Privacy Policy — na77 Online Casino Bangladesh

Our Commitment

Privacy at a Glance

The cards below summarise na77's core privacy commitments. They are intended as a quick-reference companion to the full policy text that follows. In all cases, the detailed sections below govern na77's actual obligations.

Minimal Data Collection

na77 collects only the personal data strictly necessary to operate your account, process payments, verify your identity, and deliver a safe gaming experience. We do not harvest data beyond what is needed.

No Sale of Personal Data

na77 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data is used exclusively to provide and improve na77 services.

256-bit SSL Encryption

All data transmitted between your device and the na77 platform is protected by industry-standard 256-bit SSL encryption. Stored personal data is secured using equivalent encryption at rest.

Player Rights Respected

You have the right to access, correct, or request deletion of your personal data held by na77. Requests are handled by our compliance team within 30 days of receipt.

Defined Retention Periods

na77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal and financial record-keeping obligations.

Transparent Cookie Use

na77 uses cookies and similar technologies to keep your session active, remember preferences, and analyse platform performance. You can manage non-essential cookies through your browser settings.

Section 1

Introduction and Scope

This Privacy Policy ("Policy") describes how na77 ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data relating to registered players, prospective players, and website visitors who interact with the na77 website at na77.club and all services offered through it.

This Policy applies to all personal data processing activities carried out by na77 in connection with the operation of its online casino and sports betting services, including account registration, identity verification, payment processing, customer support interactions, and marketing communications (where consented to). It applies to all players based in Bangladesh and to any individual who accesses the na77 platform from within Bangladesh.

na77 is committed to handling your personal data responsibly, transparently, and in accordance with the principles of fair and lawful processing. We collect personal data only for specified, explicit purposes and do not process it in a manner that is incompatible with those purposes.

Governing Language: This Privacy Policy is written in English. In the event of any conflict or inconsistency between this English-language version and any translated version, the English text shall take precedence in all respects.

By creating a na77 account, making a deposit, or otherwise using any feature of the na77 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the na77 platform and should contact our support team at [email protected] to arrange account closure.

This Policy should be read in conjunction with na77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and na77.

Section 2

Personal Data We Collect

na77 collects personal data from you directly when you interact with the platform, and automatically through the operation of the platform's technical infrastructure. The categories of personal data we collect, and the contexts in which we collect them, are set out in the table below.

Category	Examples	Collection Context
Identity Data	Full legal name, date of birth, national ID number, passport number	Account registration, KYC verification
Contact Data	Email address, mobile number, residential address	Account registration, customer support
Financial Data	bKash/Nagad/Rocket mobile wallet number, Visa/Mastercard last 4 digits, transaction history	Deposits, withdrawals, payment verification
KYC Documents	Scanned NID, passport photo page, proof of address, selfie for liveness check	Identity and age verification
Technical Data	IP address, device type, operating system, browser type, session tokens	Automatic collection on platform access
Usage Data	Games played, bet amounts, login timestamps, session duration, pages visited	Automatic collection during platform use
Communications Data	Support chat transcripts, email correspondence, complaint records	Customer support interactions
Marketing Preferences	Email/SMS opt-in status, preferred promotion categories	Account settings, marketing consent forms

Data You Provide Voluntarily: When you register a na77 account, you provide identity and contact data directly. When you complete KYC verification, you upload documentary evidence of your identity and address. When you contact na77 support, the content of your communications is retained as part of our service records.

Data Collected Automatically: When you access the na77 website or use the platform, we automatically collect technical and usage data through cookies, server logs, and similar technologies. This data helps na77 maintain platform security, detect fraud, and improve the gaming experience. See Section 4 (Cookies and Tracking Technologies) for more detail.

Sensitive Data: na77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by our responsible gaming obligations (for example, recording a self-exclusion request). Such data, where collected, is handled with enhanced safeguards and access controls.

