fa77 Privacy Policy — How We Handle Your Data
Your privacy matters to fa77. This Privacy Policy sets out in plain, formal terms exactly what personal data fa77 collects from players in Bangladesh, how that data is used, who it may be shared with, and what rights you have over the information you provide to us. We are committed to handling your data with transparency, care, and the highest standard of security.
Our Privacy Commitments
A summary of the core privacy principles that guide every data decision fa77 makes on behalf of its players.
Data Security First
All personal and financial data transmitted between your device and fa77 servers is protected by 256-bit SSL encryption. Our infrastructure is hosted on hardened servers with regular security audits, ensuring your information remains private and protected at all times.
We Never Sell Your Data
fa77 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing or commercial purposes. Your information is used solely to operate your account, process transactions, verify your identity, and deliver our platform services in Bangladesh.
Transparent Collection
fa77 only collects the personal data that is genuinely necessary to operate your account and comply with responsible gaming and anti-money laundering obligations. We do not collect data speculatively or in excess of what is needed for the specific purpose stated in this policy.
KYC & Identity Verification
Identity documents submitted for KYC verification — including National Identity Cards, passports, and selfie photographs — are stored on encrypted servers and accessed only by authorised compliance staff. KYC documents are never used for purposes other than identity and age verification.
Your Rights Over Your Data
Registered fa77 players have the right to access, correct, and request deletion of personal data held by fa77, subject to legal retention obligations. All data rights requests are handled within 30 days of receipt via our support team at [email protected].
Cookie & Tracking Transparency
fa77 uses cookies and similar tracking technologies solely to improve platform performance, remember your session preferences, and analyse aggregate usage patterns. We do not use cross-site tracking cookies or share behavioural data with advertising networks.
Contents
- 1. Introduction & Scope
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. KYC Document Handling
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security Measures
- 10. Your Rights
- 11. Children & Minors
- 12. Third-Party Services
- 13. Policy Amendments
- 14. Contact & Data Requests
1 Introduction & Scope
This Privacy Policy ("Policy") describes how fa77 ("fa77", "we", "us", "our"), the operator of the online betting and casino platform accessible at fa77.ws, collects, stores, uses, discloses, and otherwise processes the personal data of individuals ("you", "your", "Player", "User") who access, register with, or use the fa77 platform and its associated services.
This Policy applies to all personal data collected through:
- The fa77 website at fa77.ws and all associated pages and subdomains;
- The mobile-optimised browser interface of the fa77 platform;
- Account registration, login, and profile management processes;
- Deposit and withdrawal transactions processed via bKash, Nagad, Rocket, and Upay;
- Customer support interactions via email and live chat;
- KYC identity verification processes;
- Participation in promotions, bonuses, tournaments, and other fa77 marketing activities.
By registering an account on fa77 and using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or continue to use fa77.
This Policy should be read alongside fa77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall legal framework governing your use of fa77.
2 Personal Data We Collect
fa77 collects personal data through two primary channels: data you provide directly to us, and data we collect automatically through your use of the platform. The following table summarises the categories of personal data we collect and the context in which each category is gathered.
| Data Category | Examples | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, NID or passport number, selfie photograph | Registration & KYC verification |
| Contact Data | Email address, mobile phone number, residential address in Bangladesh | Account registration |
| Financial Data | Mobile wallet numbers (bKash, Nagad, Rocket, Upay), transaction amounts, deposit and withdrawal history | Deposits, withdrawals, KYC |
| Account Data | Username, encrypted password, account balance, bonus history, betting history, session records | Account use & platform activity |
| Technical Data | IP address, device type, browser type, operating system, screen resolution, session timestamps | Automatic collection via platform access |
| Usage Data | Pages visited, games played, bets placed, time spent on platform, feature interactions | Automatic collection via analytics |
| Communication Data | Email and live chat correspondence, support ticket content, feedback submissions | Customer support interactions |
| Marketing Preference Data | Opted-in or opted-out status for promotional emails and notifications | Account settings & registration |
2.1 Sensitive Data
fa77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (other than selfie photographs used solely for identity verification purposes), health data, or data concerning sexual orientation. If any such data is inadvertently included in documents you submit to fa77 (for example, in a supporting identity document), it will not be processed for any purpose other than confirming the authenticity of the document itself.
