Privacy Policy — How op777 Protects Your Data
At op777, your privacy is a core commitment, not an afterthought. This Privacy Policy explains in plain terms exactly what personal data we collect, why we collect it, how we store it securely, and what rights you have over your information as a valued player on our platform.
Our Privacy Commitments at a Glance
This Privacy Policy governs all personal data processing carried out by op777 in connection with the operation of op777.bio and all related services. The following cards summarise our core data protection principles. The full legal text in each section below governs in all cases of interpretation.
Data Minimisation
op777 collects only the personal data that is strictly necessary for the purposes described in this policy. We do not collect data speculatively or for undisclosed purposes. If we no longer need a particular piece of data, we delete or anonymise it promptly.
No Data Selling
op777 does not sell, rent, or commercially trade your personal data to any third party, ever. Your data may be shared with trusted service partners strictly to operate the platform — never for third-party marketing or profiling without your explicit consent.
End-to-End Encryption
All data transmitted between your device and op777 servers is encrypted via TLS 1.3 SSL. Sensitive data such as payment details and identity documents are stored in encrypted form and access is restricted to authorised personnel only on a strict need-to-know basis.
Your Rights, Respected
You have the right to access, correct, delete, and export your personal data held by op777. You may also object to certain types of processing or restrict how we use your data. We respond to all valid data rights requests within 30 days of receipt.
Transparent Processing
Every category of personal data that op777 processes is documented in this policy, along with the legal basis for processing, the purpose, and the retention period. We do not engage in any undisclosed data processing activities.
Compliance Standards
op777 applies internationally recognised data protection principles — including purpose limitation, storage limitation, integrity, and accountability — to all personal data processing activities, aligned with globally accepted best practices for online gaming platforms.
1. Data We Collect
Policy Scope: This Privacy Policy applies to all personal data collected by op777 through the op777.bio website, mobile-optimised browser sessions, customer support communications, and any other channel through which you interact with op777. By registering and using the op777 platform, you acknowledge that you have read and understood this Privacy Policy.
op777 collects personal data through several channels: directly from you when you register an account or make a transaction; automatically when you browse or interact with our platform; and from trusted third-party partners such as payment processors and identity verification services where relevant to operating the platform safely.
The categories of personal data that op777 may collect about you include the following:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, NID number, passport number, photograph | Account registration, KYC verification |
| Contact Data | Email address, mobile number, residential address (Dhaka, Chittagong, Sylhet, etc.) | Account registration, profile updates |
| Financial Data | bKash/Nagad/Rocket wallet numbers, bank account details, transaction history | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens | Automatic collection via cookies and server logs |
| Usage Data | Pages visited, games played, bets placed, time spent on platform, click paths | Automatic collection via analytics tools |
| Communications Data | Support tickets, live chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, cool-off periods, problem gambling indicators | Responsible gaming tool usage |
op777 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data from an underage individual has been collected, we will delete it promptly and close the associated account. op777 also does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming request (for example, a self-exclusion request citing a gambling disorder).
When you contact op777 customer support, any information you provide in that communication — including your account details, the nature of your query, and any supporting documentation you attach — will be recorded and retained as part of our support records. This data is used solely to resolve your query and to improve the quality of our support services.
2. How We Use Your Data
op777 processes your personal data only for specific, documented purposes and only where a valid legal basis for processing exists. The primary legal bases on which op777 relies are: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with applicable anti-money laundering, fraud prevention, and age verification regulations; (c) legitimate interests — processing that serves op777's legitimate business interests, provided those interests are not overridden by your privacy rights; and (d) your consent — where you have freely given specific, informed, and unambiguous consent to a particular processing activity.
The following table sets out the specific purposes for which op777 uses your personal data and the corresponding legal basis for each purpose:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity, contact data | Contract performance |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Identity and age verification (KYC) | Identity data, financial data | Legal obligation |
| Fraud detection and prevention | Technical data, usage data, financial data | Legitimate interests, legal obligation |
| Responsible gaming monitoring | Usage data, responsible gaming data | Legal obligation, legitimate interests |
| Customer support | Communications data, identity data | Contract performance, legitimate interests |
| Platform improvement and analytics | Usage data, technical data | Legitimate interests |
| Promotional communications | Contact data, usage data | Consent (opt-in) |
op777 will never use your personal data for purposes that are incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent. We do not use personal data for automated decision-making that produces significant legal effects on you without human review of the decision.
