dr777 Privacy Policy

1. Information We Collect

dr777 collects personal data from you in three primary ways: information you provide directly during account registration and use, information generated automatically when you interact with the Platform, and information received from trusted third-party service providers. This section describes each category in detail.

1.1 Information You Provide Directly

When you register a dr777 account or use our services, you may be asked to provide the following categories of personal information:

1.2 Information Collected Automatically

When you visit the dr777 website or use our services, our servers and analytics tools automatically record certain technical data about your session. This includes your IP address, device type and operating system, browser version, pages visited, time and duration of visits, referring URL, and in-game activity logs such as bets placed, games launched, and session length. This technical data is used for security monitoring, platform optimisation, fraud detection, and regulatory record-keeping.

1.3 Information from Third Parties

dr777 may receive information about you from third-party partners in limited circumstances. These include identity verification service providers who help us confirm the authenticity of your NID or passport, payment processors such as bKash and Nagad who confirm the status of transactions, and fraud-prevention platforms that flag unusual account or payment patterns. In all cases, third-party data sharing is governed by contractual agreements that require the partner to handle your data in accordance with applicable privacy standards.

2. How We Use Your Data

dr777 processes your personal data only where we have a lawful basis to do so. The following table summarises the primary purposes for which your data is used and the corresponding legal basis for each processing activity.

2.1 Marketing Communications

If you have opted in to receive marketing communications from dr777, we may contact you by SMS, email, or in-platform notification with promotional offers, bonus codes, tournament invitations, and seasonal promotions related to events such as BPL season, Eid al-Fitr, Eid al-Adha, and Pohela Boishakh. You can withdraw your consent to receive marketing communications at any time by updating your notification preferences in Account Settings or by contacting our support team. Withdrawal of consent for marketing does not affect the delivery of transactional communications necessary to operate your account.

2.2 Automated Decision-Making

dr777 may use automated processes to flag accounts for review based on unusual activity patterns, including atypical deposit volumes, repeated failed login attempts, and irregular betting behaviour that may indicate fraud or account compromise. Where an automated flag results in a restriction being placed on your account, you have the right to request a manual review by a member of our compliance team. To exercise this right, contact our support team and reference "automated decision review" in your message.

3. Data Sharing & Disclosure

dr777 does not sell or rent your personal data to any third party. We may, however, share your information with the following categories of recipients where doing so is necessary to operate the Platform, comply with legal obligations, or protect our legitimate interests.

3.1 Payment Service Providers

To process deposits and withdrawals, dr777 must share relevant financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported financial institutions. These partners are permitted to use your data only for the purpose of processing the specific transaction and are contractually prohibited from using it for any secondary purpose.

3.2 Identity Verification Partners

When you submit identity documents for KYC verification, your documents and associated personal data are processed by our accredited identity verification partner. This partner operates under strict data processing agreements and is not permitted to retain your documents beyond the period necessary to complete the verification check.

3.3 Game Technology Providers

Some of the games available on dr777 are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your anonymised session data (such as a player ID and game activity) to facilitate gameplay, calculate outcomes, and maintain game integrity. They do not receive your full identity or financial data.

3.4 Regulatory and Legal Authorities

dr777 may be required to disclose your personal data to relevant legal, regulatory, or law enforcement authorities in response to a valid legal request, court order, or mandatory reporting obligation. Where permitted by law, dr777 will notify you of such a disclosure unless doing so would prejudice an investigation or breach a legal prohibition on notification.

3.5 Business Transfers

In the event that dr777 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via a notice on the Platform and by email to your registered address, and you will retain all privacy rights described in this policy with respect to the new entity.

4. Cookies & Tracking Technologies

The dr777 website uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access files on your device beyond what your browser permits.

4.1 Categories of Cookies We Use

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your dr777 account and using core platform features. Disabling functional or analytics cookies will not prevent you from using the Platform but may result in a reduced or less personalised experience.

5. Data Retention & Storage

dr777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to key data categories:

5.1 Data Storage Location

All personal data collected by dr777 is stored on secure servers. Where data is processed or stored outside Bangladesh, dr777 ensures that appropriate contractual safeguards are in place to maintain a standard of data protection equivalent to that described in this Privacy Policy. dr777 does not transfer your data to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards.

5.2 Secure Deletion

When personal data reaches the end of its retention period and there is no legal basis for continued storage, dr777 will securely delete or irreversibly anonymise it. Secure deletion means that the data cannot be recovered, reconstructed, or attributed to any individual after the deletion process is complete.

6. Your Privacy Rights

As a dr777 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team and clearly state which right you are invoking. We will respond within five business days and complete the request within 30 calendar days, or notify you if a longer period is required.

• Right of Access: You have the right to request a copy of all personal data dr777 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to Rectification: If any of your personal data held by dr777 is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations that may require us to retain certain data.
• Right to Restriction: You may request that dr777 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed or a legal dispute is pending.
• Right to Data Portability: Where data is processed on the basis of your consent or a contract, you may request that dr777 provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for responsible gaming monitoring. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Security Measures

dr777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are regularly reviewed and updated in line with evolving security standards and threat landscapes.

7.1 Technical Safeguards

• All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher (SSL).
• Passwords are stored as salted cryptographic hashes — dr777 staff cannot read your password in plain text under any circumstances.
• Access to production systems and databases is restricted to authorised personnel on a need-to-know basis, with multi-factor authentication required for all administrative access.
• Regular vulnerability scanning and penetration testing is conducted by independent security professionals.
• Automated intrusion detection systems monitor for unusual access patterns around the clock.
• Financial transaction data is processed via PCI-DSS compliant payment gateways.

7.2 Organisational Safeguards

• All dr777 staff who handle personal data receive mandatory data protection training on joining and annually thereafter.
• Data access logs are maintained and audited on a regular schedule.
• Contracts with all third-party processors include binding data protection obligations.
• A data incident response plan is maintained and tested at least once per year.

7.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, dr777 will notify affected users without undue delay, providing details of the nature of the breach, the categories of data involved, the likely consequences, and the measures being taken to address it. We will also notify the relevant supervisory authority where required by applicable law.

8. Policy Updates & Contact

dr777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will publish the revised policy on the Platform and update the effective date at the top of this document. For significant changes that materially affect how we use your data, we will provide a more prominent notice, such as an in-platform banner or a direct notification to your registered email address.

We encourage you to review this Privacy Policy periodically, particularly before submitting any new personal information to the Platform. Your continued use of the dr777 Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised policy, you should stop using the Platform and contact our support team to close your account.

8.1 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dr777 handles your personal data, please contact our dedicated privacy team. You can reach us by email — our support address is displayed as plain text below:

Email (plain text, not a clickable link): [email protected]

Please include the subject line "Privacy Policy Enquiry" and your registered username so that we can locate your account and respond efficiently. We aim to acknowledge all privacy enquiries within one business day and provide a full response within five business days.

8.2 Relationship to Other Policies

This Privacy Policy should be read in conjunction with the dr777 Terms & Conditions and our Responsible Gaming policy. Together, these three documents set out the complete framework governing your use of the dr777 Platform and our obligations to you as a valued player in Bangladesh.