Privacy Policy — How 5z77 Handles Your Data

1 Introduction

5z77 ("we", "us", "our", "the Platform") is an offshore online gaming and sports betting platform operating at the domain 5z77.io. We are committed to protecting the privacy and personal data of every individual who interacts with our platform — whether as a registered player, a prospective player visiting our website, or a user engaging with our customer support channels.

This Privacy Policy sets out in transparent and plain English what categories of personal data 5z77 collects, the purposes for which that data is processed, the legal bases on which processing is conducted, how long data is retained, who it may be shared with, and what rights you hold as a data subject. This policy should be read alongside the 5z77 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and 5z77.

We review and update this Privacy Policy periodically to reflect changes in our operations, technology, or applicable regulations. The version of this policy published at 5z77.io/privacy-policy at any given time is the current operative version. Material changes will be communicated to registered players via the email address held on their account before taking effect.

2 Data Controller

For the purposes of this Privacy Policy, 5z77 acts as the data controller in respect of personal data collected directly from players and visitors to the platform. As data controller, 5z77 determines the purposes and means of processing personal data obtained through the registration process, account management, gameplay, transactions, and customer support interactions.

Where 5z77 engages third-party service providers to process data on its behalf (for example, payment processors, identity verification providers, or analytics platforms), those providers act as data processors and are contractually obligated to process data only in accordance with 5z77's documented instructions and to maintain appropriate security measures.

All data-related enquiries and requests should be directed to the 5z77 privacy team at [email protected] with the subject line "Privacy Request". We aim to acknowledge all privacy-related correspondence within 48 hours and to resolve requests within 30 days.

3 Information We Collect

3.1 Registration Data

When you create a 5z77 account, we collect the following personal information:

• Full legal name (as it appears on your government-issued identification)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies or digital images of:

• Government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within three months)
• Proof of payment method ownership (screenshot or confirmation of bKash, Nagad, Rocket, or Upay account)

3.3 Transaction Data

We record all financial transactions conducted through the 5z77 platform, including deposit amounts, withdrawal requests, bonus credits, bet placement values, and winnings. Transaction records include timestamps, payment method identifiers (e.g., bKash wallet number last four digits), and transaction status. We do not store full payment credentials on our own servers.

3.4 Gameplay and Betting Data

We maintain records of all bets placed, games played, game outcomes, wager amounts, and session durations. This data is used to operate the platform, settle bets correctly, identify problem gambling patterns for responsible gaming purposes, and detect suspicious betting activity that may indicate match-fixing or fraud.

3.5 Technical and Device Data

When you access 5z77, our servers and analytics tools automatically collect certain technical information, including:

• IP address and approximate geolocation derived from IP
• Browser type and version
• Operating system and device type
• Referring URL and pages viewed on the 5z77 platform
• Session timestamps and duration

3.6 Communications Data

When you contact 5z77 customer support via email or live chat, we retain records of the communication, including message content, timestamps, and any attachments you provide. This information is used to resolve your query and to maintain a service history for quality assurance purposes.

4 How We Use Your Data

5z77 processes your personal data for the following purposes:

5z77 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review. Where algorithmic tools are used to flag unusual account activity, any resulting account action is reviewed by a member of the 5z77 compliance team before being applied.

5 Legal Basis for Processing

5z77 relies on the following legal bases for processing personal data:

• Contractual necessity: The majority of data processing is necessary to fulfil the contract between 5z77 and the player — namely, to operate the player's account, process bets, and handle financial transactions.
• Legal obligation: Certain processing activities — particularly KYC verification, transaction record-keeping, and anti-money-laundering screening — are required to comply with applicable legal obligations.
• Legitimate interests: 5z77 processes technical and behavioural data to detect fraud, maintain platform security, and improve the service — activities that are in the legitimate interests of 5z77 and its player community, and which do not override players' fundamental privacy rights.
• Consent: Where 5z77 sends promotional communications or uses non-essential cookies, this processing is conducted on the basis of your prior consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification preferences.

6 Data Sharing

6.1 Third-Party Service Providers

5z77 shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers include payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), identity verification services, fraud detection technology providers, cloud hosting infrastructure providers, and customer support platform operators. All such providers are bound by data processing agreements that restrict their use of your data to the specific service they provide to 5z77.

6.2 Game Providers

Certain gameplay sessions on 5z77 are powered by third-party certified game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical session data (such as player session tokens and game round identifiers) to operate the game. They do not receive your full personal profile and are contractually prohibited from using session data for any purpose other than providing the game service.

