Privacy Policy — How ko777 Protects Your Personal Data

1 Policy Overview

This Privacy Policy ("Policy") describes how ko777 ("the Platform", "we", "us", "our"), accessible at ko777.io, collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who register accounts, access the platform, or interact with ko777's services in any way, including browsing the website without registering.

ko777 operates primarily in the Bangladesh market and serves players who use the platform for online casino gaming and sports betting. This Policy reflects international best-practice data protection principles, including those established under the General Data Protection Regulation (GDPR) framework, which we adopt as the baseline standard for all player data regardless of the player's geographic location.

By registering an account on ko777 or by continuing to use the ko777 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must stop using the ko777 platform and may request account closure by contacting [email protected].

2 Data We Collect

ko777 collects the following categories of personal data in connection with the provision of its services. The specific data points collected depend on the nature of your interaction with the platform.

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the 21+ age requirement)
• Residential address, including city and postcode
• Email address and mobile telephone number
• Nationality and country of residence

2.2 Account & Authentication Data

• Username chosen at registration
• Hashed and salted password (the plain-text password is never stored)
• Account creation date, time, and IP address
• Device fingerprint and browser user-agent string at login

2.3 Financial & Transaction Data

• Payment method identifiers (e.g., bKash mobile number, Nagad account reference, Rocket number, bank account last four digits) — full payment credentials are never stored on ko777 servers
• Deposit amounts, timestamps, and transaction reference numbers
• Withdrawal requests, amounts, and settlement confirmations
• Account balance history and bonus credit records

2.4 Gaming & Betting Activity Data

• Game sessions played, including game title, provider, session start/end times, and wager amounts
• Sports bets placed, including market, selection, stake, odds, and settlement outcome
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Bonus offers claimed, wagering progress, and bonus settlement records

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited on ko777.io, time spent on each page, and clickstream data
• Session duration, login frequency, and logout timestamps
• Error logs and crash reports generated during your use of the platform

2.6 Identity Verification Documents

• Copies of government-issued photo identification (National ID card, passport, or birth certificate) submitted during KYC verification
• Proof of address documents (utility bills, bank statements) where required for enhanced due diligence
• Selfie or video verification images where required by the KYC process

3 How We Collect Data

ko777 collects personal data through the following channels and mechanisms:

3.1 Directly from You

The majority of personal data held by ko777 is provided directly by you during registration, account verification, payment processing, form submissions, and customer support interactions. This includes all identity data, contact data, financial data, and KYC documents listed in Section 2.

3.2 Automatically Through Platform Use

When you access ko777.io, our servers automatically record technical and usage data including your IP address, device identifiers, browser information, pages visited, and interaction patterns. This data is collected via server logs, session management systems, and first-party analytics tools. It is used to maintain platform security, detect fraud, and improve the user experience.

3.3 From Third-Party Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer partner, the relevant payment processor may share transaction confirmation data with ko777 to reconcile your account. ko777 does not receive your full payment credentials from these processors — only transaction reference numbers and status confirmations are shared.

3.4 From Identity Verification Partners

Where ko777 uses a third-party KYC or identity verification service to assist in verifying your identity documents, that provider may share a verified/not-verified result and a risk score with ko777. The full identity document data is processed by the verification partner under their own privacy controls, and ko777 retains only the verification outcome and reference number.

3.5 From Cookies and Similar Technologies

ko777 uses cookies and similar tracking technologies as described in Section 9 of this Policy. These tools collect browsing behaviour data on ko777.io to support session management, security, and platform analytics.

4 Purposes of Processing

ko777 processes your personal data for the following specific purposes. Each purpose is matched to a legal basis described in Section 5.

5 Legal Basis for Processing

ko777 processes personal data under the following legal bases, consistent with internationally recognised data protection principles:

5.1 Performance of a Contract

The majority of ko777's data processing is necessary to provide you with the services described in the Terms & Conditions — namely, account management, game access, payment processing, and customer support. Without this processing, ko777 cannot fulfil its contractual obligations to you as a registered player.