Where you have opted in to receive promotional communications from op777 — such as bonus offers, tournament announcements, seasonal promotions tied to events like Eid, Pohela Boishakh, or the Bangladesh Premier League (BPL) — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing that took place prior to withdrawal.
3. Data Sharing & Third Parties
We Do Not Sell Your Data: op777 does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of data with third parties is strictly limited to what is necessary to operate the platform, comply with legal obligations, or protect the rights and safety of our users.
op777 may share your personal data with carefully selected third-party service providers who assist in the operation of the platform. All such third parties are required to process your data only on op777's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection requirements. op777 enters into written data processing agreements with all third-party processors before any data sharing takes place.
The categories of third parties with whom op777 may share your personal data, and the purpose of each sharing arrangement, are as follows:
- Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
- Identity Verification Providers: op777 uses third-party KYC (Know Your Customer) service providers to verify the identity and age of registered players. These providers receive identity documents and related data solely for verification purposes.
- Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player identifier (not your full personal details) to facilitate game delivery, fair play auditing, and jackpot calculations.
- Analytics Providers: Anonymised and aggregated usage data may be shared with platform analytics tools to help op777 understand user behaviour and improve the quality of the service. Individual players are not identifiable from this aggregated data.
- Fraud Prevention Services: op777 uses industry-standard fraud detection tools that process technical and usage data to identify suspicious activity, multi-accounting, and bonus abuse. These tools help protect the integrity of the platform for all players.
- Law Enforcement and Regulatory Authorities: op777 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction. op777 will notify you of any such disclosure where legally permitted to do so.
op777 does not transfer personal data to third parties located outside of Bangladesh or internationally recognised data-safe jurisdictions unless appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — are in place to protect your data during the transfer.
4. Cookies & Tracking
op777 uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage objects) to operate the platform efficiently, remember your preferences, maintain your logged-in session, and understand how players interact with the site. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies cannot execute programmes or deliver viruses to your device.
op777 uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, security token validation, and fraud prevention. These cookies cannot be disabled without breaking core platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymised data about how players use the op777 platform — which pages are most visited, how long sessions last, and where users encounter errors. This data helps op777 improve the platform experience. These cookies do not identify you personally.
- Functionality Cookies: These cookies remember your preferences such as your preferred language, display settings, and previously visited game categories. They are not used for advertising or tracking across other websites.
- Targeting and Marketing Cookies: Where you have given your explicit consent, op777 may use targeting cookies to deliver relevant promotional content on the op777 platform. op777 does not serve third-party advertising. Any targeting cookies are used solely to personalise your op777 experience, not to build advertising profiles for external parties.
You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in or using core platform features. Blocking performance or functionality cookies will not prevent you from using the platform but may reduce the quality of your experience.
Your continued use of the op777 platform following your first visit constitutes your acceptance of the use of strictly necessary and performance cookies as described in this policy. Targeting and marketing cookies require your explicit opt-in consent, which is separate from general platform use.
5. Data Retention
op777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data held by op777:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML compliance, legal obligation |
| Financial transaction data | 7 years from transaction date | Financial regulatory requirements |
| KYC / verification documents | 5 years from account closure | Anti-money laundering obligations |
| Customer support records | 3 years from last support interaction | Dispute resolution, service quality |
| Technical / usage data | 13 months from collection | Analytics and platform improvement |
| Marketing consent records | Until consent withdrawn + 2 years | Consent accountability |
| Responsible gaming records | Duration of self-exclusion + 5 years | Re-registration prevention, duty of care |
At the end of the applicable retention period, op777 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Where anonymisation is not technically feasible, data will be securely destroyed using industry-standard data destruction methods.
In some cases, op777 may need to retain data beyond the standard retention periods where it is subject to an active legal dispute, regulatory investigation, or law enforcement hold. In such cases, the data will be retained for the duration of the proceeding and then deleted in accordance with the applicable retention schedule.
