gc777 Privacy
Policy & Data Protection

1 Introduction

gc777 ("gc777", "we", "us", "our") operates the online casino and sports betting platform available at gc777.io, serving players based in Bangladesh. This Privacy Policy ("Policy") describes how gc777 collects, uses, stores, shares and protects personal data relating to individuals who register for or use the gc777 platform ("you", "Player", "User").

We take the privacy and security of your personal data seriously. Our data-handling practices are designed to be transparent, proportionate and consistent with responsible data stewardship. We collect only what is necessary, retain it only for as long as required and protect it throughout its lifecycle using robust technical and organisational security measures.

This Policy applies to all personal data processed in connection with the gc777 platform, including data collected via the website at gc777.io, through our customer support channels, through payment processing interactions, and through any promotional communications you receive from gc777.

This Policy should be read alongside the gc777 Terms & Conditions and the gc777 Responsible Gaming Policy. Definitions used but not defined in this Policy carry the same meaning as in the Terms & Conditions.

2 Data Controller

gc777 acts as the data controller in respect of all personal data collected and processed in connection with the gc777 platform. As data controller, gc777 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly and transparently.

All data protection enquiries, access requests and erasure requests should be directed to the gc777 data protection contact:

Email: [email protected]

gc777 will respond to all legitimate data-related requests within a reasonable timeframe, consistent with the nature and complexity of the request.

3 Data We Collect

gc777 collects the following categories of personal data in connection with the operation of the platform:

3.1 Identity & Registration Data

• Full legal name as it appears on official identification documents;
• Date of birth (required for age verification — players must be 21 years or older);
• Gender (optional, where voluntarily provided);
• National Identity Card (NID) number, passport number or other government-issued identifier where submitted for verification purposes;
• Profile username chosen at registration.

3.2 Contact Data

• Mobile phone number registered in Bangladesh;
• Email address;
• Residential address including district, division and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar).

3.3 Financial & Payment Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket or Upay accounts used for deposits or withdrawals;
• Partial card numbers (last four digits only) associated with Visa or Mastercard transactions;
• Transaction amounts, timestamps and reference numbers;
• Account balance history and withdrawal records.

gc777 does not store full payment card numbers, full mobile wallet PINs, CVV codes or full bank account credentials. These are processed exclusively by certified third-party payment providers over encrypted connections.

3.4 Gaming Activity Data

• Bet history, game session logs and wagering amounts;
• Win and loss records;
• Bonus participation history and wagering requirement progress;
• Sports betting selections including cricket, football, kabaddi and other markets;
• Session duration and time-of-play records.

3.5 Technical & Device Data

• IP address at the time of login and during active sessions;
• Device type, operating system and browser version;
• Cookies and similar tracking technologies (see Section 10);
• Geolocation data at the jurisdiction level (country/region), not precise GPS coordinates;
• Access logs, including pages visited, time spent and navigation patterns.

3.6 Communications Data

• Records of communications between you and gc777 customer support, including live chat transcripts, email correspondence and support ticket content;
• Responses to surveys or promotional questionnaires where voluntarily completed;
• Promotional communication preferences (opt-in or opt-out status for email and SMS marketing).

4 How We Collect Data

gc777 collects personal data through the following means:

• Directly from you during account registration, identity verification submissions, deposit and withdrawal requests, customer support interactions, and when you voluntarily update your account profile;
• Automatically during your use of the gc777 platform, via server logs, session tracking technology, cookies and similar technologies as described in Section 10;
• From payment providers such as bKash, Nagad, Rocket, Upay, Visa and Mastercard, who confirm transaction status, amounts and reference data to gc777 in connection with deposits and withdrawals you initiate;
• From identity verification partners where you submit documents for KYC (Know Your Customer) verification, the verification partner may confirm the validity of the document and return a verification status to gc777;
• From fraud prevention and anti-money-laundering services which may provide risk-scoring signals associated with transactional behaviour or device fingerprints.

5 How We Use Your Data

gc777 uses your personal data for the following purposes:

gc777 does not use automated decision-making or profiling that produces legal or similarly significant effects on players without human review.

6 Legal Basis for Processing

gc777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between gc777 and you, including account creation, payment processing, game delivery and customer support;
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering obligations, age verification requirements and fraud prevention duties;
• Legitimate interests: Processing necessary for gc777's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring and product improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing for optional purposes such as sending promotional emails or SMS messages, where your consent has been explicitly obtained. You may withdraw consent for marketing communications at any time by updating your account preferences or contacting [email protected].

