aec77 Privacy Policy

aec77 is committed to protecting the privacy and personal data of every player and visitor who uses the Platform. We recognise that the players who use aec77 trust us with sensitive information — including mobile wallet identifiers, transaction records and identity documents — and we take that responsibility seriously. This Policy is written in plain language to ensure that players in Bangladesh can understand exactly how their data is handled, regardless of their level of technical knowledge.

This Policy applies to all personal data collected through the aec77 website at aec77.vip, through our customer support channels, and through any promotional communications we send to registered players. It does not apply to third-party websites or services that may be linked to or integrated with the Platform, such as bKash, Nagad or Rocket payment gateways — those services are governed by their own privacy policies, which we encourage you to read before completing any transaction through them.

aec77 collects personal data through several channels in the ordinary course of operating the Platform. The categories of personal data we collect include:

• Registration data — your chosen username, the Bangladesh mobile number you provide at sign-up, and any email address you optionally associate with the account.
• Identity verification data — where required to comply with age verification or KYC obligations, copies of government-issued identity documents such as your National Identity Card (NID), passport or driving licence, and/or a recent photograph.
• Payment and transaction data — the mobile wallet number (bKash, Nagad, Rocket or Upay) or card details (Visa or Mastercard) used to make deposits and receive withdrawals, together with records of every transaction including amounts, timestamps and transaction reference numbers.
• Gameplay and activity data — a complete record of every game round, bet placed, outcome recorded and bonus claimed on your account, together with session start and end timestamps and the IP address used during each session.
• Device and technical data — your device type (Android or iOS), browser type and version, operating system, screen resolution, and general location data derived from your IP address (country and city level only — aec77 does not collect GPS coordinates).

Where you contact aec77 support, we also retain records of those communications — including the content of messages, the date and time of contact, and the outcome of any support request. This retention is necessary to maintain quality standards and to provide consistent support to players.

aec77 uses the personal data it collects only for legitimate, defined purposes directly related to the operation of the Platform and the delivery of services to players. Specifically, we use your data to:

• Verify your age and identity at registration and in response to any KYC request, in order to comply with our obligation to prevent underage gambling and to maintain the integrity of the Platform.
• Process your deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa and Mastercard, and maintain accurate records of all financial transactions on your account for audit and dispute resolution purposes.
• Deliver and personalise your gaming experience — including presenting game recommendations based on your play history, applying bonus offers you are eligible for, and remembering your account preferences such as language and notification settings.
• Detect, investigate and prevent fraud, money laundering, collusion, bonus abuse and other prohibited conduct, and to take enforcement action where evidence of such conduct is established.
• Send you critical account communications such as deposit confirmations, withdrawal notifications, security alerts, KYC requests and changes to these policies. These communications are part of the service and cannot be disabled while your account remains active.
• Send promotional communications (where you have not opted out) about bonus offers, new game launches, seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL or IPL, and other Platform news. Promotional communications can be disabled at any time by contacting support at [email protected].

aec77 processes personal data only where a lawful basis exists for doing so. The legal bases on which we rely are:

• Contractual necessity — processing your registration data, payment data and gameplay data is necessary to perform the contract between you and aec77 when you open an account and use the Platform's services.
• Compliance with legal obligations — processing identity and KYC data is necessary to comply with obligations relating to age verification, anti-money-laundering procedures and responsible gaming requirements.
• Legitimate interests — processing device data, gameplay audit logs and fraud-detection signals to protect the integrity and security of the Platform and to protect other players from fraudulent or abusive behaviour.
• Consent — sending promotional communications where you have expressly consented to receive them at registration or have not subsequently opted out.

aec77 does not sell, rent or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment processors — when you make a deposit or request a withdrawal, your payment details are shared with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa or Mastercard) solely to execute the transaction. aec77 does not store full card numbers; card data is tokenised by the payment processor.
• Game content providers — your account identifier and gameplay session data are shared with licensed game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi) to the extent necessary to deliver their games to your browser and to resolve any game-related disputes.
• Fraud prevention and security services — anonymised or pseudonymised event data may be shared with third-party fraud-detection services to identify patterns of suspicious activity that threaten the Platform's security.
• Law enforcement and regulatory authorities — where aec77 is required by law to disclose personal data to a government authority, law enforcement agency or regulatory body, we will comply with that legal obligation. Where legally permissible, we will notify the affected player before making such a disclosure.

All third parties with whom aec77 shares personal data are required by contract to protect that data to a standard at least equivalent to the protections described in this Policy, and to use the data only for the purposes for which it was shared. aec77 does not authorise any third party to use player data for their own marketing or commercial purposes.

aec77 recognises that mobile financial services — particularly bKash and Nagad — are central to the daily financial lives of players in Bangladesh. We apply additional care to the handling of payment-related personal data. When you make a deposit or withdrawal using bKash or Nagad, the transaction is initiated directly between the aec77 platform and the payment provider's secure API. Your bKash or Nagad PIN is entered directly into the payment provider's own interface; it is never entered into, stored by, or visible to aec77. aec77 retains only the mobile wallet number, the transaction reference number issued by the payment provider, the transaction amount and the timestamp — the minimum information required to credit your account, process your withdrawal and resolve any payment dispute.

