on consent, fr77 will record the time and manner of consent and will maintain records of consent withdrawals. Withdrawal of consent to optional processing will not affect your ability to use the core fr77 Platform.

How We Use Your Data

fr77 uses the personal data it collects for the following purposes:

1. Account Operations: Creating, maintaining, and managing your fr77 Account, including processing login authentication, updating account settings, and managing balance and transaction history.
2. Identity Verification: Verifying that you meet the age requirement (21+) and confirming that the identity information you have provided is accurate, as part of our KYC and responsible gaming obligations.
3. Payment Processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and other supported payment methods. Confirming transaction statuses and resolving payment disputes.
4. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, collusion, money laundering, and other forms of abuse on the Platform. Monitoring login behaviour and transaction patterns for anomalies.
5. Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour, enforcing self-exclusion requests, applying deposit limits, and fulfilling obligations under responsible gaming frameworks.
6. Customer Support: Responding to your queries, complaints, and support requests; conducting follow-up communications; and maintaining records of support interactions for quality assurance purposes.
7. Legal and Regulatory Compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws; responding to lawful court orders and regulatory inquiries.
8. Platform Improvement: Using aggregated and anonymised technical data to analyse Platform usage patterns, identify and resolve technical issues, and improve the user experience for all fr77 players in Bangladesh.
9. Marketing Communications (with consent only): Where you have opted in, sending you information about fr77 promotions, new games, and seasonal offers via email. You may opt out of marketing communications at any time.

Data Sharing and Disclosure

fr77 does not sell, rent, or trade personal data to third parties under any circumstances. Personal data is shared only in the limited circumstances described below:

• Payment Processors: Personal data necessary to execute financial transactions is shared with our payment processing partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card scheme participants (Visa, Mastercard). These partners process data solely to execute and confirm transactions on fr77's behalf and are bound by their own data protection frameworks.
• Identity Verification Providers: KYC documents and identity data may be shared with third-party identity verification service providers engaged by fr77 to assist with the verification process. These providers act as data processors under written agreements with fr77.
• Game Software Providers: Certain technical session data (such as game session tokens and bet outcomes) may be passed to third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent required for the correct operation of their games. These providers do not receive personally identifying registration data beyond what is technically necessary.
• Legal and Regulatory Authorities: fr77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where fr77 reasonably believes that disclosure is necessary to protect the rights, property, or safety of fr77, its players, or the public.
• Fraud Prevention Networks: In cases of suspected fraud, multi-accounting, or money laundering, fr77 may share relevant data with industry fraud-prevention networks and databases operated for the collective benefit of licensed betting operators.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of fr77's business assets, personal data held by fr77 may be transferred to the successor entity, subject to that entity assuming the obligations set out in this Policy.

All third parties with whom fr77 shares personal data are required by contract to implement appropriate technical and organisational security measures and to process that data solely in accordance with fr77's documented instructions.

Cookies and Tracking Technologies

The fr77 Platform uses cookies and similar tracking technologies to ensure correct Platform operation, enhance your browsing experience, and gather aggregated analytics data. The categories of cookies used on the Platform are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They are set in response to your actions — such as logging in, maintaining your session, and remembering your preferences within a session. Without these cookies, core Platform features will not operate correctly.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how Players use the Platform — such as which pages are visited most frequently and whether any error messages are encountered. This data is used to improve Platform performance and user experience. No personally identifying information is collected through these cookies.
• Functionality Cookies: These cookies remember choices you make — such as display preferences — and provide an enhanced, more personalised experience. The data collected by these cookies is anonymised and cannot identify you personally.
• Security Cookies: These cookies assist fr77's fraud detection and security monitoring systems. They help identify unusual session behaviour that may indicate account takeover attempts or automated bot activity.

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use the fr77 Platform, as core session management depends on these cookies.

Data Retention

fr77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the anonymised aggregate data may be retained indefinitely for statistical analysis purposes.

