na77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how na77 ("na77", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the na77 online casino and sports betting platform available at https://na77.io and any associated mobile or web applications.

na77 is committed to protecting the privacy and personal data of all players, particularly those based across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy explains your rights, our obligations, and the specific ways in which your information is handled throughout your relationship with na77.

By registering an account, making a deposit, or using any feature of the na77 platform, you acknowledge that you have read this Privacy Policy in full and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the na77 platform.

This Privacy Policy is incorporated by reference into the na77 Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions on a matter relating specifically to personal data, this Privacy Policy shall prevail.

2 Personal Data We Collect

na77 collects personal data through several channels: directly from you when you register or use the platform, automatically through your device and browser when you access the site, and from third-party verification and payment providers in the course of processing your transactions.

The categories of personal data we collect are described in the table below:

3 How We Use Your Personal Data

na77 uses your personal data for the specific purposes listed below. We do not use your data for any purpose that is incompatible with those originally disclosed at the time of collection.

• Account management: Creating and maintaining your player account, processing your registration, authenticating your identity at login, and enabling all platform features available to registered players.
• Payment processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and banking partners; verifying that the payment method belongs to you; detecting and preventing fraudulent transactions.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity you have provided is accurate, as required for responsible gaming compliance.
• Legal and regulatory compliance: Meeting anti-money-laundering (AML) obligations, conducting Know Your Customer (KYC) checks, responding to lawful requests from competent authorities, and maintaining records as required by applicable law.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and following up on responsible gaming requests such as self-exclusion or deposit limit changes.
• Platform security: Detecting and preventing fraud, cheating, account takeovers, multi-accounting, bot usage, and other prohibited conduct described in the na77 Terms and Conditions.
• Platform improvement: Analysing aggregate usage data to improve game performance, identify technical issues, and enhance the overall player experience on na77.
• Responsible gaming: Monitoring player activity for signs of problem gambling behaviour and making responsible gaming tools available, including deposit limits, session reminders, and self-exclusion, in accordance with our Responsible Gaming Policy.
• Marketing communications: Where you have given explicit consent, sending you promotional communications about na77 offers, bonuses, and seasonal events such as BPL, Eid, IPL, Pohela Boishakh, and Victory Day promotions. You may withdraw this consent at any time by contacting support.

4 Legal Basis for Processing

na77 processes your personal data on one or more of the following lawful bases, depending on the specific purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and na77 — specifically, to operate your account, process your bets, and pay out your winnings.
• Legal obligation: Processing required to comply with applicable legal requirements, including AML/KYC obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for na77's legitimate business interests, such as fraud prevention, platform security, and aggregate analytics — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time by contacting [email protected] without affecting the lawfulness of processing conducted prior to withdrawal.

5 Sharing Your Personal Data

na77 does not sell, rent, or disclose your personal data to third parties for commercial marketing purposes. We may share your personal data with trusted third-party service providers and partners only where necessary to deliver our services or comply with legal obligations.

The categories of third parties with whom na77 may share your data, and the purposes for doing so, are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the payment and identity data necessary to process your deposits and withdrawals. These providers are contractually bound to use your data only for payment processing.
• Identity verification providers: Third-party KYC and AML verification services receive your identity documents and biometric data for the sole purpose of confirming your identity and age in accordance with responsible gaming obligations.
• Game studio providers: Live dealer and RNG game providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive session and gameplay data necessary to operate their games within the na77 platform. These providers process data under their own privacy policies and data processing agreements with na77.
• IT infrastructure and hosting providers: Cloud hosting and server management providers who store na77 platform data under strict confidentiality and security obligations.
• Analytics providers: Aggregate, anonymised usage data may be shared with analytics tools for the purpose of improving platform performance. No individually identifiable data is shared for analytics purposes.
• Competent authorities: na77 may disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a valid legal order, or in good faith to protect the security and integrity of the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of na77's business, your personal data may be transferred to the successor entity, provided that the successor is bound by terms no less protective than this Privacy Policy.

