ka77 Privacy Policy —
How We Protect Your Personal Data

Who We Are and How to Contact Us

ka77 is an online betting and casino platform accessible at https://ka77.io, operated for the benefit of adult players aged 21 and above across Bangladesh. For the purposes of this Privacy Policy, ka77 acts as the data controller in respect of all personal data collected from players and visitors to the ka77 platform.

If you have any question, concern, or request relating to this Privacy Policy or the personal data we hold about you, you may contact our dedicated support team at any time:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 directly on the ka77 platform. Average response time 2–5 minutes.
• WhatsApp: Available 08:00–02:00 BST (UTC+6).

When contacting us about a data matter, please include your registered username and the email address associated with your account so that we can verify your identity before actioning your request.

Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected by ka77 through the following channels:

• The ka77 website and all pages accessible at https://ka77.io and its subdomains.
• The ka77 mobile-optimised platform accessed via any browser on any device.
• All player support interactions conducted via live chat, email, or WhatsApp.
• Any promotional communications sent by ka77 to players who have provided consent to receive them.
• Interactions with third-party game providers or payment processors that are integrated into the ka77 platform.

This Policy does not apply to third-party websites, services, or applications that may be linked to or referenced from the ka77 platform. Those third parties operate under their own privacy policies, and ka77 is not responsible for their data practices.

By registering an account on ka77, using any feature of the platform, or communicating with the ka77 support team, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

Personal Data We Collect

ka77 collects personal data through three primary means: data you provide directly, data collected automatically during your use of the platform, and data received from third-party partners in the course of operating our services.

Data You Provide Directly:

• At registration: your full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number.
• During KYC verification: copies or images of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence.
• When making a deposit or requesting a withdrawal: your bKash, Nagad, Rocket, Upay, or bank account reference details sufficient to process the transaction.
• When contacting support: the content of your live chat conversations, email messages, and any documents or screenshots you choose to share with our team.
• When participating in promotions: any information required to validate your eligibility for a specific bonus or tournament.

Data Collected Automatically:

• Technical data including your IP address, device type, operating system version, and browser type, collected each time you access the ka77 platform.
• Session data including login timestamps, session duration, pages visited, and features interacted with.
• Geolocation data at the country and city level (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna) for security and fraud prevention purposes. ka77 does not collect precise GPS coordinates.
• Betting and gaming data: every bet placed, game session started, wager amount staked, and outcome recorded is logged to your account.
• Cookie data and similar tracking data, as described in Section 5 of this Policy.

Data Received from Third Parties:

• Identity and age verification results from KYC service providers.
• Transaction confirmation data from payment processors including bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud and risk signals from our security service providers.

How We Use Your Personal Data

ka77 uses the personal data we collect for the following specific purposes. For each purpose, we identify the legal basis on which we rely:

• Account creation and management — To register your account, verify your identity, manage your balance, and facilitate your use of all platform features. Legal basis: contractual necessity.
• Processing deposits and withdrawals — To receive funds via bKash, Nagad, Rocket, Upay, and supported banks, and to return funds to you upon withdrawal request. Legal basis: contractual necessity.
• Age verification (21+) — To confirm that you are at least 21 years of age before allowing real-money betting activity, in accordance with our Terms and Conditions. Legal basis: legal obligation; contractual necessity.
• Fraud prevention and platform security — To detect and prevent fraudulent accounts, multi-account registrations, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions. Legal basis: legitimate interest; legal obligation.
• Responsible gaming monitoring — To identify patterns of play that may indicate problem gambling behaviour, to apply player-requested limits or self-exclusions, and to contact players proactively where our systems flag a concern. Legal basis: legitimate interest; legal obligation.
• Customer support — To respond to your queries, resolve disputes, and provide assistance across live chat, email, and WhatsApp. Legal basis: contractual necessity.
• Legal and regulatory compliance — To maintain records required by applicable law, respond to lawful requests from authorities, and satisfy our AML (Anti-Money Laundering) obligations. Legal basis: legal obligation.
• Platform improvement and personalisation — To analyse usage patterns across our player base in Bangladesh, improve platform features, and where consent has been given, personalise the experience for individual players. Legal basis: legitimate interest; consent (for personalisation).
• Marketing communications — To send promotional emails, SMS messages, and WhatsApp notifications to players who have explicitly opted in to receive them. Legal basis: consent.

ka77 does not use your personal data for automated decision-making that produces significant legal effects on your account, except where such decisions are required to comply with our fraud prevention or AML obligations. In such cases, you have the right to request human review of any automated decision that adversely affects your account.

