asha77 Privacy Policy

1. Who We Are

asha77 is an online casino and sports betting platform serving players in Bangladesh and across Asia. The platform is accessible at asha77.biz and offers a comprehensive range of casino games, live dealer experiences, slots, and sports betting markets including cricket, football, kabaddi, and other popular disciplines.

asha77 acts as the data controller in respect of all personal data collected through the Platform. This means we determine the purposes and means by which personal data is processed. Where we engage third-party service providers who process data on our behalf, those parties act as data processors under contractual obligations that require them to protect data to the same standard as asha77 itself.

If you have any questions about how asha77 processes your personal data, or if you wish to exercise any of your data rights, you may contact our Data Protection team directly at [email protected].

2. Data We Collect

asha77 collects personal data in several categories depending on the nature of your interaction with the platform. The categories of data we may collect include:

2.1 Identity and Registration Data

• Full legal name as it appears on your national identity document
• Date of birth (used to verify the 18+ age requirement)
• Residential address, including city, district, and postcode
• Mobile phone number (used as the primary account identifier)
• Email address (used for account communications and verification)
• Government-issued identification number (National ID / NID) where KYC verification is required

2.2 Financial and Transaction Data

• Payment method details — including mobile financial service account numbers (bKash, Nagad, Rocket, Upay) and bank account details where applicable
• Deposit and withdrawal transaction history, including amounts in BDT (৳) and timestamps
• Betting and wagering history including game selections, stake amounts, and outcomes
• Bonus and promotional credit records

2.3 Technical and Device Data

• IP address at the time of registration and each subsequent login session
• Device type, operating system, and browser version
• Session duration and activity timestamps
• Geolocation data at the point of login (city/region level) for fraud prevention purposes
• Cookie identifiers and similar tracking technologies (see Section 7)

2.4 Communication Data

• Records of live chat conversations with the asha77 support team
• Email correspondence relating to your account, complaints, or support requests
• Records of any responsible gaming self-assessments or limit-setting requests submitted through the platform

3. How We Collect Data

asha77 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting the support team.
• Automated collection: Technical data collected automatically when you visit or use the platform, including via cookies, server logs, and analytics technologies.
• Third-party providers: Identity and age verification data from authorised KYC verification partners; transaction confirmation data from payment processing partners such as bKash, Nagad, and Rocket; fraud risk signals from financial crime prevention services.

asha77 does not purchase personal data lists from data brokers or any other commercial data sources. All data we hold originates either directly from you or from the regulated service providers required to operate the platform.

4. How We Use Your Data

asha77 uses the personal data it collects for the following specific purposes:

Purpose	Data Used
Account registration and identity verification	Identity data, date of birth, mobile number
Processing deposits and withdrawals	Financial data, payment method details, transaction history
Providing gaming and betting services	Account data, wagering history, session data
Fraud prevention and anti-money laundering compliance	Identity data, IP address, geolocation, transaction patterns
Responsible gaming monitoring and intervention	Wagering history, session data, self-exclusion records
Customer support and complaint resolution	Communication data, account data, transaction history
Sending account and security notifications	Mobile number, email address
Sending promotional communications (where consented)	Mobile number, email address, betting preferences
Platform security, uptime, and technical improvements	Technical data, device data, session logs
Regulatory reporting and legal compliance	Identity data, financial data, transaction history

asha77 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or as otherwise required by applicable law.

5. Legal Basis for Processing

asha77 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the account registration agreement, deliver gaming services, and process financial transactions. Without this processing, asha77 cannot provide its services to you.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, responsible gaming obligations, age verification requirements, and other applicable legal duties.
• Legitimate interests: Processing carried out in furtherance of asha77's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights.
• Consent: Processing of data for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time.

6. Data Sharing and Disclosure

asha77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances and only to the extent strictly necessary:

6.1 Payment Processing Partners

To process deposits and withdrawals, asha77 must share relevant transaction data with licensed payment service providers including bKash, Nagad, Rocket, Upay, and applicable banking institutions such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the data necessary to execute the specific transaction and are bound by their own regulatory data protection obligations.

6.2 Identity Verification Providers

Where KYC verification is required, asha77 may share identity document data and biometric verification requests with regulated third-party identity verification specialists. These providers are contractually prohibited from using your data for any purpose other than verifying your identity for asha77.

6.3 Fraud Prevention and Security Services

asha77 works with fraud prevention and cybersecurity service providers to protect the platform and all players from financial crime, account takeover, and other threats. These providers may process IP addresses, device fingerprints, and behavioural data under strict data processing agreements.

