xc77 Privacy Policy

xc77 is Bangladesh's trusted online gaming destination. We take our responsibility to protect your personal data seriously. We do not sell your data to third parties for advertising purposes, and we share your information only in the specific, limited circumstances described in this policy. Our data practices are designed to be transparent, proportionate, and fair.

This Privacy Policy applies to all personal data collected by xc77 in connection with your registration, use of the platform, financial transactions, and any communications you have with the xc77 support team. It covers data collected through the xc77 website and mobile-optimised site. It does not cover third-party sites or services that you may access via links from xc77 — those are governed by their own privacy policies.

1. Information We Collect

xc77 collects personal data that is necessary to provide our gaming and payment services, to verify your identity and age, to process your financial transactions securely, and to keep your account safe. We collect only what is reasonably necessary for these purposes and do not gather excessive or irrelevant data.

2. How We Use Your Information

xc77 uses the personal data we collect for the following clearly defined purposes. We process your data only where we have a legitimate basis to do so, as described in Section 3 of this policy.

Account Management and Service Delivery

We use your registration and identity data to create and maintain your xc77 account, process your deposits and withdrawals, deliver the gaming and betting services you have requested, and communicate with you about account-related matters such as transaction confirmations, security alerts, and support responses.

Identity Verification and Fraud Prevention

We use your identity data, transaction data, and technical data to verify that you meet our 21+ age requirement, detect and investigate fraudulent activity (including duplicate accounts, payment fraud, and bonus abuse), and protect the security of the xc77 platform and its members. This processing is essential to the safe operation of xc77 and cannot be opted out of without closing your account.

Responsible Gaming Monitoring

xc77 processes your gameplay and behavioural data to monitor for signs of problem gambling behaviour, including identifying unusual changes in betting patterns, frequency of play, or deposit behaviour that may indicate a player is experiencing harm. Where such patterns are identified, xc77 may proactively contact the player or apply responsible gaming restrictions in line with our Responsible Gaming policy.

Platform Improvement and Analytics

We use aggregated, anonymised gameplay and technical data to understand how players interact with xc77, to identify performance issues, and to inform future product development decisions. Aggregated data used for analytics purposes does not identify you as an individual.

3. Legal Basis for Processing

xc77 processes your personal data on the following legal bases: (a) Contract performance — processing necessary to provide the services you signed up for, including account management, payment processing, and game delivery; (b) Legitimate interests — processing for fraud prevention, security monitoring, platform analytics, and responsible gaming compliance, where our legitimate interests do not override your fundamental privacy rights; (c) Legal obligation — processing required to comply with applicable law, including anti-money laundering obligations and age verification requirements; (d) Consent — where you have given specific consent to a particular form of processing, such as receiving promotional communications.

Where xc77 relies on your consent as the legal basis for a particular form of processing (such as sending promotional messages), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

4. Sharing Your Personal Data

xc77 does not sell your personal data to any third party. We share personal data only in the following limited circumstances, each of which is necessary either for the operation of the platform or is required by applicable law.

Service Providers

xc77 works with a carefully selected number of third-party service providers who assist in operating the platform — including game studios such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe; payment processing partners including bKash, Nagad, Rocket, and Upay; identity verification providers; and cloud infrastructure providers. These third parties receive only the minimum data needed to perform their specific function and are contractually prohibited from using your data for any other purpose.

Legal Disclosure

xc77 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to investigate fraud, enforce our Terms and Conditions, or protect the safety of our members or the public.

5. Payment Data and Financial Privacy

When you deposit or withdraw via bKash, Nagad, Rocket, or Upay, the payment transaction is processed directly by that payment provider using their own secure systems. xc77 does not store your full bKash or Nagad account PIN, password, or any full authentication credential. What xc77 retains is a transaction reference, the amount in BDT, the payment method type, and the timestamp — sufficient to maintain accurate account records and process future withdrawals to the same method.

For bank transfer transactions, xc77 retains the bank account name and last four digits of the account number as provided during the withdrawal request. Full bank account numbers are not stored beyond the requirements of the specific transaction. All financial data is held on secured, access-controlled servers and is accessible only to authorised xc77 personnel with a legitimate operational need.

6. Cookies and Tracking Technologies

xc77 uses cookies and similar technologies on its website and mobile-optimised site. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how the site is being used in aggregate.

Types of Cookies We Use

Essential cookies are required for the xc77 platform to function — they maintain your login session, store your language preference, and ensure the site loads correctly. First-party analytical cookies help us understand aggregate patterns of platform usage, such as which pages are most visited and how long typical sessions last. xc77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts of any kind.

Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies will affect how xc77 functions — for example, you may be unable to maintain a login session or access certain platform features. Disabling analytical cookies will not affect your ability to use xc77 but will prevent us from including your session in aggregate usage statistics.

7. Data Retention

xc77 retains your personal data for as long as your account remains active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically: registration and identity data is retained for the duration of your account and for up to five years following account closure, in line with anti-money laundering record-keeping obligations; transaction data is retained for a minimum of five years following the transaction date; gameplay and behavioural data is retained for the duration of your account plus two years following closure; technical and device data is retained on a rolling twelve-month basis.

When your data is no longer required for any of the above purposes, xc77 will securely delete or anonymise it so that it can no longer be linked to you as an individual. You may request early deletion of your data by contacting [email protected], subject to xc77's legal obligations to retain certain records for defined minimum periods.

9. Security Measures

xc77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and xc77 servers, secure storage of personal data on access-controlled infrastructure, regular security reviews and vulnerability assessments, strict internal access controls limiting personal data access to authorised personnel only, and audit logging of all access to sensitive account data.

While xc77 takes all reasonable precautions to protect your data, no internet-based system is completely immune to security risks. In the unlikely event of a data breach affecting your personal data, xc77 will notify affected members promptly and take all available steps to minimise resulting harm. You can help protect your account by using a strong, unique password and by never sharing your login credentials with anyone.

10. Protection of Minors

xc77 operates a strict 21+ policy. The platform is not intended for and does not knowingly collect personal data from individuals under the age of 21. If xc77 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe a minor has created an xc77 account, please report this to [email protected] so that we can investigate and take appropriate action without delay.

11. Updates to This Privacy Policy

xc77 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make material changes, we will publish the updated policy on this page with a revised effective date and make reasonable efforts to notify registered members of significant changes before they take effect.

Your continued use of xc77 following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically so that you are always aware of how your personal data is being handled. The effective date shown at the top of this page indicates when the policy was last revised.