6 Cookies and Tracking Technologies

na77 uses cookies — small text files placed on your device by your browser — and similar tracking technologies to operate and improve the platform. Cookies allow na77 to recognise returning players, maintain your login session, remember your preferences, and collect aggregate analytics data.

The types of cookies used by na77 are described below:

na77 does not use advertising cookies or third-party tracking cookies for the purpose of building behavioural advertising profiles. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to log in and use the platform.

7 Data Retention

na77 retains your personal data only for as long as it is necessary for the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered account plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process, or for the duration required by applicable AML legislation.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for three (3) years from the date of the last communication, or longer if the communication relates to an unresolved dispute.
• Technical / server logs: Retained for up to ninety (90) days for routine operational purposes; longer in the event of a security investigation.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter to demonstrate compliance.

8 Data Security

na77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and na77 servers.
• Encrypted storage of all account passwords using industry-standard hashing algorithms — na77 staff cannot view your password.
• Tokenisation of payment method details — na77 does not store raw bKash PINs, Nagad credentials, or full card numbers.
• Role-based access controls ensuring that na77 staff can only access the personal data necessary for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Intrusion detection and prevention systems monitoring na77 infrastructure in real time.
• Secure data centres with physical access controls, redundant power supplies, and disaster recovery capabilities.

Despite these measures, no internet-based system is completely immune to security risks. In the unlikely event of a data breach that poses a risk to your rights and freedoms, na77 will notify affected players promptly and take all reasonable steps to contain the breach and mitigate any harm.

9 Your Privacy Rights

As a player on na77, you hold the following rights with respect to your personal data. These rights may be exercised free of charge by submitting a written request to [email protected]. na77 will respond to all valid data requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of all personal data na77 holds about you, along with information about how and why it is being processed.
• Right to rectification: You have the right to request that any inaccurate or incomplete personal data held by na77 be corrected or updated without undue delay.
• Right to erasure: You may request that na77 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations (such as AML record-keeping) that may require us to retain certain data for a defined period regardless of your request.
• Right to restriction of processing: You have the right to request that na77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data where that processing is based on na77's legitimate interests. na77 will stop processing your data unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.

10 Children and Minors

na77 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Registration on na77 requires users to confirm that they are at least 21 years of age, and na77 employs age verification procedures — including the review of government-issued identity documents — to enforce this requirement.

If na77 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, we will immediately close the associated account, delete or securely anonymise all personal data collected from that individual, void all bets placed, and return any deposits made less any bonuses claimed. No winnings generated by an underage user will be paid out.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on na77, please contact our support team immediately at [email protected]. We will investigate and respond to all such reports as a matter of priority.

11 Third-Party Links

The na77 platform may contain references to third-party game providers and payment partners. While na77 takes reasonable steps to ensure all integrated partners meet our security standards, we are not responsible for the privacy practices of third-party services operating under their own independent privacy policies.

Game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi operate their gaming software under their own terms and privacy frameworks. Payment processors including bKash, Nagad, Rocket, and Upay each maintain their own privacy policies governing how they handle transaction data on their respective platforms. na77 encourages you to review the privacy policies of any third-party service you interact with.

12 Changes to This Privacy Policy

na77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect your rights or the way we process your personal data — we will notify you by posting a prominent notice on the na77 platform and, where appropriate, by sending an email notification to your registered address at least fourteen (14) days before the changes take effect.

For minor changes that do not materially affect your rights — such as formatting corrections, clarifications, or updates to reflect new payment partners — the updated Policy will be posted on this page with a revised "Last Updated" date, and continued use of the na77 platform after the effective date constitutes your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how na77 protects your personal data. The date at the top of this page indicates when the Policy was last revised. All prior versions of this Policy are archived and available on request by contacting our support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way na77 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: We aim to respond to all privacy-related requests within 5 business days, and no later than 30 days for formal data subject requests.
• Language: All privacy-related communications are handled in English.

When submitting a data subject request (such as a request for access, rectification, erasure, or portability), please include your full name, registered email address, and a brief description of your request so that we can verify your identity and process your request efficiently.