ash77 Privacy Policy

1Introduction

ash77 ("we", "us", "our") is committed to protecting the privacy of every player who uses our platform at https://ash77.vip. This Privacy Policy ("Policy") sets out in clear, plain terms the categories of personal data we collect from players in Bangladesh and elsewhere, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to each data subject.

This Policy forms part of our broader Terms and Conditions, which govern your use of ash77 in its entirety. By registering an account, making a deposit, or otherwise using ash77, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein.

This Policy applies to all data collected through the ash77 website, mobile browser experience, and any associated customer support channels including email. It does not apply to third-party websites or services that may be linked from ash77, including game studio interfaces operated by providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. We encourage you to review the privacy policies of any third-party service you interact with directly.

2Information We Collect

ash77 collects personal data in two principal ways: information you provide to us directly during registration and account use, and information collected automatically as you interact with the platform. The categories of data we may collect include:

• Registration data: your name, date of birth, mobile number, and email address as provided when you create your ash77 account. This data is mandatory — without it, we cannot create or operate your account.
• Identity verification (KYC) documents: government-issued photo ID, passport, driving licence, proof of address, and in some cases a selfie photograph or proof of payment method — collected when required to complete a KYC review before processing a withdrawal or responding to a regulatory request.
• Transaction data: records of all deposits, withdrawals, bonus claims, and wagers placed on your account — including the amounts, timestamps, payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction reference numbers.
• Gaming activity data: records of games played, betting history, session duration, game outcomes, responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion requests), and in-game communication logs where applicable.
• Technical and device data: your IP address, device type, operating system, browser type and version, mobile network carrier, time zone, screen resolution, and cookies or similar tracking identifiers associated with your browsing session on ash77.
• Customer support communications: the content of emails, chat messages, and any other correspondence you send to or receive from the ash77 support team, together with the date, time, and channel of each communication.

3How We Use Your Information

ash77 processes personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was collected. The legal bases on which we rely for processing include contractual necessity, legal obligation, and legitimate interests. The specific purposes for which your data is used are:

• Account creation and management: to set up, maintain, and administer your player account, process your login, and ensure you can access the games and services available on ash77.
• Transaction processing: to receive your deposits via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, and to process your withdrawal requests to the same payment method, in accordance with our withdrawal terms.
• Identity verification and fraud prevention: to verify your age (21+ requirement), confirm your identity through KYC checks, detect and prevent fraudulent activity, money laundering, collusion, and other conduct prohibited by our Terms and applicable law.
• Responsible gaming compliance: to monitor gaming activity for signs of problem gambling, to action self-exclusion and cooling-off requests, to enforce deposit limits set by the player, and to reach out where our responsible gaming systems identify a player who may need support.
• Platform improvement and security: to analyse usage patterns, troubleshoot technical issues, improve the performance and design of ash77, and to protect the integrity and security of the platform against cyber threats, account takeover attacks, and similar risks.
• Legal and regulatory compliance: to retain transaction, identity, and gaming records as required by applicable anti-money-laundering regulations and any other applicable legal obligations, and to respond to lawful requests from courts, regulators, or law enforcement agencies.

ash77 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated systems flag an account for investigation — for example, our fraud detection or responsible gaming monitoring systems — a human member of the compliance team reviews the flagged case before any account action is taken.

4Our Privacy Commitments to You

Five core commitments that define how ash77 handles your data

5Data Sharing and Third Parties

ash77 does not share your personal data with third parties except in the specific, limited circumstances described below. In all cases of permitted sharing, data is shared only to the extent strictly necessary to fulfil the stated purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) receive the transaction data strictly necessary to process your deposit or withdrawal. These partners operate under their own privacy policies and are bound by their respective regulatory obligations.
• KYC and identity verification providers: where ash77 uses a third-party service to assist with identity document verification, that provider receives only the document images and associated personal data required to complete the verification check. The provider is contractually bound not to use this data for any other purpose.
• Game content providers: game studios whose games are accessible through ash77 (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token and minimal account identifier to authenticate your gaming session. These providers do not receive your full name, contact details, or payment information through ash77.
• Legal and regulatory authorities: ash77 will disclose personal data to courts, regulators, law enforcement agencies, or other competent public authorities where legally required to do so, or where ash77 reasonably believes disclosure is necessary to protect the safety of a player or third party or to prevent or report a crime. In each such case, ash77 will disclose only the minimum data required to satisfy the legal obligation.

All third parties with whom ash77 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was disclosed. ash77 does not permit sub-processing of player data by its service providers without appropriate contractual safeguards.

6Payment Data and Financial Information

When you make a deposit or withdrawal on ash77, the relevant payment transaction data is processed by the payment method provider you select. ash77 does not store your full bKash PIN, Nagad PIN, card CVV number, or full card number on its own servers. Payment credentials are handled directly by the respective payment gateway using their own secure infrastructure.

ash77 does retain a record of each completed transaction for regulatory and operational purposes — including the transaction reference number, amount in BDT, timestamp, payment method type (e.g. bKash, Visa), and a truncated or masked account identifier where technically provided by the payment gateway. This record is retained for as long as required by applicable anti-money-laundering regulations.

