aya777 Privacy Policy

aya777 processes your personal data for the following specific purposes, each of which is supported by a lawful basis:

• Account Registration & Management: We use your identity and contact data to create and maintain your player account, verify your eligibility, and communicate important account-related notifications.
• Payment Processing: Your financial data is used exclusively to process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer) and to maintain accurate transaction records.
• Age & Identity Verification (KYC): We are obligated to verify that all players are aged 21 or above. Your identity documents are processed solely for this verification purpose and are stored securely with restricted access.
• Platform Operation & Game Integrity: Gaming data is used to operate game mechanics, calculate results, settle bets, award bonuses, and investigate any suspected fraudulent or unfair activity.
• Responsible Gaming: Session data and gaming history are used to power responsible gaming tools such as deposit limits, session reminders, and self-exclusion, and to identify players who may need support.
• Customer Support: Contact data and account history are used by our support team to resolve queries, complaints, and disputes efficiently.
• Legal & Regulatory Compliance: We may process your data as required by applicable law, including responding to lawful requests from regulatory authorities or law enforcement agencies.
• Marketing Communications: With your explicit consent, we may send you promotional emails or SMS messages about bonuses, new games, and special offers. You may withdraw this consent at any time by contacting [email protected].

aya777 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, payment processing, and game operation.
• Legal Obligation: Processing required by applicable law, including age verification, anti-money laundering checks, and responding to lawful authority requests.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests do not override your fundamental privacy rights.
• Consent: For optional processing activities such as marketing communications, we rely on your explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

aya777 does not sell or rent your personal data to any third party. We may, however, share your data with the following categories of trusted third parties, strictly on a need-to-know basis and under contractual obligations of confidentiality:

• Payment Processors: MFS providers (bKash, Nagad, Rocket, Upay) and banking partners receive only the minimum financial data necessary to process your requested transaction.
• Game Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and bet/session data necessary to operate their games on our platform.
• Identity Verification Services: Third-party KYC providers may process your identity documents to assist with age and identity verification. These providers are bound by strict data processing agreements.
• Analytics Providers: Anonymised or aggregated technical data may be shared with analytics services to help us understand platform usage and improve the user experience. No personally identifiable information is included.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by law or in response to a valid legal process.

All third parties with whom we share personal data are required to handle it securely and in accordance with applicable data protection principles. We do not permit third parties to use your data for their own marketing or commercial purposes.

aya777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your active account relationship with aya777.
• Transaction Records: Financial transaction records are retained for a minimum period as required by financial regulations and anti-money laundering obligations, typically a minimum of five years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the period required by applicable verification and AML regulations, and securely deleted thereafter.
• Closed Account Data: Upon account closure, personal data is retained for a defined period to comply with our legal obligations and to handle any post-closure disputes or regulatory enquiries, after which it is securely deleted or anonymised.
• Marketing Data: Data used for marketing communications is retained until you withdraw consent or request deletion, whichever is earlier.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

aya777 uses cookies and similar technologies (including local storage and session storage) to operate and enhance the platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, last visited game category, and responsible gaming limit settings to personalise your experience.
• Analytics Cookies: Collect anonymised data about how players navigate the platform (pages visited, time spent, error events). This helps us identify usability issues and improve the experience.
• Performance Cookies: Monitor platform load times and technical performance to ensure optimal service delivery across different devices and network conditions in Bangladesh.

You can control and manage cookies via your browser settings. Disabling strictly necessary cookies will prevent you from accessing core platform features including logging in and placing bets. Disabling other cookie categories will not prevent you from using the platform but may affect personalisation and analytics functionality.

aya777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including stored identity documents and financial records.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular security assessments and penetration testing of the platform infrastructure.
• Secure, geographically redundant data storage with disaster recovery provisions.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure. If you suspect that your account has been compromised or that your data has been accessed without authorisation, please contact us immediately at [email protected]. You should also change your account password immediately.

As a user of aya777, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us at [email protected] with your registered username and a description of your request:

• Right of Access: Request a copy of all personal data aya777 holds about you, along with information about how it is being processed.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: Request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to Restriction: Request that we temporarily restrict the processing of your data in certain circumstances (for example, while the accuracy of the data is being contested).
• Right to Data Portability: Request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: Object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all valid rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure we do not disclose personal data to an unauthorised person.

aya777 strictly prohibits access by anyone under the age of 21. Our platform is not directed at, and does not knowingly collect personal data from, individuals under 21 years of age. Age verification is a mandatory part of our registration and KYC process.

If we discover or are notified that a user under the age of 21 has registered an account, we will immediately close the account, delete all associated personal data, and return any deposited funds in accordance with our verification procedures. If you believe a minor has accessed our platform, please notify us immediately at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way aya777 processes your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and resolve them within 14 calendar days.

If you are not satisfied with our response to a privacy complaint, you may escalate the matter by reviewing the guidance on our FAQ page, or seek independent advice on your data protection rights.