uk77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how uk77 ("uk77", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with your use of the uk77 website located at https://uk77.io and all associated services, mobile-optimised pages, and features (collectively, the "Platform"). This Policy forms part of and should be read together with uk77's Terms & Conditions.

uk77 is committed to protecting the privacy and security of every player who accesses the Platform. We handle all personal data with care, transparency, and in accordance with recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

By registering an account on the uk77 Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the practices described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately and contact [email protected] to close your account.

2 Personal Data We Collect

uk77 collects personal data from players in the following categories. We collect only the minimum data necessary for the specific purpose described alongside each category.

We do not collect special categories of sensitive personal data (such as racial origin, political opinions, religious beliefs, health data, or biometric data) unless you voluntarily provide such information in the context of a responsible gaming support request, in which case it is handled with the highest level of protection and used solely for the purpose of providing that support.

3 How We Collect Your Data

uk77 collects personal data through the following mechanisms:

• Direct Collection: Information you provide when completing the registration form, submitting KYC documents, using the cashier, contacting support, or responding to surveys and promotions.
• Automated Technical Collection: Data gathered automatically when you visit the Platform, including via cookies, web beacons, server logs, and session tracking technologies. This includes your IP address, device identifiers, and browsing behaviour on the Platform.
• Payment Processing Partners: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi bank partner, those providers may share transaction reference data with us to confirm and reconcile your payment. We do not receive full card or wallet credentials from these providers — only the reference data necessary to confirm the transaction.
• KYC and Identity Verification Services: Where we engage a third-party identity verification service to assist with document checking, that provider may return a verified status, risk score, or extracted document data to us in order to complete your KYC assessment.
• Fraud Detection Systems: Automated systems may analyse patterns in your usage data, device fingerprint, and IP history to detect suspicious activity. These systems do not make binding decisions about your account independently — a human review is always conducted before any account action is taken.

4 Purpose of Processing

uk77 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was collected without obtaining your explicit prior consent.

• Account Management: To create, maintain, and administer your uk77 player account, including verifying your identity at registration and during ongoing use of the Platform.
• KYC and Age Verification: To comply with our obligation to verify that all players are aged 21 or above and to confirm the identity of players before processing withdrawal requests, in line with responsible gaming and anti-fraud standards.
• Payment Processing: To process deposits received from and withdrawals sent to your registered payment methods (bKash, Nagad, Rocket, Upay, bank accounts), and to maintain accurate financial records of all transactions on your account.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct that could harm the integrity of the Platform or other players.
• Responsible Gaming: To monitor player behaviour patterns that may indicate problem gambling and to apply responsible gaming tools (deposit limits, self-exclusion) correctly and promptly when requested.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email.
• Marketing Communications: Where you have opted in to receive marketing materials, to send you information about promotions, bonuses, and platform updates that may be of interest to you. You may opt out at any time by contacting [email protected].
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the Platform's design, performance, game selection, and user experience. No individual player is identified in these analytical processes.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from competent authorities, and enforce our Terms & Conditions.

5 Legal Basis for Processing

uk77 relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing that is necessary to perform the contract between you and uk77 — specifically, operating your account, processing payments, and providing the betting and gaming services you have signed up for.
• Legitimate Interests: Processing carried out for the legitimate interests of uk77 or third parties, provided those interests are not overridden by your rights. This includes fraud prevention, Platform security, internal analytics, and responsible gaming monitoring.
• Legal Obligation: Processing required to comply with applicable legal obligations, including age verification, anti-money laundering checks, and cooperation with competent authorities upon lawful request.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications and for the processing of any sensitive data you voluntarily provide in a responsible gaming context. You may withdraw consent at any time without detriment to your account by writing to [email protected].

6 Data Sharing and Disclosure

uk77 does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and only to the extent strictly necessary:

• Payment Service Providers: We share transaction reference data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, Dutch-Bangla Bank, and Sonali Bank solely to initiate and confirm deposit and withdrawal transactions on your account.
• Identity Verification Providers: Where we engage a third-party KYC or identity verification service, your identity documents and personal details may be transmitted to that provider's secure processing environment for the purpose of document authentication. These providers are bound by strict data processing agreements.
• Fraud Prevention and Risk Management Services: Aggregated risk signals (not your full identity) may be shared with specialist anti-fraud and anti-money-laundering screening tools to assess transaction risk. These services do not receive your full player profile.
• Technology and Hosting Partners: uk77 uses secure cloud infrastructure and software providers to host the Platform and process data. These providers act as data processors on our behalf, are bound by data processing agreements, and are not permitted to use your data for their own purposes.
• Game Software Providers: Certain game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token or anonymised player identifier to facilitate your participation in their games hosted on the Platform. These providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities: uk77 may disclose your personal data to law enforcement agencies, courts, or other competent authorities where we are required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of uk77, our players, or the public.

Any third party with whom uk77 shares data is required to handle it in accordance with applicable data protection principles and is prohibited from using it for any purpose beyond the specific, agreed purpose for which it was shared.

