ci777 Privacy Policy

This Privacy Policy ("Policy") describes how ci777 ("ci777", "we", "us", "our") collects, uses, stores, and protects the personal data of users ("Player", "User", "you") who access or use the online casino and sports betting platform operated at ci777.io.

By registering an account on ci777, accessing the platform, or placing any wager, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the ci777 platform.

This Policy forms an integral part of the ci777 Terms & Conditions. Defined terms used in this Policy that are not separately defined herein carry the meanings assigned to them in the Terms & Conditions.

This Policy applies to all personal data collected through the ci777.io website, any mobile-optimised version of the platform, and all communications between you and ci777 (including email, live chat, and support interactions).

ci777 acts as the data controller in respect of the personal data collected through the ci777.io platform. As data controller, ci777 determines the purposes for which and the manner in which personal data is processed.

For all data-related enquiries, including requests to exercise your rights under this Policy, you may contact the ci777 Data Protection team at:

• Email: [email protected]
• Subject line: Data Privacy Request — [Your Registered Username]
• Response time: Within 30 calendar days of receipt

ci777 operates as an internationally licensed offshore platform. The platform is made available to players in Bangladesh and other permitted markets through a centralised technical infrastructure operated by ci777 and its authorised service partners.

ci777 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are aged 21 or above)
• Residential address (including city, district, and postal code)
• Email address
• Mobile phone number
• Username and account credentials (password stored in hashed, non-reversible form)

3.2 KYC Verification Documents

• Copy of government-issued National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)
• Proof of payment method ownership (e.g., screenshot or statement confirming bKash or Nagad registration in your name)

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method details (bKash account reference, Nagad account reference, bank account details — we do not store full card numbers)
• Transaction history, account balance history, and bonus credit/debit records

3.4 Gaming & Betting Activity Data

• Games played, bets placed, wagers settled, and outcomes
• Session start and end times, session duration, and session frequency
• Responsible gaming settings you have applied (deposit limits, cool-off periods, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Referring URL and pages visited within ci777.io
• Cookie identifiers and session tokens (see Section 8)

3.6 Communications Data

• Content of live chat conversations, email correspondence, and support ticket exchanges between you and ci777
• Records of promotional communications you have opted into or opted out of

ci777 collects personal data through the following channels and mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically through platform use: Via cookies, session trackers, and server logs when you browse or interact with ci777.io (see Section 8 for full cookie details).
• From third-party KYC partners: Identity verification results and risk scores may be returned to ci777 by authorised third-party KYC service providers who process the documents you submit.
• From payment processors: Transaction confirmation data, payment status updates, and chargeback notifications may be received from payment partners including bKash, Nagad, Rocket, Upay, and banking partners.
• From fraud prevention services: Risk signals and flagging data from authorised fraud detection partners used to protect the integrity of the ci777 platform.

The table below summarises the specific purposes for which ci777 processes your personal data, together with the corresponding legal basis for each processing activity:

Where ci777 relies on legitimate interest as the legal basis for processing, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You may object to processing based on legitimate interest by contacting [email protected].

ci777 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipients solely to the extent necessary to deliver our services or meet our legal obligations:

6.1 KYC and Identity Verification Partners

Authorised third-party KYC service providers process the identity documents you submit in order to verify your identity and age. These providers are contractually bound to process your data only for verification purposes and may not use it for any other purpose.

6.2 Payment Processing Partners

Payment partners including bKash, Nagad, Rocket, Upay, and banking institutions receive only the transaction data necessary to execute your deposit or withdrawal instruction. ci777 does not transmit your full payment credentials to any third party beyond what is technically required to complete the transaction.

6.3 Fraud Prevention and Security Services

ci777 works with authorised fraud detection and cyber-security service providers to protect the platform from unauthorised access, bonus abuse, and financial crime. These providers may receive technical and transaction data in anonymised or pseudonymised form for risk-scoring purposes.

