gh777 Privacy Policy —
How We Protect Your Personal Data

1. Information We Collect

gh777 collects personal data from players in Bangladesh through several channels: directly when you register an account, when you make deposits or withdrawals, when you contact gh777 support, and automatically through your use of the gh777 platform. We collect only the data that is reasonably necessary to provide you with a safe, compliant, and high-quality gaming experience.

1.1 Registration Data

When you create a gh777 account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document
• Date of birth — to verify that you meet the 18+ age requirement
• Residential address — including district, city, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address — used for account communications, transaction confirmations, and support correspondence
• Mobile phone number — used for OTP verification and optional two-factor authentication
• Username and encrypted password — stored using industry-standard one-way hashing; gh777 staff cannot view your password in plain text

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is mandatory before processing any withdrawal — gh777 may request copies of the following documents:

• National Identity Card (NID) — front and back
• Valid passport (photo page)
• Birth certificate (where NID is unavailable)
• Proof of address document dated within the last three months (utility bill, bank statement)
• Proof of payment method ownership (screenshot of registered bKash/Nagad/Rocket account showing your name)

KYC documents are transmitted over encrypted connections, stored in an access-controlled document management system, and are accessible only to authorised gh777 compliance personnel and contracted KYC service providers. KYC documents are never shared with game providers, marketing partners, or other players.

1.3 Financial Transaction Data

gh777 records the following transaction metadata for every deposit and withdrawal processed through your account:

Full payment account numbers (e.g., complete bKash wallet numbers, full bank account numbers) are never stored on gh777 servers. Only partial masked references are retained for verification purposes.

1.4 Gameplay and Behavioural Data

gh777 automatically collects data relating to your activity on the platform. This includes games played, bet amounts, session durations, win/loss records, device type, operating system, browser version, and IP address. This data is used to personalise your gaming experience, detect problem gambling patterns for responsible gaming interventions, identify fraudulent activity, and improve platform performance. Gameplay data is linked to your account and is retained for the duration of your account plus a minimum five-year post-closure period.

1.5 Communications Data

When you contact gh777 support via email, live chat, or any other channel, we retain a record of that communication — including your query, the support agent's response, and any attachments submitted — for quality assurance, dispute resolution, and training purposes. Support records are retained for a minimum of three years.

2. How We Use Your Data

gh777 processes your personal data only for clearly defined, lawful purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which gh777 uses player data are as follows:

• Account management: Creating and maintaining your gh777 player account, verifying your identity and age eligibility, and managing your account settings and preferences.
• Service delivery: Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, and bank channels; crediting bonuses and promotional rewards; settling bets and game outcomes; and delivering customer support.
• Legal and regulatory compliance: Fulfilling anti-money laundering (AML) obligations, conducting KYC due diligence, responding to legally valid requests from regulatory authorities, and maintaining financial records as required by applicable Bangladeshi law.
• Security and fraud prevention: Detecting and investigating unauthorised account access, bonus abuse, multi-accounting, collusion, and other fraudulent or prohibited activities. gh777 uses automated monitoring systems and manual review processes for this purpose.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling and triggering responsible gaming interventions such as spending limit alerts, cool-off recommendations, and self-exclusion facilitation.
• Platform improvement: Analysing aggregate, anonymised gameplay and navigation data to understand how players use gh777, identify technical issues, and improve the overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and seasonal campaign communications (e.g., Eid promotions, BPL cricket betting offers) to players who have consented to receive marketing. You may withdraw consent at any time by emailing [email protected].

2.1 Legal Basis for Processing

gh777 processes your personal data on the following legal bases: (a) contract performance — processing is necessary to provide the services you have registered for; (b) legal obligation — processing is required to comply with applicable AML, KYC, and financial record-keeping laws; (c) legitimate interests — processing is necessary for fraud prevention, platform security, and responsible gaming monitoring; and (d) consent — for marketing communications and non-essential cookies, where you have given explicit, freely withdrawable consent.