Section 3

How We Use Your Data

na77 processes your personal data only for the purposes set out in this section. For each purpose, na77 relies on one of the following lawful bases: contractual necessity (processing is required to perform the player contract), legal obligation (processing is required to comply with applicable law), legitimate interest (processing serves a genuine na77 business interest that is not overridden by your rights), or consent (you have provided explicit and freely given consent, which you may withdraw at any time).

Account Management: To create, maintain, and administer your na77 player account, including processing login credentials, managing account preferences, and communicating account status updates. Lawful basis: contractual necessity.
Identity Verification (KYC): To verify your identity and confirm that you meet the platform's minimum age requirement of 18 years, in line with na77's responsible gaming and anti-fraud obligations. Lawful basis: legal obligation and legitimate interest.
Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify the source of funds where required; and to reconcile transaction records. Lawful basis: contractual necessity and legal obligation.
Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited behaviours on the platform. Lawful basis: legitimate interest and legal obligation.
Responsible Gaming: To monitor player activity for signs of problem gambling, apply player-requested limits and self-exclusion orders, and fulfil our duty of care obligations. Lawful basis: legitimate interest and legal obligation.
Customer Support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance and training purposes. Lawful basis: contractual necessity and legitimate interest.
Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the performance, stability, and user experience of the na77 platform. Lawful basis: legitimate interest.
Marketing Communications: To send you promotional emails, SMS messages, or in-platform notifications about na77 bonuses, new games, and seasonal offers — but only where you have given explicit consent. You may withdraw marketing consent at any time by updating your account preferences or contacting support. Lawful basis: consent.
Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain financial records as required by applicable record-keeping obligations. Lawful basis: legal obligation.

Automated Decision-Making: na77 uses automated systems to assist with fraud detection, KYC screening, and responsible gaming monitoring. Where an automated process produces a decision that significantly affects your account (such as a temporary hold pending review), you have the right to request human review of that decision by contacting [email protected].

Section 4

Cookies and Tracking Technologies

na77 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform securely, remember your preferences, maintain your login session, and gather aggregated analytics data. Cookies are small text files stored on your device by your browser when you visit the na77 website.

Essential Cookies: These are strictly necessary for the na77 platform to function. They enable core features such as secure login session management, game session continuity, and fraud prevention mechanisms. Essential cookies cannot be disabled without significantly impairing platform functionality.

Functional Cookies: These cookies remember your account preferences, such as preferred language, display settings, and last-played game category, so that you do not need to re-enter these preferences on each visit. Functional cookies can be disabled via your browser settings, though doing so may affect your platform experience.

Analytics Cookies: na77 uses analytics technologies to collect aggregated, anonymised data about how players navigate and use the platform. This data is used solely to improve platform performance and is not linked to any individual player profile for marketing purposes. Analytics cookies can be disabled without affecting your access to na77 services.

Managing Cookies: You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive notifications before a new cookie is set. Please be aware that disabling essential cookies may prevent you from logging in or maintaining an active game session on na77.

na77 does not use third-party advertising cookies or cross-site tracking pixels for the purpose of serving targeted advertisements on external websites. Any analytics tools used by na77 are configured to anonymise IP addresses and aggregate data before reporting.

Essential Cookies

Always active. Required for secure login, session management, and fraud detection. Cannot be disabled.

Functional Cookies

Store your account preferences and display settings. Can be disabled via browser settings.

Analytics Cookies

Anonymised platform usage data used solely to improve na77. No individual profiling for ads.

No Ad-Tracking Cookies

na77 does not deploy cross-site advertising or retargeting cookies on this platform.

Section 5

Data Sharing and Third Parties

na77 does not sell or rent your personal data to any third party. We share personal data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose. All third-party recipients of na77 player data are bound by contractual data protection obligations consistent with the standards set out in this Policy.

Game Technology Providers: na77's game library is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers receive technical session data (such as a pseudonymous player session token and stake amounts) necessary to operate individual game rounds. They do not receive your full name, contact details, or payment information.