6.4 Legal and Regulatory Disclosure

asha77 may disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, by a lawful court order, or where disclosure is necessary to protect the rights, property, or safety of asha77, its players, or third parties.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of asha77's business, player data may be transferred to the relevant successor entity, subject to the same privacy protections outlined in this policy. Players will be notified of any such transfer in advance.

7. Cookies and Tracking Technologies

asha77 uses cookies and similar tracking technologies to operate the platform effectively, personalise your experience, and gather analytics data that helps us improve the service. The categories of cookies used are as follows:

• Essential cookies: Required for the platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform. This data helps asha77 identify and fix usability issues and optimise page performance.
• Preference cookies: Used to remember your language, display, and notification preferences so you do not need to re-enter them on each visit.
• Marketing cookies: Used where you have consented to receive personalised promotions. These cookies help asha77 deliver relevant offers based on your activity on the platform. You may opt out of marketing cookies at any time through your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features.

8. Data Retention

asha77 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the lifetime of the account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, consistent with applicable financial record-keeping requirements.
• Communication and support records: Retained for 3 years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Responsible gaming records: Retained for a minimum of 5 years to support ongoing duty-of-care obligations and to honour self-exclusion arrangements.
• Technical and device data: Retained for 12 months from collection unless required longer for fraud investigation or legal proceedings.

Once the applicable retention period has expired and no other legal basis for retention applies, asha77 will securely delete or anonymise the personal data in question.

9. Data Security

asha77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and asha77 servers.
• AES-256 encryption for sensitive data fields stored in our databases, including payment method identifiers and identity document numbers.
• One-way cryptographic hashing with salt for all account passwords — asha77 staff cannot read your password under any circumstances.
• Role-based access controls limiting internal staff access to the minimum data necessary for their specific function.
• Multi-factor authentication required for all internal staff accessing production systems and player data.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Automated intrusion detection systems monitoring for unusual access patterns around the clock.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, asha77 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

10. Children's Privacy

The asha77 Platform is strictly for persons aged 18 years and above. asha77 does not knowingly collect personal data from any individual under 18 years of age. Age verification checks are applied during the registration process, and asha77 reserves the right to request documentary proof of age at any time.

If asha77 becomes aware that personal data has been collected from a person under 18 years of age, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered an account or provided personal data to asha77, please contact our support team at [email protected] so that we can investigate and take appropriate action without delay.

11. International Data Transfers

asha77 primarily stores and processes player data within secure data centres serving the Asia-Pacific region. Where data is transferred outside of Bangladesh for processing — for example to cloud infrastructure providers or international fraud prevention services — asha77 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with the protections described in this Privacy Policy.

Such safeguards may include standard contractual clauses, data processing agreements incorporating equivalent protections, or transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable international frameworks. If you would like further information about the specific safeguards applied to any international transfer of your data, please contact us at [email protected].

12. Exercising Your Rights

To exercise any of the data rights described in the "Your Data Rights" section of this page, please contact the asha77 Data Protection team using one of the channels listed below. To protect your privacy, we will need to verify your identity before processing any data rights request. Verification is typically completed by confirming your registered mobile number and one additional piece of identity information.

• Live Chat: Available 24/7 on the asha77 Platform — the fastest way to initiate a data rights request.
• Email: [email protected] — plain text address, not a clickable link.

asha77 will acknowledge your data rights request within 5 business days and will provide a substantive response within 30 calendar days of receipt of the verified request. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with the response to a data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. asha77 will cooperate fully with any such regulatory investigation.

13. Changes to This Policy

asha77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will display a prominent notice on the platform and update the "Last Updated" date shown at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how asha77 protects your personal data. Your continued use of the platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Privacy Policy, please discontinue use of the platform and contact our support team to discuss account closure.

14. Contact and Complaints

For all privacy-related enquiries, data rights requests, or complaints relating to asha77's handling of your personal data, please contact us through the following channels. All communications are handled in English and responses are provided during Bangladesh Standard Time (BST, UTC+6) business hours, with live chat support available around the clock.

• Live Chat: Available 24/7 directly on asha77.biz.
• Email: [email protected] — plain text, not a clickable link.
• WhatsApp: +880 1700 000 000 — plain text number, not a clickable link.

asha77 commits to acknowledging all privacy complaints within 24 hours and providing a full written response within 7 business days. Where a complaint cannot be fully resolved within that timeframe, we will provide an interim update and an estimated resolution date.