Privacy Policy
kc777 Platform

This Privacy Policy ("Policy") describes how kc777 ("kc777", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "player") who access or use the kc777 platform available at kc777.io ("Platform"). It applies to all products and services offered via the Platform, including casino games, sports betting, cricket betting, live casino, slots, racing, and Mahjong Ways.

kc777 is committed to handling personal data with transparency, integrity, and respect. We recognise the trust that players across Bangladesh — in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — place in us when they share their personal information, and we take that responsibility seriously.

By accessing the Platform, registering a player account, making a deposit, or otherwise using kc777's services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must stop using the Platform immediately.

We may update this Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. All amendments will be published on this page with a revised effective date. We encourage you to review this page periodically.

kc777 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third parties such as payment processors and identity verification services. The categories of data we collect are as follows:

2.1 Registration and Identity Data

• Full legal name as it appears on official identification documents.
• Date of birth (required to verify that you are 21 years of age or older).
• Gender (optional, collected only where you choose to provide it).
• Nationality and country of residence.
• National Identity Card (NID) number or passport number, collected during KYC verification.
• A copy or scan of your NID, passport, or other government-issued photo ID.
• Proof of address (e.g., a recent utility bill or bank statement dated within the last three months).

2.2 Contact Data

• Email address, used for account communications, transaction notifications, and (where opted in) promotional messages.
• Mobile phone number, used for two-factor authentication, account security alerts, and (where opted in) SMS notifications.
• City and district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet), collected at registration.

2.3 Financial and Transaction Data

• Payment method details: bKash account number, Nagad account number, Rocket account number, Upay account number, Visa or Mastercard card details (last four digits and expiry date only — full card numbers are not stored by kc777), Dutch-Bangla Bank or BRAC Bank account details.
• Deposit history: amounts, dates, payment methods, and transaction reference numbers.
• Withdrawal history: amounts, dates, destination payment methods, and verification status.
• Account balance history and bonus credit records.

2.4 Gaming and Betting Activity Data

• Game sessions: games played, session duration, wager amounts, win/loss outcomes, and timestamps.
• Sports betting activity: markets selected (e.g., BPL, IPL, T20 World Cup, Bangladesh Tigers matches, racing events), stake amounts, odds accepted, and settlement outcomes.
• Responsible gaming tool usage: deposit limits set, cooling-off periods activated, self-exclusion requests.

2.5 Technical and Device Data

• IP address at the time of each login and transaction.
• Device type, operating system, and browser type and version.
• Session timestamps and duration.
• Geolocation data derived from IP address (country and city level only — kc777 does not collect GPS-level location data).
• Cookies and similar tracking technologies (see Section 07).

2.6 Communications Data

• Records of all communications between you and kc777 support, including live chat transcripts, email correspondence, and any documents submitted as part of a complaint or dispute.
• Survey responses and feedback submitted voluntarily.

kc777 uses personal data collected from players for the following purposes. Each purpose is associated with a legal basis, which is described in Section 04.

kc777 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Performance of a Contract: Processing your registration data, transaction data, and gaming activity data is necessary to provide the services you have requested by creating a kc777 account and agreeing to our Terms and Conditions.
• Legal Obligation: KYC identity verification, AML transaction monitoring, data retention for regulatory reporting, and cooperation with law enforcement are all mandatory legal obligations that kc777 must fulfil regardless of your individual preferences.
• Legitimate Interests: Fraud detection, platform security, responsible gaming monitoring, and internal analytics are carried out on the basis of kc777's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Marketing communications (email, SMS, and platform notifications) are sent only where you have provided explicit, freely given, informed consent. You may withdraw consent at any time through your account settings or by contacting support.

kc777 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share personal data only in the following strictly defined circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank receive the transaction data necessary to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and regulatory framework.
• Game Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, PG Soft, and Spribe may receive a pseudonymous player session token to facilitate game-play. These providers do not receive your full name, contact details, or payment information.
• Identity Verification Services: KYC verification providers receive copies of identity documents submitted by players for the purpose of age and identity checks. These providers are contractually bound to use the data solely for verification and to delete it once the verification process is complete.
• Legal and Regulatory Authorities: Where required by applicable law, kc777 will disclose personal data to law enforcement agencies, financial intelligence units, and other regulatory bodies. kc777 will comply with all lawful requests and legal process, including court orders and statutory reporting obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of kc777's assets, personal data may be transferred to the successor entity. Players will be notified of any such transfer in advance and provided with information about how their data will be handled by the new entity.

All third parties with whom kc777 shares personal data are required to handle that data in accordance with applicable data protection standards. Where we engage third-party data processors, we do so under written data processing agreements that bind them to kc777's security and confidentiality requirements.

kc777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

When personal data is no longer required for any of the purposes listed above and no legal obligation mandates its continued retention, kc777 will securely delete or anonymise that data in accordance with our internal data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

kc777 uses cookies and similar technologies (including local storage objects and session tokens) on the Platform. Cookies are small text files placed on your device by your browser when you visit the Platform. They allow the Platform to recognise your device across sessions and to provide a consistent, functional experience.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential to the operation of the Platform. They enable core functions such as user authentication, maintaining your session state while you navigate between games, and keeping you logged in during your visit. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised, aggregate information about how players use the Platform — for example, which games are most frequently visited, how long players spend on particular pages, and where error pages are encountered. This data is used exclusively to improve Platform performance and user experience.
• Functionality Cookies: These remember your preferences — such as your chosen language, display settings, and notification preferences — so that you do not have to re-enter them on each visit.

