sk77 Privacy Policy — How We Handle Your Personal Data

Who We Are and How to Contact Us

sk77 is an online casino and sports betting platform operating at https://sk77.io, serving the Bangladesh market with English-language gaming services including live dealer casino games, cricket and sports betting, slots, Keno, and related entertainment products.

For all privacy-related queries, data subject requests, or complaints regarding the handling of your personal information, you may contact our dedicated privacy support channel at the following address:

All communications with sk77 regarding your privacy should be conducted in English. sk77 support staff are available 24 hours a day, 7 days a week, including Bangladesh public holidays such as Eid, Durga Puja, and Victory Day (December 16).

Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by sk77 in connection with your use of the sk77 Platform. It covers:

• Data collected when you register for an sk77 Account.
• Data collected when you make deposits or withdrawals via payment methods including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Data collected during identity verification (KYC) processes.
• Data generated through your use of the Platform, including gameplay history, betting records, and session activity.
• Data you provide when contacting sk77 support via email or live chat.
• Data collected automatically through cookies and technical logging when you visit https://sk77.io.

This policy does not apply to third-party websites, applications, or services that may be linked to or embedded within the sk77 Platform, including game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi. Each of those providers operates its own privacy framework, and you are encouraged to review their individual policies.

Personal Data We Collect

sk77 collects personal data across several categories. The table below summarises the types of data we collect and the context in which each category is gathered.

sk77 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for unique identification, or health data, except where a Player voluntarily discloses such information in a support communication. Any such voluntarily disclosed sensitive data is used solely to address the specific support issue raised and is not stored beyond the resolution of that case.

How We Use Your Personal Data

sk77 processes your personal data only for clearly defined purposes and only to the extent necessary to fulfil those purposes. The table below sets out each processing purpose and its legal basis.

Where sk77 relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time by contacting us at [email protected] or by updating your communication preferences in your Account settings. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

sk77 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on Players, except in limited fraud-detection contexts where automated risk scoring may trigger a manual review by our compliance team.

Sharing Your Personal Data

sk77 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data may be shared with third parties only in the following strictly defined circumstances:

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks to the minimum extent necessary to complete your deposit or withdrawal. Each payment partner operates under its own data protection obligations.
• Identity Verification Providers: Identity documents submitted for KYC may be shared with third-party verification service providers who assist sk77 in confirming the authenticity of documents and the identity of applicants. These providers are bound by strict confidentiality and data processing agreements.
• Game Studio Providers: Pseudonymised player session identifiers may be shared with licensed game providers (e.g., Evolution Gaming, Pragmatic Play, Microgaming, Spribe, Ezugi) to facilitate gameplay and resolve in-game disputes. Full personal data is not shared with game studios.
• Fraud and Security Services: Technical and usage data may be shared with fraud detection and cybersecurity service providers to protect the Platform and its players from malicious activity.
• Legal and Regulatory Authorities: sk77 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies when required to do so by applicable law or a valid legal order. sk77 will notify affected Players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the sk77 business, Player data may be transferred to the acquiring entity. Affected Players will be notified in advance of such a transfer via email.

Cookies and Tracking Technologies

sk77 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be set when you visit https://sk77.io:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences such as language settings, display options, and previously visited sections of the Platform, allowing us to provide a more personalised and consistent experience across sessions.
• Analytics Cookies: sk77 uses privacy-respecting analytics tools to understand how players navigate the Platform — which pages are most visited, where sessions begin and end, and how features are used. This data is aggregated and anonymised before analysis.

sk77 does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or behavioural profiling technologies. You will not see sk77 advertisements follow you across the internet based on your Platform activity.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies may prevent some or all Platform features from working correctly. For detailed browser-level cookie management instructions, refer to the help documentation for your specific browser.

Data Retention

sk77 retains personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal, regulatory, and financial record-keeping obligations. The general retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Anonymised, aggregated data that cannot be attributed to any individual may be retained indefinitely for statistical and business analysis purposes.