Payment Processors: When you make a deposit or request a withdrawal, relevant transaction data is shared with the payment provider you have selected — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. These providers process payment data under their own privacy policies and applicable financial regulations. na77 does not store full card numbers; only masked card references and transaction references are retained.

Identity Verification Services: na77 may engage specialist KYC and identity verification providers to assist with document validation and age verification. These providers process identity documents on na77's behalf under strict confidentiality and data security obligations.

Fraud and Anti-Money Laundering (AML) Screening: na77 uses industry-standard fraud detection and AML screening tools. Player data may be checked against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources as part of na77's compliance obligations. Results of these checks are retained as part of the player's compliance record.

Legal Disclosures: na77 may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory authorities in response to a lawful request, court order, or legal process. na77 will, to the extent permitted by law, notify affected players of such disclosures where it is legally permissible and practicable to do so.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of na77's business assets, player personal data may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any material change to the privacy practices of the successor entity prior to any change taking effect.

Section 6

Data Retention and Storage

na77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required to comply with applicable legal, regulatory, tax, and financial record-keeping obligations. When personal data is no longer required for any of these purposes, it is securely deleted or anonymised.

Active Accounts: For as long as your na77 account remains open and active, na77 will retain all personal, financial, and usage data associated with your account. This data is necessary to provide you with uninterrupted gaming and account services.

Closed Accounts: Following the closure of your na77 account — whether voluntarily or by na77 — core identity and transaction records are retained for a minimum period of five (5) years from the date of account closure. This retention period reflects standard financial record-keeping practice and enables na77 to respond to any retrospective legal or regulatory enquiries.

KYC Documentation: Identity verification documents, including copies of NID cards, passports, and proof-of-address documents, are retained for a minimum of five (5) years following account closure. Documents are stored using encryption at rest and access is strictly limited to authorised compliance personnel.

Customer Support Records: Records of support interactions, including chat transcripts and email correspondence, are retained for a period of three (3) years from the date of the most recent interaction, to enable quality assurance review and to support any subsequent dispute resolution.

Marketing Data: Where you have consented to receive marketing communications from na77, your marketing preferences and related contact data are retained until you withdraw consent. Upon withdrawal of consent, your details are removed from na77's active marketing lists within 30 days, though anonymised records of the consent history are retained for compliance purposes.

Data Storage Location: Personal data collected by na77 is stored on secure servers. All stored data is protected by encryption at rest. na77 does not transfer personal data internationally except where necessary to engage the third-party service providers described in Section 5, and only where appropriate data protection safeguards are in place.

Retention Summary

Active account data: while account is open
Identity & transaction records: 5 years post-closure
KYC documents: 5 years post-closure
Support transcripts: 3 years from last contact
Marketing preferences: until consent withdrawn

Secure Deletion: When retention periods expire, personal data is securely deleted using industry-standard data erasure methods. Anonymised, aggregated data derived from your account activity may be retained indefinitely for statistical analysis purposes.

Section 7

Your Privacy Rights

As a player whose personal data is processed by na77, you hold a set of privacy rights with respect to your data. na77 is committed to facilitating the exercise of these rights in a timely and transparent manner. All rights requests should be submitted to [email protected] with sufficient information to enable na77 to identify your account and process your request. na77 will respond within 30 days of receiving a valid request.

Right of Access

You have the right to request a copy of the personal data na77 holds about you, along with information about how it is used and with whom it is shared.

Right to Rectification

If any personal data na77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to na77's legal retention obligations.

Right to Restriction

You may ask na77 to restrict the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is under review.

Right to Portability

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format.

Right to Object

You have the right to object to processing of your personal data where na77 relies on legitimate interest as the lawful basis, including for direct marketing purposes.

Important — Limitations on Erasure: na77 is not able to erase personal data that it is legally required to retain, for example identity records and transaction data subject to financial record-keeping obligations. Where a deletion request cannot be fulfilled in full, na77 will inform you of the specific data that must be retained and the reason for the retention obligation.