3. Cookies & Tracking Technologies

gh777 uses cookies and similar tracking technologies on the gh777.bet website. A cookie is a small text file placed on your device by a website to store information about your session and preferences. gh777 uses the following categories of cookies:

3.1 Strictly Necessary Cookies

These cookies are essential for the gh777 platform to function correctly. They maintain your login session, remember your account state between page loads, and support security features such as CSRF protection. Strictly necessary cookies cannot be disabled without impairing the functionality of the platform. No consent is required for strictly necessary cookies as they are a prerequisite for the service.

3.2 Analytics Cookies

gh777 uses anonymised analytics cookies to understand how players navigate the platform — for example, which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is collected in aggregate and is not linked to any individual player's identity. Analytics data is used solely to improve the gh777 platform experience and is never shared with advertising networks.

3.3 Preference Cookies

Preference cookies remember your platform settings — such as your selected language, display preferences, and notification choices — so that you do not need to re-enter these settings on every visit. These cookies expire at the end of your browser session or after a defined period of inactivity.

3.4 Managing Cookies

You may manage or disable non-essential cookies at any time through your browser's settings. Instructions for managing cookies are available in the help documentation for all major browsers including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari. Please note that disabling cookies may affect the functionality of certain gh777 platform features, including staying logged in between sessions.

4. Data Sharing & Third Parties

gh777 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. gh777 shares player data only in the following limited and controlled circumstances:

4.1 Service Providers

gh777 engages contracted third-party service providers to support the operation of the platform. These providers process player data strictly on gh777's behalf and under gh777's instructions, subject to data processing agreements that prohibit any use of your data beyond the specific service being delivered. Categories of service providers include:

• KYC and identity verification providers — to verify your identity, age, and document authenticity during the account verification process.
• Payment processing partners — including the regulated operators of bKash, Nagad, Rocket, Upay, and banking channels, who receive the minimum transaction data necessary to process your deposit or withdrawal in BDT.
• Game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and anonymised player identifier to facilitate gameplay. They do not receive your full name, NID, or payment details.
• Platform hosting and cloud infrastructure providers — who store gh777 platform data in secure, access-controlled data centres.
• Analytics and fraud detection providers — who process anonymised or pseudonymised behavioural data to help gh777 identify technical issues and suspicious account activity.

4.2 Legal Disclosures

gh777 may disclose your personal data to competent authorities — including law enforcement agencies, financial regulators, and courts — where gh777 is required to do so by a legally valid order, warrant, or statutory obligation. In such cases, gh777 will disclose only the data that is strictly required to satisfy the legal obligation and will, where permitted by law, notify the affected player of the disclosure request.

4.3 Business Transfers

In the event that gh777's business or a material part of its assets is acquired by, merged with, or transferred to another entity, player data held by gh777 may form part of the transferred assets. In such an event, gh777 will notify affected players via their registered email address no less than 30 days prior to any such transfer, and will ensure that the receiving entity commits to privacy standards at least equivalent to those in this Policy.

5. Data Retention & Storage

gh777 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (registration details, KYC documents, gameplay history): Retained for the full duration of your active gh777 account.
• Post-closure account data: Following account closure — whether initiated by you or by gh777 — core account and transaction records are retained for a minimum of five years to satisfy financial record-keeping and AML obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each individual transaction in line with standard financial record-keeping requirements.
• Support communications: Retained for a minimum of three years for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of consent plus three years post-withdrawal as evidence of the consent lifecycle.
• Analytics data: Anonymised aggregate analytics data is retained indefinitely for platform improvement purposes. Pseudonymised behavioural data linked to an account is deleted within 90 days of account closure.

All gh777 player data is stored on servers located within secure, certified data centres. Data in transit is protected by TLS 1.2 or higher. Data at rest is encrypted using AES-256 standard encryption. Access to stored personal data is restricted to authorised gh777 personnel and contracted service providers on a strict need-to-know basis. All access events are logged and periodically audited.

6. Security Measures

gh777 takes the security of your personal data seriously. We implement a layered approach to information security that combines technical, organisational, and procedural controls to protect player data against unauthorised access, alteration, disclosure, or destruction.

