ev77 Privacy Policy

The data controller responsible for the personal data of ev77 Platform users is the ev77 operating entity, accessible at ev77.onl. For the purposes of this Privacy Policy, "ev77", "we", "us", and "our" refer to this entity and its authorised operators.

As data controller, ev77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently, in accordance with applicable data protection principles.

All data-related queries, access requests, correction requests, and deletion requests should be directed to the ev77 support team at [email protected]. We aim to respond to all data-related requests within 30 calendar days.

ev77 collects personal data in several categories depending on how you interact with the Platform. The following table sets out the categories of personal data ev77 may hold about you:

ev77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where strictly required for identity verification purposes and with your explicit consent.

ev77 collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when creating your account, completing KYC verification, making deposits or withdrawals, placing bets, participating in promotions, or contacting our support team.
• Automated technical collection: When you visit or use the ev77 Platform, our servers automatically log technical data including your IP address, device identifiers, browser fingerprint, session timestamps, and interaction events. This collection occurs via server logs, cookies, and similar tracking technologies.
• Payment providers: When you make a deposit or withdrawal using bKash, Nagad, Rocket, Upay, or a bank partner, the relevant payment provider may share transaction confirmation data with ev77 to verify the transaction and credit or debit your account accordingly.
• KYC and identity verification partners: ev77 may use authorised third-party identity verification services to cross-check the documents you submit during the KYC process. These services return a verification outcome to ev77; they do not retain your documents independently.
• Fraud prevention and security tools: ev77 uses automated fraud detection systems that analyse usage patterns, login behaviour, and financial transactions to identify potential security threats or policy violations. These systems generate risk scores that inform our review processes.
• Publicly available sources: In limited circumstances, ev77 may verify identity information against publicly available records, such as publicly accessible government databases, to confirm the accuracy of information you have provided.

ev77 processes your personal data only where there is a lawful basis to do so. The following table sets out our primary processing purposes and the corresponding legal basis for each:

ev77 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Data is shared externally only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the data they independently hold.
• KYC and identity verification providers: Authorised identity verification partners receive the documents you submit during the KYC process in order to return a verification outcome to ev77. These partners are contractually bound to process your data solely for verification purposes and to delete or return documents upon completion.
• Fraud prevention and security services: ev77 works with third-party fraud detection and cybersecurity providers who process technical and behavioural data to identify threats, suspicious patterns, and policy violations. These services do not receive unnecessary personal data.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and other licensed game studios may receive anonymised session data to facilitate game delivery and resolve technical disputes. They do not receive your identity or financial data directly.
• Legal and regulatory authorities: ev77 may disclose personal data to law enforcement agencies, government authorities, or regulatory bodies where required by law, court order, or where ev77 has a reasonable belief that disclosure is necessary to prevent crime or protect ev77's legal rights.
• Business transfers: In the event of a merger, acquisition, or sale of ev77's business or assets, personal data held by ev77 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom ev77 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

ev77 retains personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by applicable law, whichever is longer. The following retention periods apply to key data categories:

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised in a manner that prevents reconstruction. Anonymised data may be retained for analytical or statistical purposes without time limit, as it can no longer be linked to an identifiable individual.

ev77 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and the ev77 Platform, protecting data in transit from interception.
• AES-256 encryption at rest is applied to sensitive personal data and financial records stored on ev77's servers.
• Role-based access control (RBAC) ensures that ev77 employees can only access the personal data necessary for their specific role. Access to sensitive data is logged and audited.
• Multi-factor authentication (MFA) is available to all registered players and is required for all ev77 administrative personnel who handle personal data.
• Regular security audits and penetration testing are conducted by qualified third-party security professionals to identify and remediate vulnerabilities in the Platform's infrastructure.
• Intrusion detection systems monitor the Platform continuously for suspicious activity, unauthorised access attempts, and anomalous traffic patterns.
• Incident response plan: In the event of a personal data breach, ev77 will assess the breach, contain it, and notify affected users and relevant authorities within 72 hours of discovery where there is a risk of harm to individuals.

ev77 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, and analyse how the Platform is used. The following categories of cookies are used:

ev77 does not use third-party advertising or social media tracking cookies. No data collected via ev77 cookies is shared with advertising networks or social media platforms.

Most web browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will impair the Platform's core functionality, including the ability to log in and place bets. Analytical and functional cookies can be disabled without affecting core functionality, though some personalisation features may be reduced.

As a data subject, you hold the following rights in relation to the personal data ev77 holds about you. To exercise any of these rights, submit a written request to [email protected] with sufficient detail to identify your account and the right you wish to exercise.

The ev77 Platform is strictly intended for adults aged 21 years and above. ev77 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

As part of the account registration and KYC verification process, ev77 requires all users to confirm their date of birth and to provide government-issued identity documentation confirming they are of legal age. Accounts where age verification cannot be completed to ev77's satisfaction will be suspended pending verification.

If ev77 discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, ev77 will:

• Immediately suspend the associated account;
• Void any bets placed from that account and return deposited funds to the verified payment method where possible;
• Securely delete the personal data of the minor as soon as practicable, subject to any legal obligations that require retention of records relating to the breach.

If you are a parent or guardian and believe that your child has registered on ev77 without your knowledge, please contact our support team immediately at [email protected] so that we can take prompt action.

ev77 serves players primarily in Bangladesh. Some of the third-party service providers ev77 works with — including KYC verification partners, game studio providers, and fraud prevention services — may be based outside Bangladesh and may process your personal data in countries other than Bangladesh.

Where personal data is transferred internationally, ev77 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Bangladesh. These safeguards may include:

• Contractual clauses requiring the recipient to protect your data to the same standard as ev77;
• Transfers only to countries or organisations that maintain recognised data protection standards;
• Binding corporate rules where the recipient is part of the same corporate group as ev77.

By using the ev77 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section. ev77 will always ensure such transfers are subject to appropriate protections consistent with this Privacy Policy.

ev77 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be necessary to reflect updates to the Platform's features, changes in applicable law, or improvements to ev77's data handling practices.

When material changes are made to this Privacy Policy, ev77 will notify registered users through one or more of the following channels:

• An in-account notification displayed upon your next login;
• An email notification to the address registered on your account;
• A prominent notice posted on the ev77.onl website.

The "Effective Date" displayed at the top of this Privacy Policy will be updated to reflect the date on which the current version came into force. We encourage you to review this policy periodically to stay informed about how ev77 protects your personal data.

Continued use of the ev77 Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account and cease using the Platform. To close your account, contact our support team at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to ev77's handling of your personal data, please contact us through any of the following channels:

• Email: [email protected] — for all data rights requests, privacy queries, and complaints. Please include your registered username and a clear description of your request.
• Live Chat: Available 24/7 inside your ev77 account. Live chat is best suited for urgent account-related data concerns.
• Platform: ev77.onl — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all of Bangladesh (Bangladesh Standard Time, UTC+6).

ev77 is committed to resolving all privacy-related concerns promptly and fairly. We aim to acknowledge all written requests within 5 business days and to provide a full response within 30 calendar days.