co777 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Who We Are

co777 ("co777", "we", "us", "our") operates the online casino and sports betting platform accessible at https://co777.io (the "Platform"), serving registered players across Bangladesh. For the purposes of this Privacy Policy, co777 is the data controller responsible for the personal information collected through the Platform.

This Privacy Policy applies to all personal data collected, processed, and stored by co777 in connection with your use of the Platform, including via the co777 website, any associated mobile web application, Progressive Web App (PWA) installation, and any communications you send to or receive from our customer support team.

By registering an account on co777, using any feature of the Platform, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the Platform.

This Policy should be read alongside co777's Terms & Conditions and Responsible Gaming Policy. In the event of a conflict between this Privacy Policy and any other document, this Privacy Policy shall govern data-related matters.

2. Personal Data We Collect

co777 collects the following categories of personal data depending on how you interact with the Platform:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — co777 enforces a strict 21+ only policy)
• Nationality and country of residence
• Residential address, including city, district, and postal code
• Email address and mobile phone number
• Copies of government-issued identity documents submitted during KYC verification (e.g., National Identity Card, passport, driving licence)
• Proof of address documents (e.g., utility bill, bank statement dated within the last three months)

2.2 Financial Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
• Dutch-Bangla Bank, City Bank, BRAC Bank, or other bank account details where provided for payment processing
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Account balance information

co777 does not store full card numbers, CVV codes, or complete bank account credentials on its own servers. Payment transactions are processed via third-party payment gateways which maintain their own PCI-DSS compliant data security environments.

2.3 Account and Activity Data

• Username and encrypted password hash
• Account registration date and last login timestamp
• Game play history including games played, bets placed, outcomes, and winnings or losses
• Sports betting history including markets bet on, stake amounts, and settlement records
• Bonus and promotional offer history
• Responsible gaming tool settings (deposit limits, loss limits, cooling-off periods, self-exclusion status)
• Customer support interaction logs and communications

2.4 Technical and Device Data

• IP address at the time of account registration and at each login
• Device type, operating system, and browser type and version
• Screen resolution and device identifier
• Geolocation data (country and region level, derived from IP address)
• Session duration and page navigation data collected via cookies and similar technologies
• Referral source (e.g., the URL or search query that directed you to co777)

2.5 Data Collected from Third Parties

co777 may receive personal data about you from the following third-party sources:

• Identity verification providers — who confirm the authenticity of the documents you submit during KYC
• Payment providers — who confirm the status of your deposit or withdrawal transactions
• Anti-fraud and AML screening services — who provide risk scores or alerts relating to your account activity
• Publicly available sources — such as company registers or sanctions lists, where relevant to our AML obligations

3. How We Collect Your Data

co777 collects your personal data through the following channels:

Collection Method	Examples of Data Collected
Account Registration	Name, date of birth, email, phone number, username, password
KYC Verification	Identity documents, proof of address, selfie or liveness check
Deposits & Withdrawals	Mobile wallet numbers, transaction references, amounts
Platform Usage	Game history, bet history, session data, IP address, device info
Customer Support	Name, account details, issue description, communication content
Cookies & Analytics	Navigation patterns, session duration, page views, referral URLs
Third-Party Providers	Identity verification results, payment status, AML risk scores

4. Legal Basis for Processing

co777 processes your personal data only where there is a recognised legal basis for doing so. The primary legal bases we rely on are as follows:

• Contractual necessity — Processing required to create and maintain your account, process your deposits and withdrawals, settle your bets, and provide customer support. Without this processing, co777 cannot provide its services to you.
• Legal obligation — Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements, and other legal obligations to which co777 is subject.
• Legitimate interests — Processing carried out for purposes that serve co777's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud detection, platform security, responsible gaming monitoring, and improving our services.
• Consent — Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. How We Use Your Personal Data

co777 uses the personal data it collects for the following purposes:

• Account management — Creating, maintaining, and securing your co777 account; verifying your identity at registration and periodically thereafter; processing password reset and account recovery requests.
• Service delivery — Enabling you to access casino games and sports betting markets; processing deposits, withdrawals, and bonus credits; delivering customer support assistance via live chat, email, and WhatsApp.
• KYC and AML compliance — Verifying that you meet the minimum age requirement of 21 years; screening your identity and transactions against sanctions lists and AML risk databases; retaining records as required by applicable regulations.
• Fraud prevention and platform security — Detecting and investigating suspicious login activity, duplicate accounts, coordinated bonus abuse, or any other activity that violates our Terms & Conditions.
• Responsible gaming — Monitoring your account activity for signs of problem gambling; applying and enforcing the deposit limits, loss limits, cooling-off periods, and self-exclusion settings you have configured; proactively reaching out where our responsible gaming monitoring systems flag a concern.
• Platform improvement — Analysing aggregated and anonymised usage data to understand which features players use most, identify technical issues, and improve the overall co777 experience.
• Marketing communications — Sending you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and special offers, where you have provided your consent to receive such communications.
• Legal and regulatory compliance — Responding to lawful requests from regulatory authorities, law enforcement agencies, or courts; resolving disputes; enforcing our Terms & Conditions.

6. Sharing Your Personal Data

co777 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties strictly to the extent necessary to operate the Platform and comply with our legal obligations:

6.1 Payment Processors

We share your account details and transaction data with payment service providers including bKash, Nagad, Rocket, and Upay, and with any banking partners required to process your deposits or withdrawals. These providers use your data solely for payment processing and are contractually prohibited from using it for any other purpose.

6.2 Identity Verification and KYC Providers

We share copies of the identity documents and personal details you submit during KYC verification with our authorised identity verification partners. These providers authenticate the validity of your documents and return a verification result to co777. They do not retain your documents for their own purposes beyond the scope of the verification service.

6.3 Game Providers

To provide casino game content on the Platform, co777 integrates with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a session token and anonymised player identifier to load the game in your browser. They do not receive your full name, contact details, or financial information.

6.4 Analytics and Technical Infrastructure

co777 uses analytics tools and cloud infrastructure services to operate and monitor the Platform. These service providers may process technical data (such as IP addresses and session logs) as part of delivering their services to co777 and are bound by data processing agreements requiring them to handle such data securely and only as instructed by co777.

6.5 Legal and Regulatory Disclosures

co777 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation or prevention of fraud, money laundering, or other unlawful activity. Where legally permitted, co777 will endeavour to notify you of such a disclosure in advance.

7. Cookies and Tracking Technologies

co777 uses cookies and similar tracking technologies (including web storage and session identifiers) to operate and improve the Platform. Cookies are small data files placed on your device when you visit our website. The following table summarises the types of cookies co777 uses:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintaining your login session, securing your account, enabling core platform functionality	Session / up to 30 days
Functional	Remembering your language preferences, game volume settings, and responsible gaming display preferences	Up to 12 months
Analytics	Understanding how players navigate the Platform; identifying popular game categories and pages with high exit rates; improving platform performance	Up to 24 months

co777 does not use third-party advertising cookies that track your activity across other websites or build cross-site behavioural profiles. You can control or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your co777 account and using core Platform features.

8. Data Security

co777 applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and co777's servers
• Encryption at rest for sensitive stored data, including identity documents and financial records
• Firewalls and intrusion detection systems monitoring co777's server infrastructure around the clock
• Role-based access controls ensuring that co777 staff can only access the personal data necessary for their specific job function
• Regular security audits and penetration testing conducted by qualified third-party security professionals
• Secure password hashing using industry-standard one-way cryptographic algorithms — co777 staff cannot view your password in plain text
• Multi-factor authentication (MFA) options available on your account for an additional layer of login security

While co777 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. co777 cannot guarantee absolute security and accepts no liability for losses resulting from a security breach that occurs despite our having taken reasonable precautions. In the event of a data breach that is likely to result in a risk to your rights and freedoms, co777 will notify affected players as promptly as practicable.

