asa77 Privacy Policy

Introduction

1.1 About This Policy

This Privacy Policy ("Policy") is issued by asa77 ("asa77", "we", "us", "our"), the operator of the online gaming and sports betting platform at asa77.io. This Policy applies to all personal data processed in connection with your use of the asa77 platform, including account registration, deposits, withdrawals, betting activity, casino gameplay, customer support interactions, and any marketing communications you have consented to receive.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By registering an account with asa77 or using any part of our platform, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices as described here, you should not use the asa77 platform.

1.2 Who We Are

asa77 operates an online gaming platform designed for adult players in Bangladesh, offering cricket betting (including BPL, IPL, T20 World Cup, and ICC tournaments), live casino games, slot titles from world-class providers, and crash games. All financial transactions are conducted in Bangladeshi Taka (৳) via locally trusted payment methods including bKash, Nagad, Rocket, and Upay. As the operator of this platform, asa77 acts as the data controller for all personal data collected through asa77.io.

1.3 Updates to This Policy

asa77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or an in-platform notification prior to the change taking effect. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Data We Collect

2.1 Registration and Identity Data

When you register an account with asa77, we collect the following categories of personal data:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address (used for account communications, security alerts, and promotional messages where consent has been given).
• Mobile phone number (used for account verification and two-step authentication).
• Residential address, including city, division, and postal code (used for identity verification and responsible gaming purposes).
• National ID Card (NID) number, passport number, or driving licence number where provided for KYC verification.
• Username and encrypted password for your asa77 account.

2.2 Financial and Transaction Data

To process deposits and withdrawals, asa77 collects the following financial information:

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers registered in your name.
• Bank account details (account number, branch, bank name) where bank transfer is the selected payment method, including accounts held with Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other supported institutions.
• Transaction history including deposit amounts, withdrawal requests, dates, times, and reference numbers.
• Records of any chargebacks, disputed transactions, or payment processing errors.

asa77 does not store full card numbers or payment credentials directly on its own servers. Payment processing is handled by regulated third-party payment partners under secure, encrypted connections.

2.3 Identity Verification (KYC) Documents

As part of our KYC process, we may request and retain copies of the following documents:

• Government-issued photo identification: National ID Card (NID), passport, or driving licence.
• Proof of address: utility bill, bank statement, or official government correspondence dated within the last three months.
• Proof of payment method ownership: screenshot or confirmation from bKash, Nagad, Rocket, Upay, or bank account showing the account number and registered name.
• Selfie or video verification where enhanced identity confirmation is required.

2.4 Technical and Usage Data

When you access asa77.io, we automatically collect certain technical data about your device and browsing behaviour, including:

• IP address and approximate geolocation (city and country level).
• Device type, operating system, and browser type and version.
• Pages visited, time spent on each page, links clicked, and navigation patterns within asa77.io.
• Session start and end times, login frequency, and session duration.
• Referral source (e.g., the URL from which you arrived at asa77.io).
• Error logs and crash reports generated during your use of the platform.

2.5 Gameplay and Betting Activity Data

We maintain detailed records of your activity on the asa77 platform, including:

• All bets placed, including event, market, stake amount, odds accepted, and settlement outcome.
• Casino and slot game sessions, including game titles played, bet amounts, wins, and losses.
• Bonus activity, including bonuses claimed, wagering progress, and bonus outcomes.
• Responsible gaming tool usage, including deposit limits set, session time limits applied, and self-exclusion requests.

2.6 Communications Data

When you contact our customer support team or interact with asa77 through any communication channel, we collect and retain:

• The content of emails, live chat transcripts, and support tickets exchanged with our team.
• Dates, times, and duration of all support interactions.
• Records of any complaints, dispute submissions, or formal enquiries made by you.

How We Collect Data

3.1 Data You Provide Directly

The majority of personal data we hold about you is information you provide to us directly. This includes data entered during the registration process, KYC verification submissions, payment method details entered when making deposits or requesting withdrawals, preferences you set in your account dashboard, and messages you send to our customer support team.

3.2 Data Collected Automatically

When you access asa77.io, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies embedded in the platform. This automated collection occurs each time you load a page, log in to your account, place a bet, or interact with a game. This data is collected regardless of whether you are a registered player or a visitor browsing the platform without an account.

3.3 Data from Third Parties

We may receive personal data about you from trusted third-party sources, including:

• Payment providers such as bKash, Nagad, Rocket, and Upay, who may share transaction confirmation data and account holder name details with us to validate payments.
• Identity verification service providers used as part of our KYC process, who may return verification status, document authenticity scores, and risk indicators.
• Fraud prevention and anti-money-laundering screening services that check your details against watchlists and sanctions databases.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share session and gameplay data with us for settlement, dispute resolution, and responsible gaming monitoring purposes.

How We Use Your Data

asa77 uses the personal data it collects for the following purposes. A summary is presented in the table below, followed by detailed explanations for each purpose.

4.1 Account Registration and Management

We use your identity and contact data to create and maintain your asa77 player account, verify your eligibility (including confirming that you are aged 21 or above), and enable you to access all platform features. This processing is necessary for the performance of the contract between you and asa77.