Cookies and Tracking Technologies

ka77 uses cookies and similar tracking technologies on its platform to ensure functionality, maintain session security, and improve your experience. A cookie is a small text file placed on your device by the ka77 platform when you visit it. Cookies do not contain executable code and cannot access other data stored on your device.

ka77 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log in to your account, navigate between pages, and use core features such as the betting interface and payment forms. These cookies cannot be disabled without breaking the platform's core functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login attempts, detecting bot activity, and flagging unusual betting patterns. These are essential to platform integrity.
• Session Cookies: Temporary cookies that expire when you close your browser. They maintain the state of your current session — for example, keeping your account logged in as you navigate between pages.
• Analytics Cookies: Used to collect aggregated data about how players interact with the ka77 platform — which pages are visited most frequently, how long sessions last, and which features are used. This data is used in anonymised, aggregated form to improve the platform. No individual player is identified in analytics reports.
• Preference Cookies: Store your platform preferences such as language or notification settings so that they persist between sessions.

ka77 does not use third-party advertising cookies. No data collected via cookies on the ka77 platform is shared with advertising networks, retargeting platforms, or social media companies for the purpose of delivering targeted advertisements.

Sharing Your Personal Data

ka77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following specific and limited circumstances:

• Payment Processors: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank, we share the minimum necessary transaction data with the relevant payment provider to complete the transaction. Each payment provider operates under its own privacy policy and data security standards.
• Identity Verification Providers: During KYC procedures, we share identity document images and personal details with our third-party identity verification service provider for the purpose of confirming your age and identity. This provider is contractually bound to process your data solely for this purpose and to maintain appropriate security standards.
• Game Studio Providers: To deliver third-party games including those from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, ka77 shares your player session reference (a pseudonymous identifier) with the relevant game studio. Full identity data is not shared with game studios.
• Fraud and Security Services: ka77 works with specialist security providers to monitor for fraudulent activity. These providers receive technical and behavioural data (IP addresses, device fingerprints, betting patterns) under strict contractual confidentiality obligations.
• Legal and Regulatory Authorities: ka77 will disclose personal data to competent authorities in Bangladesh or elsewhere where required to do so by applicable law, court order, or regulatory instruction. We will only disclose the minimum data necessary to satisfy the legal requirement.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ka77's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the email address registered to your account prior to the transfer taking effect.

All third parties with whom ka77 shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific purpose for which it was shared.

Data Security

ka77 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ka77 platform is encrypted in transit using industry-standard 256-bit SSL/TLS protocols. This is the same encryption standard used by major financial institutions across Bangladesh.
• Encrypted Data Storage: Sensitive data — including identity document copies and financial reference data — is stored in an encrypted format on ka77's servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within the ka77 organisation is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of data are permitted to view it, and all access is logged and monitored.
• Payment Data Security: ka77 does not store complete payment card numbers or full mobile banking credentials on its own servers. All payment data is handled by PCI-DSS compliant payment processors. ka77 stores only the minimum reference data necessary to link a transaction to your account.
• Intrusion Detection: ka77's platform is monitored continuously for unusual access patterns, potential intrusions, and security anomalies. Our security team responds to detected incidents on a 24/7 basis.
• Regular Security Reviews: ka77 conducts periodic internal security reviews and works with external security specialists to identify and remediate vulnerabilities in the platform infrastructure.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, ka77 will notify affected players without undue delay via the email address registered to their account, describing the nature of the breach, the categories of data affected, and the steps being taken to mitigate the impact.

Data Retention

ka77 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active Account Data: All personal data associated with an active ka77 account is retained for the duration of the account's active status.
• Closed Account Data: Following voluntary account closure or account termination by ka77, identity data, financial transaction records, and betting history are retained for a minimum period of five years to satisfy AML record-keeping requirements and to support any dispute resolution processes that may arise after closure.
• KYC Documents: Identity document copies submitted during KYC verification are retained for the duration of your account's active status plus five years following closure, in line with financial record-keeping obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for up to three years following the date of the communication, to support quality assurance, dispute evidence, and compliance record-keeping.
• Technical and Usage Data: IP address logs and session data are retained for up to 12 months for security and fraud prevention purposes, after which they are deleted or anonymised.
• Marketing Preferences: Records of your marketing consent and opt-out history are retained indefinitely to demonstrate compliance with consent requirements, even if you have opted out of receiving marketing communications.

When the applicable retention period expires, ka77 will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with you as an individual.

Your Rights Over Your Personal Data

As a ka77 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all verified data requests within 10 business days.