Where an Account is closed due to a finding of Prohibited Conduct — including fraud, multi-accounting, or money laundering — fr77 may retain relevant personal data for an extended period as required by applicable law or ongoing legal proceedings.

Your Data Rights

As a fr77 player and data subject, you hold the following rights in respect of your personal data. To exercise any of these rights, contact fr77 support at [email protected] with the subject line "Data Rights Request" and include your registered Account username and a clear description of the right you wish to exercise.

• Right of Access: You have the right to request confirmation of whether fr77 holds personal data about you, and if so, to receive a copy of that data along with information about how it is processed. fr77 will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where a correction is not possible without verification, fr77 may request supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of personal data that is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to overriding legal retention obligations — for example, fr77 is required by AML law to retain certain financial records for a minimum period regardless of erasure requests.
• Right to Restriction of Processing: You have the right to request that fr77 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending verification of fr77's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on fr77's legitimate interests. fr77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent to marketing communications can be effected by contacting [email protected] at any time.

Data Security

fr77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• Encryption in Transit: All data transmitted between your browser or device and the fr77 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher) with 256-bit encryption. This applies to all Platform pages, login flows, and payment processes.
• Encryption at Rest: Sensitive personal data stored on fr77's servers — including KYC documents, financial records, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within fr77's internal systems is restricted to authorised personnel on a strict need-to-know basis. Access is governed by role-based permissions and is subject to regular review.
• Audit Logging: All access to personal data within fr77's systems is logged and auditable. Logs are retained for security investigation purposes and reviewed regularly for anomalies.
• Vulnerability Management: fr77's Platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: fr77 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, fr77 will notify affected players without undue delay.

While fr77 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You also have a responsibility to protect your Account by using a strong, unique password, not sharing your login credentials with any third party, and logging out of the Platform when using shared devices.

Children and Minors

The fr77 Platform is strictly intended for adults aged 21 and above. fr77 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process for all fr77 Accounts.

If fr77 becomes aware that personal data has been collected from an individual under the age of 21, that Account will be suspended immediately, the personal data in question will be deleted, and any deposits made through the underage Account will be dealt with in accordance with the fr77 Terms & Conditions and applicable law.

Parents and guardians who become aware that a minor in their care has registered on the fr77 Platform are encouraged to contact fr77 support immediately at [email protected] so that the Account can be closed and the data appropriately handled.

Third-Party Links

The fr77 Platform may contain references to third-party service providers, payment processors, and game studios whose own websites or platforms operate independently from fr77. This Privacy Policy applies solely to personal data collected and processed by fr77 through the fr77 Platform.

fr77 has no control over, and accepts no responsibility for, the privacy practices of any third-party website or service. If you access a third-party service through a link from the fr77 Platform, you do so at your own discretion and are subject to the privacy policy and terms of that third party. fr77 encourages you to review the privacy policies of any third-party services you interact with.

Changes to This Policy

fr77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services offered through the Platform. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or the way fr77 processes your personal data — fr77 will provide advance notice to registered Players via email to the address held on Account, or via a notification displayed upon login to the Platform, no less than 14 days before the amended Policy takes effect.

Your continued use of the fr77 Platform following the effective date of any amended Policy constitutes your acceptance of those amendments. If you do not agree with the revised Policy, you may close your Account by contacting fr77 support at [email protected] before the amended Policy takes effect.

Previous versions of this Privacy Policy are available on request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fr77 handles your personal data, please contact us using the details below. All privacy-related correspondence is handled by a dedicated team and treated with strict confidentiality.

• Privacy Contact: fr77 Data Privacy Team
• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Policy Query" or "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week, including Eid, Pohela Boishakh, Victory Day, and Independence Day
• Acknowledgement: Within 1 hour of receipt
• Full Response: Within 5 business days for general queries; within 30 calendar days for formal data rights requests

When submitting a privacy query or data rights request, please include your registered Account username, a clear description of your query or the right you wish to exercise, and any relevant reference numbers to help our team handle your request as efficiently as possible.

This Privacy Policy was last reviewed and updated on 1 January 2026. For players aged 21 and above only.