cd777 Privacy Policy

1. Introduction

cd777 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who use our online gaming and betting services at cd777.io. This Privacy Policy describes in detail how we collect, use, store, share, and protect personal data relating to our registered players and website visitors ("you", "your").

This policy applies to all personal data processed in connection with your use of the cd777 website, mobile interface, live chat support, and any other service provided under the cd777 brand. It should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement governing your relationship with cd777.

We review and update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory guidance. The version published at cd777.io/privacy-policy is always the current version. The effective date at the top of this document indicates when the present version came into force.

2. Data Controller

For the purposes of this Privacy Policy, cd777 acts as the data controller responsible for the personal data you provide to us or that we collect during your use of the platform. As data controller, cd777 determines the purposes for which and the means by which your personal data is processed.

If you have any questions regarding the identity of the data controller or wish to exercise any of your data rights described in Section 12 of this policy, please contact our Data Protection team via the support channel listed in Section 15.

3. Personal Data We Collect

cd777 collects the following categories of personal data in the course of providing its services:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Gender (optional, for account personalisation purposes);
• Residential address including city, district, and postal code;
• Mobile phone number (used for account verification and support);
• Email address (used for account communication and transactional notifications).

3.2 Financial & Transaction Data

• Mobile wallet identifiers for bKash, Nagad, Rocket, and Upay accounts used for deposits and withdrawals;
• Transaction histories including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Account balance history and wagering records;
• Source of funds documentation provided during KYC verification.

3.3 Identity Verification Documents

• Copies of government-issued photo identification (National ID card, passport, or driving licence);
• Proof of address documentation (utility bills, bank statements dated within three months);
• Selfie photographs submitted for liveness verification where required.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and session duration;
• Pages visited, games played, bets placed, and platform navigation patterns;
• Referral source (the URL or campaign that directed you to cd777.io).

3.5 Communications Data

• Live chat transcripts between you and cd777 support agents;
• Email correspondence sent to or received from cd777 support;
• Feedback, complaints, and dispute records.

4. How We Collect Your Data

cd777 collects personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team;
• Automated collection — technical and usage data collected automatically through server logs, cookies, and similar technologies as you navigate and use the platform;
• Third-party payment providers — transaction reference data and confirmation signals received from bKash, Nagad, Rocket, Upay, and other payment partners when processing your transactions;
• Identity verification partners — where cd777 uses third-party KYC service providers to verify the authenticity of documents you submit, those providers may return a verification result to cd777;
• Publicly available sources — in the context of fraud and anti-money laundering investigations, cd777 may cross-reference information against publicly available records.

5. How We Use Your Personal Data

cd777 uses the personal data we collect for the following purposes:

• Account management — creating, maintaining, and administering your cd777 player account;
• Identity verification and KYC — verifying that you meet the 21+ age requirement and confirming your identity to comply with our anti-money laundering obligations;
• Transaction processing — facilitating deposits and withdrawals through your registered payment methods including bKash, Nagad, Rocket, and Upay;
• Platform security and fraud prevention — detecting, investigating, and preventing fraudulent activity, money laundering, prohibited conduct, and account abuse;
• Customer support — responding to your queries, resolving disputes, and maintaining records of communications for quality and compliance purposes;
• Service improvement — analysing aggregated usage data to improve platform performance, game selection, and the overall player experience;
• Responsible gaming — monitoring usage patterns that may indicate problem gambling behaviour and delivering responsible gaming interventions where appropriate;
• Legal and regulatory compliance — fulfilling obligations under applicable law including record-keeping, reporting, and cooperation with law enforcement or regulatory authorities;
• Direct communications — sending transactional notifications, account security alerts, and (where you have opted in) promotional communications about bonuses and offers available on cd777.

cd777 does not use your personal data for automated decision-making or profiling in a manner that produces legal or similarly significant effects without human review.

6. Legal Basis for Processing

cd777 processes your personal data on the following legal grounds:

• Contractual necessity — processing required to perform the contract between you and cd777, including account management, payment processing, and service delivery;
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and data retention obligations;
• Legitimate interests — processing carried out in pursuit of cd777's legitimate interests in operating a secure, fair, and commercially viable platform, including fraud detection and platform analytics, where these interests are not overridden by your rights;
• Consent — where cd777 relies on your consent as the legal basis for processing (for example, sending promotional communications), you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7. Sharing Your Personal Data

cd777 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, and other payment partners solely to process deposit and withdrawal requests. These providers act as independent data controllers for their own payment infrastructure and are governed by their own privacy policies.