2.2 Data from Third Parties
In limited circumstances, fa77 may receive personal data about you from third-party sources, including mobile wallet providers (bKash, Nagad, Rocket, Upay) for transaction confirmation purposes, fraud prevention and identity verification service providers, and regulatory or law enforcement bodies acting in their official capacity.
3 How We Use Your Personal Data
fa77 uses the personal data we collect for the following specific purposes. We process data only for the purposes stated at the time of collection, unless you have separately consented to an additional use.
3.1 Account Creation & Management
We use your Identity Data and Contact Data to create and manage your fa77 player account, verify your eligibility to use our services, facilitate login and session management, and communicate account-related notifications such as password resets, transaction confirmations, and security alerts.
3.2 Payment Processing
We use your Financial Data to process deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay; to verify that payment methods are registered in your own legal name in accordance with our anti-money laundering policy; and to maintain accurate financial records for each player account.
3.3 Identity & Age Verification (KYC)
We use your Identity Data, including government-issued photographic ID and selfie photographs, to verify that you meet the minimum age requirement of 21 years and to confirm that the identity you have registered matches the payment methods you are using. KYC verification is a mandatory process and cannot be waived.
3.4 Platform Operation & Improvement
We use Technical Data and Usage Data to monitor platform performance, diagnose and resolve technical issues, improve the user experience, develop new features and game categories, and ensure the stability and security of the fa77 infrastructure.
3.5 Responsible Gaming & Player Protection
We use Account Data and Usage Data to monitor player behaviour for signs of problem gambling, to enforce deposit limits, session time limits, and self-exclusion requests, and to fulfil our responsible gaming obligations. This processing is essential to the safe operation of fa77.
3.6 Fraud Prevention & Security
We use Technical Data, Financial Data, and Account Data to detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access. Where fraud or criminal activity is detected, we may share relevant data with law enforcement authorities.
3.7 Marketing Communications
Where you have opted in to receive marketing communications, we will use your Contact Data and Marketing Preference Data to send you information about fa77 promotions, bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and new game launches. You may opt out of marketing communications at any time by updating your account preferences or contacting [email protected].
3.8 Customer Support
We use Communication Data to respond to your enquiries, process complaints, handle dispute resolution, and provide general account assistance through our 24/7 English-language support team.
4 Legal Basis for Processing
fa77 processes personal data on the following legal bases:
- Contractual Necessity: Processing required to perform the contract between fa77 and the player, including account management, payment processing, and platform access.
- Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering requirements, age verification mandates, and responses to lawful regulatory requests.
- Legitimate Interests: Processing carried out in pursuit of fa77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by the player's fundamental privacy rights.
- Consent: Processing based on your freely given, specific, and informed consent, applicable primarily to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
5 Data Sharing & Disclosure
fa77 does not sell, rent, or trade your personal data to third parties. We may, however, share your data with the following categories of recipients in the circumstances described below.
5.1 Service Providers
fa77 engages third-party service providers who process personal data on our behalf to deliver specific operational functions, including payment processing partners (bKash, Nagad, Rocket, Upay), identity verification and KYC technology providers, IT infrastructure and hosting providers, customer support platform providers, and fraud detection and security services. All service providers are contractually obligated to process personal data only as instructed by fa77 and to maintain appropriate technical and organisational security measures.
5.2 Game Providers
fa77 integrates games from third-party studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and anonymised player identifiers) to facilitate game delivery and fair-play certification. They do not receive your full identity or financial data.
5.3 Legal & Regulatory Disclosure
fa77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, by lawful compulsion, or to protect the legal rights and interests of fa77 or third parties.
5.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of fa77 or its assets, personal data held about players may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer via the fa77 website and by email prior to their data being transferred to a new controller.
