su777 Privacy Policy — How We Collect, Use, and Protect Your Data

su777 collects personal information from players at various points during the account lifecycle — from initial registration through to ongoing gameplay and financial transactions. The categories of information we collect, and the contexts in which we collect them, are described below.

Registration Data: When you create an su777 account, we collect your full legal name, date of birth, residential address, email address, and a chosen username. This information is required to establish your identity, confirm your eligibility to play, and communicate with you about your account.

Identity Verification (KYC) Data: To comply with Know Your Customer obligations and age-verification requirements, su777 may request copies of government-issued identification documents such as your National ID card, passport, or driving licence, as well as proof of your residential address such as a recent utility bill or bank statement. This data is used solely for verification purposes.

Financial Data: When you make a deposit or request a withdrawal, su777 records transactional data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction amount in Bangladeshi Taka (৳ BDT), and the transaction date and reference number. su777 does not store your full bKash or Nagad PIN, card number, or banking login credentials — these are handled directly by the respective payment providers under their own security protocols.

Gameplay and Betting Data: su777 records your game activity, including which games you play, bet amounts, win and loss records, session durations, and betting market selections. This data is used for account management, responsible gaming monitoring, dispute resolution, and fraud detection.

Technical and Device Data: When you access su777.ws, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data helps us optimise the platform experience and identify potential security threats.

Communications Data: If you contact su777 support via email or live chat, we retain records of that correspondence, including your queries, our responses, and any attachments you share. These records are kept for quality assurance and dispute resolution purposes.

su777 processes your personal data only for the specific, legitimate purposes outlined below. We do not use your data in ways that are incompatible with these stated purposes, and we do not make automated decisions that produce legal or similarly significant effects solely on the basis of your personal data without human review.

Where su777 relies on your consent as the legal basis for processing — specifically for sending promotional emails about bonuses, tournaments, and seasonal offers — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

su777 does not sell your personal data to any third party. However, in order to operate the platform and deliver core services to players across Bangladesh, su777 works with a limited number of trusted third-party service providers. Personal data is shared with these parties only to the extent necessary for them to perform their contracted functions on su777's behalf.

The categories of third parties with whom su777 may share your personal data are as follows:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transactional data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and security framework.
• Game Content Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session token to enable game delivery. These providers do not receive your full name, address, or payment details.
• Identity Verification Services: Where su777 uses a third-party KYC verification provider to process identity documents, that provider receives the data strictly required to complete the verification check and is prohibited from using it for any other purpose.
• Cloud Infrastructure Providers: su777 uses secure, enterprise-grade cloud hosting infrastructure. Server infrastructure providers may have physical access to encrypted data storage in the course of their hosting services, but they have no ability to read or interpret the encrypted content.
• Fraud Prevention and Security Services: Real-time fraud detection tools may process technical and transactional data to identify suspicious activity patterns. Data processed by these tools is handled under strict confidentiality agreements.

Legal Disclosure: su777 may disclose your personal data to law enforcement authorities, financial regulators, or other competent public bodies where we are required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of su777, our players, or the public.

su777.ws uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised analytics data that helps us improve the user experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other data stored on your device.

The types of cookies used on su777.ws are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate and cannot be disabled. They include session authentication cookies that keep you logged in during a visit, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure stable server performance.
• Functional Cookies: These cookies remember your preferences — such as your display language setting, preferred game lobby view, and whether you have previously acknowledged certain notices — so that you do not need to re-configure them on each visit.
• Analytics Cookies: su777 uses anonymised analytics tools to understand how players navigate the platform, which features are most used, and where technical errors occur. Analytics data is aggregated and does not identify you as an individual. You may opt out of analytics cookies via your account settings.
• Security and Fraud Detection Cookies: Certain cookies help su777's fraud prevention systems identify unusual access patterns, such as login attempts from unfamiliar devices or geographic locations inconsistent with your registered address in Bangladesh.

Managing Cookies: Most web browsers allow you to view, manage, delete, and block cookies through the browser's settings menu. Please note that disabling strictly necessary cookies may prevent you from logging into your su777 account or using core platform features. Disabling functional or analytics cookies will not prevent you from accessing games or betting markets.

su777 maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly in line with evolving best practices for online platform security.

• Transport Encryption: All data exchanged between your browser and su777.ws is encrypted using TLS 1.2 or TLS 1.3 protocols with 256-bit encryption keys. The padlock icon in your browser's address bar confirms an active secure connection.
• Password Hashing: Account passwords are never stored in plain text. su777 applies a cryptographic hashing algorithm with a unique per-account salt to ensure that passwords cannot be recovered even in the event of an internal data breach.
• Access Controls: Internal access to player data is governed by role-based access controls. Only staff members whose job functions require access to specific categories of personal data are granted that access, and all access events are logged in an auditable trail.
• KYC Document Security: Identity documents submitted for verification are stored in an encrypted, access-controlled document vault. Retention of these documents is limited to the period required for compliance purposes, after which they are securely deleted.
• Intrusion Detection: su777's infrastructure is monitored continuously by automated intrusion detection systems that alert the security team to anomalous activity patterns in real time.
• Regular Security Audits: su777 conducts periodic internal security reviews and engages third-party security specialists to perform independent assessments of platform vulnerabilities.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you have reason to believe that your su777 account has been compromised, you should change your password immediately and contact [email protected] without delay. su777 will investigate all reported security incidents promptly and take appropriate remediation steps.

su777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard data retention periods by category.

When the applicable retention period expires, su777 will securely delete or anonymise your personal data so that it can no longer be linked to your identity. Where anonymisation is not technically feasible, the data will be deleted. Anonymised, aggregated data sets that cannot be used to identify any individual may be retained indefinitely for statistical and platform-improvement purposes.

As a registered player on su777, you hold a number of rights in relation to the personal data we hold about you. su777 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data su777 holds about you, along with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented without undue delay.
• Right to Erasure: In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no mandatory retention obligation applies — you may request that su777 delete your personal data.
• Right to Restriction of Processing: You may request that su777 restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where su777 processes your data on the basis of your consent or a contract, you have the right to receive a copy of that data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to Object: You have the right to object to su777's processing of your personal data where that processing is based on legitimate interests. su777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, the receipt of promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

su777 will not charge a fee for handling privacy rights requests in normal circumstances. If a request is manifestly unfounded or excessive — for example, if it is repetitive in nature — su777 reserves the right to charge a reasonable administrative fee or decline the request, providing written reasons for the refusal.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which su777 handles your personal data, please contact our support and data protection team using the details below. All privacy-related enquiries are handled in English and are responded to within 30 days of receipt, Bangladesh Standard Time (UTC+6).

Email: [email protected]
Subject line for data requests: Privacy Rights Request
Support availability: 24 hours a day, 7 days a week

If you are not satisfied with su777's response to a privacy concern, you have the right to escalate your complaint to the appropriate data protection authority in your jurisdiction. su777 will cooperate fully with any investigation conducted by a competent supervisory authority.

For information about your rights as a player beyond data privacy — including responsible gaming tools, self-exclusion, and deposit limits — please visit the Responsible Gaming page or review the Terms & Conditions.