6777 Privacy Policy — Your Data, Our Responsibility

Introduction

This Privacy Policy (the "Policy") sets out the basis on which 6777 (the "Platform", "we", "us", or "our"), operating the website at https://6777.cam, collects, processes, stores, and shares personal data relating to users of the platform ("you", "your", or "the User"). This Policy applies to all players who register an account on 6777, all visitors to the 6777 website, and all persons who contact 6777 through any available support channel.

6777 is committed to handling personal data with transparency, integrity, and in full accordance with the principles of responsible data stewardship. We recognise that the personal and financial information you entrust to us is sensitive, and we treat that trust as a serious obligation. This Policy is designed to give you a clear, honest account of our data practices so that you can make informed decisions about your use of the 6777 Services.

This Privacy Policy should be read alongside the 6777 Terms and Conditions, which are available at /terms-conditions, and the Responsible Gaming Policy at /responsible-gaming. Together, these documents form the full agreement that governs your relationship with 6777.

Personal Data We Collect

6777 collects the following categories of personal data in the course of operating its Services. The specific data points collected from any individual user will depend on how they interact with the platform and what Services they choose to use.

6777 does not intentionally collect or process special categories of personal data (such as health data, biometric data, political opinions, or religious beliefs). If any such data is inadvertently submitted — for example, within a support message — it will not be retained beyond what is necessary to handle the specific communication.

How We Collect Your Data

6777 collects personal data through the following methods:

• Direct Submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact the support team, or respond to a promotional offer.
• Automated Technical Collection: Data collected automatically when you access the 6777 website, including via cookies, pixel tags, session tracking, and server logs. This occurs whether or not you are logged in to an account.
• Payment Service Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard in connection with deposits and withdrawal processing.
• Game Providers: Gameplay outcome data and session records provided by licensed game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe, to the extent necessary for account crediting, dispute resolution, and responsible gaming oversight.
• Identity Verification Partners: Where applicable, confirmation of identity document authenticity from third-party KYC verification service providers contracted by 6777.
• Fraud Prevention Databases: Data cross-referenced against industry fraud prevention and self-exclusion databases to protect the integrity of the platform and its users.

How We Use Your Personal Data

6777 uses the personal data it collects for the following purposes. For each purpose, the applicable legal basis is noted in parentheses and is described in full in Section 5:

• Account Registration and Management: To create and administer your 6777 account, verify your identity and age, and maintain accurate account records. (Contract performance; Legal obligation)
• Processing Transactions: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to your nominated payment method. (Contract performance)
• KYC and Anti-Money Laundering Compliance: To verify your identity, screen against sanctions and PEP (Politically Exposed Persons) lists, and fulfil our anti-money laundering obligations. (Legal obligation)
• Customer Support: To respond to your queries, handle complaints, and resolve disputes relating to your account or gameplay. (Contract performance; Legitimate interests)
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct. (Legitimate interests; Legal obligation)
• Responsible Gaming Monitoring: To identify patterns of play that may indicate problem gambling, to apply responsible gaming tools at the player's request, and to enforce self-exclusion requests. (Legal obligation; Legitimate interests)
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, usability, and content of the 6777 platform. (Legitimate interests)
• Marketing Communications: To send you promotional offers, bonus notifications, and news about 6777 Services — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time. (Consent)
• Legal and Regulatory Compliance: To respond to lawful requests from regulatory and law enforcement authorities, and to retain records as required by applicable law. (Legal obligation)

6777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

Legal Basis for Processing

6777 processes your personal data on the following legal grounds:

• Contract Performance: Processing that is necessary to perform the contractual obligations between 6777 and the user, including account operation, transaction processing, and the delivery of gaming and betting Services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing that serves 6777's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your data protection rights and interests. Where 6777 relies on legitimate interests, we apply a balancing test to confirm that our interests do not unfairly prejudice your privacy.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — principally for the sending of direct marketing communications. Consent may be withdrawn at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email.