7.2 Cookies We Do NOT Use

kc777 does not use third-party advertising cookies, cross-site tracking pixels, retargeting technologies, or social media tracking scripts. We do not share cookie data with advertising networks, social platforms, or data brokers.

7.3 Managing Your Cookie Preferences

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will prevent you from logging in to your kc777 account and using the Platform's core features. Instructions for managing cookies are available in the help documentation of most modern browsers.

kc777 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes, but is not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the kc777 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to login sessions, payment transactions, account management actions, and all other data transfers.
• Secure Password Storage: Player passwords are never stored in plain text. They are hashed using a strong, industry-accepted cryptographic hashing algorithm with individual salting to prevent reverse-engineering.
• Two-Factor Authentication (2FA): kc777 supports and encourages the use of two-factor authentication on all player accounts. When enabled, login from an unrecognised device requires verification via a one-time code sent to your registered mobile number.
• Access Controls: Access to personal data within kc777's internal systems is restricted on a strict need-to-know basis. Only staff members whose job function requires access to specific categories of data are granted those permissions, and all access is logged and audited.
• Intrusion Detection and Monitoring: The Platform is continuously monitored for unusual activity, unauthorised access attempts, and security anomalies. Our security team reviews alerts in real time, 24 hours a day, 7 days a week.
• Vulnerability Management: kc777 conducts regular security assessments and penetration testing of the Platform. Identified vulnerabilities are triaged and remediated according to their severity level.
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to players, kc777 will notify affected individuals promptly and take immediate remedial action to contain the breach and prevent further unauthorised access.

As described in the "Your Rights" section above, you have the right to access, correct, restrict, port, object to, or request deletion of your personal data held by kc777. To exercise any of these rights, please follow the process below:

• Submit a Written Request: Send your request by email to [email protected] with the subject line "Data Rights Request — [Your Full Name]". Include your registered email address and, where applicable, your kc777 account username so that we can locate your records.
• Identity Verification: To protect your privacy, kc777 may ask you to verify your identity before processing a data rights request. This is to ensure that we do not disclose personal data to an unauthorised third party claiming to act on your behalf.
• Response Timeline: kc777 will acknowledge receipt of your request within 5 business days and will provide a substantive response within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
• No Fees: kc777 does not charge a fee for processing data rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or to refuse the request, providing written reasons for our decision.

If you are dissatisfied with kc777's response to your data rights request, you have the right to escalate your complaint to our senior compliance team. Further escalation options are described in Section 13 of this Policy.

The kc777 Platform is strictly intended for adults aged 21 years and above. kc777 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the kc777 registration and KYC process, and accounts found to belong to underage individuals will be immediately suspended and all funds returned pending verification.

If you have reason to believe that a person under the age of 21 has registered on the kc777 Platform or has submitted personal data to kc777 without parental knowledge or consent, please contact us immediately at [email protected]. We will investigate the report and, where confirmed, will delete all personal data relating to the minor without delay and close the associated account.

The kc777 Platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay), game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, PG Soft, Spribe), and sports data providers. Where the Platform links to or integrates with any third-party service, please be aware that those services operate under their own privacy policies and data practices, which are independent of kc777.

kc777 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the kc777 Platform. Your interactions with third-party services are governed solely by the terms and privacy policies of those third parties, and kc777 accepts no liability for how those parties collect, use, or process your personal data.

kc777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. All amendments will be published on this page with a revised effective date prominently displayed at the top of this section and in the sidebar table of contents.

For material changes — those that substantively alter how your personal data is collected, used, or shared — kc777 will endeavour to provide at least fourteen (14) days' advance notice by displaying a notification on the Platform or, where you have opted in to email communications, by sending a notice to your registered email address.

Your continued use of the kc777 Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must stop using the Platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or to kc777's handling of your personal data, please contact our support team using the details below. Our data privacy team is available 24 hours a day, 7 days a week, 365 days a year, including during Bangladeshi public holidays such as Eid, Pohela Boishakh, Victory Day (16 December), and Independence Day (26 March).

• Privacy Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Full Name]"
• Subject Line for Privacy Complaints: "Privacy Complaint — [Your Full Name]"
• Acknowledgement: Within 5 business days of receipt.
• Substantive Response: Within 30 calendar days of receipt.
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

Escalation: If you are dissatisfied with kc777's response to a privacy complaint or data rights request, you may request escalation to a senior member of our compliance team by including the word "ESCALATION" in your follow-up email subject line. Escalated complaints will receive a final written position within fourteen (14) business days.