gk77 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how gk77 ("gk77", "we", "us", "our"), the operator of the online gaming and sports betting platform at gk77.io, collects, uses, stores, and shares personal information obtained from players and visitors ("you", "your") in Bangladesh and elsewhere.

This Policy forms part of your agreement with gk77 and should be read together with our Terms & Conditions and Responsible Gaming Policy. By creating an account or using any part of the gk77 platform, you acknowledge that you have read this Policy and consent to the data practices described herein.

gk77 is committed to handling your personal data with transparency, integrity, and care. We collect only the data necessary to operate a secure and compliant gaming platform, and we take our obligations to protect that data seriously.

Information We Collect

gk77 collects personal information in several ways: directly from you when you register an account or contact support; automatically through your use of the platform; and from third-party verification and fraud-prevention services. The categories of data we collect include:

gk77 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data) unless specifically required by law enforcement, regulatory authority, or our AML/KYC compliance obligations.

How We Use Your Information

gk77 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your gk77 player account, verify your identity and age, and manage your account settings and preferences.
• Platform Operation: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the gk77 platform in a secure and reliable manner.
• Financial Transactions: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify that payment methods belong to you; and to maintain accurate financial records.
• Compliance and Legal Obligations: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations; to respond to law enforcement requests; and to comply with any applicable legal or regulatory requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, account takeovers, and other security threats to the platform and to other players.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to proactively apply responsible gaming interventions where appropriate, including enforcing self-exclusion requests and deposit limits.
• Customer Support: To respond to your queries, complaints, and requests via email and live chat in a timely and accurate manner.
• Platform Improvement: To analyse aggregated usage patterns and technical data for the purpose of improving the performance, design, and feature set of the gk77 platform.
• Promotional Communications: To send you personalised offers, bonus notifications, and tournament announcements by email or in-platform message — but only where you have opted in to receive such communications or where we have a legitimate interest in doing so. You may unsubscribe at any time.

Legal Basis for Processing

gk77 processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contract Performance: Processing that is necessary to provide the services you have contracted with us to provide — including account management, game access, and payment processing — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law — including AML/KYC checks, age verification, fraud reporting, and responses to regulatory or law enforcement requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement is carried out on the basis of gk77's legitimate interests, provided those interests are not overridden by your data protection rights.
• Consent: Where gk77 sends you marketing or promotional communications by email, this is carried out on the basis of your consent. You may withdraw your consent at any time by unsubscribing via the link in any marketing email or by contacting [email protected].

Sharing Your Information

gk77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your data only where strictly necessary, in the following limited circumstances:

• Payment Service Providers: Your financial data is shared with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa card network, Mastercard network) solely to facilitate the transaction you have requested. Payment processors are contractually obligated to protect your data and may not use it for any other purpose.
• Game Providers: Certain technical identifiers (such as a session token or anonymised player ID) may be passed to our certified game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — to facilitate game session authentication. No identifiable personal data beyond what is technically necessary is shared with game providers.
• Identity Verification Partners: Your identity and address verification documents may be processed by certified third-party KYC and AML compliance partners for the purpose of fulfilling our legal obligations. These partners are bound by strict data processing agreements.
• Fraud Prevention Services: Technical data and account behaviour data may be shared with fraud detection and cybersecurity service providers to protect the integrity of the gk77 platform and its players.
• Legal and Regulatory Authorities: gk77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will notify you of such a disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving gk77, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being assumed by the acquirer.

All third parties with whom gk77 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific purpose for which it was shared.

Data Retention

gk77 retains your personal data for as long as your account is active and for a period thereafter as required by our legal, regulatory, and compliance obligations. The following general retention principles apply:

Where personal data is no longer required for any legitimate purpose, gk77 will either securely delete it or anonymise it such that it can no longer be attributed to you as an individual. Anonymised aggregate data may be retained indefinitely for analytical and business intelligence purposes.