Sharing Your Personal Data

6777 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — for the sole purpose of processing deposits and withdrawals on your account. These providers are bound by their own privacy policies and by contractual data protection obligations with 6777.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other licensed game studios — to the extent necessary to deliver game content, record game outcomes, and fulfil dispute resolution requirements.
• Identity Verification Services: Third-party KYC and age verification partners contracted by 6777 to confirm the authenticity of identity documents submitted by players.
• Fraud Prevention and Security Partners: Industry fraud prevention databases and security service providers, to detect and prevent fraudulent activity, account misuse, and money laundering.
• Regulatory and Law Enforcement Authorities: Where 6777 is required by applicable law, court order, or lawful regulatory directive to disclose personal data, we will comply with such requirements and, where legally permissible, will notify the affected player.
• Professional Advisers: Legal, accounting, and audit professionals retained by 6777 in connection with the operation of its business, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the 6777 business, personal data held by 6777 may be transferred to the successor entity, subject to the same or equivalent privacy protections as those set out in this Policy.

All third parties with whom 6777 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than those specified by 6777.

Cookies & Tracking Technologies

6777 uses cookies and similar tracking technologies (including pixel tags and session identifiers) to operate the platform, improve user experience, and gather analytics data. The following categories of cookies are used on the 6777 website:

Most web browsers allow you to manage cookie settings through the browser's privacy or settings menu. You can typically choose to block all non-essential cookies, delete existing cookies, or receive a notification before a cookie is stored. Please be aware that disabling functional or analytics cookies may affect the quality of your experience on the 6777 platform but will not prevent you from accessing the core Services.

6777 does not use cookies to serve third-party advertising on its website. The analytics cookies used by 6777 do not transmit personally identifiable information to any third-party advertising network.

Data Security

6777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Encryption: All data transmitted between your browser or device and the 6777 servers is encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception during transit.
• Encryption at Rest: Sensitive data fields — including identity document references and financial account identifiers — are encrypted at the database level using industry-standard encryption algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised 6777 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Infrastructure Security: 6777 servers are hosted on secure, access-controlled infrastructure with continuous intrusion detection monitoring, regular vulnerability scanning, and periodic penetration testing.
• Separation of Funds: Player account balances are held separately from 6777's operational funds, ensuring that player money is protected in the event of any business disruption.
• Incident Response: 6777 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, 6777 will notify affected users without undue delay.

While 6777 takes all reasonable and practicable steps to protect your personal data, no system connected to the public internet can be guaranteed to be completely impenetrable. You are responsible for keeping your own account credentials confidential and for notifying 6777 immediately if you suspect any unauthorised access to your account.

Data Retention

6777 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or for as long as is required by applicable law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active 6777 account is retained for the duration of the account's existence and for a period of at least 5 years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction Records: Records of all financial transactions (deposits and withdrawals) are retained for a minimum of 5 years following the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documentation: Identity verification documents submitted for KYC purposes are retained for a minimum of 5 years following account closure or the completion of the relevant KYC process, whichever is later.
• Support Communications: Records of customer support interactions are retained for a period of 3 years following the resolution of the relevant query or complaint, for quality assurance and regulatory compliance purposes.
• Technical and Security Logs: Server logs, IP address records, and security event logs are retained for a period of 12 months, after which they are securely deleted or anonymised.
• Marketing Consent Records: Records of your marketing consent preferences are retained for as long as you maintain an account with 6777, and for a further 3 years following account closure, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted from 6777's systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where technical constraints prevent immediate deletion, data will be isolated from active processing and queued for deletion at the earliest practical opportunity.

