we77 Privacy Policy — Your Data, Protected

we77 collects personal information from players through several channels: directly when you register and use the platform, automatically through technical systems as you browse and play, and occasionally from third-party service providers where this is necessary to verify your identity or process payments. Below we set out the categories of data we collect and the specific data points within each category.

Registration & Identity Data

When you create a we77 account, we collect the following information to establish and verify your identity:

• Full legal name;
• Date of birth (to confirm you are aged 18 or above);
• Mobile phone number (primary contact and 2FA channel);
• Email address (account notifications and support);
• Username and encrypted password hash;
• Preferred currency (Bangladeshi Taka, BDT).

KYC Verification Documents

To comply with anti-money laundering requirements and to protect our players from identity fraud, we77 collects identity verification documents during KYC review. These may include:

• National Identity Card (NID) number and a scanned copy or photograph of the NID;
• Passport biographic page (where NID is unavailable);
• Proof of residential address (utility bill, bank statement, or government letter);
• Payment method confirmation (e.g., the registered bKash or Nagad mobile number).

KYC documents are stored securely and are accessible only to authorised we77 compliance staff. They are not used for any purpose other than identity verification and fraud prevention.

Financial Transaction Data

When you make a deposit or withdrawal on the we77 platform, we record the following financial data:

• Deposit and withdrawal amounts (in BDT ৳);
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer);
• Transaction reference numbers generated by the payment provider;
• Transaction timestamps (Bangladesh Standard Time, UTC+6);
• Account balance history.

we77 does not store full payment card numbers, mobile banking PINs, or internet banking passwords. Payment processing for mobile financial services is handled directly by the respective providers (bKash, Nagad, Rocket, Upay), and we77 receives only a tokenised reference confirming transaction status.

Gameplay & Betting Activity Data

we77 records all gameplay and betting activity associated with your account, including:

• Games played, bet amounts, outcomes, and session durations;
• Sports betting selections, odds accepted, and settlement results;
• Bonus claims, wagering progress, and promotion participation history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

Technical & Device Data

When you access the we77 platform, our servers and analytics systems automatically collect certain technical information:

Data Type	Examples	Purpose
IP Address	Your network IP at login	Fraud detection, geographic access control
Device Identifiers	Device model, OS version, browser type	Platform optimisation, security
Session Logs	Login timestamps, page views, click paths	Security auditing, UX improvement
Geolocation (approximate)	City-level location derived from IP	Access control, responsible gaming
Referral Source	URL that linked to we77 (if applicable)	Marketing attribution

we77 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we77 uses personal data are set out below, together with the legal basis for each use.

Account Management & Service Delivery

The foundational use of your personal data is to create and manage your we77 account, process your transactions, deliver the games and betting services you access, and provide customer support. Without processing your registration data and activity data, we77 cannot operate your account or deliver any service to you. This processing is necessary to perform the contract between you and we77.

Identity Verification & Fraud Prevention

we77 uses your identity data, KYC documents, device data, and transaction history to verify your identity, confirm that you meet the age eligibility requirement of 18 years or above, detect and prevent fraud, and comply with anti-money laundering obligations. This processing is carried out on the basis of legal compliance obligations and the legitimate interests of we77 in maintaining a safe, fair platform.

Responsible Gaming Monitoring

we77 uses your gameplay data, deposit history, session duration data, and behavioural patterns to identify signs of problem gambling and to ensure that responsible gaming tools are functioning as you have configured them. Where we77's systems detect patterns that may indicate harmful gambling behaviour, we may proactively contact you or apply protective restrictions to your account. This is a core part of we77's duty of care to its players.

Platform Improvement & Analytics

Aggregated and pseudonymised gameplay and session data are used to analyse how players use the we77 platform, identify technical issues, improve game performance, and develop new features. Individual players are not identifiable from the aggregated datasets used for this purpose.

Marketing Communications

With your consent (given at registration or through your account settings), we77 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal promotions (including BPL and IPL season offers, Eid promotions, and Pohela Boishakh specials), new games, and platform updates. You may withdraw your consent to marketing communications at any time — see the Your Data Rights section for instructions.

we77 does not sell your personal data to any third party. However, to deliver the we77 service effectively and securely, we share certain data with a limited set of trusted third-party service providers and in specific legally required circumstances. All third parties who receive data from we77 are bound by contractual confidentiality and data security obligations.

Payment Processors

To process your deposits and withdrawals, we77 shares transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). The data shared is limited to what is required to execute the transaction — typically your registered mobile number or bank account reference and the transaction amount. Each payment provider operates under its own privacy policy.

Game Content Providers

Games on the we77 platform are powered by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your gameplay data (session ID, bet amounts, and game outcomes) is shared with the relevant studio's game server in real time to power game operation and ensure fair play auditing. Game providers do not receive your personal identity data (name, NID, or contact details) through this process.

Identity Verification Services

For KYC verification, we77 may share identity document data with third-party identity verification platforms. These providers process your document images solely for the purpose of confirming your identity and are prohibited from retaining or using your data for any other purpose.

Legal & Regulatory Disclosure

we77 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other governmental bodies where required to do so by law, valid legal process, or where disclosure is necessary to protect the rights and safety of we77, its players, or the public. we77 will notify you of any such disclosure where legally permitted to do so.

Business Transfers

In the event that we77 is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer via the email address on record before the transfer takes effect, and the receiving entity will be required to honour this Privacy Policy.

The we77 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use the site so we can improve it. This section explains what cookies we use and how you can control them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, to remember user preferences between sessions, and to provide analytical information to website operators. Cookies cannot execute code or transmit viruses.