6.3 Legal Disclosures

5z77 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where 5z77 reasonably believes disclosure is necessary to prevent or report a serious crime, protect public safety, or enforce its Terms & Conditions. We will notify affected players of such disclosures where legally permitted to do so.

6.4 No Data Sales

5z77 does not sell, rent, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or marketing agencies. Your data is not a commercial product. This commitment applies regardless of any future changes in the platform's commercial structure, subject to any mandatory regulatory requirements.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a web server when you visit a website. They allow the site to recognise your device on subsequent visits, maintain your session state, and remember certain preferences. 5z77 uses first-party cookies (set directly by 5z77.io) for core platform functionality and limited analytics purposes.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as language setting, odds format, and display preferences to improve your experience on return visits.
• Analytics Cookies: Used to understand how players navigate the platform in aggregate. This helps 5z77 identify areas for improvement. Analytics data is not linked to identifiable individuals without additional processing steps and is reviewed only in aggregate.

7.3 Managing Cookies

You may configure your browser to refuse some or all cookies, or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in or using core betting features. For guidance on managing cookies in your specific browser, consult the help documentation provided by your browser manufacturer.

8 Data Security

5z77 takes the security of your personal data seriously. We implement a layered approach to data security that includes TLS/SSL encryption for all data transmitted between your device and our servers, encryption at rest for sensitive stored data fields, access controls that restrict internal data access to employees and contractors with a legitimate operational need, regular security audits and vulnerability assessments, and multi-factor authentication requirements for platform administrative access.

Payment transactions conducted via bKash, Nagad, Rocket, and Upay are processed through those providers' own secure payment infrastructure. 5z77 does not at any point have access to your full mobile banking PIN, password, or card number. Our integration with payment providers is built to transmit only the minimum information necessary to initiate and confirm a transaction.

Despite our robust security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, 5z77 will notify affected individuals promptly and take all reasonable steps to contain and remediate the breach. Players are strongly encouraged to use a unique, strong password for their 5z77 account and to keep their login credentials confidential.

9 Data Retention

5z77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

10 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by 5z77. These rights may be exercised by submitting a written request to [email protected] with the subject line "Privacy Request":

• Right of Access: You have the right to request a copy of the personal data that 5z77 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data held by 5z77 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that 5z77 delete your personal data. This right is subject to overriding legal obligations — for example, 5z77 is required to retain financial transaction records for a minimum of five years and cannot delete them on request during that period.
• Right to Restriction: You have the right to request that 5z77 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. 5z77 will assess each objection and cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5z77 will respond to all privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it. There is no charge for submitting a privacy rights request.

11 International Data Transfers

5z77 is an offshore platform and its infrastructure, service providers, and personnel may be located in jurisdictions outside Bangladesh. Where personal data is transferred to a country that does not provide the same level of data protection as may apply in a player's home jurisdiction, 5z77 ensures that appropriate safeguards are in place. These safeguards include contractual clauses in agreements with data processors that require them to protect personal data to a standard consistent with this Privacy Policy, regardless of where processing takes place.

By creating an account and using the 5z77 platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

12 Children & Minors

The 5z77 platform is strictly intended for adults aged 21 years and above. 5z77 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the 5z77 platform or provide any personal information to us.

If 5z77 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the relevant account. Parents and guardians who believe that a minor in their care may have created a 5z77 account or otherwise provided personal data to the platform should contact us immediately at [email protected] with the subject line "Minor Account Report" and the account will be prioritised for investigation and closure.

13 Changes to This Privacy Policy

5z77 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, technology, or applicable legal requirements. Where changes are material — for example, where we introduce a new category of data processing or begin sharing data with a new category of third party — we will notify registered players via the email address held on their account at least 14 days before the changes take effect. For minor, administrative, or clarificatory changes, the updated policy will be published at 5z77.io/privacy-policy with a revised effective date, and continued use of the platform after that date constitutes acceptance of the updated policy.

Players are encouraged to review this Privacy Policy periodically. The effective date shown at the top of this document and in the table of contents indicates when the current version was last updated.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 5z77 holds about you, please contact our privacy team using the details below. All correspondence should be sent in English to ensure prompt handling.

• Email: [email protected] — subject line: "Privacy Request"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Acknowledgement Target: All privacy-related enquiries acknowledged within 48 hours
• Resolution Target: Standard requests resolved within 30 calendar days

For responsible gaming concerns including self-exclusion and account restriction requests, please refer to the Responsible Gaming page or mark your email subject as "Responsible Gaming" for priority handling.