Privacy Policy — 4777but

4777but collects personal information from you in three principal ways: information you provide directly when registering and using your account, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and identity verification partners.

1.1 Information You Provide Directly

When you register an account on 4777but or interact with our platform, you may provide the following categories of personal information:

• Identity information: Full legal name, date of birth, gender, and nationality as recorded on your official identification document.
• Contact information: Mobile phone number (used for account notifications and two-factor authentication), and email address.
• Residential address: District, city, and postal area within Bangladesh (or your country of residence if outside Bangladesh). We do not collect full street-level addresses unless required for payment verification or KYC purposes.
• Identity documents: Copies of your Bangladesh National Identity Card (NID), passport, or birth certificate submitted as part of the KYC verification process.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details for bank transfer withdrawals; or Visa/Mastercard details for card transactions. We do not store full card numbers or mobile banking PINs — payment credentials are tokenised and processed by certified payment partners.
• Account preferences: Responsible gaming settings including deposit limits, session time limits, and self-exclusion elections.
• Support communications: Records of your interactions with our customer support team via live chat, including the content of your messages and the date, time, and outcome of each interaction.

1.2 Information Collected Automatically

When you access 4777but — whether on a desktop browser, mobile browser, or any other interface — our systems automatically collect certain technical and behavioural information, including:

• Device information: Device type, operating system version, browser type and version, screen resolution, and device language settings.
• Network information: IP address, approximate geographic location derived from IP address, internet service provider (ISP), and connection type.
• Session and usage data: Pages visited, games played, bets placed, session duration, navigation patterns, and feature interactions within the platform.
• Cookie and tracking data: As detailed in Section 4 of this Policy, we use cookies and similar technologies to maintain session state, remember preferences, and analyse platform performance.

1.3 Information from Third Parties

We may receive personal information about you from trusted third-party sources in the following circumstances:

• Payment processors: Transaction confirmation data, including payment status, reference numbers, and partial account identifiers, from bKash, Nagad, Rocket, Upay, and our card payment processing partners.
• Identity verification providers: Confirmation of identity document authenticity and age verification outcomes from KYC service partners.
• Fraud prevention services: Risk scores, device fingerprint data, and flagged behavioural patterns from fraud detection systems used to protect the integrity of the platform and all player accounts.
• Game studios: Aggregate gameplay and outcome data from integrated game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used to resolve game disputes and verify round outcomes.

4777but does not sell your personal data to third parties. We share personal information only in the specific, limited circumstances described below, and only with parties who are contractually obligated to handle your data in a manner consistent with this Privacy Policy.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary payment and identity information with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card processing networks operating under Visa and Mastercard. These partners operate under their own privacy policies and are subject to the regulatory oversight of Bangladesh Bank and applicable payment industry standards.

3.2 Identity & Age Verification Partners

To comply with our KYC and age verification obligations, we share identity document data with accredited third-party verification service providers. These providers return a verification outcome (pass / fail / pending) to 4777but and are contractually prohibited from using your identity data for any other purpose.

3.3 Game Studio Providers

Integrated game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a pseudonymised player identifier and session token to facilitate gameplay. They do not receive your full name, contact details, or payment information. Game round data received from these providers is used solely for bet settlement, dispute resolution, and platform integrity purposes.

3.4 Legal & Regulatory Disclosure

We may disclose your personal information to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 4777but, its players, or the general public. We will notify you of such disclosures where legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 4777but's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to the data controller responsible for your information before the transfer takes effect.

4777but implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. Our security posture is reviewed regularly and updated in response to emerging threats and industry best practices.

5.1 Technical Security Measures

• Encryption in transit: All communications between your device and our servers are encrypted using TLS 1.3. Older, insecure protocol versions (TLS 1.0, TLS 1.1, SSL 3.0) are disabled on all endpoints.
• Encryption at rest: Sensitive personal data fields — including identity document images, payment credentials, and KYC records — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 4777but's internal systems is restricted on a strict need-to-know basis. All staff access is logged, audited, and subject to role-based permissions.
• Two-factor authentication: 2FA is available to all players and is mandatory for staff accounts accessing administrative systems.
• Intrusion detection: Our platform is monitored 24/7 for anomalous access patterns, brute force attempts, and other indicators of compromise.

5.2 Data Retention Schedule

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity records: Retained for a minimum of 5 years from account closure to meet AML and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the final interaction in each support thread.
• Gameplay and betting history: Retained for 3 years from the date of each game session or bet settlement.
• Marketing preferences and behavioural analytics data: Retained only while your account is active, or for up to 12 months following account closure, whichever is shorter.
• KYC documents: Retained for 5 years from account closure or from the date of the last verification review, whichever is later.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, 4777but will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and mitigate potential harm. We will cooperate fully with any regulatory investigation arising from a breach incident.

4777but is strictly an adult platform. Access to and use of any service on 4777but — including browsing, registration, depositing, and gameplay — is permitted only for individuals aged 18 years or older. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

Where we discover or have reasonable grounds to suspect that personal data belonging to a person under 18 has been collected — whether through a fraudulent registration, a shared device, or any other circumstance — we will take the following immediate steps:

• Suspend the associated account and restrict all activity pending investigation.
• Delete or anonymise all personal data associated with the underage individual to the extent permitted by our legal record-keeping obligations.
• Refund any deposits made to the originating payment source where technically feasible, without paying out any winnings generated during the period of underage access.
• Report the incident to relevant authorities where required by applicable law.

Parents and guardians who become aware that a child in their household may have accessed 4777but are strongly encouraged to contact our support team immediately via live chat. We treat such reports with the utmost seriousness and will investigate and act without delay. We also recommend installing parental control software on shared devices and keeping account credentials strictly private.