Privacy Policy — 5z 777 Data Protection

Information We Collect

When you visit, register with, or use the 5z 777 platform, we collect certain categories of personal data to enable us to provide our services, verify your identity, process payments, and comply with applicable legal obligations. The categories of data we collect are set out below.

Registration and Identity Data

• Full legal name as it appears on your official identification document.
• Date of birth (collected to verify that you meet the 18+ age requirement).
• Email address used for account communications and support correspondence.
• Mobile phone number, used for account security and, where applicable, payment method verification.
• Residential address, collected during the identity verification process.
• A copy of a government-issued identity document (national ID card, passport, or driving licence) when identity verification is required.

Financial and Transaction Data

• Payment method identifiers associated with your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, or Mastercard account used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal requests, and timestamps, all denominated in Bangladeshi Taka (৳).
• Source-of-funds documentation where requested during enhanced due diligence reviews.

Technical and Usage Data

• IP address and approximate geographic location (city/region level) at the time of login and key account actions.
• Device type, operating system, browser type and version, and screen resolution.
• Session timestamps, page navigation paths, and feature interaction logs within the platform.
• Game activity records, including game sessions, wager amounts, bet history, and outcomes, maintained as the authoritative record for dispute resolution purposes.

How We Use Your Data

5z 777 processes your personal data only where we have a lawful basis for doing so. The lawful bases we rely on include: performance of our contract with you as a registered player; compliance with legal obligations applicable to our operation; our legitimate interests in operating a secure and fair gaming platform; and, where required, your consent. The specific purposes for which we use your data are as follows:

Data Sharing & Disclosure

5z 777 does not sell or rent your personal data to any third party. However, to deliver our services effectively and to comply with our legal obligations, we may share specific categories of your data with the following categories of recipients. In all cases, data sharing is limited to the minimum necessary for the stated purpose.

• Payment service providers: We share financial transaction data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, or Mastercard) to the extent required to process your deposit or withdrawal. These providers operate under their own privacy policies and regulatory obligations.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your anonymised player session data for the purpose of delivering game content, maintaining RNG audit logs, and resolving game-related disputes. These studios do not receive your name, payment details, or contact information.
• Identity verification providers: Where we engage a third-party KYC (Know Your Customer) service to assist with identity document verification, your identity data will be shared with that provider under a strict data processing agreement that prohibits any secondary use of your data.
• Legal and regulatory authorities: We may be required by applicable law, court order, or regulatory directive to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. In such cases, 5z 777 will disclose only the data specifically required and, where legally permissible, will notify the affected player of the disclosure.
• Fraud prevention and responsible gaming networks: In cases of suspected fraud, money laundering, or serious responsible gaming concerns, 5z 777 may share relevant data with industry fraud prevention networks or responsible gaming organisations operating in Bangladesh. Such sharing is conducted only where legally justified and proportionate.
• IT infrastructure and cloud service providers: Our platform infrastructure is hosted on third-party servers. Providers of hosting, database, and cloud infrastructure services may have incidental access to stored data in the course of providing their services. Such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.

Cookies & Tracking Technologies

The 5z 777 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, and to gather anonymised analytics data that helps us improve the player experience. The following table describes the categories of cookies we use:

5z 777 does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts that profile your behaviour for the purpose of serving you targeted advertisements on other websites or applications.

Data Retention & Storage

5z 777 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to retain it by applicable law. The following retention periods apply to the main categories of data we hold:

• Account and identity data: Retained for the duration of your account's active status and for a minimum of five years following permanent account closure, to comply with anti-money laundering record-keeping obligations and to respond to any regulatory or legal inquiries arising from your account activity.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
• Game activity logs: Retained for a minimum of two years from the date of each recorded game session, after which logs may be archived in anonymised, aggregated form for statistical purposes.
• Support correspondence: Retained for two years from the date of the last communication in a support thread, to enable us to reference prior interactions in ongoing or related queries.
• Marketing consent records: Retained for the duration of your opt-in status plus three years following opt-out, as a record of the consent obtained and subsequently withdrawn.
• Technical and usage data: Anonymised analytics data may be retained indefinitely in aggregated form. Non-anonymised technical data such as IP address logs is retained for no longer than 90 days unless a specific security or legal investigation requires extended retention.

Your Privacy Rights

As a player on the 5z 777 platform, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid rights requests within a reasonable timeframe and in any event within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and with whom it has been shared. We will provide this in a clear, structured format.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can also update many account details directly through our support team.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn the consent on which processing was based. This right is subject to legal retention obligations as described in Section 5 above.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, pending our verification of your rectification request.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the lawful basis, including where we use your data for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Data Security Measures

5z 777 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to the following:

• Transport layer encryption: All data in transit between your browser or mobile device and the 5z 777 platform is encrypted using TLS 1.2 or higher. This applies to all pages, including login, registration, deposit, and withdrawal flows.
• Password storage: Account passwords are never stored in plaintext. 5z 777 uses a one-way cryptographic hashing algorithm with per-account salting, ensuring that even in the event of a data security incident, plaintext passwords cannot be recovered.
• Access controls: Internal access to personal data systems is governed by role-based access control policies. Staff members are granted access only to the data categories required to perform their specific job functions. Access logs are maintained and reviewed regularly.
• Security monitoring: The 5z 777 platform is monitored continuously for signs of unauthorised access, brute-force login attempts, and other security anomalies. Automated alerts are configured to flag suspicious activity for immediate review by our security team.
• Third-party security assessments: We conduct periodic security reviews of the platform and its infrastructure, including assessments of third-party service providers, to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to player rights, 5z 777 will act promptly to contain the incident, assess the risk, and notify affected players and relevant authorities in accordance with applicable obligations. Notifications will be sent to the registered email address of affected accounts.

Policy Updates & Contact

5z 777 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. The effective date at the top of this document will be updated each time a revision is published.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we process your personal data — we will notify registered players by email to the address on file before the changes take effect. For non-material changes such as clarifications, corrections of typographical errors, or reformatting, we may update the document without individual notification, relying on the updated effective date as adequate notice.

Continued use of the 5z 777 platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with any revision to this Privacy Policy, you should cease using the platform and contact our support team to request account closure and, where applicable, deletion of your personal data subject to legal retention obligations.

This Privacy Policy was last reviewed and updated on 1 January 2026. 5z 777 is committed to handling your personal data with transparency, integrity, and care. We value the trust that players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh place in our platform, and we take our responsibility to protect that trust seriously.