gc777 Privacy Policy – How We Handle Your Personal Data

Introduction

gc777 ("we", "us", "our", "the Platform") is committed to protecting the privacy of every person who uses our platform. This Privacy Policy describes the personal data we collect from players who access gc777 from Bangladesh, how that data is used, the circumstances under which it may be shared, and the rights you hold as a data subject. By creating an account or using any service on gc777, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy applies to all users of gc777, including registered players, visitors who browse the platform without an account, and anyone who contacts gc777 support. It applies to data collected through the gc777 website, mobile browser experience, and any associated communication channels including email and live chat. This Policy should be read alongside the gc777 Terms and Conditions.

What Personal Data We Collect

gc777 collects personal data across six broad categories. The data we collect is limited to what is necessary to provide our services, meet legal obligations, and maintain the security and integrity of the platform.

gc777 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information except where this arises incidentally in the context of a responsible gaming self-exclusion request. Where such data is incidentally received, it is treated with the highest level of protection and used solely for the purpose for which it was provided.

How We Use Your Personal Data

gc777 uses the personal data it collects for the following purposes. In each case, we rely on an appropriate legal basis for processing, as described in Section 4.

• Account creation and management: We use your identity and contact data to create your gc777 account, verify your identity during KYC, maintain your account settings, and communicate with you about your account status, security alerts, and important platform updates.
• Payment processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. All payment processing is carried out in accordance with applicable financial regulations and AML obligations.
• Fraud prevention and security: We use technical data, identity data, and gaming activity data to detect and prevent fraudulent account activity, money laundering, bonus abuse, and other prohibited conduct as defined in the gc777 Terms and Conditions.
• Responsible gaming: We use your gaming activity data and account data to monitor for patterns consistent with problem gambling and to support the operation of deposit limits, session alerts, cooling-off periods, and self-exclusion features on your account.
• Service improvement: We use aggregated and anonymised technical and gaming data to analyse platform performance, identify areas for product improvement, and develop new features and game categories that better serve Bangladesh players.
• Marketing communications: Where you have opted in to receive promotional messages, we use your contact data to send you bonus offers, seasonal promotions, and platform news. You may opt out at any time by contacting support or updating your communication preferences in account settings.

gc777 does not use your personal data for automated decision-making or profiling in a manner that produces legal or similarly significant effects on you, beyond the automated fraud and responsible gaming monitoring described above.

Legal Basis for Processing

gc777 processes your personal data on the following legal bases, depending on the specific purpose of the processing activity.

• Contract performance: Processing necessary to operate your gc777 account, including account registration, payment processing, and the delivery of the gaming services you have requested.
• Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money laundering obligations, identity verification requirements, and the responsible gaming duties described in our Terms.
• Legitimate interests: Processing necessary for gc777's legitimate business interests, including fraud detection, platform security, service improvement, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your specific, informed consent, such as the sending of optional marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Share Your Personal Data

gc777 does not sell or rent your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: We share your financial data with payment processors including bKash, Nagad, Rocket, and Upay to enable deposits and withdrawals. These providers process your data in accordance with their own privacy policies and applicable financial regulations.
• Game providers: We share relevant session data with licensed game developers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable gameplay and resolve game-related disputes. These providers do not receive your identity or financial data.
• Regulatory and law enforcement authorities: We may be required to disclose personal data to relevant regulatory bodies, law enforcement agencies, or courts of competent jurisdiction in response to a lawful request, subpoena, court order, or to comply with applicable anti-money laundering and counter-terrorist financing reporting obligations.
• Technology service providers: We engage third-party technology providers to support platform operations, including hosting infrastructure, cybersecurity services, and analytics tools. These providers access data only as necessary to perform services on gc777's behalf and are bound by data processing agreements that restrict their use of your data.

In the event of a merger, acquisition, or sale of all or a substantial part of gc777's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the contact details registered to your account, and this Privacy Policy will continue to apply to your data following any transfer.