Categories of Cookies Used by we77

Category	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login state, security tokens, fraud detection	No — essential for platform operation
Functional	Language preferences, game settings, responsible gaming tool status	Yes — disabling may limit functionality
Analytical	Page view counts, session duration, feature usage — data is aggregated and pseudonymised	Yes — via browser settings
Marketing	Attribution of referral sources, frequency capping for on-site promotional banners	Yes — via account settings or browser

Managing Your Cookie Preferences

You can control and delete cookies through your web browser settings. Most browsers allow you to view cookies currently stored, block cookies from specific websites, and clear all cookies when you close the browser. Please refer to your browser's help documentation for instructions. Note that disabling strictly necessary cookies will prevent the we77 platform from functioning correctly and you will not be able to log in to your account.

we77 does not use cookies to track your browsing activity on websites other than we77.ws, and we do not participate in cross-site advertising networks.

we77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The retention periods below reflect our current data management policy.

Retention Periods by Data Category

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal compliance, dispute resolution
KYC verification documents	Duration of account + 5 years after closure	AML regulatory obligation
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Gameplay & betting history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming audit
Technical & device logs	12 months from collection	Security monitoring, fraud investigation
Marketing preferences	Until consent is withdrawn or account is closed	Consent management

Data Storage Location

Player data processed by we77 is stored on secure servers with industry-standard physical and logical access controls. Data is backed up regularly to prevent loss. we77 implements strict role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.

we77 respects your right to control your personal information. The following rights are available to all registered players and may be exercised by contacting we77 support at any time.

Right to Access

You may request a copy of all personal data that we77 holds about you. we77 will provide this information in a structured, commonly used format within 30 days of receiving a verified request. For complex or multiple requests, we77 may extend this period by a further 30 days with notification.

Right to Rectification

If any personal data we77 holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as a misspelled name) can be processed directly by contacting live chat support. Changes to identity-critical fields (such as date of birth) will require KYC document re-verification.

Right to Erasure

You have the right to request the deletion of your personal data. we77 will honour erasure requests subject to the following conditions:

• The data is no longer necessary for the purpose for which it was collected;
• You have withdrawn consent and there is no other legal basis for processing;
• There are no overriding legal retention obligations (such as AML record-keeping requirements) that prevent deletion.

Where we77 cannot delete data due to a legal retention obligation, we will inform you of this and explain which data cannot be erased and why.

Right to Object to Marketing

You may opt out of promotional and marketing communications from we77 at any time by:

• Updating your communication preferences in your we77 account settings;
• Clicking the unsubscribe link included in any marketing email;
• Contacting we77 support via live chat or at [email protected].

Opting out of marketing communications will not affect transactional notifications such as deposit confirmations, withdrawal updates, KYC status emails, and security alerts — these are sent as a necessary part of operating your account and cannot be disabled while your account is active.

Right to Data Portability

You may request a machine-readable export of the personal data you have provided to we77 (such as your account registration details and transaction history). Portable data exports are provided in CSV or JSON format within 30 days of a verified request.

How to Exercise Your Rights

To exercise any of the rights described above, contact the we77 support team via live chat (available 24/7) or by email at [email protected]. we77 will ask you to verify your identity before processing any data rights request to ensure we are responding to the legitimate account holder. Requests will be processed within 30 days of identity verification.

we77 takes data security seriously and maintains a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework covers the following key areas:

Encryption

All data transmitted between your device and the we77 platform is encrypted using TLS (Transport Layer Security). Sensitive data stored in our databases — including passwords (stored as salted hashes) and KYC document files — is encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key rotation policy.

Access Controls

Access to player data within we77's internal systems is governed by role-based access controls (RBAC). Only staff members with a verified operational need are granted access to specific data categories. All internal access is logged, and access logs are reviewed regularly by the we77 security team. Administrative access to production systems requires multi-factor authentication.

Security Monitoring

we77's platform is monitored continuously for suspicious activity, including unusual login patterns, bulk data access attempts, and payment anomalies. Automated alerting systems notify the security team of potential incidents in real time so that threats can be assessed and contained quickly.

Incident Response

In the event of a personal data breach that poses a risk to affected players, we77 will notify impacted players via their registered email address as promptly as practicable, and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the data categories affected, the likely consequences, and the remedial steps we77 is taking.

we77 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes significantly affect your rights or the way we use your data, we will notify registered players via their registered email address prior to the changes taking effect.

Your continued use of the we77 platform after a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with any change, you should cease using the platform and contact support to close your account.

Children's Privacy

The we77 platform is strictly for adults aged 18 and above. we77 does not knowingly collect personal data from anyone under the age of 18. If we77 becomes aware that personal data has been submitted by or on behalf of a person under 18, that data will be deleted and the associated account will be closed immediately. If you believe a minor has registered on the we77 platform, please contact us at [email protected] immediately.

Links to Third-Party Content

The we77 platform integrates third-party game content from licensed studios. When you interact with a game, that session communicates with the game provider's servers. we77 is not responsible for the privacy practices of third-party game studios. We encourage you to review the privacy policies of Pragmatic Play, Evolution Gaming, and other studios whose games you play, as those policies govern data processed directly by those providers in connection with gameplay.

Governing Law

This Privacy Policy is governed by and construed in accordance with applicable law. Any dispute arising in connection with this Privacy Policy that cannot be resolved through we77's support process will be subject to formal dispute resolution as described in the we77 Terms & Conditions.

For all data protection enquiries, requests to exercise your data rights, or concerns about how we77 handles your personal information, please contact the we77 support team via live chat (available 24/7, response under 3 minutes) or by email at [email protected] (response within 12 hours). This Privacy Policy was last reviewed and updated on 1 January 2026.