srp77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

This Privacy Policy ("Policy") explains how srp77 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or generated about users ("you", "your", "the Player") when you visit and use the srp77 website at https://srp77.io, including all associated services, features, and products made available through the platform.

srp77 is committed to protecting the privacy and personal data of every player. We treat the handling of personal data as a matter of trust between us and the players who choose to use our platform. This Policy has been written in plain English to ensure it is genuinely understandable, and we encourage you to read it carefully before registering an account or making a deposit.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with srp77.

2 Data We Collect

srp77 collects personal data in two primary ways: data you provide directly to us, and data we collect automatically when you use the platform. The categories of data we collect are set out below.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

3 How We Use Your Data

srp77 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose other than those listed here without first obtaining your consent or updating this Policy.

• Account Creation and Management: To create and maintain your player account, including storing your login credentials (password stored in hashed, non-reversible form), preferences, and account history.
• Identity Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any self-exclusion or restriction that would prevent you from using the platform.
• Payment Processing: To process deposit and withdrawal requests, reconcile transactions, detect payment fraud, and ensure funds are sent to the correct verified payment method.
• Responsible Gaming Obligations: To monitor gameplay patterns for signs of problem gambling, enforce self-exclusion periods and deposit limits you have set, and fulfil our duty of care obligations to players.
• Customer Support: To investigate and respond to queries, complaints, and disputes raised through our email and live chat support channels.
• Platform Improvement: To analyse usage patterns and gameplay data in aggregated, anonymised form to improve the quality, performance, and design of the srp77 platform.
• Fraud and Security: To detect and prevent fraudulent account activity, money laundering, multi-accounting, bonus abuse, match-fixing involvement, and other prohibited conduct defined in our Terms and Conditions.
• Legal Compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, retention of transaction records, and cooperation with law enforcement or regulatory enquiries.
• Marketing Communications: Where you have opted in to receive marketing messages, to send you promotional offers, bonus notifications, and news about new games or features at srp77 (see Section 11 for how to opt out).

4 Legal Bases for Processing

srp77 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing your identity data, contact data, financial data, and gameplay data is necessary to perform the contract between you and srp77 (i.e., to allow you to bet, play, deposit, and withdraw).
• Legal Obligation: Certain processing activities — particularly KYC verification, AML record-keeping, and cooperation with law enforcement — are required by applicable law and cannot be opted out of.
• Legitimate Interests: We process technical data and usage data on the basis of our legitimate interest in operating a secure, stable, and well-performing platform. We also process fraud-detection data on this basis. Our legitimate interests are always balanced against your rights and interests.
• Consent: Where we send you marketing emails or use non-essential analytics cookies, we do so only with your explicit consent. You may withdraw consent at any time by contacting us at [email protected].

5 Data Sharing and Third Parties

5.1 Parties We May Share Data With

srp77 does not sell your personal data. We share data only with the following categories of third party, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive only the transaction data required to complete a deposit or withdrawal. These processors operate under their own privacy policies and are required to protect your data.
• Identity Verification Providers: We may use a third-party KYC service to cross-reference identity documents against official databases. These providers are contractually bound to process your data solely for the verification purpose and to delete it afterwards.
• Game Studios: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier when you launch a game. They do not receive your full name, contact details, or financial data.
• Analytics Providers: We use analytics tools to understand how players navigate the platform. Where possible, we configure these tools to anonymise IP addresses before processing.
• Legal and Regulatory Authorities: We will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, or where we believe disclosure is necessary to protect the rights, property, or safety of srp77, our players, or others.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of srp77's business assets, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

5.2 International Data Transfers

Our primary servers and data storage are located in data centres serving the Asia-Pacific region. Where data is processed by third-party providers whose infrastructure is located outside Bangladesh, we take steps to ensure that appropriate data protection measures are in place, including contractual commitments from those providers to process data only for the agreed purpose and to maintain equivalent security standards.

6 Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your session or preferences. srp77 uses cookies to keep you logged in, remember your language and display preferences, and analyse how players interact with the platform.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function. They manage your login session, maintain your account security token, and remember items in your active game session. These cookies cannot be disabled because the platform cannot function without them.
• Functional Cookies: These remember your preferences such as preferred display settings. They improve your experience but are not essential to platform operation. You may disable them without losing core functionality.
• Analytics Cookies: These help us understand how players navigate the platform — which pages are most visited, where players encounter difficulties, and how long sessions typically last. Data is collected in aggregated form. We seek your consent before setting analytics cookies.
• Security Cookies: These are used for fraud prevention and to detect suspicious login patterns such as logins from new devices or unusual locations. They are strictly necessary for account security.

