tf777 Privacy Policy

About This Policy

This Privacy Policy ("Policy") sets out how tf777 ("we", "us", "our") collects, uses, stores, and protects personal data relating to individuals ("you", "your", "Player") who access or use the tf777 platform at tf777.io, including all associated games, services, and features.

This Policy is written in English and is intended for players accessing tf777 from Bangladesh. Where any conflict arises between translated summaries and the English text of this Policy, the English-language version shall prevail in all circumstances.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, each of which is incorporated into the overall framework governing your use of the tf777 platform.

We review and update this Policy periodically. The current version number and effective date are displayed at the top of this page and in the sidebar. We encourage you to check this page from time to time to ensure you are familiar with the most current version.

Who We Are

tf777 is an online casino and sports betting platform operating at tf777.io. The platform is designed primarily for English-speaking players in Bangladesh and offers a range of casino games, live dealer tables, crash games, and sports betting markets — all denominated in Bangladeshi Taka (৳ BDT).

For the purposes of this Privacy Policy, tf777 is the data controller in respect of the personal data it collects directly from players through the platform. If you have any questions about how your personal data is processed, or if you wish to exercise any of your data rights described in Section 8, please contact us using the details set out in Section 13.

Data We Collect

tf777 collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (National ID, passport, or driver's licence number) where provided for age and identity verification purposes.
• Contact Data: Mobile phone number, email address, and residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar). This information is used to communicate with you about your account and transactions.
• Financial Data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank card details where applicable (card type, last four digits, and issuing bank), and a full record of deposits, withdrawals, wagers, and winnings on your account.
• Technical Data: IP address, device type, operating system, browser type and version, session identifiers, and login timestamps. This data is collected automatically when you access the platform.
• Usage Data: Information about how you interact with the platform, including which games you play, how long you play, your betting patterns, and which sections of the site you visit. This data is used in part to support our responsible gaming obligations.
• Communications Data: Records of any correspondence between you and tf777 support, including live chat transcripts and email exchanges. These records are retained for dispute resolution and quality assurance purposes.
• Verification Documentation: Copies of identity documents, proof of address, and proof of payment method ownership submitted as part of our Know Your Customer (KYC) verification process.

How We Collect Your Data

tf777 collects personal data through the following means:

• Direct collection at registration: When you create a Player Account, you provide identity, contact, and in some cases financial data directly through the registration form.
• During deposit and withdrawal transactions: Payment processing requires you to provide financial data. This data is transmitted over encrypted connections to our payment processing partners.
• During KYC verification: When we request identity documentation, you upload documents directly through the secure account verification section of the platform.
• Automatically through platform use: Technical data and usage data are collected automatically as you interact with the tf777 platform, including through cookies and server-side logging. See Section 7 for more detail on cookies.
• Through customer support interactions: When you contact our support team via live chat or email, we record and retain those communications.
• From third-party verification services: In some cases, we may receive supplementary identity or fraud-risk data from third-party identity verification or fraud prevention providers where this is necessary to complete our KYC process.

How We Use Your Data

tf777 uses personal data for the following purposes, each supported by an identified legal basis:

• Account management and service delivery — to create and maintain your Player Account, process deposits and withdrawals in BDT, and deliver the games and betting services you have requested. Legal basis: contractual necessity.
• Identity and age verification — to confirm that you are aged 21 or above and are who you claim to be, in accordance with our commitments to preventing underage gambling. Legal basis: legal obligation; contractual necessity.
• Fraud prevention and security — to detect and prevent fraudulent activity, money laundering, account takeover, and other security threats. Technical data and financial data are routinely analysed for anomalies as part of this process. Legal basis: legitimate interests; legal obligation.
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling behaviour and to administer any responsible gaming tools you have requested, including deposit limits, session time limits, and self-exclusion. Legal basis: legitimate interests; legal obligation.
• Customer support — to respond to your enquiries, resolve disputes, and provide assistance with account-related matters. Legal basis: contractual necessity.
• Platform improvement — to analyse usage patterns and improve the design, performance, and content of the tf777 platform. Where possible, this analysis is conducted on aggregated or anonymised data. Legal basis: legitimate interests.
• Compliance with legal and regulatory obligations — to comply with applicable laws, respond to lawful requests from authorities, and maintain records required for audit and compliance purposes. Legal basis: legal obligation.
• Direct communications regarding your account — to send you transactional notifications relating to your account, including deposit confirmations, withdrawal status updates, and security alerts. Legal basis: contractual necessity.

Data Sharing & Disclosure

tf777 does not sell, rent, or otherwise trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below and only to the extent strictly necessary for the stated purpose:

• Payment processing partners: Financial data is shared with our payment processors (including the operators of bKash, Nagad, Rocket, and Upay integrations, and card processing networks) solely to execute deposit and withdrawal transactions on your behalf.
• Game providers: Technical session data is shared with certified game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary to facilitate gameplay, maintain game logs, and support dispute resolution related to specific rounds.
• Identity verification and fraud prevention services: Identity and technical data may be shared with third-party KYC and fraud prevention providers for the purpose of verifying your identity and assessing the risk profile of transactions on your account.
• Legal and regulatory authorities: Where we receive a lawful demand from a competent authority — including law enforcement agencies, regulatory bodies, or courts — we may be required to disclose personal data. In such cases, we will disclose only the minimum data required to comply with the specific lawful demand.
• Corporate transactions: In the event of a merger, acquisition, or transfer of all or part of the tf777 business, personal data held at the time of the transaction may be transferred to the acquiring entity as part of the business assets, subject to appropriate data protection obligations.