Important: fa77 will never share your personal data with unaffiliated advertising networks, data brokers, or social media platforms for targeting or profiling purposes.
6 KYC Document Handling
fa77 takes the handling of KYC documents with the utmost seriousness. Documents submitted for identity and age verification — including copies of National Identity Cards, passports, proof-of-address documents, and selfie photographs — are subject to the following specific controls:
- All KYC documents are transmitted to fa77 servers via 256-bit SSL-encrypted connections;
- Documents are stored in access-controlled, encrypted storage environments;
- Access to KYC documents is restricted to authorised compliance team members with a genuine operational need;
- KYC documents are used exclusively for the purpose of verifying player identity, age, and payment method ownership — they are not used for any marketing, profiling, or secondary analytical purpose;
- KYC documents are retained for a minimum period of five (5) years from the date of submission, in accordance with anti-money laundering record-keeping requirements;
- Upon the expiry of the mandatory retention period and following account closure, KYC documents will be securely deleted from fa77 systems.
If you have concerns about the handling of your KYC documents, please contact [email protected] directly.
7 Cookies & Tracking Technologies
7.1 What Cookies fa77 Uses
fa77 uses cookies and similar client-side technologies (local storage, session storage) on the fa77.ws platform. The cookies we use fall into the following categories:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your language preference, enable core platform functions | Session / up to 30 days |
| Performance & Analytics | Collect aggregated, anonymised data on page visits, game loads, and feature usage to improve the platform | Up to 12 months |
| Functional | Remember your display preferences, stake settings, and recently played games | Up to 6 months |
| Security | Detect and prevent fraudulent logins, bot activity, and session hijacking attempts | Session |
7.2 Third-Party Cookies
fa77 does not permit third-party advertising networks to set cookies on the fa77.ws domain. Game providers integrated into the platform may set their own session-scoped cookies solely to operate the game interface; these cookies do not track your activity outside of the fa77 platform.
7.3 Managing Cookies
You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in or use core platform functions. Disabling performance or functional cookies will not prevent you from accessing fa77 but may reduce your experience quality.
8 Data Retention
fa77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to mandatory minimum retention periods required by applicable legal obligations. The following retention framework applies:
- Active Account Data: Retained for the full duration of the player's active account relationship with fa77, plus a minimum of five (5) years following account closure.
- KYC & Identity Documents: Retained for a minimum of five (5) years from the date of submission, in line with anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of seven (7) years from the date of transaction, in accordance with financial record-keeping obligations.
- Customer Support Communications: Retained for three (3) years from the date of the most recent support interaction.
- Marketing Preference Data: Retained until you withdraw consent or request deletion, at which point marketing preferences are updated within five (5) business days.
- Technical & Usage Logs: Typically retained for up to 12 months in anonymised or aggregated form; raw logs are retained for up to 90 days.
Following the expiry of the relevant retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Requests for early deletion are handled in accordance with Section 10 of this Policy.
9 Data Security Measures
fa77 implements a comprehensive set of technical and organisational security measures to protect the personal and financial data of our players against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
- Encryption in Transit: All data transmitted between player devices and fa77 servers is encrypted using 256-bit SSL/TLS protocols. Our SSL certificate is maintained and renewed on a continuous basis.
- Encryption at Rest: Sensitive data fields including identity document records, financial data, and authentication credentials are encrypted at rest using AES-256 encryption within our database infrastructure.
- Access Controls: Access to player data is restricted on a strict need-to-know basis using role-based access control (RBAC) systems. Staff access to sensitive data requires multi-factor authentication.
- Regular Security Audits: fa77's technical infrastructure undergoes regular internal and third-party security reviews to identify and remediate potential vulnerabilities.
- Intrusion Detection: Real-time intrusion detection and anomaly monitoring systems are in place to identify and respond to potential security incidents.
- Password Security: Player passwords are stored exclusively as salted cryptographic hashes — fa77 does not store plaintext passwords and cannot retrieve a player's password on their behalf.
Despite these robust measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, fa77 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.