7 Sharing Your Data

gc777 does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa and Mastercard receive the minimum data necessary to process your transactions, including your name and transaction amount. Each provider operates under its own privacy policy and security standards;
• Identity verification providers: Where you submit KYC documents, our verification partner receives a copy of those documents solely to confirm authenticity and return a verification result. Copies are not retained by the provider beyond the verification period;
• Fraud and AML screening services: Transaction data and device signals may be shared with specialised fraud prevention services for risk scoring. These services act as data processors under contractual data-processing agreements with gc777;
• Game studios and content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi may receive a session token and anonymised player identifier to facilitate game delivery. These providers do not receive your full name, contact details or payment data;
• Legal and regulatory authorities: gc777 will disclose personal data to law enforcement, regulatory bodies or courts where required to do so by applicable law, a valid court order or a legitimate legal process;
• Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of gc777's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

8 Data Retention

gc777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with gc777, plus a minimum of five (5) years following account closure to satisfy anti-money-laundering record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC and identity verification documents: Retained for the duration of the account relationship plus five (5) years, or such longer period as required by applicable law;
• Customer support communications: Retained for three (3) years from the date of the communication, unless the communication relates to a dispute or legal claim, in which case it is retained until the matter is fully resolved;
• Marketing preferences and consent records: Retained for three (3) years from the date consent was given or withdrawn;
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless required for ongoing fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

9 Security Measures

gc777 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gc777 platform;
• Encrypted storage of personal data at rest using industry-standard algorithms;
• One-way cryptographic hashing of account passwords — gc777 staff cannot view your password in plain text;
• Role-based access controls limiting internal access to personal data to staff who require it to perform their duties;
• Regular internal security reviews and vulnerability assessments of the gc777 platform infrastructure;
• Incident response procedures for identifying, containing and notifying affected parties in the event of a data security incident.

While gc777 employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials secure and for notifying gc777 immediately at [email protected] if you suspect any unauthorised access to your account.

10 Cookies & Tracking Technologies

gc777 uses cookies and similar technologies on the gc777 platform to support core functionality, enhance user experience and gather anonymised analytics data. The following types of cookies are used:

• Essential cookies: Required for the platform to function, including session management, login state, and security tokens. These cannot be disabled without impairing core platform functionality;
• Functional cookies: Store your preferences such as language settings and display configurations to improve your experience on return visits;
• Analytics cookies: Collect anonymised and aggregated data about how players navigate the gc777 platform — such as pages visited, time on page and click patterns — to help gc777 improve platform design and performance. No individually identifiable data is shared with analytics providers;
• Security cookies: Support fraud detection and abuse prevention by recording device and session signals that help identify anomalous access patterns.

gc777 does not deploy third-party advertising or retargeting cookies. You may manage your cookie preferences through your browser settings. Disabling essential cookies may affect your ability to log in to and use the gc777 platform normally.

11 Your Rights

As a gc777 player, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data gc777 holds about you at any time. gc777 will respond to verified access requests within 30 days;
• Right to Rectification: If any personal data gc777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many details directly in your account settings;
• Right to Erasure: You may request that gc777 delete your personal data where there is no overriding legal obligation to retain it. Please note that anti-money-laundering regulations require gc777 to retain certain transaction and identity records for a minimum of five years after account closure, which may limit the scope of erasure that can be performed immediately;
• Right to Restriction: You may request that gc777 restrict the processing of your personal data in certain circumstances, for example while a dispute over data accuracy is being resolved;
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to gc777 in connection with your account;
• Right to Object: You may object to gc777's processing of your personal data on the basis of legitimate interests, and you may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected] or updating your account preferences.

To exercise any of the above rights, please contact gc777 at [email protected] with a clear description of your request. gc777 may ask you to verify your identity before processing the request to prevent unauthorised disclosure.

12 Minors

The gc777 platform is strictly for individuals aged 21 years and above. gc777 does not knowingly collect personal data from any person under the age of 21. If gc777 becomes aware that personal data has been collected from an individual under 21, that data will be deleted as promptly as possible and the associated account will be closed.

If you believe that gc777 may have inadvertently collected personal data from a person under the age of 21, please notify us immediately at [email protected] so that we may take appropriate action.

13 International Data Transfers

gc777 primarily stores and processes personal data on servers serving the Bangladesh market. In some cases, data may be transmitted to or processed by service providers operating in other countries — for example, internationally operating payment networks or game studio technology infrastructure. Where such transfers occur, gc777 ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

gc777 does not transfer personal data to third parties in jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual protections.

14 Policy Changes

gc777 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — meaning it affects how your data is used, who it is shared with, or your rights as a data subject — gc777 will provide advance notice via your registered email address or via an in-platform notification at least 14 days before the change takes effect.

The most current version of this Privacy Policy will always be available at gc777.io/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made. Continued use of the gc777 platform after a revised Policy takes effect constitutes acceptance of the revised terms.

15 Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or about how gc777 handles your personal data, please contact our data protection team. We aim to resolve all enquiries promptly and transparently.

Email: [email protected]

Support is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6). For responsible gaming support, self-exclusion requests or deposit limit adjustments, please also refer to the gc777 Responsible Gaming page.