Payment Data and Financial Privacy

gc777 takes the privacy of your financial data with particular seriousness. Payment method details — including bKash wallet numbers, Nagad account numbers, bank account details, and transaction reference numbers — are stored in encrypted form and are accessible only to authorised personnel with a specific operational need. gc777 does not store card numbers, CVV codes, or full bank account credentials on its own servers; these are processed directly by the relevant payment service providers using their own secure infrastructure.

All financial transactions on gc777 are logged for audit purposes and retained in accordance with the data retention periods set out in Section 8 of this Policy. Transaction logs may be reviewed in the event of a dispute, fraud investigation, or regulatory inquiry. gc777 will not share your transaction history with unrelated third parties.

Cookies and Tracking Technologies

gc777 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used on gc777.

• Essential cookies: These are strictly necessary for the platform to function. They enable core features including user authentication, session management, and security controls. Essential cookies cannot be disabled without breaking the platform's core functionality.
• Analytics cookies: These cookies collect aggregated, anonymised information about how visitors use gc777, including which pages are visited most frequently and how users navigate between sections. This data helps gc777 improve the platform experience for Bangladesh players.
• Functional cookies: These cookies remember your preferences such as language settings, display options, and previously selected game categories, so that your experience is consistent across sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may limit your ability to use some features of gc777. gc777 does not use third-party advertising or retargeting cookies.

Data Retention

gc777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply: account data and identity verification records are retained for a minimum of 5 years following account closure; financial transaction records are retained for a minimum of 5 years from the date of the transaction; communications data, including support transcripts, is retained for 2 years; technical log data is retained for 12 months.

Where gc777 no longer has a lawful basis to retain your personal data, it will be securely deleted or anonymised. Anonymised data — from which you cannot reasonably be identified — may be retained indefinitely for analytical and platform improvement purposes.

Data Security

gc777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for internal system access, strict role-based access controls limiting data access to authorised personnel on a need-to-know basis, regular security audits and penetration testing, and real-time intrusion detection monitoring.

While gc777 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying gc777 immediately if you believe your account has been compromised. gc777 will notify you without undue delay if it becomes aware of a data breach that is likely to result in a high risk to your rights and freedoms.

Your Data Rights

As a data subject, you hold the following rights in relation to the personal data gc777 holds about you. To exercise any of these rights, please contact gc777 support using the details in Section 12.

• Right of access: You have the right to request a copy of the personal data gc777 holds about you, together with information about how it is used and with whom it is shared. gc777 will respond to a valid access request within 30 days.
• Right to rectification: If you believe that any personal data gc777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data, such as KYC-verified identity documents, may require re-verification before a correction can be made.
• Right to erasure: In certain circumstances, you have the right to request that gc777 delete your personal data. This right is not absolute — gc777 may be required to retain certain data to comply with legal obligations, including AML record-keeping requirements, even after your account is closed.
• Right to restriction: You have the right to request that gc777 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where gc777 relies on legitimate interests as the legal basis. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes, including profiling related to direct marketing.

gc777 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case gc777 will notify you of the extension within the initial 30-day period. gc777 will not charge a fee for processing a valid data rights request, except where requests are manifestly unfounded or excessive.

Children's Privacy and the 21+ Rule

gc777 is strictly an adults-only platform. The minimum age to access gc777 in any capacity is 21 years. gc777 does not knowingly collect personal data from persons under the age of 21. If gc777 discovers that it has inadvertently collected personal data from an individual who is under 21, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that a person under 21 has registered on gc777 using your contact details or payment methods, please contact gc777 support immediately. 21+ only.

Changes to This Privacy Policy

gc777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Where changes are material, we will notify registered users at the email address or mobile number on record at least 7 days before the changes take effect. Minor clarifications may be made without prior notice. The date of the most recent update is shown at the top of this Policy.

The current version of this Privacy Policy is always accessible at gc777.lat/privacy-policy. Your continued use of gc777 following notification of any material change constitutes your acceptance of the revised Policy.

Contact Us About Your Privacy

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a privacy concern regarding your gc777 account, please contact the gc777 support team. Our support team is available 24 hours a day, 7 days a week via live chat within the gc777 platform, and by email at the address below. We will acknowledge your enquiry within 2 business days and provide a full response within 30 days.