7Cookies and Tracking Technologies

ash77 uses cookies and similar local storage technologies to ensure the platform functions correctly and to improve your experience as a player. The following categories of cookie are used on ash77:

• Strictly necessary cookies: these cookies are essential for the platform to function. They maintain your logged-in session, remember your language preference, and ensure that security features operate correctly. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Performance and analytics cookies: these cookies collect anonymous, aggregated data about how players navigate and interact with ash77 — for example, which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used to improve the platform. No personally identifiable information is included in performance analytics reports.
• Functional cookies: these cookies remember choices you have made — such as your preferred language (English or Bengali), your responsible gaming settings, and other personalisation preferences — so that you do not have to reconfigure them every time you visit ash77.
• Anti-fraud and security cookies: these cookies support our fraud detection and account security systems. They help us identify unusual login patterns, detect automated bot activity, and flag sessions that may indicate account takeover attempts — protecting both your account and the integrity of the platform.

ash77 does not use third-party advertising cookies or social media tracking pixels. You can manage cookie preferences through your mobile browser settings. Blocking strictly necessary cookies may prevent ash77 from functioning correctly. Blocking performance or functional cookies will not prevent you from using the platform but may affect your experience.

8Data Security

ash77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, strict role-based access controls limiting which staff can access player data, regular security audits and vulnerability assessments, and automated systems to detect and respond to potential security incidents in real time.

While ash77 takes all reasonable steps to secure your data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data security incident that affects your personal data and creates a risk to your rights, ash77 will notify you without undue delay using the contact details registered to your account, and will take immediate steps to contain and remediate the incident.

9Data Retention

ash77 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any minimum retention periods required by applicable law. The following retention guidelines apply:

• Active account data: retained for the duration of your account's active life. If your account is closed, data is retained for a further period as required by anti-money-laundering regulations and other applicable legal obligations — typically a minimum of five years from the date of account closure, though specific requirements may vary.
• KYC documents: identity verification documents are retained for a minimum period required by applicable AML regulations from the date of verification or account closure, whichever is later. After the mandatory retention period has elapsed, KYC documents are securely deleted or destroyed.
• Support communications: customer support correspondence is retained for a rolling period necessary to resolve disputes, handle regulatory enquiries, and ensure service quality. Communications related to unresolved complaints or active regulatory investigations are retained until the matter is fully resolved.

At the end of any applicable retention period, personal data is either securely deleted, destroyed, or anonymised so that it can no longer be linked to an identifiable individual. ash77 conducts periodic data audits to ensure that data is not retained beyond its required period and that storage practices remain compliant with our internal data governance policies.

10Your Rights and Choices

As a data subject, you have the following rights with respect to the personal data ash77 holds about you. To exercise any of these rights, please submit a written request to [email protected] with your registered mobile number and a description of your request. ash77 will respond within a reasonable timeframe and in any event within 30 calendar days of receipt:

• Right of access: you may request a copy of all personal data ash77 holds about you. We will provide this in a structured, commonly used format. The first access request per calendar year is provided free of charge; subsequent requests within the same year may be subject to a reasonable administrative fee.
• Right to rectification: if any personal data ash77 holds about you is inaccurate or incomplete, you may request that we correct or complete it. We will action valid rectification requests promptly, typically within 5 business days of confirming your identity.
• Right to erasure (right to be forgotten): you may request that ash77 delete your personal data. This right is subject to our legal data retention obligations — we cannot delete data that we are legally required to retain. Where deletion is lawful, we will confirm completion within a reasonable period.
• Right to restrict processing: in certain circumstances, you may request that ash77 restrict the processing of your personal data — for example, where you contest the accuracy of the data or where you have objected to processing and we are considering that objection.
• Right to object: you may object to ash77 processing your personal data on the basis of legitimate interests. Where such an objection is raised, ash77 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

ash77 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to or acted upon by an unauthorised person. We will not charge a fee for the exercise of data rights except where a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply or we may decline to act.

11Children and Minors

ash77 operates an absolute minimum age policy of 21 years. The platform is not intended for, marketed to, or designed for use by persons under the age of 21. ash77 does not knowingly collect personal data from anyone under 21. If we become aware that personal data has been collected from a person who was under 21 at the time of registration, we will immediately close the account, void all balances, and delete the personal data collected, except where retention is required by applicable law for fraud prevention or AML compliance purposes.

12Cross-Border Data Transfers

ash77 primarily serves players in Bangladesh and processes the majority of player data on infrastructure located in or serving the Asia-Pacific region. In some cases — for example, where a KYC verification provider or a game studio's servers are located outside Bangladesh — your personal data may be transferred to, stored in, or processed in a jurisdiction other than Bangladesh.

Where such cross-border transfers occur, ash77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data processing agreements with the receiving party, transfer to jurisdictions that maintain adequate data protection standards, or other lawful transfer mechanisms. If you would like further information about the safeguards applicable to a specific transfer, please contact [email protected].

13Changes to This Privacy Policy

ash77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. When we make a material change to this Policy — meaning a change that affects the nature, purpose, or extent of personal data processing in a way that is relevant to your privacy rights — we will endeavour to provide advance notice via your registered mobile number or email address before the change takes effect.

The most current version of this Privacy Policy will always be available at https://ash77.vip/privacy-policy. The effective date displayed at the top of this page indicates when the current version was last updated. Your continued use of ash77 following the publication of an updated Policy constitutes your acknowledgement of the changes. We recommend that you review this Policy periodically — particularly before making a significant deposit or exercising a data rights request.

14Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how ash77 has handled your personal data, please contact our support team. We take all privacy-related enquiries seriously and will respond to your message promptly.

ash77 is committed to resolving all privacy-related enquiries fairly and efficiently. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint through any applicable regulatory or legal channel available to you in your jurisdiction.