mm777 Privacy Policy – Your Data, Our Responsibility

📋 Registration and Identity Information

When you create an mm777 account, we collect the following information to verify your identity, comply with age verification requirements, and maintain your account:

• Full name as it appears on government-issued identification.
• Bangladesh mobile phone number used for account verification, two-factor authentication, and account communications.
• Date of birth, collected to enforce our strict 21+ minimum age requirement.
• Email address (where provided), used for account communications and optional promotional messaging subject to your marketing preferences.

💳 Financial and Payment Information

To process deposits and withdrawals, mm777 collects certain financial information. We do not store full payment credentials on our servers — transactions are processed by certified third-party payment processors:

• Mobile financial service account identifiers (such as the registered bKash or Nagad account number) used for deposit and withdrawal transactions.
• Transaction records including deposit amounts, withdrawal amounts, dates, and transaction reference numbers, retained for regulatory compliance and dispute resolution purposes.
• KYC verification documents (government-issued photo ID and proof of address) where requested — stored securely and used only for identity verification purposes.

📱 Technical and Usage Data

When you access and use the mm777 platform, we automatically collect certain technical information to maintain platform security, improve performance, and personalise your experience:

• IP address and approximate geographic location, used to detect suspicious access patterns and enforce geographic access controls.
• Device information including device type, operating system, browser type, and screen resolution — used to optimise platform rendering for your specific device.
• Session activity logs including games played, bets placed, session duration, and navigation paths — used for account security monitoring, responsible gaming compliance, and platform analytics.

⚙️ Platform Operations

The majority of data we collect is used directly to operate and maintain the mm777 platform for your benefit:

• Creating and managing your account, authenticating your identity on login, and maintaining account security.
• Processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and maintaining a complete and accurate record of your transaction history.
• Providing customer support, resolving disputes, and communicating with you about your account status, transaction outcomes, or platform issues.
• Enforcing our Terms and Conditions, detecting and preventing fraud, and complying with applicable anti-money laundering and age verification obligations.

📣 Marketing and Promotions

With your consent, mm777 may use your contact information to send you information about promotional offers, new games, deposit bonuses, and seasonal campaigns relevant to Bangladesh players (for example, promotions around Eid, Pohela Boishakh, or BPL cricket season). You may withdraw your consent to marketing communications at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect your ability to continue using the platform.

🛡️ Responsible Gaming Compliance

mm777 uses session activity data to monitor for patterns consistent with problem gambling behaviour, such as unusually long sessions, rapidly escalating bet sizes, or repeated attempts to override deposit limits. This data is used exclusively to enforce responsible gaming obligations — to trigger support outreach, enforce self-exclusion restrictions, or apply deposit limits set by the player. It is never used for marketing profiling or shared with third parties for commercial purposes.

🤝 Service Providers

mm777 works with a limited number of trusted third-party service providers who are engaged to help us operate the platform. These providers have access to personal data only to the extent necessary to perform their contracted services, are bound by confidentiality obligations, and may not use your data for any other purpose:

• Payment processing partners (including the mobile financial services infrastructure that handles bKash, Nagad, Rocket, and Upay transactions) — these partners receive only the transaction-specific data required to execute and confirm a payment.
• Game technology providers (Pragmatic Play, Evolution Gaming, PG Soft, NetEnt, Microgaming, Spribe, Ezugi, and others) — these providers receive session and game-outcome data required to operate the games, but do not receive your full identity or payment details.
• Platform security and fraud prevention services — these providers receive technical session data (IP addresses, device fingerprints, and behavioural patterns) to identify and block fraudulent access attempts.

⚖️ Legal and Regulatory Disclosure

mm777 may disclose personal information to competent governmental or regulatory authorities where required to do so by applicable law, court order, or governmental regulation, including in the context of anti-money laundering investigations, age verification compliance, or the investigation of suspected criminal activity. In all such cases, mm777 will disclose only the minimum information required to satisfy the legal obligation.

🚫 No Commercial Data Sales

mm777 strictly does not sell, licence, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial use. Your personal information is not a product. It is data you have entrusted to us for the specific purpose of operating your gaming account, and it will only be used for that purpose and the limited ancillary purposes described in this Policy.

