Privacy Policy — How a771 Protects Your Data

1 About This Policy

This Privacy Policy describes how a771 collects, uses, stores, shares, and protects the personal data of individuals who access or use the a771 online betting and casino platform available at https://a771.io (the "Platform"). The Platform is operated for and directed at residents of Bangladesh, and this Policy is drafted to reflect that context.

In this Policy, "personal data" means any information that identifies you as an individual or that could reasonably be used to identify you — including your name, mobile number, National Identity Card (NID) number, account username, IP address, device identifiers, and transaction history.

Scope. This Policy applies to all players who register an account on a771, all visitors who browse the Platform without registering, and all individuals who communicate with a771 via support channels including email and live chat. It does not apply to the privacy practices of third-party game providers, payment processors, or other external services — those parties operate under their own privacy policies.

Where a771 acts as a data controller, it determines the purposes and means of processing your personal data. Where a771 shares data with a third-party payment processor or KYC verification service, that third party acts as a separate data controller or processor for its own operations.

2 Data We Collect

a771 collects personal data from you in three principal ways: information you provide directly, data generated automatically through your use of the Platform, and data received from third parties such as payment providers and KYC verification services.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, Bangladeshi mobile number, email address, and a username and password of your choosing.
• Identity verification (KYC) data: Copy of National Identity Card (NID) or passport, selfie photograph for facial verification, and proof of payment method ownership where required.
• Financial data: Mobile wallet number (bKash, Nagad, Rocket, Upay) or bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) as required to process deposits and withdrawals.
• Communication data: Messages you send to a771 via support email ([email protected]) or live chat, including any attachments or screenshots you voluntarily provide.
• Responsible gaming preferences: Deposit limits, loss limits, cooling-off elections, and self-exclusion requests you submit through Account settings.

2.2 Data Collected Automatically

• Log and device data: IP address, browser type and version, operating system, device type (mobile/desktop), and time-zone setting (Bangladesh Standard Time, UTC+6).
• Session data: Pages visited, features used, games played, bet amounts, session duration, and navigation paths through the Platform.
• Cookie and tracking data: Session cookies, persistent preference cookies, and analytics identifiers as detailed in Section 6 of this Policy.
• Geolocation data: Country and city-level location derived from your IP address, used to ensure Platform access is consistent with our Bangladesh-focused service area.

2.3 Data Received from Third Parties

• Payment processors: Transaction status, reference numbers, and confirmation of payment method ownership from bKash, Nagad, Rocket, Upay, and partnered banks.
• KYC providers: Identity verification results and fraud-risk scores generated by third-party identity verification services when processing your NID or passport.
• Fraud and AML screening: Data from third-party anti-money laundering screening databases used to comply with financial crime prevention obligations.

3 How We Use Your Data

a771 uses the personal data it collects for the following specific, legitimate purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or notifying you of the new purpose.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and communicate essential account notices to you.
• Service delivery: To process deposits and withdrawals via your chosen BDT payment method, to credit winnings to your account balance, and to fulfil bonus and promotional commitments.
• Age and identity verification: To confirm that you are 21 years of age or older and that your identity matches the registration details you have provided, in compliance with our 21+ policy.
• Anti-money laundering (AML) and fraud prevention: To screen transactions and account activity against AML obligations and to detect, investigate, and prevent fraudulent activity, account abuse, and prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and maintain records of communications for quality assurance purposes.
• Platform security: To monitor for unauthorised access, detect technical vulnerabilities, and protect the integrity of the a771 Platform and all user accounts on it.
• Responsible gaming compliance: To enforce deposit limits, loss limits, cooling-off periods, and self-exclusion elections that you or a771's responsible gaming team have activated on your account.
• Platform improvement and analytics: To understand how players use the Platform, which games and features are most used, and where technical or user-experience improvements should be prioritised.
• Legal compliance and record-keeping: To meet applicable financial record-keeping requirements, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.
• Service communications: To send you transactional messages related to your account, deposits, withdrawals, and responsible gaming tools. We do not send unsolicited marketing messages unless you have separately opted in.

4 Legal Bases for Processing

a771 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual necessity: Processing is necessary to perform the contract between you and a771 — specifically, to provide the betting and casino services you have registered to access, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable law, including financial record-keeping regulations, anti-money laundering obligations, and any lawful direction from a competent authority in Bangladesh.
• Legitimate interests: Processing is necessary for a771's legitimate interests in preventing fraud, securing the Platform, improving service quality, and maintaining the integrity of our betting and gaming operations — provided those interests are not overridden by your own privacy rights.
• Consent: For any processing activity that does not fall under the above bases — such as optional marketing communications or non-essential analytics cookies — a771 will rely on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

a771 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment processors: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, we share the transaction data required to authenticate and complete that transaction with the relevant payment provider.
• KYC and identity verification services: To verify your identity and age as required by our 21+ policy, we may share your NID or passport image and other verification documents with a third-party KYC provider operating under confidentiality obligations.
• Game providers: When you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, or Spribe, your in-game activity data (bets, wins, session data) is shared with the relevant studio's game server to operate the game. Each studio is bound by data processing agreements with a771.
• AML and fraud screening providers: Transaction and identity data may be shared with third-party AML screening services to comply with financial crime prevention obligations.
• Legal and regulatory authorities: a771 will disclose personal data to law enforcement, regulatory bodies, or courts in Bangladesh where required to do so by law, court order, or other legal process, or where disclosure is necessary to protect the rights, property, or safety of a771, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of a771's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

6 Cookies & Tracking

a771 uses cookies and similar tracking technologies on the Platform to ensure correct functionality, maintain your session, understand how the Platform is used, and improve your experience over time. By using the a771 Platform, you consent to the use of cookies in accordance with this section.