Section 8

Data Security Measures

na77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly to reflect the current threat landscape.

Encryption in Transit: All data transmitted between your device and the na77 platform is protected by TLS 1.2/1.3 encryption (256-bit SSL). This ensures that data exchanged during login, gameplay, deposits, and withdrawals cannot be intercepted or read by unauthorised parties.

Encryption at Rest: Personal data stored on na77's servers — including identity documents, financial records, and account information — is encrypted at rest using AES-256 encryption. Database access is controlled by role-based access management, limiting data visibility to authorised personnel only.

Access Controls: Access to player personal data within na77's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations. Access logs are maintained and audited regularly.

Fraud Detection Systems: na77 employs automated fraud detection systems that monitor platform activity in real time for indicators of account compromise, unusual transaction patterns, or suspicious login behaviour. Accounts flagged by these systems may be temporarily suspended pending investigation to protect the player's funds and data.

Third-Party Security Audits: na77's platform and data security practices are subject to periodic independent security assessments. Identified vulnerabilities are remediated promptly in line with a risk-based prioritisation framework.

Data Breach Response: In the event of a personal data breach that poses a risk to your rights and interests, na77 will notify affected players without undue delay. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures na77 has taken or proposes to take to address the breach.

Your Responsibilities: While na77 takes every reasonable step to protect your data, the security of your na77 account also depends on the steps you take to protect your login credentials. You should use a strong, unique password for your na77 account, never share your password with any third party, and log out of your account when using a shared or public device. If you believe your account has been compromised, contact na77 support immediately at [email protected].

TLS 1.2/1.3 Encryption

All data in transit is protected by 256-bit SSL/TLS encryption on every page and transaction.

AES-256 Storage Encryption

All stored personal data and documents are encrypted at rest using AES-256 standard.

Role-Based Access Control

Internal data access is restricted to authorised personnel on a strict need-to-know basis with full audit logging.

Real-Time Fraud Monitoring

Automated systems monitor all platform activity 24/7 for signs of account compromise or suspicious behaviour.

Independent Security Audits

Periodic third-party security assessments identify and remediate vulnerabilities in na77's infrastructure.

Section 9

Contact and Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or the way na77 processes your personal data, please contact the na77 support team using the details below. All privacy-related enquiries are handled by na77's compliance team, who are available around the clock.

Privacy Contact:
Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 from within your na77 account dashboard.
Support Hours: Bangladesh Standard Time (BST, UTC+6), all day every day.
Response Time: Privacy requests are acknowledged within 2 business days and resolved within 30 calendar days of receipt.

Policy Review and Updates: na77 reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in applicable law, platform services, or data processing practices. The effective date displayed at the top of this page will be updated whenever a material change is made.

Notification of Material Changes: Where na77 makes a material change to this Privacy Policy — for example, introducing a new category of data collection or a new third-party data sharing arrangement — registered players will be notified via a prominent notice on the na77 website and, where practicable, by an email to the address associated with their account. Minor changes such as typographical corrections or clarifications that do not affect your rights will be made without separate notification.

Continued Use as Acceptance: Your continued use of the na77 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must stop using the platform and may contact na77 to request account closure before the changes take effect.

Children and Minors: na77 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If na77 becomes aware that personal data has been submitted by a minor, that data will be deleted immediately and the associated account will be permanently closed. If you believe a minor has registered on the na77 platform, please notify us immediately at [email protected].

18+ Only — Age Restriction: By using the na77 platform you confirm that you are at least 18 years of age. na77 is committed to preventing underage gambling and conducts age verification checks on all registered accounts. Players in Bangladesh must be 18 years or older to open an account and place bets on na77. If you are concerned about underage access to gambling, please visit our Responsible Gaming page for guidance on parental controls and self-exclusion tools.

na77 Privacy Policy