How su777 Collects, Uses, and Protects Your Personal Data
Your privacy matters to su777. This Privacy Policy explains in plain, formal English exactly what personal data we collect when you use the su777 platform, how we use and store that data, who we share it with, and what rights you have as a data subject. Please read this document carefully before registering or using su777 services.
Our Principles
How su777 Approaches Data Privacy
These six principles guide every decision we make about how your personal data is handled on the su777 platform. They are not aspirational — they are operational commitments.
su777 collects only the personal data that is strictly necessary for providing our services, verifying your identity, processing payments, and meeting legal obligations. We do not collect data speculatively or for purposes unrelated to operating the platform.
Data collected for one purpose — such as identity verification at registration — will not be repurposed for unrelated uses without your knowledge. Each data category is collected for a specific, documented reason that is disclosed in this policy.
All su777 data systems are protected by 256-bit SSL encryption in transit. Stored data is protected by industry-standard encryption at rest. Access to personal data within the su777 organisation is restricted on a strict need-to-know basis.
You have defined rights over your personal data held by su777, including the right to access it, correct inaccuracies, request deletion, and object to certain processing. These rights are detailed in full in Section 8 of this policy and are honoured without unnecessary delay.
Personal data is not retained indefinitely. su777 applies defined retention schedules to each data category based on legal requirements and operational necessity. Data that is no longer needed is securely deleted or anonymised in line with our retention policy.
su777 does not engage in hidden data practices. This Privacy Policy is publicly available at all times and written in clear, accessible English. Any material changes to how we handle your data will be communicated to you directly before taking effect.
Who We Are
su777 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://su777.io (the "Platform"). su777 acts as the data controller in respect of all personal data collected from registered players and visitors to the Platform.
As data controller, su777 determines the purposes and means of processing your personal data. We are responsible for ensuring that such processing is carried out lawfully, fairly, and in a transparent manner in accordance with applicable data protection principles.
If you have any questions about how su777 handles your personal data, or if you wish to exercise any of your rights as a data subject, you may contact our dedicated privacy team at any time. Contact details are provided in Section 12 of this policy.
Data We Collect
su777 collects personal data in three principal ways: directly from you when you register, deposit, or contact support; automatically when you use the Platform; and from trusted third parties as part of our verification procedures. The categories of data we collect are set out in the table below.
| Category | Data Items | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, national ID or passport number, photograph | Registration form; verification upload |
| Contact Data | Email address, mobile phone number, city or district (e.g., Dhaka, Chittagong) | Registration form; account settings |
| Financial Data | bKash/Nagad/Rocket/Upay account numbers, Visa/Mastercard last-four digits, transaction history | Deposit and withdrawal processing |
| Account Activity Data | Login timestamps, game sessions played, bets placed, win/loss records, bonus usage | Automatically via Platform systems |
| Technical Data | IP address, device type, browser type, operating system, session duration | Automatically via server logs and cookies |
| Communications Data | Support tickets, live chat transcripts, email correspondence with su777 | Direct communication with support team |
su777 does not collect special-category sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless legally required to do so for responsible gambling or age-verification purposes. In such cases, collection is strictly limited to what is necessary and is handled with heightened security controls.
How We Use Your Data
su777 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.
- Account registration and management: To create and maintain your su777 player account, verify your identity, and manage your account settings and preferences.
- Age and identity verification: To confirm that you are at least 21 years of age and to satisfy our know-your-customer (KYC) obligations before processing withdrawal requests or activating high-value bonus offers.
- Payment processing: To process deposits and withdrawals through your registered payment methods (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to maintain accurate transaction records.
- Service delivery: To provide access to casino games, live sports betting markets including BPL and IPL cricket fixtures, and all other features of the su777 Platform.
- Customer support: To respond to your enquiries, resolve disputes, and manage complaint processes in a timely and accurate manner.
- Responsible gambling: To monitor your gambling activity for indicators of problem gambling, apply self-imposed limits set by you, and fulfil our duty of care as a gambling platform operator.
- Fraud prevention and security: To detect and investigate suspicious activity, prevent unauthorised account access, and protect the integrity of our payment systems and game outcomes.
- Legal compliance: To comply with applicable anti-money-laundering requirements, reporting obligations, and any lawful order from competent authorities.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the Platform's performance, game selection, and user experience. This analysis is conducted on data that cannot identify individual players.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates, but only where you have given your explicit consent to receive such communications and only via the contact channel you specified. You may withdraw this consent at any time.
Legal Basis for Processing
su777 processes your personal data only where a valid legal basis exists for doing so. The legal basis applicable to each processing activity is as follows:
- Contractual necessity: Processing required to perform the contract between you and su777 — including account creation, payment processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
- Legal obligation: Processing required to comply with applicable law — including KYC verification, anti-money-laundering checks, and responses to lawful authority requests — is carried out on the basis of legal obligation.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics is carried out on the basis of su777's legitimate business interests, where those interests are not overridden by your rights and freedoms.
- Consent: Processing for direct marketing communications is carried out solely on the basis of your explicit consent, which you may withdraw at any time by contacting support at [email protected] or by updating your communication preferences in your account settings.
Sharing Your Data
su777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:
- Payment processors: Your financial data is shared with our third-party payment processing partners (including the operators of bKash, Nagad, Rocket, Upay, and card payment gateways) solely for the purpose of processing your deposit and withdrawal transactions. These processors are contractually bound to handle your data securely and only for payment processing purposes.
- Identity verification providers: Your identity data may be shared with third-party KYC service providers to verify your age and identity documents. These providers are bound by strict confidentiality obligations and process data only on our documented instructions.