5.2 Compliance with Legal Obligations

Certain processing activities are required by law, including age verification, Know Your Customer (KYC) checks, Anti-Money Laundering (AML) record-keeping, and responding to lawful requests from competent authorities. ko777 is legally obligated to retain certain financial and identity records for defined periods regardless of account status.

5.3 Legitimate Interests

ko777 processes some data on the basis of legitimate interests, including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement. In each case, ko777 has assessed that its legitimate interest is not overridden by your interests, rights, and freedoms, particularly given the nature of data involved (primarily technical and behavioural rather than sensitive personal data).

5.4 Consent

Where ko777 processes your data for purposes beyond those described above — specifically, sending you promotional communications about bonuses, seasonal offers, and new game launches — this processing is based on your explicit, freely given, and withdrawable consent. You may withdraw consent at any time by contacting [email protected] or by adjusting your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

6 Data Sharing

ko777 does not share your personal data with third parties except in the following strictly defined circumstances:

6.1 Payment Processing Partners

Transaction data is shared with payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to the extent necessary to process your deposit or withdrawal. These partners process your data under their own privacy policies and are independently subject to financial services data protection regulations.

6.2 Identity Verification Providers

Where ko777 uses a third-party KYC provider to verify your identity documents, your identification data is shared with that provider solely for the purpose of completing the verification check. The KYC provider is contractually bound to process your data only for that purpose and to maintain appropriate security standards.

6.3 Game Technology Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session-level data (such as a pseudonymous player identifier, stake amount, and game outcome) to facilitate game sessions and resolve disputes. These providers do not receive your full identity or contact data.

6.4 Legal and Regulatory Authorities

ko777 will disclose personal data to law enforcement agencies, financial intelligence units, tax authorities, or other competent regulatory bodies when required to do so by applicable law, court order, or in response to a lawful investigative request. ko777 will, where legally permitted, notify you of such a disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ko777's business assets, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, with reasonable advance notice provided where possible.

7 Data Retention

ko777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with ko777's data disposal procedures. Anonymised data — from which it is not possible to identify any individual — may be retained indefinitely for statistical and analytical purposes.

8 Data Security

ko777 implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

8.1 Encryption

All data exchanged between your device and ko777's servers is encrypted in transit using TLS 1.2 or higher with 256-bit SSL certificates. All personal data stored in ko777's databases is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text — they are hashed using a modern cryptographic algorithm with a unique per-user salt.

8.2 Access Controls

Access to ko777's production data environments is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication (MFA) and subject to role-based access controls. Access logs are maintained and reviewed regularly for anomalous activity.

8.3 Infrastructure Security

ko777's platform infrastructure is hosted on enterprise-grade cloud servers with physical security controls, redundant backup systems, and continuous intrusion detection monitoring. Regular penetration testing and vulnerability assessments are conducted by qualified third-party security professionals. Critical security patches are applied on a priority basis within 24 hours of release.

8.4 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ko777 will notify affected players without undue delay and, where applicable, notify the relevant supervisory authority. The notification will describe the nature of the breach, the data categories affected, the likely consequences, and the remedial measures taken. ko777 maintains an incident response plan that is tested and updated annually.

9 Cookies & Tracking Technologies

ko777 uses cookies and similar technologies — including session tokens, local storage objects, and analytics scripts — to operate and improve the platform. The following categories of cookies are used on ko777.io:

9.1 Strictly Necessary Cookies

These cookies are essential for the ko777 platform to function correctly and cannot be disabled. They include session management cookies that keep you logged in between page loads, security cookies that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure consistent server routing. No personal data collected via strictly necessary cookies is used for marketing purposes.

9.2 Functional Cookies

Functional cookies remember your preferences and settings — such as your preferred language, display settings, and whether you have acknowledged certain notices — to provide a more personalised experience on return visits. These cookies do not track your activity on other websites.

9.3 Analytics Cookies

ko777 uses first-party analytics cookies to collect aggregated, anonymised data about how users interact with ko777.io — including page visit frequency, navigation paths, and feature usage rates. This data is used exclusively to improve the platform. ko777 does not use third-party analytics services that share your browsing data with external advertising networks.

