Privacy Policy

When you register for a c8777 account, use our platform, or contact our support team, we collect certain categories of personal data. We are transparent about every category of data we hold, the purpose for which it is collected, and the legal basis on which we process it.

1.1 Registration and Identity Data

When you create a c8777 account, we collect the following information directly from you:

• Your full legal name as it appears on a government-issued identification document.
• Your date of birth (used to verify that you are 18 years of age or older).
• A valid mobile phone number registered in Bangladesh — this serves as your primary account identifier and is linked to your mobile payment wallet for bKash, Nagad, Rocket, or Upay transactions.
• A password of your choosing (stored in hashed, non-reversible form — c8777 staff cannot see your password in plain text).

1.2 Identity Verification Documents

In accordance with our age verification and anti-fraud obligations, c8777 may request copies of one or more of the following documents at the point of registration or prior to processing a withdrawal:

• Bangladesh National ID Card (NID)
• Valid passport
• Birth certificate (for age verification purposes only)
• Proof of address — such as a recent utility bill or bank statement issued to your registered address in Bangladesh

Document images are stored in encrypted form and are used solely for identity verification, age confirmation, and fraud prevention purposes. They are not shared with third parties except where required by law or where necessary to engage a regulated identity verification service provider.

1.3 Financial and Transaction Data

When you make a deposit or withdrawal on c8777, we collect and store records of each transaction, including the amount, date and time, payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction reference number, and the outcome. Mobile wallet numbers associated with your transactions are stored in encrypted form. We do not store full card numbers for Visa or Mastercard payments — card transactions are processed through a PCI-DSS compliant payment gateway that tokenises card data.

1.4 Gameplay and Betting Activity Data

c8777 records all gameplay and betting activity conducted from your account. This includes game sessions, bet amounts, outcomes, wager histories across all product verticals (live casino, cricket betting, slots, Boat of Fortune, Mini Baccarat), bonus usage, and account balance changes. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

1.5 Technical and Device Data

When you access c8777, our servers automatically collect certain technical information, including:

• IP address (used for geolocation, fraud detection, and duplicate account detection)
• Device type, operating system, and browser version
• Device fingerprint (a hashed representation of hardware and software identifiers used to detect multiple account creation from a single device)
• Session duration, page views, and navigation paths within the c8777 platform
• Time zone (Bangladesh Standard Time, UTC+6, is used as the default reference time zone)

1.6 Communications Data

When you contact c8777's support team via email or live chat, we retain records of the correspondence. This includes your contact details as provided, the content of your messages, and the resolution notes added by the support agent. These records are retained for quality assurance, dispute resolution, and regulatory audit purposes.

c8777 processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data, the categories of data involved, and the legal basis for each processing activity.

Marketing Communications

If you have opted in to receiving promotional communications from c8777, we may contact you about new game releases, deposit bonuses, cricket betting promotions during BPL and IPL seasons, seasonal offers tied to Eid and Pohela Boishakh, and other c8777 platform updates. You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the processing of data for account management, payment, or compliance purposes.

Automated Decision-Making

c8777 uses automated systems for duplicate account detection, fraud scoring, and responsible gaming monitoring. These systems may automatically restrict or flag an account based on algorithmic analysis of behavioural patterns. Where an automated decision has a significant impact on your account, you have the right to request a manual review by a member of the c8777 compliance team. Contact us at [email protected] to initiate such a review.

c8777 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Processing Partners

To process your deposits and withdrawals, c8777 shares necessary transaction data with mobile financial service providers — specifically bKash, Nagad, Rocket, and Upay — and with international card payment gateway providers handling Visa and Mastercard transactions. These partners receive only the data required to execute and verify the specific transaction. They are contractually bound to process your data solely for payment purposes and may not use it for any other commercial purpose.

3.2 Game Studio Providers

c8777's casino games are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. When you launch a game, certain technical data (such as a session token and your anonymised player ID) is transmitted to the relevant game studio's servers to facilitate the game session. Full personal identity data is not passed to game studios. Game studios operate under independent privacy frameworks and are responsible for their own data processing during game sessions.

3.3 Identity Verification Services

Where automated age and identity verification is performed, c8777 may share your name, date of birth, and identity document details with a regulated third-party verification service provider. This sharing is conducted under strict data processing agreements that limit the provider's use of your data exclusively to the verification task.

3.4 Legal and Regulatory Authorities

c8777 will disclose personal data to law enforcement agencies, courts, regulatory authorities, or other government bodies where we are legally required to do so, or where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of c8777, our players, or the public. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.