4.2 Payment Processing

Your financial and transaction data is used to process deposits made via bKash, Nagad, Rocket, Upay, or bank transfer, to fulfil withdrawal requests, and to maintain accurate records of all financial activity on your account. We may also use this data to investigate disputed transactions and to prevent payment fraud.

4.3 KYC and Regulatory Compliance

We are obligated to verify the identity of our players and to maintain records of that verification as part of our responsible gaming and financial compliance obligations. We use identity and KYC document data for this purpose and retain it for the periods described in Section 8 (Data Retention).

4.4 Fraud Prevention and Platform Security

We use technical data, financial data, and gameplay activity data to detect and prevent fraudulent activity on the platform, including multiple account creation, bonus abuse, money laundering, and unauthorised account access. This processing is based on our legitimate interest in maintaining the integrity and security of the asa77 platform.

4.5 Responsible Gaming

We monitor gameplay activity, transaction patterns, and account behaviour to identify players who may be experiencing gambling-related difficulties. This monitoring informs the application of responsible gaming tools and interventions, including the proactive imposition of deposit limits or temporary exclusions where we have serious concerns about a player's welfare.

4.6 Marketing and Promotions

Where you have given us your explicit consent to receive marketing communications, we may use your contact details and gameplay preferences to send you personalised promotional offers, bonus notifications, and updates about new games or betting markets. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe link included in every marketing email. Withdrawing consent does not affect your ability to continue using the asa77 platform.

Legal Basis for Processing

5.1 Contract Performance

Much of the personal data processing carried out by asa77 is necessary for the performance of the contract between you and asa77 — specifically, the Terms & Conditions you agreed to upon registration. Without this processing, we would be unable to create your account, process payments, or deliver the gaming and betting services you have requested.

5.2 Legal Obligation

Certain processing activities are required for asa77 to comply with its legal obligations, including KYC identity verification, record-keeping for financial compliance purposes, and responding to lawful requests from regulatory or law enforcement authorities. We are required to retain certain records for defined minimum periods under applicable legal and financial compliance frameworks.

5.3 Legitimate Interests

We rely on our legitimate business interests to justify processing activities such as fraud prevention, platform security, analytics, and improving the asa77 user experience. In all cases where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your privacy rights. You have the right to object to processing carried out on a legitimate interests basis — see Section 10 (Your Rights) for details.

5.4 Consent

Where we rely on your consent to process personal data — specifically for marketing communications and non-essential cookies — we will always ask for your explicit consent before commencing that processing. You may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal, and without any negative consequences for your account or your ability to use the asa77 platform.

Data Sharing

6.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary personal and financial data with our payment service partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These partners receive only the data required to complete the specific transaction and are prohibited from using it for any other purpose.

6.2 Game Providers

The casino games and slot titles available on asa77 are operated by third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable gameplay and settle bets, we share a player identifier and session token with the relevant game provider. Game providers do not receive your full name, payment details, or contact information unless this is strictly necessary for the resolution of a game dispute.

6.3 Identity Verification and KYC Partners

We engage regulated third-party identity verification services to assist with KYC processing. These providers receive the identity documents and personal data you submit for verification and return a verification outcome to asa77. All KYC partners are required to maintain the same level of data security and confidentiality that asa77 applies to its own processing activities.

6.4 Fraud Prevention and Compliance Services

We may share certain data — including account identifiers, IP addresses, and transaction patterns — with third-party fraud prevention and anti-money-laundering screening services. These services check your data against sanctions lists, politically exposed persons (PEP) databases, and other risk indicators. This processing is necessary to comply with our financial security obligations.

6.5 Legal and Regulatory Disclosure

asa77 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required or compelled to do so by a valid legal process. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected player of the disclosure.

6.6 Business Transfers

In the event that asa77 undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, asa77 will take reasonable steps to ensure that the acquiring entity honours the commitments made in this Privacy Policy, and registered players will be notified of any material change in data controller via email prior to the transfer taking effect.

Cookies & Tracking

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred language, login status, and session settings — so that the site functions correctly and your experience is more personalised. asa77.io uses both first-party cookies (set directly by asa77) and third-party cookies (set by our service partners).

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies stored on your device. Please note that disabling strictly necessary cookies will impair or entirely prevent your ability to use the asa77 platform, as these cookies are required for core functionality such as maintaining your login session and securing your account. Instructions for managing cookies in common browsers can be found in the browser's help documentation. Disabling functional or analytics cookies will not affect your ability to use the platform's core features.

Data Retention

8.1 Retention Periods

asa77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and financial compliance obligations. The table below summarises our standard retention periods by data category.

8.2 Deletion and Anonymisation

When the applicable retention period expires and no further legal basis exists for retaining your personal data, asa77 will either securely delete the data or irreversibly anonymise it so that it can no longer be associated with you as an individual. Where full deletion is not technically feasible within a specific timeframe (for example, in the case of data held within encrypted backup archives), we will ensure the data is isolated from active processing until deletion can be completed in accordance with our standard schedule.

