Your Privacy at 6c77

Section 1

Introduction

6c77 ("the Platform", "we", "us", "our") is an online casino and sports betting platform serving players in Bangladesh. We are committed to protecting the personal data of every individual who uses our services, visits our website, or interacts with our customer support team. This Privacy Policy ("Policy") sets out the full scope of our data collection, processing, storage, and sharing practices in clear, formal English.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are published on the 6c77 platform. Collectively, these documents define the full framework governing your relationship with 6c77. In the event of any conflict between this Policy and the Terms and Conditions on a matter of data privacy, this Policy shall prevail.

We review and update this Policy periodically to reflect changes in our data processing activities, applicable legal requirements, or the services we provide. The effective date shown at the top of this document reflects the most recent revision. We will notify registered players of any material changes to this Policy via email or in-platform notification prior to the change taking effect.

Section 2

Data Controller

For the purposes of applicable data protection law, 6c77 is the data controller responsible for the personal data you provide when registering an account, making deposits or withdrawals, placing wagers, contacting support, or otherwise using the 6c77 platform. As the data controller, 6c77 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to how 6c77 handles your personal data, you may contact our Data Protection team at any time. Contact details are provided in Section 14 of this Policy.

Section 3

Data We Collect

6c77 collects personal data from you through several channels, including your account registration form, KYC verification submissions, payment transactions, gameplay activity, and direct communications with our support team. The categories of personal data we collect are described below.

3.1 Identity & Registration Data

• Full legal name as it appears on your official identity document
• Date of birth (for age verification purposes)
• Residential address, including city, district, and postcode
• Email address and mobile phone number
• Username and encrypted password credentials
• Profile photograph or avatar (if voluntarily uploaded)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (National Identity Card, Passport, or Birth Certificate)
• Proof of address documentation (utility bills, bank statements)
• Source-of-funds documentation where requested during enhanced due diligence
• Biometric verification data where required by our third-party KYC provider

3.3 Financial & Transaction Data

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay)
• Bank account details for bank transfer transactions (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank)
• Deposit and withdrawal amounts, dates, and reference numbers
• Transaction history and account balance records

3.4 Gameplay & Betting Data

• Betting history, wager amounts, game session durations, and game outcomes
• Sports betting selections, odds accepted, and settlement records
• Bonus activations, wagering progress, and promotional participation records
• Responsible gaming tool usage (deposit limits set, self-exclusion periods applied)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type, and version
• Session timestamps, login history, and platform access logs
• Cookies and similar tracking technologies (see Section 7)

3.6 Communications Data

• Live chat transcripts between you and the 6c77 support team
• Email correspondence relating to your account, complaints, or queries
• Records of responsible gaming requests or self-exclusion applications

Section 4

How We Use Your Data

6c77 uses the personal data we collect for the following purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or as otherwise required by applicable law.

Where 6c77 wishes to use your data for a purpose not listed in the table above, we will contact you in advance with a clear explanation of the new purpose and obtain your explicit consent before proceeding. You retain the right to withdraw any consent given at any time, as described in Section 10.

Section 5

Legal Basis for Processing

Every instance of personal data processing carried out by 6c77 is grounded in one or more of the following legal bases:

• Contractual necessity: Processing is required to enter into or fulfil our obligations under the account registration agreement and Terms and Conditions — for example, verifying your identity, processing payments, and delivering gaming services.
• Legal obligation: Processing is required to comply with applicable laws and regulatory requirements, including anti-money laundering obligations, age verification mandates, and fraud prevention duties.
• Legitimate interests: Processing is necessary for the legitimate interests of 6c77, including platform security, fraud prevention, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — for example, sending you marketing communications about promotions and new game launches — we will first obtain your explicit, freely given, informed, and specific consent. You may withdraw consent at any time by contacting our support team or updating your account notification preferences.

Section 6

Data Sharing & Third Parties

6.1 What We Do Not Do. 6c77 does not sell, rent, trade, or commercially exploit your personal data to any third party. Your personal data is not shared with advertisers, data brokers, or any other party for their own independent commercial purposes.

6.2 Service Providers. 6c77 works with a limited number of carefully selected third-party service providers who process your data strictly on our behalf and only to the extent necessary to deliver the services we have contracted them for. These providers include:

• KYC and identity verification providers — to confirm your identity and age before withdrawal processing
• Payment processing partners — including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners — to facilitate deposits and withdrawals
• Game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may receive your session and gameplay data to deliver their game products
• Customer support platform providers — to operate our live chat and email support infrastructure
• Fraud detection and cybersecurity providers — to protect the platform and your account from unauthorised access and financial crime
• Cloud infrastructure and hosting providers — to store platform data securely

All third-party service providers engaged by 6c77 are bound by contractual data processing agreements that require them to maintain the confidentiality and security of your personal data and prohibit any use of your data beyond the specific purposes for which it was shared.

6.3 Legal and Regulatory Disclosure. 6c77 may be required by applicable law, court order, or regulatory directive to disclose your personal data to relevant authorities. We will comply with any such lawful requirement. Where permitted by law, we will make reasonable efforts to notify you of any such compelled disclosure before it occurs.