6. Data Security Measures
op777 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect current best practice in information security for online gaming platforms.
Our key security measures include:
- TLS 1.3 SSL Encryption: All data transmitted between your browser and op777 servers is protected by Transport Layer Security (TLS 1.3) encryption, the current industry standard for secure web communications.
- Data Encryption at Rest: Sensitive personal data — including identity documents, payment details, and account credentials — is stored in encrypted form on op777 servers using AES-256 encryption.
- Access Controls: Access to personal data is restricted to op777 staff and authorised third-party processors who have a documented need to access it. Access is governed by role-based permissions and reviewed periodically.
- Two-Factor Authentication (2FA): op777 supports two-factor authentication for player accounts to add an additional layer of protection beyond your password. Players are strongly encouraged to enable 2FA on their accounts.
- Penetration Testing and Security Audits: op777's platform undergoes regular security testing by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: op777 maintains a documented data breach response procedure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, op777 will notify affected players without undue delay and take all necessary remediation steps.
While op777 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. You also have an important role to play in keeping your account secure by using a strong, unique password, enabling 2FA, and never sharing your login credentials with any other person.
7. Your Privacy Rights
As a player on the op777 platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.
Right of Access
You have the right to request a copy of the personal data op777 holds about you, along with information about how it is processed. We will provide this in a structured, commonly used format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Most account details can be updated directly in your account settings.
Right to Erasure
You may request that op777 delete your personal data where it is no longer needed for the original purpose, where you withdraw consent, or where processing was unlawful. This right is subject to our legal retention obligations.
Right to Restriction
You may request that op777 restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
Right to Portability
Where processing is based on your consent or a contract, you have the right to receive your personal data in a machine-readable format and, where technically feasible, to have it transmitted to another data controller.
Right to Object
You have the right to object to processing based on op777's legitimate interests, including the use of your data for platform improvement analytics. You may also object at any time to the use of your data for direct marketing.
op777 will not charge a fee for processing a valid data rights request. However, where requests are manifestly unfounded or excessive — in particular because they are repetitive — op777 may charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.
Please note that certain rights may be limited or excluded where op777 is required to retain or process your data in order to comply with a legal obligation, to exercise or defend legal claims, or to protect the rights of other individuals. Where op777 relies on such a limitation, we will explain the reason clearly in our response to your request.
8. Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way op777 processes your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy queries in a timely, transparent, and respectful manner.
Privacy Contact Email: [email protected] — please use the subject line "Privacy Enquiry" or "Privacy Rights Request" so your message is directed to the correct team. We aim to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 calendar days.
If you have submitted a data rights request and are not satisfied with op777's response — or if you believe that op777 has not handled your personal data in accordance with this Privacy Policy — you have the right to lodge a complaint. op777 takes all complaints seriously and will investigate each complaint thoroughly. A senior member of our team will review the complaint independently and provide a final written decision.
op777 reviews this Privacy Policy at least annually and following any significant change to our data processing activities, applicable law, or platform operations. When we make material changes to this policy, we will notify registered players via the email address associated with their account and post an updated version on this page with a revised "Last Updated" date. We encourage you to review this policy periodically to stay informed about how op777 protects your personal data.
This Privacy Policy was last reviewed and updated in 2026. It applies to all players registered on the op777 platform at op777.bio. For queries regarding this policy, contact [email protected] with the subject line "Privacy Enquiry".
Privacy Contact Details
For all privacy-related enquiries, data rights requests, or complaints:
Email: [email protected]
Subject Line: Privacy Enquiry / Privacy Rights Request
Response Time: Within 30 calendar days of receipt of a valid request
Languages: English
Policy Review Schedule: This Privacy Policy is reviewed at minimum once per year and updated whenever op777's data processing activities or applicable legal requirements change materially. Check the "Last Updated" date at the top of this page for the most recent version.
Explore op777 With Confidence
Your data is protected and your privacy respected. Ready to enjoy cricket betting, live casino games, and premium slots on Bangladesh's trusted platform?