pa77 Privacy Policy

1.1 Registration & Identity Data

When you create a pa77 account, we collect the personal information you provide directly during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and your preferred payment method details. This information is required to create and maintain your account, verify your identity, and comply with our know-your-customer (KYC) obligations.

If you are requested to complete enhanced identity verification at any point — for example, before a withdrawal is processed — we may additionally collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address and proof of payment method ownership.

1.2 Transaction & Activity Data

pa77 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, bonus claims, and the payment methods used for each transaction. We also log all gaming activity on your account — including games played, bet amounts, wagering history, and session durations — for the purposes of account administration, bonus eligibility verification, responsible gaming monitoring, and fraud prevention.

Transaction data is denominated in Bangladeshi Taka (BDT). Records of all financial activity are retained for a minimum period in accordance with our anti-money laundering obligations, regardless of account status.

1.3 Technical & Device Data

When you access pa77, our servers automatically collect certain technical information about your connection and device. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), referring URL, pages visited within pa77, time and duration of visits, and session identifiers. This data is used to maintain platform security, detect unauthorised access, optimise the pa77 experience across different devices, and diagnose technical issues.

1.4 Communications Data

If you contact pa77 via live chat, email, or WhatsApp, we retain a record of that communication including the content of messages, the date and time of contact, and the outcome of any support interaction. This data is used to resolve your query, maintain quality standards, train support personnel, and as an audit record of interactions relevant to account disputes or compliance reviews.

1.5 Summary of Data Categories

3.1 Payment Processors

To process your deposits and withdrawals, pa77 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks such as Visa and Mastercard. These providers act as independent data controllers for the payment transaction itself and are bound by their own privacy policies and applicable financial regulations. pa77 does not store full card numbers or mobile banking PINs on its own servers.

3.2 Identity Verification & KYC Partners

pa77 may use third-party identity verification services to assist with KYC document checks and age verification. Where such services are used, your identity documents are shared securely with the provider solely for verification purposes. All KYC partners engaged by pa77 are contractually bound to process your data only for the specific purpose instructed and to maintain confidentiality.

3.3 Legal & Regulatory Disclosure

pa77 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory authorities where we are legally required to do so — for example, in response to a valid court order, a lawful request relating to suspected criminal activity, or our obligations under applicable anti-money laundering laws. In such cases, pa77 will disclose only the minimum information required to satisfy the legal obligation and will not notify the account holder where doing so would be unlawful or would compromise an ongoing investigation.

3.4 Technology & Hosting Providers

pa77 uses third-party cloud infrastructure, game content providers, and software platforms to operate the pa77 service. These providers may process certain technical or anonymised player data as part of delivering their services to pa77. All such providers are engaged under contractual data processing agreements that restrict them to processing data only on pa77's documented instructions and prohibit them from using pa77 player data for their own purposes.

5.1 Security Measures

pa77 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Key technical and organisational measures include: 256-bit SSL/TLS encryption for all data in transit; encryption at rest for sensitive stored data including identity documents and payment details; role-based access controls ensuring staff access only the data relevant to their function; two-factor authentication requirements for administrative system access; regular security audits and vulnerability assessments of the pa77 platform infrastructure.

While pa77 applies industry-standard security practices, no system can guarantee absolute security against all potential threats. If you become aware of any security vulnerability or suspect that your pa77 account has been accessed without your authorisation, please contact us immediately at [email protected].

5.2 Data Retention Periods

pa77 retains your personal data for as long as your account remains active and for a defined period following account closure. The specific retention periods applied by pa77 are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of the session or bet.
• Support communications: Retained for two (2) years from the date of the interaction, unless the communication is relevant to an ongoing dispute or compliance matter.
• Technical and device data: Retained for up to twelve (12) months on a rolling basis.

When a retention period expires, pa77 will securely delete or irreversibly anonymise the relevant data so that it can no longer be linked to any individual player.

7.1 No Knowing Collection of Minors' Data

pa77 does not knowingly collect or process personal data from individuals under the age of 18. If during the course of identity verification or age verification we determine that a registered player is under 18, their account will be immediately closed, all gameplay will be voided, and any deposited funds will be returned to the original payment source. All associated data will be retained only for the minimum period required to document the enforcement action and will then be securely deleted.

If you are a parent or guardian and believe that a person under your care has registered an account on pa77 without your knowledge, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action. We also recommend using parental control software to restrict minors' access to online gambling platforms, including pa77.