Privacy Policy — How anc77 Protects Your Data

Introduction

anc77 operates Bangladesh's premier online casino and cricket betting platform at anc77.io. As the operator of this platform, anc77 acts as the data controller in respect of all personal information collected from players registered on, or visiting, the platform.

This Privacy Policy sets out the basis on which anc77 collects, stores, processes, and shares any personal data you provide to us or that we collect from you in the course of your use of our services. It applies to all data processing activities carried out by anc77, whether through the website, mobile browser interface, live chat, email, or any other communication channel.

anc77 is committed to processing personal data responsibly, transparently, and in strict compliance with applicable data protection principles. We collect only what is necessary for legitimate operational and regulatory purposes, and we do not sell your personal data to third parties for advertising or marketing purposes.

This policy should be read alongside the anc77 Terms & Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with the anc77 platform.

Data We Collect

anc77 collects personal data from players through several channels, including the account registration form, KYC verification process, cashier operations, customer support interactions, and automatic technical data collection during platform use. The categories of personal data we collect are described in the table below:

anc77 does not collect sensitive personal data such as biometric data, health records, religious beliefs, or political opinions. Where a player voluntarily discloses sensitive information in the course of a support interaction (for example, disclosing a health condition in the context of a responsible gaming request), that information is processed solely for the specific purpose for which it was disclosed and is not retained beyond the resolution of the relevant matter.

How We Use Your Data

anc77 processes personal data collected from players for the following specific and legitimate purposes:

• Account Creation and Management: To register your player account, verify your identity, maintain your account dashboard, and process changes to your account settings or contact details.
• Age and Identity Verification (KYC): To confirm that all players are aged 21 years or above and to verify that the identity and payment method details provided are genuine, consistent, and in the registered player's own name. This is a mandatory regulatory obligation.
• Payment Processing: To process BDT deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal payments back to your verified payment methods. Financial data is shared with payment processors solely for transaction execution.
• Gaming Services Delivery: To provide access to casino games, cricket betting, live dealer tables, slots, and all other gaming products on the platform. Gaming activity data is used to maintain accurate account balances, settle bets correctly, and credit bonus rewards.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, identity theft, money laundering, bonus abuse, use of automated betting software, and any other conduct prohibited under the anc77 Terms & Conditions. This includes cross-referencing IP addresses, device fingerprints, and payment method data.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns for indicators of potential money laundering or terrorist financing activity and to fulfil any mandatory reporting obligations that arise from such monitoring.
• Responsible Gaming: To power responsible gaming tools including deposit limit enforcement, cooling-off period activation, session time tracking, and self-exclusion processing. Responsible gaming data is used to protect player wellbeing and is never used for commercial profiling.
• Customer Support: To respond to player queries, process formal complaints, resolve payment disputes, and provide 24/7 assistance via live chat, email ([email protected]), and WhatsApp.
• Promotional Communications: To send eligible players information about bonuses, promotions, and offers that may be of interest, where the player has consented to receive such communications. Players may withdraw marketing consent at any time via account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and feature set of the anc77 platform. No individually identifiable data is used for platform analytics without prior anonymisation.
• Legal and Regulatory Compliance: To fulfil any legal obligations imposed on anc77 by applicable law, including record-keeping obligations, responses to lawful authority requests, and compliance with court orders.

Legal Basis for Processing

anc77 processes personal data only where a valid legal basis exists for doing so. The applicable legal basis for each category of processing is set out below:

• Contract Performance: The majority of data processing on anc77 is necessary for the performance of the player agreement — specifically, to register your account, process your deposits and withdrawals in BDT, deliver gaming services, and settle your bets. Without this processing, the core services of the platform cannot be provided.
• Legal Obligation: KYC identity verification, AML transaction monitoring, age verification (21+ compliance), and record retention are carried out to fulfil mandatory legal and regulatory obligations. This processing cannot be opted out of — it is a non-negotiable condition of accessing the platform.
• Legitimate Interests: Fraud detection, platform security monitoring, abuse prevention, and anonymised analytics are conducted on the basis of anc77's legitimate interest in protecting the integrity of the platform and the safety of all registered players. These interests are balanced against player privacy rights and do not override individual rights where those rights take precedence.
• Consent: Marketing communications and optional tracking cookies are processed on the basis of your explicit consent. Consent can be withdrawn at any time without affecting the lawfulness of processing already carried out on the basis of consent prior to withdrawal.