6.4 Game Software Providers

Game studios and software providers (including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming) may receive a session token and anonymous player identifier in order to load game content. These providers do not receive your personally identifiable information.

6.5 Legal and Regulatory Disclosure

ci777 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or lawful regulatory request. In such cases, ci777 will disclose only the minimum data necessary to fulfil the legal requirement.

ci777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and KYC documents: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of 3 years for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for 2 years from the date of the most recent communication in each support thread.
• Marketing consent records: Retained for the duration of your opt-in consent, plus 1 year following withdrawal of consent.
• Technical and device data (logs): Retained for 12 months on a rolling basis for fraud prevention and platform security purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for aggregate statistical analysis.

ci777 uses cookies and similar technologies (such as session tokens and local storage) to operate and improve the platform. The following categories of cookies are used on ci777.io:

ci777 does not use cross-site advertising cookies or behavioural retargeting cookies. No data collected through ci777.io cookies is sold to or shared with advertising networks.

You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

ci777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data in transit between your device and ci777.io servers is encrypted using current SSL/TLS protocols.
• Encrypted data storage: Sensitive personal data (including KYC documents and payment references) is stored in encrypted form on access-controlled server infrastructure.
• Password hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm, meaning that even ci777 staff cannot retrieve your password.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. ci777 staff who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection: ci777 operates continuous network monitoring and intrusion detection systems to identify and respond to security threats in real time.
• Two-factor authentication: Players are encouraged to enable two-factor authentication on their ci777 account for an additional layer of login security.

While ci777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, ci777 will notify affected players without undue delay in accordance with applicable data protection obligations.

As a user of the ci777 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Privacy Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data ci777 holds about you, along with information about how it is used. We will provide this information within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly through your account profile page.
• Right to Erasure: In certain circumstances, you have the right to request that ci777 delete your personal data. This right is subject to overriding legal obligations — for example, we are required to retain KYC and transaction records for a minimum of 5 years under AML regulations, and these cannot be deleted on request.
• Right to Restriction: You may request that ci777 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) for personal data processed on the basis of contract or consent.
• Right to Object: You have the right to object to processing based on legitimate interest. Where you object, ci777 will cease that specific processing activity unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

ci777 aims to respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for the delay. ci777 will not charge a fee for reasonable data rights requests.

The ci777 platform is strictly intended for adults aged 21 years and above. ci777 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the KYC process for all registered accounts.

If ci777 becomes aware that personal data has been collected from an individual who is under the age of 21, that account will be immediately suspended, all associated personal data will be deleted as soon as the applicable legal obligations permit, and any funds deposited will be returned to the source payment method following a compliance review.

If you are a parent or guardian and believe that your child has registered an account on ci777.io, please contact us immediately at [email protected] so that we can take appropriate action without delay.

ci777 operates as an internationally licensed offshore platform. As a result, personal data collected through ci777.io may be transferred to and processed in countries outside of Bangladesh, including the jurisdiction in which ci777's servers and authorised third-party partners are located.

Where personal data is transferred internationally, ci777 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy. These safeguards may include contractual data processing agreements with receiving parties that incorporate standard data protection clauses.

By registering an account and using the ci777 platform, you acknowledge and consent to the transfer of your personal data to countries outside of Bangladesh for the purposes described in this Policy.

ci777 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, ci777 will provide reasonable advance notice by displaying a prominent notice on the ci777.io platform and, where practicable, by sending an email to your registered address.

The revised Policy will take effect on the date specified in the notification. Your continued use of the ci777 platform after that date constitutes your acceptance of the updated Policy. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how ci777 is protecting your personal information. If you have any concerns about changes to this Policy, please contact the ci777 support team before continuing to use the platform.

For any questions, concerns, or requests related to this Privacy Policy or the personal data ci777 holds about you, please contact the ci777 Data Protection team using the details below. All privacy communications must be in writing.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Data Privacy Request — [Your Registered Username]
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Within 30 calendar days of a verified request

ci777 is committed to resolving all data privacy concerns promptly and transparently. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.