Cookies and Tracking Technologies

gk77 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the platform, maintain session continuity, and gather analytical data about how the platform is used. The following categories of cookies are deployed:

• Strictly Necessary Cookies: These cookies are essential for the operation of the gk77 platform. They enable core functions such as session authentication, security token validation, and maintaining your logged-in state. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the gk77 platform — such as which pages are visited most frequently, how long players spend on each section, and which features are used most. This data helps gk77 improve the platform over time.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category, language setting, or display preferences — so that you do not need to reconfigure them on each visit.
• Fraud Prevention Cookies: These cookies enable gk77's fraud detection systems to identify suspicious behaviour patterns, such as automated bot activity or multiple accounts operating from the same device.

You can control and manage cookie settings through your browser. Most browsers allow you to refuse new cookies, delete existing cookies, and configure alerts when new cookies are set. Please note that disabling strictly necessary cookies will affect the functionality of the gk77 platform and may prevent you from accessing certain features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Security

gk77 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Transport Encryption: All data transmitted between your device and the gk77 platform is encrypted using 256-bit TLS/SSL encryption. Our SSL certificates are regularly renewed and audited.
• Data-at-Rest Encryption: Personal data stored on gk77's servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data they protect.
• Access Controls: Access to personal data within gk77 is strictly controlled on a need-to-know basis. Only authorised personnel whose job function requires access to specific categories of data are granted that access, and all access events are logged and audited.
• Penetration Testing: gk77's platform and infrastructure undergo regular security penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities.
• Two-Factor Authentication: gk77 supports two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of security to their account credentials.
• Incident Response: gk77 maintains a formal data breach incident response procedure. In the event of a security incident that poses a material risk to your personal data, we will notify you within a reasonable timeframe in accordance with applicable law.

While gk77 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. If you have reason to believe that your interaction with gk77 is no longer secure — for example, if you suspect your account has been compromised — please contact us immediately at [email protected].

Your Data Rights

As a gk77 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt of your request.

Please note that some rights are subject to limitations. For example, gk77 cannot delete data that it is legally required to retain for AML, KYC, or financial record-keeping purposes. Where we are unable to fulfil a request in full, we will explain the reason clearly in our response.

Protection of Minors

The gk77 platform is strictly for adults aged 21 years and above. gk77 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age declaration and age verification procedures to prevent underage access.

If gk77 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be securely deleted (subject only to mandatory AML retention requirements where legally required), all deposits will be returned to the original payment source, and all winnings will be forfeited.

If you are a parent or guardian and believe that your child has created a gk77 account or provided personal data to gk77, please contact us immediately at [email protected] so that we can take the appropriate action. We recommend using parental control and content filtering software on any shared device to prevent minors from accessing online gambling platforms.

International Data Transfers

To provide the gk77 platform, it may be necessary to transfer your personal data to third-party service providers whose infrastructure is located outside Bangladesh. This may include game providers, cloud hosting providers, and fraud prevention services operating in other jurisdictions.

Where personal data is transferred internationally, gk77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. Such safeguards may include contractual data protection clauses, the recipient's participation in a recognised data protection certification scheme, or the adequacy of data protection standards in the destination jurisdiction.

By using the gk77 platform and consenting to this Privacy Policy, you acknowledge and agree to the potential international transfer of your personal data under the safeguards described above.

Changes to This Policy

gk77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — gk77 will notify registered players via email and via an in-platform notification at least seven (7) days before the updated Policy takes effect. For non-material changes (such as typographical corrections or minor clarifications), we may update the Policy without prior notice.

Your continued use of the gk77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this Policy, you must cease using the platform and close your account before the effective date of the change. The most current version of this Policy is always available at gk77.io/privacy-policy.

Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or to the personal data gk77 holds about you, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry"
• Live Chat: Available 24/7 within the gk77 platform after login
• Response Timeframe: Acknowledged within 24 hours; substantively responded to within 30 days for data rights requests, 7 days for general privacy enquiries.

gk77 treats all privacy-related communications with strict confidentiality. We will never ask you to provide your account password, full payment card number, or mobile banking PIN via email or live chat. If you receive any communication purporting to be from gk77 that requests such information, please do not respond and report it to us immediately at [email protected].