Data Sharing & Disclosure

anc77 does not share personal data with third parties except in the specific, limited circumstances described below. All third-party recipients of personal data are bound by contractual data protection obligations consistent with the standards described in this Privacy Policy.

• Payment Processors: Financial transaction data (including bKash account numbers, Nagad numbers, bank account details, and transaction amounts in BDT) is shared with the relevant payment service provider solely for the purpose of processing the deposit or withdrawal instruction. Payment processors are prohibited from using this data for any other purpose.
• Game Providers: Limited technical data (such as player session tokens and game result data) is shared with licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — for the purpose of delivering their games within the anc77 platform. Game providers do not receive personally identifiable information such as name, address, or payment details.
• KYC Verification Partners: Where anc77 uses a third-party identity verification service to assist with document review, identity data and KYC documents may be transmitted to that service provider in encrypted form. All KYC partners operate under strict data processing agreements and are prohibited from retaining or re-using verification data beyond the scope of the specific verification task.
• Regulatory and Law Enforcement Authorities: anc77 may disclose personal data to competent authorities — including law enforcement agencies, financial intelligence units, and courts — where required to do so by applicable law, a court order, or a lawful regulatory demand. anc77 will, where legally permitted, notify affected players of such disclosures.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers engaged by anc77 may receive limited personal data in the course of providing professional services to anc77. All such advisers are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of the anc77 business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any change in data controller arising from such a transfer.

Cookies & Tracking Technologies

anc77 uses cookies and similar tracking technologies to support the functionality of the platform, maintain session integrity, and — where consent is given — to analyse usage patterns and deliver relevant content.

• Strictly Necessary Cookies: These cookies are essential for the operation of the anc77 platform. They maintain your login session, preserve your account balance state during a gaming session, and enable the cashier to function correctly. These cookies cannot be disabled without preventing core platform functionality. No consent is required for strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences — such as language settings, display preferences, and previously used payment methods in the cashier — to improve your experience across sessions. They do not track your activity for marketing purposes.
• Analytics Cookies: With your consent, anc77 uses anonymised analytics cookies to understand how players navigate the platform, which games are most accessed, and where technical friction points arise. This data is aggregated and no individual player is identified in analytics reports.
• Security Cookies: Device fingerprinting and IP-based cookies are used by anc77's fraud prevention systems to detect anomalous login patterns, multi-account usage, and automated bot activity. These operate on the basis of legitimate interest and are active for all registered players.

Players may manage cookie preferences via their browser settings at any time. Disabling non-essential cookies will not prevent access to the platform but may affect the availability of certain personalisation features. Note that clearing session cookies will log you out of your active anc77 session.

Data Retention

anc77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account's active status. This includes identity data, contact data, and gaming activity records.
• Post-Closure Retention: Following account closure, anc77 retains the full player record — including KYC documents, transaction history, and gaming activity logs — for a minimum of five (5) years from the date of closure. This retention period reflects standard AML record-keeping obligations and enables anc77 to respond to regulatory inquiries, disputes, and legal proceedings that may arise after closure.
• Self-Excluded Players: Where an account is closed as a result of a self-exclusion request, the player's identity and self-exclusion status data is retained indefinitely to prevent re-registration by the same individual. This retention is in the player's own interest and overrides the standard post-closure retention period.
• Support Communications: Live chat transcripts, email correspondence, and support ticket records are retained for a minimum of two (2) years from the date of the interaction to support complaint handling and dispute resolution.
• Financial Records: All financial transaction records, including deposit and withdrawal confirmations, are retained for a minimum of seven (7) years from the date of the transaction in accordance with standard financial record-keeping practice.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for the period of the account's existence plus five (5) years, to demonstrate compliance in the event of a dispute or regulatory audit.

Upon expiry of the applicable retention period, personal data is either permanently deleted from all anc77 systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Data Security

anc77 applies a comprehensive set of technical and organisational security measures to protect all personal data held on the platform against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• SSL/TLS Encryption: All data transmitted between your device and the anc77 platform — including login credentials, financial data, and KYC documents — is encrypted in transit using industry-standard SSL/TLS protocols. The platform operates exclusively over HTTPS.
• Encrypted Data Storage: Sensitive data fields — including payment method identifiers and KYC document files — are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data.
• Access Controls: Access to personal data within anc77's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All internal data access is logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their anc77 account. 2FA adds an additional layer of login security beyond the standard password, significantly reducing the risk of unauthorised account access.
• Penetration Testing: anc77's platform and infrastructure are subject to regular security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that is likely to result in a risk to player rights, anc77 will take immediate containment action and notify affected players without undue delay, providing details of the nature of the incident and the steps taken to address it.

