xe77's Privacy Policy

1 Definitions & Scope

The meanings of certain key terms used in this privacy policy are as follows:

1.1 Personal Information

Any information that can directly or indirectly identify an individual is referred to as "personal information." This includes your name, mobile number, email address, date of birth, verification information related to your national identity card, transaction details, and device-related information.

1.2 Processing

The collection, recording, organizing, structuring, storing, altering or adapting, retrieving, consulting, using, disclosing by transmission, combining or merging, restricting, erasing, or destroying of data — all of these activities fall under "processing."

1.3 Scope of Application

This policy applies to all individuals using the xe77 website (xe77.mom), the mobile web version, and any digital services operated under xe77. Users in Bangladesh are the primary audience of this policy.

2 Types & Sources of Data Collection

xe77 may collect the following types of information:

2.1 User-Provided Information

• Name, mobile number, and email address provided during account registration.
• Documents and personal details provided during the identity verification (KYC) process.
• Financial information provided during deposit and withdrawal transactions (bKash, Nagad, Rocket, Upay, or bank account details).
• Information exchanged when communicating with the support team.

2.2 Automatically Collected Information

• IP address and device identification information.
• Browser type, operating system, and device model.
• Browsing activity on the platform, page view history, and session information.
• Information collected through cookies and similar tracking technologies.

2.3 Information Received from Third-Party Sources

• Transaction verification information from payment service providers.
• Information from fraud prevention and age verification services.
• Information provided to meet compliance requirements with government and regulatory bodies.

3 Purpose of Data Use

xe77 uses your information only for the following legitimate purposes:

3.1 Service Operations

• Ensuring account creation, management, and authentication.
• Processing and verifying financial transactions.
• Managing the delivery of bonuses, promotions, and VIP benefits.
• Providing customer service and technical support.

3.2 Security & Compliance

• Detecting and preventing fraud, money laundering, and other unlawful activities.
• Age verification — ensuring access only to those aged 21 or above.
• Adhering to responsible gambling guidelines and enforcing related restrictions.
• Meeting legal and regulatory requirements.

3.3 Service Improvement

• Analyzing and improving platform performance and user experience.
• Identifying and resolving technical issues.
• Planning and implementing new features and services.

4 Data Protection Measures

4.1 Technical Protection

xe77 uses industry-standard security technology to protect your information. All communications are secured through TLS/SSL encryption, so that no third party can read or alter your data during transmission.

4.2 Access Control

Only authorized personnel may access your personal information, and only to the extent necessary for carrying out their duties. All staff are bound by strict confidentiality agreements.

4.3 Security Monitoring

• Round-the-clock system monitoring and intrusion detection.
• Regular security audits and vulnerability assessments.
• A rapid response plan for security incidents.

4.4 Data Minimization

xe77 collects only the information that is essential to providing its services. Refraining from collecting unnecessary data is a core part of our policy.

5 Data Sharing & Third Parties

xe77 may share information with third parties in the following limited circumstances:

5.1 Payment Service Providers

For processing bKash, Nagad, Rocket, Upay, and bank transfers, only the information necessary to complete the transaction is shared with the relevant financial institutions. These third parties are bound by strict data protection agreements.

5.2 Technology & Service Partners

Only the minimum necessary information may be shared with game software providers (such as Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Ezugi, Microgaming, NetEnt) and selected technology partners for service operations.

5.3 Legal Obligations

• Based on a court order or a lawful request from law enforcement authorities.
• To assist in the investigation of fraud or illegal activity.
• To protect the legal rights of xe77 or third parties.

6 Cookies & Tracking Technologies

6.1 Types of Cookies

xe77 uses the following types of cookies:

• Essential Cookies: Required for login sessions and the basic functionality of the platform.
• Functional Cookies: For remembering your preferences and settings.
• Analytics Cookies: For understanding and improving how the platform is used.
• Security Cookies: For fraud detection and account protection.

6.2 Cookie Controls

You can disable many types of cookies by changing your browser settings. However, disabling certain essential cookies may affect the functionality of the platform.

7 Data Retention Period

xe77 retains your information only for as long as necessary. When determining the retention period, we consider the following:

• Information necessary to provide the service while the account is active.
• Information related to financial transactions is retained for the legally required period even after the account is closed.
• In the case of disputes or legal proceedings, information may be kept for an extended period.
• Responsible gambling self-exclusion records are always retained until the designated period has expired.

Once the required period has ended, xe77 securely deletes or anonymizes personal information.

8 User Rights

As a xe77 user, you have the following rights:

8.1 Right of Access

You may request a copy of the personal information xe77 holds about you at any time.

8.2 Right to Rectification

If there are any errors or inaccuracies in your information, you may request that they be corrected or updated.

8.3 Right to Erasure

In certain circumstances, you may request that your personal information be deleted. However, some information may need to be retained due to legal obligations.

8.4 Right to Object

You may object to the use of your information for specific purposes, and xe77 will consider your objection unless there is a legitimate reason not to.

8.5 How to Exercise Your Rights

To exercise any of the rights mentioned above, send an email to [email protected] or contact us via live chat.

9 Protection of Minors

xe77 strictly provides services only to those aged 21 or above. No information from minors is collected or processed.

• An age verification process is followed at the time of registration.
• Additional KYC documents may be requested in cases of suspicion.
• Accounts identified as belonging to minors are immediately closed and the associated information is deleted.

10 International Data Transfers

For the operation of xe77's services, data may sometimes be processed on servers outside Bangladesh. In such cases:

• Adequate data protection measures in the destination country are confirmed before any transfer takes place.
• Strict data processing agreements are executed with third-party service providers.
• End-to-end encryption is used for all international transfers.

11 Policy Changes & Updates

xe77 may update this privacy policy from time to time. In the event of significant changes, users will be notified in the following ways:

• A notification on the xe77 platform.
• Details of the changes sent to the registered email address.
• The updated date published at the top of this page.

Continued use of the platform after a policy update will be considered as your consent to the revised policy. Explicit consent may be sought for significant changes.

12 Third-Party Links & Platforms

Games from third-party software providers are available on the xe77 platform. These game providers may have their own privacy policies, for which xe77 is not responsible. However, xe77 only works with trusted and verified providers and maintains data protection agreements with them.