For Visa and Mastercard transactions, full card numbers are never stored on aec77 servers. Card details entered during a deposit are immediately tokenised by our payment processor. aec77 retains only the card token, the last four digits of the card number, the card type and the transaction reference — again, the minimum necessary for transaction reconciliation and dispute resolution. Players from Bangladesh using Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank or Sonali Bank cards benefit from the same tokenisation protections.

aec77 uses a small number of cookies and similar local storage technologies to make the Platform function correctly and to improve the player experience. We do not use third-party advertising cookies or cross-site tracking technologies. The cookies we use fall into three categories:

• Essential cookies — these are required for the Platform to function. They maintain your login session between page loads and protect the Platform against cross-site request forgery (CSRF) attacks. Without these cookies, the Platform cannot operate. These cookies cannot be disabled.
• Functional cookies — these remember your account preferences such as your selected language, notification settings and any responsible gaming limits you have configured. They improve your experience but are not strictly required for the Platform to operate.
• Analytics cookies — anonymised, aggregated data about how players navigate the Platform (e.g. which pages are visited most frequently, which game categories are most popular) helps us improve the Platform's design and content. This data cannot be used to identify individual players.

Most modern browsers allow you to view, manage and delete cookies through the browser's settings menu. Disabling essential cookies will prevent you from logging into the Platform. Disabling functional cookies may cause the Platform to lose your saved preferences between sessions. Disabling analytics cookies will not affect the Platform's functionality.

aec77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction on an account, in order to satisfy financial record-keeping requirements and to enable the resolution of any disputes that arise after account closure. Identity verification documents (NID copies, passport copies) are retained for a minimum of five (5) years from the date they were submitted, in line with standard anti-money-laundering record-keeping obligations.

Where a player requests deletion of their account or the erasure of their personal data, aec77 will delete or anonymise data that is no longer required for a legitimate purpose, subject to any overriding legal retention obligation. Data subject to a legal hold — for example, transaction records under financial record-keeping law, or data related to an ongoing fraud investigation — cannot be deleted until the legal hold is lifted. aec77 will inform the player of any such retention obligation and the expected timeline for deletion where that can be reasonably estimated.

aec77 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction and disclosure. Key measures include: SSL/TLS 256-bit encryption for all data in transit between your device and our servers; encryption at rest for sensitive data fields including identity document copies and payment references stored in our databases; access controls that restrict internal access to personal data to staff members who have a legitimate operational need for it, enforced through role-based permissions and multi-factor authentication; regular security audits and penetration tests conducted by independent security professionals; and an incident response plan that includes notification procedures in the event of a data breach affecting player personal data.

Despite these measures, no security system is impenetrable. aec77 cannot guarantee the absolute security of personal data in all circumstances. If you believe your account has been compromised — for example, if you notice unrecognised login activity or an unexpected transaction — you should contact aec77 support immediately at [email protected] so that we can take prompt protective action, including suspending account access while the incident is investigated.

You have the following rights in relation to the personal data that aec77 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and provide a substantive response within 30 days.

• Right of access — you may request a copy of all personal data aec77 holds about you, free of charge, once per calendar year. Additional requests within the same calendar year may be subject to a reasonable administrative fee.
• Right of rectification — if any personal data aec77 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For account-critical data such as your registered mobile number, we may require identity verification before making any change.
• Right of erasure — you may request that aec77 delete personal data that is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligation. A request for erasure does not guarantee immediate deletion of all data — see the Data Retention section above for details.
• Right to restrict processing — you may request that aec77 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and that objection is pending review.
• Right to withdraw consent — where processing is based on your consent (for example, promotional communications), you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

aec77 will not discriminate against players who exercise their data rights. Exercising a data right does not affect your ability to continue using the Platform, subject to any legal obligation that requires us to retain certain data as a condition of providing the service (for example, KYC data required to process withdrawals).

aec77 is strictly an adult platform. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. If you are a parent or guardian and you believe that a minor under your care has registered an account or provided personal data to aec77 without your consent, please contact us immediately at [email protected]. Upon verification of such a report, aec77 will immediately close the minor's account, return any deposited funds to the payment method used for the deposit, and securely delete all personal data associated with that account.

aec77 may update this Privacy Policy from time to time to reflect changes in the Platform's data practices, changes in applicable law, or improvements to our security and privacy standards. When we make a material change — one that significantly affects how we handle your personal data — we will display a prominent notice on the Platform for a minimum of seven (7) days before the change takes effect, and where reasonably practicable we will send a notification to your registered mobile number. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage players to review this Policy periodically so that they remain informed about how aec77 handles their personal data.

If you have any questions, concerns or requests relating to this Privacy Policy or the way aec77 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, including Bangladeshi public holidays. Email: [email protected] (plain text — not a clickable link). We aim to acknowledge all privacy-related queries within 48 hours and to provide a full response within 30 days. All privacy-related communications are handled in strict confidence by designated members of our support team.