6.1 Types of Cookies Used

• Strictly necessary cookies: These are essential to operate the Platform. They maintain your login session, remember your account preferences, and ensure the security of the Platform. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Functional cookies: These remember choices you make — such as your preferred language display settings and responsible gaming tool configurations — to provide a more personalised experience on return visits.
• Analytics cookies: These collect aggregated, anonymised information about how visitors use the Platform, including which pages are visited most often and where technical errors occur. This data is used solely to improve Platform performance and user experience.
• Security cookies: These help detect and prevent fraudulent activity, account takeover attempts, and bot interactions with the Platform.

6.2 Managing Cookies. Most web browsers allow you to control cookies through their settings. You may choose to block or delete non-essential cookies at any time. Note that blocking strictly necessary cookies will impair your ability to use the a771 Platform, including logging in and accessing your account. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

6.3 No Cross-Site Tracking. a771 does not use third-party advertising cookies or cross-site tracking pixels that follow your activity across other websites for advertising retargeting purposes.

7 Data Security

a771 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are proportionate to the sensitivity of the data concerned and the risks involved in processing it.

• TLS/SSL encryption: All data transmitted between your device and the a771 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser's address bar confirms this encryption is active.
• Encrypted data storage: Sensitive personal data — including NID copies, financial account details, and KYC documents — is stored in encrypted form in access-controlled, secured server environments.
• Access controls: Access to personal data held by a771 is restricted on a strict need-to-know basis. Staff and contractors who handle personal data are bound by confidentiality obligations and receive regular data protection training.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA via OTP on their registered Bangladeshi mobile number. 2FA significantly reduces the risk of unauthorised account access.
• Regular security audits: a771 conducts periodic reviews of its data security infrastructure, including vulnerability assessments and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, a771 will notify affected players promptly and take immediate steps to contain and remediate the breach.

8 Data Retention

a771 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal obligations that may require longer retention periods. The following table summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes, as it no longer constitutes personal data.

9 Your Rights

As a player whose personal data is processed by a771, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact a771 at [email protected]. We will respond to all data rights requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data a771 holds about you, together with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data a771 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations — a771 cannot delete data it is legally required to retain.
• Right to Restrict Processing: In certain circumstances you may request that a771 restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on a771's legitimate interests, including profiling for fraud detection purposes. a771 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

10 Children & Minors

The a771 Platform is strictly restricted to individuals who are 21 years of age or older. a771 does not knowingly collect personal data from any individual under the age of 21. If a771 becomes aware that an account has been registered by, or personal data has been provided by, an individual under 21, that account will be immediately suspended, any balance will be frozen pending investigation, and the personal data will be deleted as promptly as legally permissible.

If you are a parent or guardian and you believe your child has registered an account on the a771 Platform, please contact us immediately at [email protected]. Provide the username or mobile number associated with the account and we will take prompt action to investigate and close the account.

a771 uses date-of-birth verification during registration and KYC processes to enforce the 21+ age requirement. We take our responsibility to prevent access by minors extremely seriously and continuously review our age verification procedures.

11 Third-Party Services

The a771 Platform integrates with a number of third-party services — including game providers, payment processors, and KYC verification services — in order to deliver the full range of features available to players. Each of these third parties operates under its own privacy policy and data processing practices.

a771 is not responsible for the privacy practices of third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you play a game supplied by one of these studios, your in-game activity data is processed by the studio's own servers. Players are encouraged to review the privacy policies of these providers where they have concerns about their data practices.

Payment providers such as bKash, Nagad, Rocket, and Upay operate as independent data controllers for the purposes of processing your mobile wallet transactions. a771 shares only the minimum data necessary to complete each transaction. The privacy practices of these payment providers are governed by their own terms and policies.

a771 does not link to, embed, or integrate any social media platforms, advertising networks, or third-party tracking services on the Platform beyond those necessary to operate the core gaming and payment services described in this Policy.

12 Changes to This Policy

a771 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The most current version of this Policy will always be accessible at https://a771.io/privacy-policy, with the effective date clearly displayed at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — a771 will notify registered players via the email address associated with their account at least 14 days before the amended Policy takes effect.

Your continued use of the a771 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must stop using the Platform and contact [email protected] to request account closure before the amendment's effective date.

13 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or a771's data processing practices, please contact our support team using the details below. We take all privacy enquiries seriously and will respond to formal complaints within 30 calendar days.

a771 aims to resolve all privacy complaints fairly and promptly through direct communication. If you remain dissatisfied with our response after raising your complaint directly with us, you may escalate your concern to the relevant data protection or consumer protection authority in Bangladesh.

When contacting a771 about a data rights matter, please include your registered username and the mobile number or email address linked to your account so we can verify your identity before processing your request. a771 may not be able to action a data rights request without sufficient identifying information to confirm that the requester is the account holder.