10 Your Data Rights
As a registered fa77 player, you have the following rights in relation to the personal data fa77 holds about you. To exercise any of these rights, please submit a written request to [email protected]. fa77 will acknowledge your request within five (5) business days and aim to resolve it within thirty (30) calendar days.
10.1 Right of Access
You have the right to request a copy of the personal data fa77 holds about you, together with information about how that data is being processed. This is commonly referred to as a Subject Access Request (SAR). fa77 will provide this information in a structured, commonly used, machine-readable format where technically feasible.
10.2 Right to Rectification
You have the right to request that fa77 correct any personal data about you that is inaccurate or incomplete. Certain data corrections (such as changes to your registered name) may require you to submit updated identity documentation for verification purposes.
10.3 Right to Erasure
You have the right to request that fa77 delete your personal data, subject to circumstances where fa77 has an overriding legal obligation to retain the data (for example, financial transaction records subject to mandatory retention periods). Erasure of account data will result in permanent account closure.
10.4 Right to Restrict Processing
You have the right to request that fa77 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data and a verification check is pending. During a restriction period, fa77 may store your data but will not actively process it for operational purposes.
10.5 Right to Object
You have the right to object to fa77's processing of your personal data where that processing is based on legitimate interests, including profiling for responsible gaming monitoring purposes. fa77 will assess each objection on its merits and cease the relevant processing unless there are compelling legitimate grounds that override your interests.
10.6 Right to Withdraw Consent
Where processing is based on your consent (for example, marketing email communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal. You may withdraw marketing consent by updating your account notification settings or by emailing [email protected].
11 Children & Minors
fa77's services are strictly for individuals aged 21 years and above. fa77 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. If fa77 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated account will be closed.
21+ Policy: Parents and guardians are advised to install appropriate parental control or content filtering software on devices shared with minors to prevent accidental access to gambling platforms. If you believe a minor has accessed fa77 or submitted personal data to fa77, please contact [email protected] immediately.
12 Third-Party Services & Links
The fa77 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. These game providers operate their own data processing environments within the game interface. fa77 recommends reviewing the privacy documentation of individual game providers where relevant, noting that fa77's Privacy Policy governs the data fa77 collects in connection with game sessions rather than data processed within the provider's own systems.
Payment processing via bKash, Nagad, Rocket, and Upay is subject to the individual privacy policies of those mobile wallet providers. fa77 is not responsible for the data practices of these independent payment partners beyond the transaction data received by fa77 for account crediting and reconciliation purposes.
fa77.ws does not contain hyperlinks to third-party websites. If you navigate away from the fa77.ws domain independently, fa77 is not responsible for the privacy practices of any external website you may visit.
13 Policy Amendments
fa77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the operational structure of our platform. Material changes to this Policy — those that meaningfully affect the way we collect or use your personal data — will be communicated to registered players via email notification and/or a prominent notice on the fa77 website, at least 7 days before the changes take effect.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the fa77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of fa77 and request account closure by contacting [email protected].
14 Contact & Data Requests
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data fa77 holds about you, please contact our support team using the details below. All data-related enquiries are handled by fa77's dedicated compliance and data protection team.
All correspondence regarding privacy and data rights must be submitted in writing. fa77 does not accept verbal data rights requests via live chat. Written requests submitted to the email address below will receive an acknowledgement within five (5) business days and a substantive response within thirty (30) calendar days.
Data Protection Contact:
fa77 Compliance & Data Protection Team
Email: [email protected]
Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
Response Time: Within 30 calendar days of written request receipt
When submitting a data rights request, please include your registered fa77 username, the email address associated with your account, a clear description of the request you are making (access, rectification, erasure, restriction, objection, or consent withdrawal), and sufficient information to allow us to verify your identity before processing the request. fa77 may ask for additional verification documents before fulfilling any data rights request in order to ensure that personal data is not disclosed to or acted upon at the request of an unauthorised third party.
Your Privacy is Protected at fa77
We are committed to keeping your personal and financial data safe. If you have questions about our privacy practices or want to explore fa77's games and features, our team is available around the clock.