6.4 Business Transfers. In the event that 6c77 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data will be handled as a result.

Section 7

Cookies & Tracking Technologies

The 6c77 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file stored on your device by your web browser when you visit a website. 6c77 uses the following categories of cookies:

• Essential cookies: Required for core platform functionality, including maintaining your logged-in session, storing your account preferences, and securing your account against session hijacking. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate and interact with the 6c77 platform, including page visit frequency, session duration, and feature usage patterns. This data is used solely to improve platform performance and user experience.
• Functional cookies: Used to remember your preferences — such as your preferred language, currency display, and notification settings — so that you do not need to re-enter them on each visit.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect your account from unauthorised access attempts.

6c77 does not use third-party advertising cookies or behavioural tracking cookies that share your browsing data with external advertisers. You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use the platform.

Section 8

Data Retention

6c77 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or for as long as required by applicable legal and regulatory obligations — whichever is the longer period. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial and transaction data: Retained for a minimum of five years from the date of each transaction, as required for financial compliance and audit purposes.
• KYC documentation: Retained for a minimum of five years from the date of verification or from account closure, whichever is later.
• Gameplay and betting records: Retained for a minimum of three years from the date of each activity, for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for a minimum of two years from the date of the interaction, or longer where relevant to an open complaint or investigation.
• Technical and device data: Typically retained for 12 months from collection, unless required for longer in connection with a fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. Where data has been anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

Section 9

Data Security

6c77 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 6c77 platform, ensuring that your personal and financial information cannot be intercepted during transit.
• Encrypted storage of all sensitive data at rest, including identity documents, financial records, and account credentials.
• Hashed and salted password storage — your account password is never stored in plain text. Even in the event of a data breach, your password cannot be recovered from our stored records.
• Two-factor authentication (2FA) via SMS OTP, available to all registered players and strongly recommended for all accounts.
• Role-based access controls within the 6c77 organisation, ensuring that employee access to player data is limited strictly to those personnel who require it for legitimate operational purposes.
• Regular security audits and penetration testing conducted by independent cybersecurity specialists.
• 24/7 security monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data exfiltration indicators.

While 6c77 implements industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your 6c77 account, enable two-factor authentication, and contact our support team immediately if you suspect any unauthorised access to your account.

Section 10

Your Rights

As a data subject, you hold the following rights in relation to the personal data held by 6c77. To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to all valid data subject requests within 30 calendar days of receipt.

• Right of access: You have the right to request a copy of all personal data that 6c77 holds about you. We will provide this in a clear, readable format within the statutory response period.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing was unlawful. This right is subject to our legal and regulatory data retention obligations, which may prevent full erasure of certain records.
• Right to restriction of processing: You have the right to request that we restrict our processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while a legitimate interest objection is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where it is based on legitimate interests, including profiling. You also have an absolute right to object to the use of your data for direct marketing purposes, which we will honour without requiring justification.
• Right to withdraw consent: Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Section 11

Children's Privacy

The 6c77 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If you are under 21, you must not register an account, make a deposit, or use any service on the 6c77 platform.

If 6c77 becomes aware — through KYC verification, a parental notification, or any other means — that an account has been registered by or is being used by an individual under the age of 21, we will immediately suspend that account, cancel any associated balances derived from wagers, and securely delete all personal data associated with that account to the fullest extent permitted by our legal obligations.

Parents and guardians who believe that a minor may have accessed the 6c77 platform or registered an account are urged to contact our support team immediately at [email protected]. We will investigate all such reports as a high-priority matter and take immediate remedial action.

Section 12

International Data Transfers

6c77 operates primarily within Bangladesh and directs its services at Bangladeshi players. Some of our third-party service providers — including cloud infrastructure partners, game software providers, and KYC verification services — may process your personal data on servers located outside of Bangladesh. Where such international transfers occur, 6c77 ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those described in this Policy.

By registering an account and using the 6c77 platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Bangladesh as part of our service delivery infrastructure. In all cases, such transfers are subject to the security and confidentiality obligations described in this Policy and in our contractual agreements with service providers.

Section 13

Policy Updates

6c77 reviews this Privacy Policy periodically and will update it as necessary to reflect changes in our data processing activities, our service offering, or applicable legal and regulatory requirements. The effective date shown at the top of this document will be updated with each revision.

Where a material change is made — meaning a change that could meaningfully affect your privacy rights or how your data is used — we will notify registered players via email and/or in-platform notification at least 14 days prior to the change taking effect. For non-material updates (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), we may update this document without prior notice.

Your continued use of the 6c77 platform following the effective date of any revised Privacy Policy constitutes acceptance of the updated Policy. If you do not accept the revised terms, you may request account closure in accordance with the Terms and Conditions before the change takes effect.

Section 14

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, want to raise a data-related complaint, or need to report a suspected privacy breach, please contact the 6c77 Data Protection team using the channels below. All data-related enquiries are treated with strict confidentiality.

• Live Chat: Available 24/7 directly on the 6c77 platform — average response time 2 to 5 minutes
• Email: [email protected] — formal data subject requests should include "Privacy Request" in the subject line

We aim to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response to formal data subject access requests within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.