777kora Privacy Policy

777kora collects personal data in three primary ways: information you provide to us directly when you register or interact with the Platform, information collected automatically when you use the Platform, and information received from trusted third-party service providers. The categories below describe what we collect and why.

777kora does not knowingly collect personal data from individuals under the age of 18. If we become aware that an account has been registered by a person under 18, we will immediately close the account and delete any associated personal data in accordance with our zero-tolerance underage gambling policy.

777kora processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: (a) performance of the contract between you and 777kora (i.e., operating your account and delivering gaming services), (b) compliance with legal obligations (e.g., KYC, anti-money-laundering checks), (c) legitimate interests (e.g., fraud detection, platform security), and (d) your consent (e.g., receiving marketing communications, where you have opted in).

The following table sets out the specific purposes for which 777kora uses your personal data and the lawful basis for each:

Where 777kora relies on your consent as the lawful basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You may withdraw consent by updating your communication preferences in your account settings or by contacting our support team.

777kora does not use your personal data for automated individual decision-making that produces legal or similarly significant effects on you — with the exception of fraud and AML screening systems, which may place an automated temporary hold on account activity pending human review. Where an automated flag results in account restriction, you will be notified and given the opportunity to request human review of the decision.

777kora does not sell your personal data. We share personal data with third parties only to the extent necessary to operate the Platform, meet legal obligations, or protect the safety of our players. All third-party recipients of personal data are required to process that data only for the specified purpose and in accordance with applicable data protection standards.

The categories of third parties with whom we share data are as follows:

• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive limited account session data (such as anonymised player tokens and session identifiers) to deliver game content and maintain game integrity. These providers do not receive your full identity data or payment details.
• Payment Processors: bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) receive the financial data necessary to process your deposits and withdrawals. Each processor operates under its own applicable data protection framework and complies with applicable financial regulations in Bangladesh.
• KYC / Identity Verification Partners: A regulated third-party KYC provider processes your identity documents on our behalf to verify your name, age, and address. This provider acts as our data processor under a binding data processing agreement and is prohibited from using your documents for any purpose beyond verification.
• Fraud and AML Screening Services: We use third-party risk intelligence services to screen transactions and account activity against known fraud patterns and AML watchlists. These services receive the minimum data necessary (such as name, transaction amount in BDT, and IP address) to perform screening.
• Cloud Infrastructure and Hosting Providers: 777kora operates on a cloud infrastructure supported by reputable hosting providers. These providers act as data processors and handle data only under our documented instructions. All data at rest is encrypted.
• Legal and Regulatory Authorities: We may be required by applicable law, court order, or a legitimate request from a government or law enforcement body to disclose personal data. We will only disclose the minimum data required and, where legally permissible, will notify the affected Player of such disclosure.
• Responsible Gaming Organisations: If a Player has self-excluded from 777kora, we may share the self-exclusion record with partner responsible gaming bodies to support cross-platform exclusion enforcement. Only the minimum necessary data (name, contact details, exclusion period) is shared.

777kora uses cookies and similar client-side storage technologies (such as local storage and session storage) to enable core Platform functionality, maintain your login session, detect fraud, and understand how players use the Platform so that we can improve the experience over time.

A cookie is a small text file placed on your device by the Platform when you visit. Cookies do not contain executable code and cannot access other files on your device. The table below categorises the cookies used by 777kora:

777kora does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cookie technology designed to build advertising profiles across the broader internet.

You may manage cookie preferences by adjusting the settings of your web browser. Most browsers allow you to block or delete cookies. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your 777kora account and using real-money features. For guidance on managing cookies in your specific browser, consult the browser's official help documentation.

On mobile browsers — commonly used by players accessing 777kora from Dhaka, Chittagong, Rajshahi, and other cities across Bangladesh — the cookie management interface is typically found under Settings → Privacy or Settings → Site Permissions, depending on the browser and device.

777kora retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention schedule below outlines how long we typically hold each category of data. Where a legal obligation requires data to be held for a minimum period, we will retain it for that minimum period and no longer than necessary thereafter.

When a retention period expires, personal data is either securely and permanently deleted from 777kora's systems or anonymised such that it can no longer be attributed to any identifiable individual. Anonymised, aggregated data (for example, aggregate statistical reports on game popularity or regional player volumes) may be retained indefinitely as it does not constitute personal data.

Inactive accounts — those that have had no login or financial activity for a continuous period of 12 months — will be flagged for review. The account holder will be notified via their registered email address before any data deletion action is taken, providing them with the opportunity to reactivate the account or request voluntary closure with balance return.

777kora takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, loss, destruction, or disclosure. While no online platform can guarantee absolute security, we maintain security standards consistent with industry best practices for an online gaming platform serving players across Bangladesh.

Technical Security Measures:

• SSL/TLS Encryption in Transit: All communications between your device and 777kora are encrypted using SSL/TLS. The Platform enforces HTTPS on all pages and rejects unencrypted HTTP connections.
• Encryption at Rest: Sensitive data — including KYC documents, payment method details, and authentication credentials — is encrypted at rest using strong encryption standards. Passwords are never stored in plain text; they are hashed using a modern one-way hashing algorithm with per-account salting.
• Access Controls: Access to personal data within 777kora's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access to sensitive data categories (KYC documents, financial records) is logged for audit purposes.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable two-factor authentication on their 777kora accounts. Where enabled, 2FA adds an additional layer of protection against unauthorised login attempts.
• Fraud Detection Systems: Automated monitoring systems run continuously to detect unusual account activity, suspicious login patterns, and anomalous transaction behaviour. Triggered alerts are reviewed by our security team in real time.
• Penetration Testing: 777kora commissions periodic security assessments and penetration tests by qualified third-party security professionals to identify and remediate vulnerabilities before they can be exploited.

You also play an important role in keeping your account secure. You should choose a strong, unique password for your 777kora account, enable 2FA, never share your login credentials with anyone, and log out of your account after each session — particularly when using shared or public devices. If you suspect that your account has been compromised, contact our support team immediately via live chat (available 24/7 from your account dashboard) or by emailing support@777kora.

As a player on 777kora, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 8. We will respond to all verified requests within a reasonable timeframe and at no cost to you, unless a request is manifestly unfounded or excessive.

To exercise any of the rights described above, please submit a written request to our Data Protection Officer at the contact details listed in Section 8. We may request that you verify your identity before processing your request, in order to ensure that we do not disclose data to or act on instructions from an unauthorised person. We aim to acknowledge all privacy rights requests within 5 business days and to resolve them within 30 calendar days of receipt of a complete, verified request. If a request is particularly complex or voluminous, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 777kora holds about you, please do not hesitate to reach out. Our Data Protection Officer (DPO) is responsible for overseeing compliance with data protection obligations and for handling player privacy rights requests.

You may contact the Data Protection Officer through the following channels. Please note that all contact details below are provided as plain text only and are not clickable links:

Policy Updates: 777kora reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to the Platform, or changes in applicable law. When we make a material change to this policy, we will notify registered Players via their registered email address and will display a prominent notice on the Platform for a period of at least 14 days following the update. The updated policy will take effect from the date indicated in the "Last Updated" field at the top of this page.

We encourage all players to review this Privacy Policy periodically so that they remain informed about how 777kora collects, uses, and protects their personal data. Your continued use of the Platform following notification of a policy update constitutes your acknowledgement of the revised policy.

This Privacy Policy was last updated in January 2026. If you have been a 777kora player for some time and have not reviewed this policy recently, we encourage you to read it in full to ensure you are comfortable with our current data practices.