9. Data Retention

co777 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML legal obligations
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance
Transaction and financial records	Duration of account + 7 years after closure	Financial record-keeping requirements
Game and betting history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming
Customer support communications	3 years from the date of the interaction	Dispute resolution
Marketing consent records	Until consent is withdrawn + 3 years	Proof of consent compliance
Technical and session logs	Up to 12 months	Security monitoring, fraud detection

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

10. Your Data Rights

As a co777 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all verified data rights requests within 30 days of receipt.

• Right of Access — You may request a copy of all personal data co777 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification — If any personal data co777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly from your account dashboard without contacting support.
• Right to Erasure — You may request that co777 delete your personal data. This right is subject to our legal retention obligations (see Section 9); where data must be retained to comply with applicable law, we cannot erase it until the relevant retention period has expired.
• Right to Restriction of Processing — You may request that co777 restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of your data is being investigated.
• Right to Data Portability — You may request that co777 provide your personal data in a structured, commonly used, machine-readable format, enabling you to transfer it to another service provider.
• Right to Object — You may object to co777 processing your personal data on the basis of its legitimate interests. co777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — Where co777 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

Please note that exercising your data rights does not affect your ability to use the co777 Platform, except where deletion of data that is technically necessary for account operation is requested — in which case voluntary account closure may be required.

11. Children's Privacy

co777 is an adult gambling platform. Access to the Platform is strictly prohibited for any person under the age of 21 years. co777 does not knowingly collect personal data from individuals under 21. If you are under 21, you must not attempt to register an account or use any feature of the co777 Platform.

If co777 discovers that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and permanently close the associated account. If you have reason to believe that a person under 21 has registered on co777, please notify us immediately at [email protected].

co777 employs age-verification checks during the registration process and during KYC verification to prevent underage access. Players who cannot satisfy age verification requirements will not be permitted to deposit funds or access real-money game content.

12. Third-Party Links

The co777 Platform may contain links to websites operated by third-party game providers or payment processors for the purpose of loading game content or processing payments. These third-party websites operate under their own privacy policies, which co777 does not control and for which co777 accepts no responsibility.

co777 recommends that you review the privacy policy of any third-party website or service that you access in connection with your use of the Platform. The presence of a third-party link on co777 does not constitute an endorsement of that third party's privacy practices.

13. Marketing Communications

co777 may send you promotional communications about bonuses, new game releases, seasonal promotions (for example around Eid, Pohela Boishakh, or BPL cricket season), and platform updates. We will only send you marketing communications where you have provided your explicit consent to receive them, or where we have an existing relationship with you and the communication relates directly to similar products and services you have previously used.

You may opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email co777 sends to you
• Adjusting your communication preferences in your co777 account settings dashboard
• Contacting our support team at [email protected] and requesting to be removed from our marketing list

Please allow up to 7 business days for your opt-out request to take full effect across all communication channels. Opting out of marketing communications will not affect the delivery of transactional or service-related messages — for example, deposit confirmations, withdrawal notifications, KYC request emails, or responsible gaming alerts.

14. Amendments to This Privacy Policy

co777 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — co777 will provide at least 14 days' advance notice of the changes via the email address registered to your account and via a notice displayed on the Platform.

Minor amendments, such as typographical corrections or clarifications that do not alter the substance of our data processing activities, may be made without advance notice and will take effect from the date of publication.

Your continued use of the co777 Platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement and acceptance of the revised policy. The most current version of this Privacy Policy is always available at https://co777.io/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way co777 handles your personal data, please contact our dedicated data support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the co777 Platform
• WhatsApp: +880 1700 000777 (plain text — not a clickable link)
• Response Time: co777 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days

For data access or deletion requests, please include your registered email address, username, and a brief description of your request in your message to help us process it as quickly as possible. We may need to verify your identity before actioning any data rights request to ensure we are responding to the correct account holder.

For general information about co777's services and our commitment to safe, fair, and transparent online gaming for players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — please visit our About Us page or our FAQ section.