pg777bt Privacy Policy

1.1 Information You Provide Directly

When you register a pg777bt account, make a deposit or withdrawal, contact support, or participate in a promotion, you provide us with personal data. This includes:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (as required for KYC verification).
• Contact data: Email address, mobile phone number (Bangladesh-registered), and residential address.
• Financial data: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay numbers), bank account details (Dutch-Bangla Bank, BRAC Bank, or other), and Visa/Mastercard card numbers (last four digits only — pg777bt does not store full card numbers).
• Identity documents: Scanned copies or photographs of your National ID (NID), passport, or driving licence submitted for KYC verification.
• Support communications: Any messages, emails, or chat transcripts exchanged between you and the pg777bt support team.
• Responsible gaming data: Deposit limits, session time limits, self-exclusion requests, and any related communications submitted through the responsible gaming tools.

1.2 Information Collected Automatically

When you access the pg777bt platform, our systems automatically record certain technical and behavioural data. This data is used for security monitoring, fraud prevention, platform analytics, and service improvement. It includes:

• Device data: Device type, operating system, browser type and version, screen resolution, and hardware identifiers.
• Network data: IP address, approximate geographic location (derived from IP address), internet service provider, and connection type.
• Session data: Login timestamps, session duration, pages and games accessed, bet amounts and outcomes, deposit and withdrawal timestamps, and logout timestamps.
• Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers — see Section 4 for full cookie details.

1.3 Information From Third Parties

pg777bt may receive personal data about you from third-party sources in specific circumstances:

• Payment processors: Transaction confirmation data, payment status, and fraud-screening results from bKash, Nagad, Rocket, Upay, and card processors.
• Identity verification providers: Results of automated or manual identity and age verification checks performed against public and commercial databases.
• Fraud prevention services: Device fingerprint matching results, IP reputation scores, and flagged account associations from fraud detection partners.
• Game providers: Game session data, round IDs, and result logs from Pragmatic Play, Evolution Gaming, Spribe, and other licensed game studios whose content is hosted on the pg777bt platform.

pg777bt does not knowingly collect personal data from individuals under 18 years of age. If we become aware that data has been collected from a minor, that data will be deleted and the associated account will be closed immediately.

Service Providers and Data Processors

pg777bt engages a limited number of third-party service providers who process personal data on our behalf as data processors. These providers are contractually bound to process your data only in accordance with pg777bt's documented instructions, to maintain adequate security measures, and to delete or return data when the processing relationship ends. Current categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) receive transaction data necessary to execute your deposits and withdrawals.
• Identity verification providers: Third-party KYC platforms receive copies of identity documents and associated identity data to perform age and identity verification checks.
• Fraud prevention technology providers: Device fingerprint and IP reputation vendors receive technical identifiers to cross-reference against known fraud patterns.
• Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive player session identifiers and game round data to deliver and record gameplay.
• Cloud infrastructure providers: Server infrastructure and data storage services process and store platform data under strict security and data residency controls.
• Customer support tools: Live chat and email ticketing platforms process support communications to facilitate efficient resolution of player queries.

Legal Disclosures

pg777bt may be required to disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies when required to do so by applicable law, court order, or other legally binding process. In such cases, pg777bt will disclose only the minimum data necessary to satisfy the legal requirement. Where permitted by law, pg777bt will notify the affected player of any such disclosure request.

Business Transfers

In the event that pg777bt undergoes a corporate restructure, merger, acquisition, or sale of assets, personal data held about registered players may form part of the transferred assets. Any successor entity will be required to honour this Privacy Policy or provide players with prior notice and the opportunity to request account deletion before the transfer takes effect.

International Data Transfers

Some of pg777bt's third-party service providers may operate servers located outside Bangladesh. When personal data is transferred internationally, pg777bt ensures that appropriate safeguards are in place — including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Privacy Policy.

pg777bt takes the security of your personal data seriously and implements a layered set of technical and organisational controls to protect it against unauthorised access, disclosure, alteration, or destruction. The following measures are in place across our platform and internal operations.

Technical Security Controls

• TLS/SSL encryption: All data in transit between your browser or app and the pg777bt servers is encrypted using TLS 1.2 or higher. Our HTTPS configuration is regularly audited against current best-practice standards.
• At-rest encryption: Sensitive data fields — including identity document files, payment identifiers, and hashed passwords — are encrypted at rest using AES-256 or equivalent standards.
• Password hashing: Player passwords are never stored in plain text. All passwords are salted and hashed using a one-way cryptographic function before storage. pg777bt staff cannot view your password.
• Access controls: Access to production systems and player data is restricted on a strict need-to-know basis. All staff access is authenticated via multi-factor authentication and logged for audit purposes.
• Intrusion detection: Our platform is continuously monitored for anomalous access patterns, brute-force login attempts, and other indicators of compromise.
• Penetration testing: pg777bt conducts periodic security assessments of its platform to identify and remediate vulnerabilities before they can be exploited.

Organisational Security Controls

• All pg777bt staff and contractors who handle personal data are bound by confidentiality obligations and receive regular data protection training.
• Third-party service providers are subject to vendor security assessments before onboarding and must maintain adequate security certifications throughout the relationship.
• pg777bt maintains an incident response plan for data breaches. In the event of a breach that is likely to result in a risk to affected players, pg777bt will notify affected individuals without undue delay and take all reasonable steps to contain and remediate the incident.

Your Role in Data Security

While pg777bt deploys comprehensive security measures on our end, a significant portion of account security depends on actions taken by the player. You are responsible for:

• Choosing a strong, unique password for your pg777bt account that is not reused on any other website or service.
• Keeping your login credentials confidential and not sharing them with any third party.
• Logging out of your account when using shared or public devices.
• Reporting any suspected unauthorised account access to [email protected] immediately.
• Keeping the mobile number and email address registered to your account current and secure, as these are used for OTP authentication and account recovery.

pg777bt cannot be held liable for losses arising from a player's failure to maintain the security of their own credentials.

pg777bt retains personal data for as long as is necessary to fulfil the purpose for which it was collected, to perform our contractual obligations to you, or to comply with applicable legal and regulatory requirements. Once the applicable retention period expires, data is either securely deleted or irreversibly anonymised so that it can no longer be linked to an individual.

Where pg777bt has closed an account due to a confirmed breach of our Terms & Conditions — including fraud, money laundering, or underage gambling — relevant data may be retained for longer periods where necessary to support legal proceedings or regulatory investigations.

When data is no longer required, pg777bt employs secure deletion processes that prevent the data from being recovered or reconstructed. For physical documents (which are not applicable in our digital-first environment), certified destruction would be used.