8.3 Self-Exclusion and Account Closure

If you self-exclude or request account closure, we will retain sufficient personal data to enforce the exclusion period and prevent re-registration during that period. Specifically, we will retain your name, date of birth, email address, phone number, and any associated identifiers for the duration of your self-exclusion, even if your account is otherwise closed. This retention is in your interest and constitutes a legal obligation on our part to uphold responsible gaming commitments.

Data Security

9.1 Technical Safeguards

asa77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and asa77.io, protecting your data in transit.
• Encryption of sensitive personal data at rest, including KYC documents, payment account details, and password hashes.
• Secure, access-controlled server infrastructure with restricted physical and network-level access.
• Regular vulnerability assessments and penetration testing by independent security specialists.
• Automated monitoring for suspicious access patterns, brute-force login attempts, and anomalous account activity.
• Two-factor authentication (2FA) available for all player accounts to provide an additional layer of login security.

9.2 Organisational Safeguards

Access to player personal data within the asa77 organisation is granted on a strict need-to-know basis. Staff members who handle personal data receive data protection training and are bound by confidentiality obligations. We conduct regular internal audits of our data handling practices and update our security protocols in response to emerging threats.

9.3 Your Role in Security

While asa77 takes its data security responsibilities seriously, the security of your account also depends on the steps you take to protect your login credentials. You should use a strong, unique password for your asa77 account, enable two-factor authentication, keep your contact details up to date, and never share your login credentials with any other person. If you suspect that your account has been accessed without your authorisation, contact our support team immediately at [email protected].

9.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of our players, asa77 will assess the breach promptly and notify affected players without undue delay. Our breach response process includes immediate containment measures, root cause analysis, and implementation of remedial technical and organisational controls to prevent recurrence.

Your Rights

As a player whose personal data is processed by asa77, you have the following rights in relation to that data. To exercise any of these rights, please submit a written request to our support team at [email protected]. We will respond to all valid requests within 30 calendar days of receipt.

10.1 Exercising Your Rights

To exercise any of the rights described above, please email [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request to prevent unauthorised access to another player's data. We will not charge a fee for responding to a valid data rights request unless the request is manifestly unfounded, repetitive, or excessive.

10.2 Limitations on Rights

Please be aware that some data rights are not absolute. In particular, the right to erasure cannot be fulfilled in respect of data that we are legally required to retain under financial compliance or responsible gaming obligations. In such cases, we will explain clearly which data cannot be deleted and why, and we will delete all data that is not subject to a legal retention requirement.

International Transfers

11.1 Cross-Border Data Processing

Some of asa77's service partners — including certain game providers, KYC verification services, and technical infrastructure providers — may process personal data on servers located outside Bangladesh. When your personal data is transferred to or processed in a country other than Bangladesh, asa77 takes steps to ensure that an adequate level of protection is applied to that data. These steps include entering into data processing agreements with all relevant partners that impose contractual data protection obligations consistent with the standards applied by asa77 in Bangladesh.

11.2 Game Provider Data Processing

Live casino, slot, and crash game data processed by providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may be handled on infrastructure located in Malta, Gibraltar, Isle of Man, or other jurisdictions with established gaming regulatory frameworks. All such providers operate under recognised gaming licences and are subject to data protection requirements under their respective regulatory regimes. asa77 conducts due diligence on all game providers to ensure they meet our data protection standards before integrating their content on the platform.

Protection of Minors

12.1 Age Verification

As part of the registration and KYC process, asa77 requires all players to confirm their date of birth and to provide valid government-issued identification that verifies they are aged 21 or above. Players who are found to be under the age of 21 will have their accounts immediately suspended, all balances forfeited, and their personal data flagged and retained only for the purpose of preventing future registration attempts by the same individual.

12.2 Reporting Underage Access

If you have reason to believe that a person under the age of 21 has registered or is using an account on asa77.io, please report this immediately to our support team at [email protected]. We take underage gambling extremely seriously and will investigate all such reports with the highest priority. Parents and guardians concerned about underage access to online gambling platforms are encouraged to use parental control software to restrict access to gambling websites on shared or family devices.

Policy Changes

13.1 Right to Update

asa77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. All updates will be published at asa77.io/privacy-policy with a revised "Last Updated" date at the top of the document. We will notify registered players of material changes via email to their registered address or via an in-platform notification, no less than 14 days before the change takes effect where practically possible.

13.2 Continued Use

Your continued use of the asa77 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any material change to this Policy, you should cease using the platform and request account closure as described in the Terms & Conditions. asa77 will not apply amended data processing practices to data collected prior to the effective date of the amendment without your consent where such consent is required.

Contact Us

14.1 Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way asa77 handles your personal data, please contact our customer support team. We aim to respond to all privacy-related enquiries within 5 business days and to resolve formal data rights requests within 30 calendar days. Our support team is available 24 hours a day, 7 days a week, in English, serving players across all divisions of Bangladesh including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Please note that the email address above is displayed as plain text only and is not a clickable link. To contact us, please copy the address manually into your email client. asa77 will never contact you requesting your password, account PIN, OTP code, or payment credentials. Any communication making such a request should be treated as fraudulent.