Privacy Policy — How ez77 Collects, Uses, and Protects Your Personal Data

1 Introduction

ez77 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://ez77.io (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who use our Platform, including registered players, visitors, and prospective users based in Bangladesh and elsewhere.

This Privacy Policy explains what personal data we collect, the purposes for which we process it, the legal basis on which we rely, how long we retain it, with whom we share it, and what rights you hold as a data subject. This document should be read alongside the ez77 Terms & Conditions, which govern the overall relationship between you and ez77.

By creating an account, making a deposit, or continuing to use the Platform after any material update to this Privacy Policy, you acknowledge that you have read and understood this document in full. If you do not agree with any part of this Privacy Policy, you must cease use of the Platform and may request closure of your account by contacting our support team.

2 Data Controller

For the purposes of applicable data protection legislation, ez77 is the data controller in respect of the personal data collected and processed through the Platform. As data controller, ez77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.

Queries relating to data protection, privacy rights, or this Privacy Policy may be directed to our dedicated support team using the contact details provided in Section 15 of this document.

3 Personal Data We Collect

We collect personal data in several categories depending on the nature of your interaction with the Platform. The table below summarises the categories of data we typically collect:

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health data, except where the collection of health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion or self-assessment request.

4 How We Collect Your Data

We collect personal data through the following channels:

4.1 Direct Collection

Data provided directly by you during the account registration process, KYC verification submissions, deposit and withdrawal transactions, customer support interactions, and completion of any responsible gaming self-assessment tools available on the Platform.

4.2 Automated Collection

When you access and navigate the Platform, we automatically collect technical and usage data via cookies, web beacons, log files, and similar tracking technologies. This includes your IP address, the pages you visit, the games you interact with, and the duration of your sessions. Please refer to Section 8 (Cookies & Tracking) for further detail.

4.3 Third-Party Sources

In certain circumstances, we may receive data about you from third-party sources, including:

• Identity verification and fraud-screening service providers used to validate the information you supply during KYC.
• Payment processors such as bKash, Nagad, Rocket, and Upay, who confirm the status and ownership of a mobile financial service wallet in connection with a deposit or withdrawal transaction.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may share gameplay session metadata with us for dispute resolution and RNG audit purposes.
• Anti-money laundering (AML) and politically exposed persons (PEP) screening databases.

5 Legal Basis for Processing

ez77 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the ez77 Terms & Conditions, including maintaining your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification obligations, and record-keeping requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of ez77 in operating a secure, fraud-free platform, preventing bonus abuse, optimising the player experience, and conducting internal analytics — provided such interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as the basis for processing (for example, sending optional marketing communications), you may withdraw that consent at any time by contacting our support team or using the opt-out mechanism included in any marketing communication.

6 How We Use Your Personal Data

The personal data we collect is used for the following purposes:

• To create, maintain, and administer your ez77 account.
• To verify your identity and age in compliance with our KYC procedures and to ensure that the Platform is used only by eligible players aged 21 and above.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and other forms of prohibited conduct.
• To monitor gameplay behaviour in connection with our responsible gaming obligations, including identifying patterns that may indicate problem gambling.
• To respond to customer support queries, complaints, and dispute resolution requests.
• To send transactional communications, such as deposit confirmations, withdrawal status updates, and security alerts, which are necessary for the operation of your account.
• To send promotional and marketing communications, where you have given consent or where we have a legitimate interest in doing so subject to your right to opt out at any time.
• To improve the Platform through internal analytics, A/B testing, and user experience research.
• To comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms & Conditions.

7 Data Sharing and Disclosure

ez77 does not sell or rent your personal data to any third party. We may share your data only in the limited circumstances described below:

7.1 Service Providers and Technology Partners

We engage trusted third-party service providers to support the operation of the Platform, including payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, cloud hosting providers, fraud detection services, customer support platforms, and analytics tools. These providers process your data solely on our instructions and under strict contractual obligations of confidentiality.

7.2 Game Studios and Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical and session data to facilitate gameplay, resolve technical disputes, and fulfil their RNG audit and fair-play certification obligations. No financially sensitive data is shared with game studios beyond what is technically required.