- Game software providers: Technical session data (such as bet amounts and game outcomes) is shared with our third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to the extent necessary for game delivery, dispute resolution, and RNG certification. These providers do not receive your identity or contact data.
- Legal and regulatory authorities: su777 will disclose personal data to competent authorities where required to do so by a lawful order, court order, or applicable regulatory requirement. Where permissible by law, we will notify you of such disclosure.
- Fraud prevention agencies: In cases of suspected fraud, money laundering, or prohibited conduct, relevant data may be shared with specialist fraud prevention organisations or law enforcement bodies.
All third parties with whom su777 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than the specific purpose for which it was shared.
Cookies and Tracking
su777 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you visit the su777 website. They allow us to recognise your device on return visits and to maintain your session while you are logged in.
The types of cookies used by su777 are as follows:
- Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and enable secure payment processing. These cookies cannot be disabled without rendering the Platform non-functional.
- Analytics cookies: These cookies collect anonymised information about how players use the Platform — for example, which game categories are most visited and how long sessions last. This data is used in aggregate form only and cannot be used to identify individual players.
- Functional cookies: These cookies remember your preferences, such as your preferred language setting and your responsible gambling limit configurations, so you do not need to re-enter them on each visit.
- Security cookies: These cookies support our fraud detection systems by identifying unusual patterns of access across sessions, helping us detect and block unauthorised account access attempts.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the su777 Platform and may prevent you from logging in or completing transactions.
Data Retention
su777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any disputes or enforce our agreements. Specific retention periods by data category are as follows:
- Account and identity data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in line with anti-money-laundering record-keeping requirements.
- Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
- Game activity records: Retained for 2 years from the date of the relevant session, used for dispute resolution and responsible gambling monitoring.
- Customer support communications: Retained for 3 years from the date of the communication, for quality assurance and dispute resolution purposes.
- Technical and log data: Retained for 12 months from the date of collection, used for security monitoring and fraud detection.
- Marketing consent records: Retained for the duration of your active consent plus 1 year following withdrawal of consent, to demonstrate compliance with consent requirements.
When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.
Your Rights
As a data subject whose personal data is processed by su777, you have the following rights. You may exercise any of these rights by contacting our privacy team at [email protected]. su777 will respond to verified requests within 30 days. In complex cases, this period may be extended by a further 30 days, of which you will be notified.
Right of Access
You have the right to request a copy of all personal data that su777 holds about you, along with information about how it is used and on what legal basis.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data held by su777. You may also update most account details directly via your account settings panel.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to su777's legal retention obligations.
Right to Restrict Processing
You have the right to request that su777 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being verified.
Right to Data Portability
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format for data processed on the basis of your consent or contractual necessity.
Right to Object
You have the right to object to processing carried out on the basis of su777's legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Data Security
su777 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:
- Encryption in transit: All data transmitted between your device and the su777 Platform is encrypted using 256-bit SSL/TLS protocols. The padlock indicator in your browser confirms this encryption is active during your session.
- Encryption at rest: Personal data stored in su777's systems — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
- Access controls: Access to personal data within the su777 organisation is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific role. All access is logged and audited.
- Password security: Player account passwords are hashed using modern cryptographic algorithms. su777 does not store plaintext passwords at any point. Our team will never ask you for your password through any communication channel.
- Fraud monitoring: Automated systems monitor Platform activity continuously for patterns consistent with fraud, unauthorised access, and account compromise. Suspicious activity triggers immediate review and, where necessary, temporary account suspension.
- Security testing: su777's technical infrastructure undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
While su777 takes all reasonable steps to protect your personal data, no data transmission over the internet can be guaranteed to be completely secure. You also play a role in keeping your account secure — use a strong, unique password for your su777 account and never share your login credentials with anyone.
Children and Minors
The su777 Platform is strictly for adults aged 21 and above. su777 does not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age declaration and, where required, documentary age verification to enforce this restriction.
If su777 discovers or is notified that it has inadvertently collected personal data from a person under 21, the following steps will be taken immediately:
- The account in question will be suspended and then permanently closed;
- All personal data associated with the underage account will be deleted from su777's systems as quickly as practicable, subject to any legal obligation to retain records of the violation;
- Any funds deposited by the underage player will be reviewed and handled in accordance with applicable legal requirements.
If you have reason to believe that a person under 21 has registered on the su777 Platform, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will act on any credible report without delay.
Changes to This Policy
su777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will:
- Update the "Effective" date shown at the top of this policy;
- Notify registered players by email to their registered address at least 14 days before the updated policy takes effect;
- Display a prominent notice on the su777 Platform upon your next login, summarising the key changes.
Your continued use of the su777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you should cease using the Platform and contact support to close your account before the revised policy takes effect.
We encourage you to review this Privacy Policy periodically so that you are always aware of how su777 handles your personal data. The current version is always available at https://su777.io/privacy-policy.
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a complaint about how su777 has handled your personal data, please contact our privacy team using the details below.
Privacy and Data Enquiries:
Email: [email protected]
Subject line: "Privacy Request — [Your Registered Email Address]"
su777 is committed to resolving all privacy enquiries and complaints fairly and promptly. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend the response period by up to a further 30 days, and will notify you of the extension and the reason for it.
If you are not satisfied with su777's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. su777 will cooperate fully with any such investigation.
Continue on su777
Ready to Explore the Platform?
Now that you understand how su777 protects your data, explore our casino games, live cricket betting, and 500+ slots. You can also check our FAQ for quick answers or review our full Terms and Conditions. Available for players aged 21 and above only.