fr777 Privacy Policy —
How We Protect Your Data

fr777 operates the online betting and live casino platform accessible at https://fr777.io (the "Platform"). For the purposes of this Privacy Policy, fr777 acts as the data controller — meaning we determine the purposes and means by which your personal data is collected and processed.

The Platform is operated for the benefit of players located in Bangladesh, with services available to residents across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All data processing activities described in this Policy are conducted in accordance with applicable data protection principles and the terms of this document.

If you have any questions about how fr777 processes your personal data, or if you wish to exercise any of your data rights described in Section 9, please contact our Data Protection contact at [email protected].

fr777 collects personal data from you through multiple touchpoints: directly when you register and use the Platform, automatically when you interact with our services, and indirectly from third-party providers where permitted. The categories of personal data we collect are described below.

fr777 uses the personal data it collects for the following clearly defined purposes. We do not use your data in any way that is incompatible with the purposes listed below without first seeking your explicit consent.

• Account creation and management: To register your fr777 account, verify your identity and age (21+ policy), authenticate logins via OTP, and maintain accurate account records throughout the lifecycle of your relationship with fr777.
• Service delivery: To process your sports bets, casino game sessions, deposits, withdrawals, and bonus allocations accurately and in a timely manner. This includes sharing relevant data with payment providers such as bKash, Nagad, Rocket, and Upay to complete financial transactions.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorised access. Technical data and transaction patterns are analysed continuously to protect the integrity of the Platform and the security of all players.
• Regulatory compliance: To fulfil legal obligations including anti-money laundering (AML) requirements, know-your-customer (KYC) regulations, and any lawful requests from competent authorities. Retained records may be used to demonstrate compliance during audits.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling, to enforce self-exclusion and limit settings you have configured, and to contact you proactively where our responsible gaming tools identify a potential concern.
• Platform improvement: To analyse aggregated, anonymised usage data to improve fr777's product features, game selection, user interface, payment speed, and overall player experience. No individual-level profiling is performed for this purpose.
• Marketing communications: To send you promotional offers, bonus notifications, seasonal campaigns (including Eid, Pohela Boishakh, BPL season promotions), and platform news — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time via account settings or by emailing [email protected].
• Customer support: To respond to your enquiries, process complaints, and maintain a record of communications for quality assurance and dispute resolution purposes.

fr777 processes your personal data on the basis of one or more of the following recognised lawful grounds:

• Contractual necessity: Processing required to perform the contract between you and fr777 — including account registration, payment processing, game session management, and withdrawal execution.
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC identity verification, AML record-keeping, and responses to lawful authority requests.
• Legitimate interests: Processing conducted for fr777's legitimate business interests where those interests are not overridden by your data protection rights — including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing that relies on your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

fr777 does not sell your personal data. We share personal data only with the categories of recipients described below, and only to the extent strictly necessary for the stated purpose.

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Sonali Bank, Islami Bank, Visa, and Mastercard receive the minimum financial and identity data necessary to process your deposits and withdrawals securely. Each provider operates under its own privacy policy and applicable financial services regulations.
• Identity verification providers: Third-party KYC service providers may receive copies of your identity documents and biometric data (if applicable) solely for the purpose of verifying your age and identity. These providers are contractually bound to process such data only for verification purposes and to delete or return it upon completion.
• Game content providers: Studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive anonymised session data necessary to deliver their game content to your device. These providers do not receive your personal identity or financial information.
• Competent authorities: fr777 may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud and money laundering.
• Professional advisers: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis in connection with the provision of professional services to fr777.

fr777 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve performance, and — where you have consented — deliver relevant promotional content. The following categories of cookies may be in use:

• Strictly necessary cookies: Essential to the operation of the Platform, including session management, login authentication, OTP flow, and cashier functionality. These cookies cannot be disabled without impairing core service delivery. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: Collect anonymised data about how players navigate the Platform — pages visited, session duration, error events, and feature usage — to help fr777 identify improvements. Used only with your consent.
• Functional cookies: Remember your preferences, such as language settings, responsible gaming limit configurations, and display preferences, to provide a personalised experience across sessions. Used with your consent.
• Marketing and retargeting cookies: Used only where you have explicitly consented to receive personalised promotional communications. fr777 does not use third-party advertising networks that track your behaviour across external websites.

You may manage your cookie preferences at any time via your browser settings. Please note that disabling certain cookie categories may affect the functionality of the fr777 Platform. Most modern browsers allow you to refuse, delete, or selectively accept cookies — consult your browser's help documentation for instructions specific to your device and browser version.

fr777 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account relationship with fr777, plus a post-closure retention period of 5 years to satisfy AML record-keeping requirements and to handle any post-closure disputes or regulatory enquiries.
• KYC identity documents: Retained for the duration of the account plus 5 years post-closure in accordance with financial crime prevention obligations. Copies are securely deleted once the retention period expires.
• Transaction records: Financial transaction logs including deposits, withdrawals, and bet history are retained for a minimum of 5 years post-transaction in accordance with AML regulations.
• Support communications: Customer support tickets, live chat transcripts, and email correspondence are retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Records of your marketing opt-in and opt-out choices are retained for the duration of the account relationship to demonstrate compliance with consent obligations.
• Technical and log data: Server logs and technical diagnostic data are retained for a maximum of 12 months and are then automatically purged or anonymised.