7 Data Retention

uk77 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal obligations that require a longer retention period. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following permanent account closure, to satisfy anti-money laundering record-keeping obligations and to support dispute resolution.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction to comply with financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following the completion of verification, or for the full duration of your account and five years thereafter, whichever is longer.
• Communication Data (Support Chats and Emails): Retained for two (2) years from the date of the last communication in a support thread, to allow us to reference prior context in follow-up enquiries.
• Technical and Usage Data: Retained in identifiable form for up to twelve (12) months, after which it is anonymised and may be retained in aggregated form indefinitely for analytical purposes.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Responsible Gaming Records: Self-exclusion and limit-setting records are retained for the full duration of the exclusion or limit period plus five (5) years, to prevent circumvention.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised using industry-standard methods. You may request early deletion of certain categories of data subject to the conditions set out in Section 10 (Your Rights).

8 Cookies and Tracking Technologies

uk77 uses cookies and similar tracking technologies (including web beacons and local storage objects) on the Platform. Cookies are small text files placed on your device when you visit a website. They allow the Platform to recognise your device across sessions, remember your preferences, keep you securely logged in, and collect usage analytics.

uk77 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-viewed games to personalise your experience. Disabling these may reduce Platform convenience but will not prevent basic access.
• Analytical Cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where players drop off, and how long sessions last. This data is used exclusively to improve Platform performance and user experience. Individual players are not identified in analytical reports.
• Security and Fraud-Detection Cookies: Assist our fraud prevention systems in identifying unusual device or session patterns that may indicate account takeover attempts or automated bot activity.

uk77 does not use advertising cookies or retargeting pixels that track your browsing activity across third-party websites. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

9 Data Security

uk77 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the uk77 Platform is encrypted using industry-standard TLS 1.2 or higher encryption protocols. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data Encryption at Rest: Sensitive data including KYC documents, financial records, and authentication credentials are encrypted at rest using AES-256 encryption within our secure cloud infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. uk77 employees and contractors are granted only the minimum level of access required to perform their specific role. All access events are logged and reviewed.
• Password Security: Player passwords are stored as salted cryptographic hashes. uk77 staff cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data flows. Alerts trigger immediate investigation by our security team.
• Penetration Testing: uk77 conducts periodic security assessments and penetration tests of the Platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that affects your personal data, uk77 will notify affected players promptly and take all reasonable steps to contain and remediate the breach. Notifications will be sent to your registered email address.

While uk77 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your own login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10 Your Data Rights

As a player on the uk77 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "DATA RIGHTS REQUEST". uk77 will acknowledge your request within two (2) business days and respond in full within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of all personal data that uk77 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data held by uk77 that is inaccurate or incomplete. Account details (name, address, contact information) may be updated directly through your account settings for minor corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that uk77 is not required to delete data where retention is mandated by law (e.g., financial records subject to anti-money laundering retention requirements).
• Right to Restriction of Processing: You may request that uk77 suspend processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: You may request that uk77 provide your personal data (data you provided directly to us) in a structured, commonly used, machine-readable format, suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud prevention purposes. uk77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right Not to be Subject to Automated Decision-Making: uk77 does not make binding decisions about your account solely on the basis of automated processing without human review. If any automated assessment is used as part of a process that affects your account, you have the right to request human review of that decision.

11 Third-Party Links and Services

The uk77 Platform may contain references to or integrations with third-party game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose game clients are served within the Platform environment. While uk77 takes reasonable steps to ensure that third-party game providers maintain appropriate security and data protection standards, uk77 is not responsible for the privacy practices of these third parties in respect of data they independently collect within their own game client environments.

The uk77 Platform does not contain links to external third-party websites or applications beyond those required to facilitate gameplay and payments. If you navigate away from the uk77 domain to any external site, this Policy no longer applies and uk77 accepts no responsibility for the privacy or data handling practices of that external site.

12 Children and Minors

The uk77 Platform is strictly for adults aged 21 years and above. uk77 does not knowingly collect personal data from any person under the age of 21. Age verification checks are applied at registration and may be repeated at any time during the account lifecycle. If uk77 discovers that personal data has been collected from a person who is under the age of 21, that account will be immediately suspended, all associated data will be deleted (subject to any legally mandated retention periods), and any funds in the account will be returned to the source payment method after investigation.

If you are a parent or guardian and believe that a minor in your care has created a uk77 account or submitted personal data to the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 Changes to This Policy

uk77 reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, updates to our data processing practices, or improvements to our security programme. When material changes are made to this Policy, uk77 will notify registered players via email to the address on file and/or by displaying a prominent notice on the Platform for a minimum of seven (7) days prior to the revised Policy taking effect.

The effective date at the top of this document indicates when the current version of the Policy came into force. The most recent version of this Policy is always accessible via the Privacy Policy link in the footer of every uk77 page. Continued use of the Platform following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with the revised Policy, please cease using the Platform and contact [email protected] to close your account before the revised Policy takes effect.

14 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how uk77 handles your personal data, please reach out to our dedicated data protection team using the contact details below. All privacy-related communications are handled in English and are treated as strictly confidential.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "DATA RIGHTS REQUEST"
• Subject Line for Privacy Complaints: "PRIVACY COMPLAINT"
• Response Target: Acknowledgement within 2 business days; full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, including Bangladeshi public holidays
• Response Language: English

uk77 takes all privacy-related enquiries and complaints seriously. Where a complaint cannot be resolved to your satisfaction through direct contact with our support team, you retain the right to escalate the matter to a competent supervisory authority or dispute resolution body with jurisdiction over the matter.