Your Rights

As a player on the anc77 platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact the anc77 support team at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data that anc77 holds about you. We will provide a structured summary of your data within 30 days of receiving a valid access request.
• Right to Rectification: If any personal data held by anc77 is inaccurate or incomplete, you have the right to request that it be corrected. Where the data in question relates to KYC verification records, correction will require re-submission of updated documentation.
• Right to Erasure: You may request that anc77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where there is no overriding legitimate interest or legal obligation requiring its retention. Note that erasure requests cannot be fulfilled where retention is mandated by AML, financial record-keeping, or other legal obligations.
• Right to Restriction: You may request that anc77 restrict the processing of your data — for example, while a rectification request is being reviewed — so that the data is stored but not actively processed during that period.
• Right to Data Portability: For data processed on the basis of contract or consent, you may request that anc77 provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you may transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your data where that processing is based on legitimate interests. anc77 will assess the objection and cease the processing in question unless compelling legitimate grounds exist that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

anc77 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day window.

Third-Party Services

The anc77 platform integrates third-party services to deliver its full range of gaming and payment features. While anc77 takes all reasonable steps to ensure that third-party partners maintain appropriate data protection standards, the following points should be noted:

• Game Providers: Games on the anc77 platform are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers operate their own infrastructure and may process limited technical session data in accordance with their own privacy policies. anc77 does not share personally identifiable player data with game providers beyond what is technically necessary for session management.
• Payment Service Providers: Transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are processed by the respective payment service providers. Each provider operates under its own terms of service and privacy policy. anc77 is not responsible for the data handling practices of these independent payment networks once a transaction has left the anc77 cashier environment.
• Identity Verification Services: Where anc77 uses a third-party KYC provider to assist with document verification, that provider processes identity data under a strict data processing agreement with anc77 and is prohibited from using verification data for any purpose beyond the specific verification task.
• No Advertising Networks: anc77 does not integrate advertising networks, social media tracking pixels, or behavioural retargeting tools on the platform. No player data is shared with advertising technology providers for the purpose of profiling or targeted advertising.

Children & Minors

The anc77 platform is strictly for adults aged 21 years and above. anc77 does not knowingly collect personal data from individuals under the age of 21. The platform employs mandatory age verification as part of the registration and KYC process to prevent access by minors.

If anc77 becomes aware that personal data has been collected from an individual who is under the age of 21 — whether through fraudulent registration or any other means — the following actions will be taken immediately:

• The relevant account will be permanently closed without notice
• All account data will be deleted from active systems as quickly as practicable, subject to any mandatory legal retention obligations
• Any funds deposited by the minor will be returned to the originating payment method following a mandatory review period
• The case may be referred to relevant authorities where there is evidence of deliberate misrepresentation of age

Policy Updates

anc77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The most current version of this policy will always be published at anc77.io/privacy-policy, with the effective date updated at the top of the document.

• Where amendments are material — meaning they significantly affect how your personal data is collected, used, or shared — anc77 will provide reasonable advance notice via your registered email address or a prominent platform notification prior to the changes taking effect.
• For minor amendments — such as clarifications, typographical corrections, or updates that do not change the substance of the policy — the revised version will take effect from the date of publication without individual notice.
• Your continued use of the anc77 platform after a policy update has taken effect constitutes your acknowledgement of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the platform and may request account closure via the 24/7 support team.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or wish to raise a formal data protection complaint, please contact the anc77 Data Protection team through any of the following channels:

• Email: [email protected] — for formal data rights requests, privacy complaints, and KYC-related data queries. Please mark the subject line "Privacy — [Nature of Request]" to ensure prompt routing to the correct team.
• Live Chat: Available 24/ 7 directly on the anc77 platform — the fastest channel for general privacy queries and account data questions.
• WhatsApp: +880 1700-000000 — available around the clock for urgent privacy and account security matters.
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6), including all Bangladeshi national holidays such as Eid, Pohela Boishakh, Independence Day (March 26), and Victory Day (December 16).

anc77 aims to acknowledge all formal privacy complaints within 2 business days and to provide a substantive response within 30 calendar days of receipt. Where a complaint requires extended investigation, you will be informed of the timeline and kept updated throughout the process.