7.3 Legal and Regulatory Disclosure

We may disclose your personal data where required to do so by law, court order, or in response to a lawful request from a regulatory authority, law enforcement agency, or other competent public body. Such disclosures will be limited to the minimum data necessary to comply with the obligation in question.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the ez77 business, personal data held by ez77 may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the privacy implications thereof in advance of the transfer taking effect, to the extent permitted by applicable law.

8 Cookies & Tracking Technologies

The ez77 Platform uses cookies and similar tracking technologies to enhance user experience, maintain session state, detect fraud, and gather aggregated analytics data. A cookie is a small text file placed on your device by your browser when you visit the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences, such as language settings and display options, to improve your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform. This data is used to identify usability issues and improve page performance. No individually identifiable data is transmitted via analytics cookies.
• Security and Fraud-Prevention Cookies: Used by our fraud-detection systems to identify unusual patterns of behaviour that may indicate account compromise or fraudulent activity.

8.2 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types of cookies, or delete cookies after each session. Please be aware that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. Instructions for managing cookies in commonly used browsers are available via your browser's help documentation.

9 Data Security

ez77 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS 1.3 protocol. Our Platform enforces HTTPS on all pages and API endpoints.
• Encryption at Rest: Personal data and financial records stored on our servers are encrypted at rest using industry-standard symmetric encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised ez77 personnel and contractors on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Password Security: Player account passwords are stored using a strong one-way cryptographic hashing function with unique salting. We do not store passwords in plaintext under any circumstances.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous traffic patterns.
• Vendor Security Standards: All third-party service providers with access to personal data are contractually required to maintain security standards equivalent to those applied by ez77.

Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ez77 will notify affected players without undue delay using the contact details held on file.

10 Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years from the date of each transaction.
• KYC and Verification Documents: Retained for the duration of the account relationship and for a minimum of five years following account closure.
• Support and Communications Records: Retained for up to three years from the date of the last interaction, unless the relevant communication relates to an ongoing dispute, legal claim, or regulatory inquiry.
• Technical and Usage Data: Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs are deleted after a maximum of 12 months.
• Marketing Consent Records: Records of consent to receive marketing communications are retained for the duration of the marketing relationship and for 12 months following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with an identifiable individual.

11 Your Data Protection Rights

You hold the following rights in relation to the personal data held about you by ez77. To exercise any of these rights, please contact us using the details in Section 15.

• Right of Access: You have the right to request a copy of the personal data ez77 holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Where possible, corrections should first be attempted via your account profile settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal obligations that may require us to retain certain data.
• Right to Restriction of Processing: You have the right to request that we restrict processing of your data in certain circumstances, such as while a dispute regarding data accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of a legal claim.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further two months, of which you will be notified. We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive.

12 Children and Minors

The ez77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account without notice.

If you are a parent or guardian and believe that a minor under your care has registered an account or provided personal data on the ez77 Platform, please contact our support team immediately at [email protected] so that we may investigate and act accordingly.

13 Third-Party Links

The ez77 Platform does not contain links to external third-party websites. In the event that any third-party content or service is embedded within the Platform (for example, a game studio's embedded game interface), that content operates under the third party's own privacy practices. ez77 is not responsible for the data practices of third-party game studios or any other external service providers whose software is rendered within the Platform environment. Players are encouraged to review the privacy policies of any third-party providers whose services they interact with.

14 Updates to This Privacy Policy

ez77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. All updates will be published on this page with a revised effective date clearly displayed at the top of the document.

Where updates are material — meaning they significantly affect how we collect, use, or share your personal data — we will provide advance notice via on-platform notification or email to your registered address, no less than 14 days before the changes take effect. Non-material updates (such as typographical corrections or clarifications that do not change the substance of our practices) may take effect immediately upon publication.

Your continued use of the Platform after the effective date of any update constitutes your acknowledgment and acceptance of the revised Privacy Policy. If you do not agree with any update, your right is to cease use of the Platform and request account closure as described in the ez77 Terms & Conditions.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ez77, please contact our support team using the following details:

• Email: [email protected]
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

All formal data subject requests and privacy-related correspondence should be directed to the email address above. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days of receipt.

For general questions about your account, deposits, withdrawals, or the ez77 Platform, our support team is available around the clock via WhatsApp and email.