6.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and gh777's servers.
• AES-256 encryption at rest for all stored personal data, KYC documents, and financial records.
• Bcrypt password hashing — player passwords are stored as one-way cryptographic hashes; no gh777 system or employee can retrieve your password in plain text.
• OTP two-factor authentication — available to all players and strongly recommended for accounts that process regular BDT deposits and withdrawals via bKash, Nagad, or Rocket.
• Automated intrusion detection and rate limiting to identify and block brute-force login attempts and other suspicious access patterns in real time.
• Firewalls and network segmentation to isolate sensitive data stores from public-facing application layers.

6.2 Organisational Safeguards

Access to player personal data within gh777's organisation is governed by a strict role-based access control (RBAC) policy. Employees access only the data required to perform their specific job function. All personnel with access to personal data undergo privacy and security training. Third-party service providers are subject to contractual data processing obligations and are periodically assessed for compliance.

6.3 Reporting a Security Concern

If you believe your gh777 account has been accessed without your authorisation, or if you identify a potential security vulnerability on the gh777 platform, please contact gh777 immediately at [email protected]. gh777's security team responds to all reported incidents within 24 hours Bangladesh Standard Time (BST, UTC+6). gh777 will take prompt and appropriate action to secure the affected account and investigate the incident.

7. Your Privacy Rights

As a gh777 player in Bangladesh, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. gh777 will acknowledge your request within 48 hours and respond substantively within 14 calendar days. Requests that are manifestly complex or voluminous may take up to 30 days, in which case gh777 will notify you of the extended timeframe.

• Right of Access: You have the right to request a copy of the personal data gh777 holds about you. gh777 will provide this in a structured, readable format within 14 days of a verified request. A reasonable administrative fee may apply for repeat or excessive access requests.
• Right to Rectification: If any personal data gh777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., address updates) can be made directly through your account settings. Changes to identity-critical fields (e.g., legal name, date of birth) require supporting documentation.
• Right to Erasure: You may request that gh777 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Please note that gh777 is legally required to retain certain financial and AML records for a minimum of five to seven years following account closure; this obligation overrides erasure requests for those specific data categories.
• Right to Restrict Processing: You may request that gh777 pause processing of your personal data while a dispute is being resolved — for example, if you have contested the accuracy of data we hold.
• Right to Data Portability: Where gh777 processes your data on the basis of consent or contract, you may request a machine-readable export of the personal data you have provided to gh777 directly (e.g., registration details, preference settings).
• Right to Withdraw Marketing Consent: You may withdraw your consent to receive gh777 marketing communications at any time by emailing [email protected] with the subject line "Unsubscribe from Marketing". Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect service-critical communications such as transaction confirmations, account security alerts, or KYC requests.
• Right to Lodge a Complaint: If you are dissatisfied with gh777's handling of your personal data or the response to a privacy rights request, you have the right to escalate your complaint to gh777's senior compliance team by emailing [email protected] with the subject line "Privacy Complaint — Escalation". gh777 will respond to escalated complaints within seven business days (BST).

8. Changes to This Policy

gh777 reviews this Privacy Policy periodically and may update it to reflect changes in the services we offer, the data we process, applicable legal requirements, or industry best practices. When material changes are made to this Policy, gh777 will:

• Publish the revised Privacy Policy on this page at https://gh777.bet/privacy-policy with an updated effective date at the top of the document.
• Send a notification to the email address registered to your gh777 account no less than 14 days before the revised Policy takes effect, summarising the key changes.
• Where a change materially affects the way gh777 uses your personal data in a manner that requires fresh consent, gh777 will request that consent explicitly before the new processing begins.

Non-material changes — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made at any time without advance notice, though the effective date on this page will always be updated to reflect the most recent revision.

We encourage all gh777 players to review this Privacy Policy periodically. Your continued use of the gh777 platform following the publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you must stop using the gh777 platform and may request account closure by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or gh777's data practices, please contact our support team at [email protected]. gh777 support is available 24 hours a day, seven days a week, including all Bangladeshi public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March). Email responses are typically delivered within 2–6 hours Bangladesh Standard Time (BST, UTC+6).