🔐 Technical Security Measures

All data transmitted between your device and mm777 servers is protected by 256-bit SSL (Secure Sockets Layer) encryption. Account passwords are stored using one-way cryptographic hashing — mm777 staff cannot read your password and it is never stored in plain text. Access to production systems and databases containing personal data is restricted to authorised personnel only, with access logs maintained and reviewed regularly. We conduct periodic security assessments to identify and remediate vulnerabilities.

⚠️ Security Incident Notification

In the event of a data security incident that materially affects the security of your personal information, mm777 will notify affected players as soon as reasonably practicable via the mobile number or email address registered to their account. The notification will describe the nature of the incident, the categories of data affected, and the steps mm777 has taken or intends to take to address the incident.

🍪 Types of Cookies We Use

mm777 uses the following categories of cookies on the platform:

• Essential cookies — strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during an active session, and security cookies that help detect and prevent fraudulent activity. These cookies cannot be disabled without breaking core platform functionality.
• Preference cookies — used to remember your platform settings such as language preference and display options, so that you do not need to reconfigure these on each visit.
• Analytics cookies — used to collect aggregated, anonymised data about how players navigate and use the platform. This data helps us identify areas for improvement and optimise the overall user experience. Analytics data is not linked to your identity.

🔧 Managing Your Cookie Preferences

You may control or disable non-essential cookies through your mobile browser settings. Please be aware that disabling essential cookies will prevent you from logging in and using core platform features. Clearing all cookies will log you out of your current session. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

🗄️ How Long We Keep Your Data

mm777 retains personal information for as long as your account remains active and for a reasonable period thereafter to satisfy our legal, regulatory, and operational obligations. Specifically: account registration data is retained for the duration of your account and for a minimum of five years following account closure, in accordance with standard financial record-keeping obligations. Transaction records are retained for a minimum of five years from the date of each transaction. KYC documents are retained for the same period as the associated account data. Session and activity logs are retained for up to 24 months for security and responsible gaming monitoring purposes.

🗑️ Account Closure and Data Deletion

Upon account closure, mm777 will anonymise or delete personal data that is no longer required, subject to the retention periods described above. Certain data must be retained beyond account closure to comply with our legal and regulatory obligations — in these cases, the data will be retained in a secure, restricted-access environment and will not be used for any operational purpose.

👁️ Right to Access

You have the right to request a copy of the personal information that mm777 holds about you. Upon receiving a verified access request, we will provide you with a summary of the data we hold, the purposes for which it is used, and the categories of third parties with whom it has been shared, within a reasonable timeframe.

✏️ Right to Rectification

If you believe that any personal information mm777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the inaccuracy affects your ability to use the platform or receive payments, mm777 will prioritise processing your rectification request. Some corrections may require identity re-verification before they can be applied.

🗑️ Right to Erasure

You may request that mm777 delete your personal information where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis for processing exists, or where your data has been unlawfully processed. Please note that erasure requests cannot be fulfilled where retention is required by law — for example, transaction records required for financial compliance purposes cannot be deleted on request.

📵 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing and promotional communications from mm777 at any time. To do so, contact [email protected] stating that you wish to unsubscribe from marketing messages. Please allow up to 5 business days for your opt-out preference to take full effect across all communication channels.

🔞 Strict 21+ Age Enforcement

mm777 is strictly an adult platform. We do not knowingly collect personal information from any individual under the age of 21. Our registration process includes age verification steps designed to prevent underage access. If mm777 becomes aware that it has inadvertently collected personal information from a person under the age of 21, that account will be closed immediately, all associated data will be deleted or anonymised, all deposits will be returned to the originating payment method, and all winnings will be void. If you believe a person under 21 has registered on mm777, please notify us immediately at [email protected].

📄 Policy Updates

mm777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page. Where changes are significant, we will endeavour to notify active players via their registered mobile number or email address. Your continued use of mm777 following any such update constitutes your acceptance of the revised Policy.

📬 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mm777 handles your personal information, please contact our dedicated support team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days. For account-related requests (such as data access or erasure), you may be asked to verify your identity before we process the request.