Upon the expiry of all applicable retention periods, personal data is either permanently deleted using secure deletion methods or irreversibly anonymised so that it can no longer be associated with you as an individual.

fr777 employs a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in transit: All data exchanged between your device and the fr777 Platform is encrypted using TLS 1.2 or higher. The Platform operates exclusively over HTTPS — unencrypted HTTP connections are rejected.
• Encryption at rest: Sensitive data stored in fr777's databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using AES-256 standard encryption.
• Access controls: Access to personal data within fr777's systems is restricted on a strict need-to-know basis. Staff access is authenticated via multi-factor authentication, and access logs are maintained and reviewed regularly.
• OTP authentication: Player login from new or unrecognised devices requires one-time password verification sent to the registered mobile number, providing a second authentication factor that protects accounts even if login credentials are compromised.
• Regular security assessments: fr777 conducts periodic vulnerability assessments and security reviews of its platform infrastructure to identify and remediate potential weaknesses proactively.
• Incident response: fr777 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, fr777 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

As a data subject whose personal information is processed by fr777, you hold a set of meaningful rights over your data. fr777 is committed to honouring these rights promptly and transparently.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Request Type]". fr777 will respond within 30 days of receiving a valid, complete request. Identity verification may be required before a request is actioned. There is no fee for exercising your data rights, unless a request is manifestly unfounded or excessive.

The fr777 Platform is strictly intended for adults aged 21 years and above. fr777 does not knowingly collect personal data from any person under the age of 21. Registration by individuals under 21 is prohibited and constitutes a breach of the fr777 Terms & Conditions.

Where fr777 discovers or has reasonable grounds to suspect that an account has been registered by, or is being accessed by, a person under the age of 21, the account will be immediately suspended, all activity will be investigated, and any funds associated with underage activity will be handled in accordance with fr777's legal obligations.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account with fr777, please contact us immediately at [email protected] with the subject line "Underage Account Report". fr777 will investigate and act on all such reports promptly.

The fr777 Platform integrates third-party services necessary to deliver a comprehensive betting and gaming experience. While fr777 carefully selects and contracts its third-party partners, each provider operates under its own independent privacy policy. fr777 is not responsible for the data practices of third-party services once data passes to those providers under the terms of their own agreements.

• Game studios: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other content providers deliver game content via API integrations. These providers receive only the anonymised session data required to render their games correctly and to validate game outcomes from their certified servers.
• Payment providers: bKash, Nagad, Rocket, Upay, and bank transfer partners process financial transactions on fr777's behalf. The personal and financial data shared with these providers is limited to what is strictly necessary to process the requested transaction and to satisfy their own regulatory KYC requirements.
• Analytics and performance tools: fr777 may use anonymised, aggregated analytics tools to understand platform performance. No personal data is transmitted to analytics providers in an identifiable form.

fr777 does not embed third-party social media trackers, advertising pixels, or external retargeting scripts on the Platform. The links and integrations described above are the only categories of external data sharing relevant to the fr777 player experience.

fr777 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new features added to the Platform, amendments to applicable regulations, or other operational changes. The "Last Updated" date at the top of this Policy and the badge above will reflect the date on which the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — fr777 will notify registered players via email to the address associated with their account and/or via an in-platform notification, with a minimum of 14 days' notice before the updated Policy takes effect.

Your continued use of the fr777 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the Platform and may request account closure by contacting [email protected].

For all privacy-related queries, data rights requests, or concerns about how fr777 handles your personal information, please contact fr777's support team using the details below. All communications must be submitted in English.

• Data Protection Contact Email: [email protected] (plain text — not a clickable link)
• Subject Line Format: Please use "Privacy Enquiry — [Your Topic]" or "Data Rights Request — [Request Type]" to ensure your message is routed to the correct team promptly.
• Response Time: fr777 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 days of receiving a complete, valid request.
• Identity Verification: To protect your privacy and the security of your account, fr777 may require you to verify your identity before actioning any data rights request. This is a standard safeguard to prevent unauthorised access to your personal information.
• Operating Hours: Support is available 7 days a week, Bangladesh Standard Time (BST, UTC+6). Response times may be slightly extended during major public holidays such as Eid, Victory Day (16 December), and Independence Day (26 March).

fr777 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with the outcome of a data rights request or a privacy complaint, you retain the right to escalate the matter through applicable legal channels available in Bangladesh.