• Right of Access: You have the right to request a copy of all personal data that ka77 holds about you. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update certain information directly via your account settings dashboard.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request that ka77 delete your personal data. This right is subject to limitations where retention is required to satisfy legal obligations (such as AML record-keeping) or to support ongoing dispute resolution.
• Right to Restriction of Processing: You have the right to request that ka77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while a complaint is under review.
• Right to Object: You have the right to object to processing of your personal data where ka77 relies on legitimate interest as the legal basis. We will assess whether our legitimate interest is overridden by your rights and freedoms and will communicate our decision in writing.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where ka77 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Marketing Communications

ka77 may send promotional communications — including bonus offers, tournament announcements, reload promotions, and seasonal campaigns (such as those tied to Pohela Boishakh, Eid, or the BPL cricket season) — to players who have explicitly opted in to receive them at the time of registration or via their account notification settings.

Marketing communications from ka77 may be delivered via the following channels, where you have provided consent for each channel separately:

• Email to your registered email address.
• SMS to your registered Bangladeshi mobile number.
• WhatsApp messages to your registered number, during the hours of 08:00 to 22:00 BST.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your ka77 account settings dashboard.
• Clicking the unsubscribe link included in any promotional email sent by ka77.
• Contacting our support team via live chat or at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawing marketing consent does not affect your ability to use the ka77 platform or receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, or security alerts — these are essential service communications sent on the basis of contractual necessity, not consent.

Children and Minors

ka77 is strictly an adults-only platform. The minimum age requirement to register an account and participate in any form of real-money betting or casino activity on ka77 is 21 years. This requirement applies to all players across Bangladesh without exception.

ka77 does not knowingly collect, process, or retain personal data from any individual under the age of 21. All new accounts are subject to mandatory age verification as part of the KYC process. Where ka77 identifies or has reasonable grounds to suspect that a registered account belongs to an individual under 21, the account will be suspended immediately, all pending transactions will be frozen, and any balance held may be withheld pending investigation.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on ka77 or provided personal data to our platform, please contact our support team immediately via live chat or at [email protected]. We will investigate promptly and take all necessary steps to close the account and delete the data in question.

Third-Party Links and Services

The ka77 platform may contain references or links to third-party services that are integrated into the platform, including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment providers including bKash, Nagad, Rocket, and Upay.

When you interact with a third-party game or payment interface embedded within the ka77 platform, you may be subject to the privacy practices of that third party in addition to ka77's own. ka77 takes care to partner only with reputable, established service providers that maintain appropriate data protection standards. However, ka77 does not control the data practices of third-party providers and is not responsible for the content of their privacy policies.

We encourage you to review the privacy policies of any third-party provider whose services you access through the ka77 platform, particularly before providing any personal or financial information directly to that provider. If you have concerns about a specific third-party provider's data practices, please contact our support team and we will do our best to address your query.

Changes to This Privacy Policy

ka77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, changes to the services we offer, or improvements to the clarity of our explanations. All changes will be reflected in an updated version of this Policy published at https://ka77.io/privacy-policy.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — ka77 will notify affected players via the email address registered to their account at least 14 days before the change takes effect. Your continued use of the ka77 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We recommend that all ka77 players review this Privacy Policy periodically to remain informed about how their personal data is being handled. The "Last Updated" date displayed at the top of this page and in the hero section above will always reflect when the most recent revision was made.

If you do not agree with any change to this Privacy Policy, you have the right to close your ka77 account and request deletion of your personal data (subject to the retention obligations described in Section 8) by contacting our support team.

Contact and Data Requests

For all privacy-related inquiries, data rights requests, or concerns about how ka77 handles your personal data, our dedicated support team is available around the clock. We are committed to responding to all data-related requests promptly and transparently.

• Live Chat: Available 24 hours a day, 7 days a week, directly on the ka77 platform. This is the fastest channel for urgent data concerns. Average response time is 2–5 minutes.
• Email: [email protected] — for formal written data requests, including access requests, rectification requests, and erasure requests. We aim to respond within 10 business days of receiving a verified request.
• WhatsApp: Available between 08:00 and 02:00 BST (UTC+6) for general privacy queries and account-level data questions.

When submitting a formal data rights request, please provide your registered ka77 username, your registered email address, and a clear description of the right you wish to exercise and the data it relates to. This information allows us to locate your records promptly and verify your identity before taking any action.

ka77 does not charge a fee for processing data rights requests in ordinary circumstances. Where a request is manifestly unfounded or excessive — in particular because of its repetitive character — ka77 reserves the right to charge a reasonable administrative fee or to decline to act on the request, with written explanation provided to the requester.

We take every privacy concern seriously. If after contacting us you feel that your concern has not been addressed to your satisfaction, you have the right to escalate the matter through available legal channels in your jurisdiction. ka77 will cooperate fully with any lawful inquiry.