3.5 Business Transfers

In the event that c8777 undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, you will be notified in advance by email, and the successor entity will be required to honour the commitments made in this Privacy Policy or to obtain fresh consent from you for any material changes to how your data is processed.

c8777 uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session active while you are logged in, and to gather aggregate analytics data that helps us improve the player experience. This section explains what types of cookies we use and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the c8777 platform to function. They maintain your login session, remember your language and display preferences, and support core security features such as cross-site request forgery (CSRF) protection. Essential cookies cannot be disabled without preventing the platform from operating correctly.

4.2 Analytics Cookies

c8777 uses first-party analytics cookies to collect aggregated, anonymised data about how players navigate the platform — including which game categories are most visited, where players spend the most session time, and which pages generate the highest exit rates. This data is used exclusively for internal platform optimisation. We do not use third-party behavioural advertising platforms or ad-retargeting pixels on the c8777 platform.

4.3 Security and Fraud Detection Cookies

c8777's fraud prevention systems use cookies to store a device fingerprint token across sessions. This allows our systems to detect when a single device is being used to create multiple player accounts — a pattern associated with bonus abuse and identity fraud. These cookies do not store personally identifiable information in plain form; they store a one-way hashed device identifier.

4.4 Managing Your Cookie Preferences

You may configure your browser to block or delete cookies at any time. Instructions for managing cookies vary by browser — consult the help documentation for your specific browser for guidance. Please be aware that disabling essential cookies will prevent you from logging in to your c8777 account and accessing the platform's core features. Disabling analytics or security cookies may impair certain platform functions or trigger additional security checks on your account.

c8777 retains your personal data only for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data we hold:

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate statistical analysis, as it no longer constitutes personal data for the purposes of data protection law.

Where a c8777 account is closed at the player's request (voluntary closure) or by c8777 (for breach of Terms or other cause), the retention periods above continue to run from the date of closure. The account itself is deactivated, but the associated records are retained for the stated periods to fulfil legal, regulatory, and dispute-resolution obligations.

c8777 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security: All data transmitted between your device and c8777's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The c8777 website enforces HTTPS on all pages.
• Password Storage: Player passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. Plain-text passwords are never stored, and c8777 staff are technically unable to retrieve your password.
• Mobile Wallet Encryption: Your bKash, Nagad, Rocket, and Upay mobile wallet numbers are stored in encrypted form in our database. They are decrypted only at the point of transaction processing and are never stored in logs.
• Access Controls: Access to production systems and player data is restricted to authorised c8777 staff on a strict need-to-know basis. All internal data access is logged and subject to periodic audit review.
• Intrusion Detection: c8777's infrastructure is monitored around the clock by automated intrusion detection systems that alert the security team to anomalous access patterns in real time.
• PCI-DSS Compliance: Card payment data for Visa and Mastercard transactions is handled by a PCI-DSS Level 1 compliant payment gateway. c8777 itself does not store, process, or transmit raw card numbers.

Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, c8777 will notify affected players by email without undue delay — and in any event within 72 hours of becoming aware of the breach — providing a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the steps c8777 is taking to address the breach and mitigate its impact.

As a registered player on c8777, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights and to responding to all legitimate requests in a timely manner. The following rights apply to your personal data held by c8777:

• Right of Access: You have the right to request a copy of all personal data that c8777 holds about you, free of charge. We will respond to verified access requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. We will action rectification requests promptly and will notify you once the correction has been made.
• Right to Erasure: You may request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing based on legitimate interests and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Erasure requests will be fulfilled subject to legal and regulatory retention obligations — certain categories of data (such as financial transaction records) must be retained for prescribed periods regardless of an erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller.
• Right to Object: You have the right to object at any time to the processing of your personal data where c8777 relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces a significant legal or similarly significant effect on you. Where such decisions occur (for example, automated account suspension triggered by fraud detection), you may request a manual review by a member of the c8777 compliance team.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We may ask you to verify your identity before processing the request to ensure we are responding to the correct person and not disclosing data to an unauthorised third party.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that c8777 holds about you, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week — including Eid holidays and all Bangladesh public holidays.

Email: [email protected] (plain text — copy this address into your email client to contact us; this address is not a clickable link).

Please include "Privacy Policy Enquiry" in the subject line of your email so that your message is routed directly to the c8777 data privacy team. We aim to acknowledge all privacy-related enquiries within one business day and to provide a substantive response within 10 business days.

Changes to This Privacy Policy

c8777 reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made, registered players will be notified by email to the address on file at least 14 days before the revised Policy takes effect. The "Last reviewed and updated" date at the top of this page will reflect the most recent revision date.

Your continued use of the c8777 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should discontinue your use of the platform and request account closure before the revision takes effect.

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all players accessing the c8777 platform from Bangladesh. The English-language version of this document is the authoritative and governing text. 18+ Only