Your Data Rights

As a user of the 6777 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the 6777 data support team at [email protected] with the subject line "Data Rights Request" and your registered account username. 6777 will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that 6777 holds about you, together with information about how it is processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that 6777 holds about you. Where data is inaccurate, 6777 will correct it without undue delay upon receiving a verified request.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to 6777's legal retention obligations, which may require certain data to be retained notwithstanding an erasure request.
• Right to Restriction of Processing: You have the right to request that 6777 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where 6777 is relying on the legitimate interests legal basis. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where 6777 processes your data based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Children's Privacy

The 6777 platform is strictly intended for use by adults aged 18 years and over. 6777 does not knowingly collect, process, or retain any personal data from individuals under the age of 18. The registration process includes mandatory age verification steps designed to prevent minors from accessing the Services.

If 6777 becomes aware that personal data has been collected from a person under the age of 18, that data will be immediately deleted and the associated account will be permanently closed. Any funds held in an account that is found to belong to a minor will be returned via the original payment method to the extent practicable.

If you are a parent or guardian and you believe that a person under your care may have registered an account on 6777, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Third-Party Services

The 6777 platform integrates with a number of third-party service providers — including payment processors, game content providers, and infrastructure partners — whose services are necessary for the operation of the platform. While 6777 takes care to partner only with reputable, security-conscious providers, please be aware of the following:

• Independent Privacy Policies: Each third-party service provider operates under its own privacy policy, which governs how that provider collects and processes data in the course of delivering its services. 6777 is not responsible for the privacy practices of third-party providers beyond the contractual data protection obligations it imposes on them.
• Payment Providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your transaction data is processed by those providers' own systems and is subject to their respective privacy policies in addition to this Policy.
• Game Providers: Game sessions facilitated by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may involve the transmission of gameplay session data to those providers' servers for game outcome calculation and result verification purposes.
• No Third-Party Advertising Networks: 6777 does not integrate third-party advertising networks or programmatic ad delivery systems on its platform. Your browsing behaviour on 6777 is not shared with advertising technology companies.
• Links and Embedded Content: The 6777 website does not contain links to external websites or embedded third-party content beyond the integrated game and payment services described in this Policy.

6777 conducts due diligence on all third-party service providers before engagement and requires all data processors to implement appropriate technical and organisational security measures consistent with their role in delivering services to 6777 and its users.

Changes to This Privacy Policy

6777 reserves the right to update or amend this Privacy Policy at any time, in response to changes in applicable law, regulatory guidance, our Services, or our data processing practices. The following procedures apply when this Policy is revised:

• Version Control: Each version of this Policy carries an effective date prominently displayed at the top of the document. The version currently published at https://6777.cam/privacy-policy is always the operative version.
• Notification of Material Changes: Where a change to this Policy is material — meaning it significantly affects the way 6777 collects, uses, or shares your personal data — 6777 will notify registered users via their registered email address and/or via a prominent notice on the 6777 website at least 14 days before the revised Policy takes effect.
• Non-Material Changes: Minor updates such as typographical corrections, clarifications that do not alter the substance of the Policy, or changes required by regulatory guidance may take effect immediately upon publication without advance notice.
• Continued Use: Your continued use of the 6777 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the platform and contact support to request account closure.

6777 encourages you to review this Privacy Policy periodically to remain informed about how your data is handled. The most current version will always be accessible at /privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 6777 processes your personal data, please contact our support team using the details below. 6777 is committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Subject Line for Privacy Enquiries: "Privacy Policy Enquiry — [Your Username]"
• Response Time: Within 24 hours during Bangladesh Standard Time (BST, UTC+6) business hours; data rights requests within 30 calendar days
• Support Availability: 24 hours a day, 7 days a week
• Languages Supported: English

When submitting a data rights request, please include your registered username, the specific right you wish to exercise, and any relevant context to help our team process your request efficiently. Where identity verification is required, our team will advise you of the documents needed.

6777 values the trust you place in us by sharing your personal information. We are committed to honouring that trust through transparent data practices, robust security, and a genuine respect for your privacy rights. Thank you for taking the time to read this Privacy Policy.