9.4 Managing Cookies

You can control cookie settings through your browser's privacy settings at any time. Note that disabling strictly necessary cookies may impair your ability to use the ko777 platform, including logging in and accessing game sessions. For detailed instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

10 Your Rights

As a data subject, you hold the following rights in relation to the personal data ko777 holds about you. These rights may be subject to certain limitations where ko777 is required by law to retain or process data regardless of your request.

10.1 Right of Access

You have the right to request a copy of all personal data ko777 holds about you, along with information about how that data is processed. ko777 will provide this information within 30 days of receiving a verified request.

10.2 Right to Rectification

You have the right to request correction of any personal data held by ko777 that is inaccurate or incomplete. For certain data fields (such as your registered name or date of birth), correction may require submission of updated identity documentation.

10.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data has been unlawfully processed. Erasure requests will be honoured subject to ko777's legal retention obligations — data required by law to be retained cannot be deleted on request.

10.4 Right to Restrict Processing

You have the right to request that ko777 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, ko777 will continue to store the data but will not actively process it.

10.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data to transfer to another service provider. ko777 will provide this in a standard format (JSON or CSV) within 30 days of a verified request.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on ko777's legitimate interests. ko777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Right to Withdraw Consent

Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

11 Minors & Age Policy

ko777 does not knowingly collect personal data from individuals under the age of 21. The ko777 platform is strictly restricted to adults aged 21 and above. Age verification is conducted as part of the account registration and KYC process, and any account found to belong to a person under 21 years of age will be immediately and permanently closed.

If a parent or guardian becomes aware that a person under 21 has registered on ko777 or provided personal data without parental consent, they should contact [email protected] immediately. ko777 will promptly close the account, delete all associated personal data to the extent not required for legal compliance purposes, and return any deposited funds in accordance with applicable payment processing rules.

12 International Data Transfers

ko777 serves players primarily in Bangladesh and processes the majority of player data within secure data centre infrastructure. In some cases, data may be processed by or transferred to service providers — such as cloud infrastructure providers, identity verification services, or game technology partners — whose servers may be located in other countries.

Where such international transfers occur, ko777 ensures that appropriate safeguards are in place to protect your personal data to the same standard as described in this Policy. These safeguards include contractual data protection clauses with all data processors, adherence to recognised international data transfer frameworks, and technical security controls that apply regardless of the geographic location of processing.

By registering on ko777 and using the platform, you acknowledge that your personal data may be processed in countries outside Bangladesh. ko777 takes all reasonable steps to ensure that such processing is conducted securely and in accordance with the principles set out in this Privacy Policy.

13 Policy Changes

ko777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform operations. The "Effective Date" displayed at the top of this Policy reflects the date of the most recent revision.

When material changes are made to this Policy — meaning changes that significantly affect how your personal data is collected, used, or shared — ko777 will notify registered players via email to the address registered on their account, or via a prominent notice on the ko777.io platform, at least 14 days before the revised Policy takes effect. Your continued use of the ko777 platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.

For changes that are not material in nature (such as corrections of typographical errors, clarification of existing descriptions, or administrative updates), ko777 may update the Policy without advance notice. We encourage you to review this Policy periodically to stay informed about how ko777 protects your personal data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or ko777's data processing practices, you are encouraged to contact the ko777 Data Protection team in the first instance. We aim to resolve all privacy-related enquiries promptly and transparently.

14.1 General Privacy Enquiries

For general questions about this Policy or how your personal data is handled, email our support team at [email protected] with the subject line "Privacy Enquiry — [Your Account Username]". Our team aims to respond within 5 business days Bangladesh Standard Time (BST, UTC+6).

14.2 Data Rights Requests

To exercise any of the data subject rights described in Section 10 (access, rectification, erasure, restriction, portability, objection, or consent withdrawal), email [email protected] with the subject line "Data Rights Request — [Your Account Username]". Identity verification will be required before any request is processed. ko777 will respond within 30 calendar days of receiving a verified request.

14.3 Privacy Complaints

If you are dissatisfied with ko777's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. ko777 will cooperate fully with any regulatory investigation conducted in connection with your complaint.