7.2 Identity Verification Partners

Where cd777 uses third-party KYC service providers to verify player identity documents, the relevant identity and document data is shared with those providers under strict data processing agreements. KYC partners are prohibited from using this data for any purpose other than delivering the verification service to cd777.

7.3 Technology and Infrastructure Providers

cd777 uses third-party cloud hosting, security, and analytics technology providers who may process personal data on our behalf as data processors. All such providers are bound by contractual obligations that restrict their use of your data to the specific services they deliver to cd777.

7.4 Game Software Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and gameplay data required to operate their games within the cd777 environment. No unnecessary personal data (such as your full name or payment details) is shared with game providers.

7.5 Legal and Regulatory Authorities

cd777 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by applicable law, court order, or where disclosure is necessary to protect the rights, property, or safety of cd777, its players, or the public.

8. International Data Transfers

cd777 may transfer personal data to servers or service providers located outside Bangladesh. Where such transfers occur, cd777 takes appropriate measures to ensure that your personal data receives an adequate level of protection, including:

• Entering into data processing agreements with all recipients that impose data protection standards equivalent to those described in this policy;
• Using technically and organisationally secure transfer mechanisms appropriate to the nature of the data being transferred;
• Restricting international transfers to jurisdictions or service providers that can demonstrate adequate security and confidentiality practices.

9. Data Retention

cd777 retains personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable legal, regulatory, or operational obligations. Our general retention guidelines are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Security Measures

cd777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the cd777 platform;
• Encrypted storage for sensitive data fields including identity documents and payment method identifiers;
• Access controls limiting employee access to personal data on a strict need-to-know basis with role-based permissions;
• Multi-factor authentication for internal staff systems that handle personal data;
• Regular security assessments and penetration testing of the platform infrastructure;
• Incident response procedures enabling cd777 to detect, contain, and notify affected parties in the event of a data breach within appropriate timeframes.

While cd777 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for using the platform on secure, private networks where possible.

11. Cookies & Tracking Technologies

cd777 uses cookies and similar technologies on our website to enable core platform functionality, improve user experience, and gather anonymised analytics. The following categories of cookies are used:

cd777 does not use third-party advertising or targeting cookies. You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect the availability of certain platform features.

12. Your Data Rights

As a cd777 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at the email address in Section 15.

• Right of access — you may request a copy of the personal data cd777 holds about you, along with information about how it is being used;
• Right to rectification — you may request that inaccurate or incomplete personal data be corrected. For account details, many fields can be updated directly through the account settings panel;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to restriction of processing — you may request that cd777 temporarily limit how your data is processed in certain circumstances, such as while a dispute is under investigation;
• Right to data portability — where processing is based on your consent or on a contract with you, you may request that your data be provided to you in a structured, commonly used, and machine-readable format;
• Right to object — you may object to processing carried out on the basis of cd777's legitimate interests where you have grounds relating to your particular situation;
• Right to withdraw consent — where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

cd777 will respond to all data rights requests within 48 hours of receipt. Some requests may require identity verification before they can be fulfilled. Where a request cannot be fulfilled (for example, because data must be retained for legal compliance purposes), cd777 will explain the reason clearly.

13. Minors

If cd777 discovers that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor has registered on cd777, please contact our support team immediately so we can investigate and take appropriate action.

14. Changes to This Privacy Policy

cd777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The most current version of this Privacy Policy is always available at cd777.io/privacy-policy. The effective date at the top of the document reflects when the current version came into force. Your continued use of the cd777 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern, please contact the cd777 Data Protection team through any of the following channels:

• Live Chat: Available 24/7 via the platform — average response time under 5 minutes
• Email: [email protected] (plain text — not a clickable link)
• Support languages: English and Bengali
• Formal data requests response time: Within 48 hours of receipt

When submitting a data rights request by email, please include your registered account username and a brief description of your request. We may need to verify your identity before processing certain types of requests to ensure we are responding to the correct individual.