All third-party service providers with whom tf777 shares personal data are contractually required to process that data solely for the purposes specified by tf777 and to maintain appropriate technical and organisational security measures.

Cookies & Tracking Technologies

tf777 uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that allow the platform to recognise your browser session, maintain your login state, and collect technical usage data. tf777 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential to the operation of the platform. They maintain your login session, protect against cross-site request forgery, and enable core platform features such as the game lobby and cashier. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how players use the platform — such as which pages are most visited and which games are most frequently launched — so that we can improve the user experience. No personally identifiable information is collected by these cookies.
• Fraud prevention cookies: These cookies assign a pseudonymous device identifier to your session, which is used as one signal among several in our fraud detection system. They help us identify unusual account activity that may indicate unauthorised access or automated bot activity.

tf777 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of behavioural advertising. You may control cookie storage through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to and using the tf777 platform.

Your Rights

As a data subject, you hold the following rights in respect of the personal data tf777 holds about you. These rights are summarised visually above and described in full below:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this in a structured, readable format within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data held in your account profile is inaccurate or incomplete, you may request that we correct it. For straightforward corrections (e.g., an email address or phone number), you may update these directly in your account settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where we no longer have a lawful basis to retain it. Please note that certain categories of data — particularly financial transaction records and KYC documentation — are subject to mandatory retention periods under applicable anti-money-laundering and financial record-keeping requirements, and cannot be deleted during those retention periods.
• Right to restrict processing: You may request that we place a restriction on how we use your data while we assess a correction request or an objection from you.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you may request a copy of your data in a machine-readable format (e.g., JSON or CSV) for the purpose of transferring it to another service.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where any processing activity is based on your explicit consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing that occurred prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your registered username and a brief description of the right you wish to exercise. We will acknowledge your request within two (2) business days and respond substantively within fourteen (14) business days. Business days are calculated in Bangladesh Standard Time (BST, UTC+6).

Data Retention

tf777 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as we are required to retain it by applicable law or regulation. The following retention periods apply:

• Account and identity data: Retained for the duration of your active Player Account plus a minimum of five (5) years following permanent account closure, in accordance with standard financial record-keeping requirements applicable to online gaming platforms.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money-laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the verification process or following account closure, whichever is later.
• Communications data (support transcripts and emails): Retained for a period of three (3) years from the date of the communication, unless the communication forms part of a formal dispute or compliance investigation, in which case it is retained until the matter is fully resolved plus one (1) year thereafter.
• Technical and usage data: Retained in identifiable form for up to twenty-four (24) months, after which it is either deleted or anonymised and retained in aggregated form for statistical and platform improvement purposes.
• Responsible gaming records: Self-exclusion and deposit limit records are retained for the duration of the restriction plus five (5) years, to prevent circumvention and to maintain an audit trail of our responsible gaming obligations.

When personal data is no longer required and no legal retention obligation applies, tf777 will securely delete or irreversibly anonymise that data using industry-standard data destruction procedures.

Security Measures

tf777 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the tf777 platform, including login, registration, cashier, and account management pages.
• Encryption at rest for sensitive personal data categories, including identity documents, payment references, and password hashes. Passwords are stored using modern one-way hashing algorithms with per-record salting and are never stored or transmitted in plain text.
• Access controls that restrict access to personal data on a strict need-to-know basis. Administrative access to production databases requires multi-factor authentication and is subject to role-based access control policies.
• Intrusion detection and monitoring systems that continuously analyse network traffic and system logs for indicators of compromise or anomalous activity.
• Regular security assessments of the platform infrastructure, including vulnerability scanning and penetration testing conducted by qualified security professionals.
• Incident response procedures that define the steps tf777 will take in the event of a suspected or confirmed personal data breach, including internal escalation, containment, assessment, and notification to affected players where required.

Notwithstanding the measures above, no data transmission over the internet and no data storage system can be guaranteed to be completely secure. While tf777 takes all reasonable steps to protect your personal data, we cannot warrant absolute security. You are responsible for keeping your account credentials confidential and for ensuring that you log out of your account on shared devices.

Children and Underage Players

The tf777 platform is strictly intended for adults aged 21 years and above. tf777 does not knowingly collect personal data from individuals under the age of 21. Registration on the platform requires you to confirm that you are aged 21 or above, and all accounts are subject to age verification as part of our KYC process.

If tf777 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or any other means — we will take immediate steps to suspend the relevant account, cancel any pending transactions, and permanently delete the personal data associated with that account in accordance with our responsible gaming and data protection obligations.

If you are a parent or guardian and have reason to believe that a person under the age of 21 in your care has registered on the tf777 platform, please contact us immediately at [email protected] so that we can take prompt action.

Changes to This Policy

tf777 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law or regulation, or improvements to the platform that affect how personal data is collected or used.

When we make material changes to this Policy, we will notify registered players by displaying a prominent notice on the tf777 platform and, where we hold a verified email address for your account, by sending a notification to that address. The updated Policy will take effect from the date displayed as the "Effective" date at the top of this page.

Your continued use of the tf777 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this page periodically so that you are always aware of the current version of our Privacy Policy. The version number displayed in the sidebar reflects the most recently published version.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which tf777 processes your personal data, please contact our support team using the details below. All privacy-related communications are handled in English and are responded to in accordance with Bangladesh Standard Time (BST, UTC+6).

Email (Privacy Enquiries):

Live Chat: Available 24 hours a day, 7 days a week via the tf777 platform. Our support team can handle general privacy questions via live chat and can escalate formal data rights requests to the data protection team on your behalf.

When contacting us regarding a specific account privacy matter, please have your registered username and the mobile number associated with your account available so that our team can verify your identity promptly and assist you efficiently.