6.3 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in and using the srp77 platform. Instructions for managing cookies in popular browsers are available via the browser's own help documentation.

7 Data Retention

srp77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8 Security Measures

srp77 implements a multi-layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Encryption: All data transmitted between your browser or device and the srp77 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this protection is active.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm (bcrypt with a high cost factor) so that even internal staff cannot read your password.
• Encrypted Data at Rest: Sensitive personal data — including KYC documents, payment method details, and identity numbers — is stored in encrypted form in our databases. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to production systems and player data is restricted to a small number of authorised staff who require it to perform their duties. All internal access is logged and audited.
• Intrusion Detection: Our infrastructure is monitored continuously for unusual access patterns, attempted breaches, and denial-of-service activity. Alerts are reviewed by our security team around the clock.
• Regular Security Reviews: We conduct periodic reviews of our security practices, including assessments of third-party service providers who handle player data on our behalf.

9 Your Data Rights

As a player whose personal data is processed by srp77, you hold the following rights with respect to that data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of what you are requesting. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of Access: You may request a copy of all personal data srp77 holds about you. We will provide this in a structured, readable format at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For basic profile corrections (such as email address or phone number), you may be able to make updates directly from your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is not absolute — where we are legally required to retain data (for example, transaction records for AML purposes), we will retain it for the minimum legally required period before deletion. We will inform you of any data we are unable to delete and the reason why.
• Right to Restriction of Processing: You may ask us to restrict the processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where we process your data on the basis of consent or contractual necessity using automated means, you may request that we provide your data in a machine-readable format that you can transfer to another service.
• Right to Object: You may object to our processing of your data where that processing is based on our legitimate interests. We will assess your objection and either cease that processing or explain why our legitimate interests override your objection.
• Right to Withdraw Consent: Where we process your data on the basis of consent (for example, marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

10 Children's and Minors' Privacy

srp77 is an adult gambling platform. Our services are strictly for players who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or use any gambling service on the srp77 platform.

If srp77 discovers that it has collected personal data from an individual who is under 21 years of age, we will immediately suspend the account, forfeit any associated winnings (as set out in our Terms and Conditions), delete the personal data associated with the underage account as soon as practicable after completing any legally required retention period, and report the incident if required by applicable law.

Parents and guardians who believe that a minor may have registered or used the srp77 platform should contact our support team immediately at [email protected]. We take all such reports seriously and will investigate promptly.

11 Marketing Communications

11.1 Opt-In Basis

srp77 sends promotional emails and in-platform notifications about bonuses, new games, seasonal promotions (such as Eid special offers, Pohela Boishakh promotions, and BPL cricket betting deals), and platform news only to players who have expressly opted in to receive such communications during registration or in their account settings.

11.2 Opting Out

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send you
• Updating your communication preferences in your account settings panel
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out"

Once you opt out, we will stop sending marketing communications within 5 business days. Please note that even after opting out, we may still send you transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, and responses to your support requests. These are not marketing messages and cannot be opted out of while your account remains active.

11.3 No Third-Party Marketing

srp77 does not share your contact details with third-party companies for the purpose of those companies marketing their own products and services to you directly. Any marketing you receive will come only from srp77.

12 Third-Party Links

The srp77 platform may contain references to third-party game studios and payment providers. Where third-party logos or names appear on the platform, these are for informational identification purposes only. srp77 does not maintain hyperlinks to external third-party websites in the body content of the platform.

srp77 accepts no responsibility for the privacy practices or content of any third-party service. If you navigate to a third-party website or application through any means — including game launch windows operated by third-party studios — please review the privacy policy of that third party separately. Their data practices are entirely outside srp77's control.

13 Changes to This Privacy Policy

srp77 reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates in our data processing practices, changes in applicable law, new features or services added to the platform, or feedback from players and regulators.

When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via the email address associated with their account at least 14 days before the changes take effect. For minor clarifications or non-material edits (such as fixing typographical errors or improving readability without changing substance), we may update the Policy without individual notification.

The "Last Updated" date at the top of this Policy will always reflect when the most recent version was published. We recommend reviewing this Policy periodically to stay informed about how srp77 protects your data. Your continued use of the srp77 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting our support team at [email protected].

14 Contact Us Regarding Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way srp77 handles your personal data, please contact our dedicated support team using the details below. All privacy-related enquiries are treated with the highest priority and handled confidentially.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing
• Live Chat: Available 24 hours a day, 7 days a week, directly on the srp77 platform
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and provide a substantive response within 5 business days

For formal data rights requests (access, erasure, portability, rectification, objection), please use the email address above with the subject line "Data Rights Request" and include a clear description of your request along with the name and email address associated with your srp77 account so we can verify your identity and locate your data efficiently.