Data Security

sk77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the sk77 Platform is encrypted using 256-bit SSL/TLS protocols. Connections that do not meet minimum security standards are rejected.
• Encryption at Rest: Sensitive personal data stored on sk77 servers — including identity documents and financial data — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are hashed using a strong, salted cryptographic hashing algorithm. sk77 staff cannot retrieve plain-text passwords under any circumstances.
• Access Controls: Access to personal data within sk77's internal systems is restricted on a strict need-to-know basis. All internal access is logged and subject to periodic access reviews.
• Penetration Testing: sk77 conducts regular vulnerability assessments and penetration tests of its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to Player rights, sk77 will notify affected Players within 72 hours of becoming aware of the breach, providing details of the nature of the breach, the data involved, and the steps taken to contain it.

Your Rights as a Data Subject

As a registered Player on the sk77 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise.

• Right of Access: You may request a copy of all personal data that sk77 holds about you. sk77 will provide this in a structured, commonly used, and machine-readable format within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data held by sk77 is inaccurate or incomplete, you may request that it be corrected or updated. You may also update certain Account details directly within your Account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Note that financial records, KYC documents, and game history records are subject to mandatory retention periods as described in Section 7.
• Right to Restriction of Processing: You may request that sk77 suspend the processing of your personal data in certain circumstances — for example, while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You may request that sk77 provide your personal data in a portable format suitable for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your personal data where sk77 relies on legitimate interest as its legal basis, including profiling for fraud prevention. sk77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

sk77 will respond to all verified data rights requests within 30 calendar days. Where a request is particularly complex or involves a large volume of data, this period may be extended by a further 30 days, with notification provided to the requesting Player.

Children's Privacy and Age Verification

The sk77 Platform is strictly intended for use by adults aged 21 years and above. sk77 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory component of the account registration and KYC process.

Where sk77 discovers or has reasonable cause to believe that a registered Player is under the age of 21, the following actions will be taken immediately:

• The Account will be suspended and access to all Platform features will be disabled.
• Any deposits made to the Account will be returned to the payment method from which they originated.
• Any winnings generated through gameplay while underage will be voided and will not be paid out.
• All personal data associated with the underage Account will be securely deleted, subject only to any mandatory retention obligations required by applicable law.

If you are a parent or guardian and believe that your child has registered on the sk77 Platform without your knowledge, please contact us immediately at [email protected] so we can take prompt action to close the Account and protect the minor's data.

Payment Data and Financial Information

sk77 takes particular care with financial and payment data, given its sensitivity. The following specific protections apply to the financial information you share with the Platform:

• Full payment method credentials (e.g., your complete bKash PIN, your full Visa card number) are never stored on sk77 servers. Only masked or tokenised references are retained after a transaction is processed.
• Payment transactions are processed via the secure APIs of licensed payment providers. sk77 acts as a merchant facilitating the transaction and does not hold or process raw card data in its own infrastructure.
• All withdrawal requests are processed exclusively to the verified payment method associated with your Account and registered in your name. sk77 will not redirect withdrawal funds to an unverified or third-party payment account.
• Transaction records are retained for the mandatory period specified in Section 7 to satisfy financial record-keeping and anti-money laundering compliance requirements.

Responsible Gaming and Data Use

sk77 uses certain categories of Player data to support its responsible gaming obligations. Specifically, gameplay patterns, session durations, deposit frequency, and betting behaviour data may be analysed to identify Players who may be exhibiting signs of problematic gambling. This analysis is conducted for Player protection purposes and is not used for commercial targeting.

Where the responsible gaming monitoring system flags an account for review, a member of the sk77 player protection team may review the flagged data and, where appropriate, reach out to the Player with information about responsible gaming tools and support resources available through the Account settings dashboard.

Responsible gaming data — including self-exclusion requests, deposit limits, and cooling-off periods — is treated with the highest level of confidentiality and is accessible only to staff with a direct player protection function. This data is never used for marketing purposes and is never shared with third parties except where required by law.

For more information about sk77's responsible gaming tools and commitment to player welfare, visit our Responsible Gaming page.

Changes to This Privacy Policy

sk77 reviews this Privacy Policy periodically to ensure it remains accurate, complete, and reflective of current data processing practices. Where changes are made, the updated policy will be published at https://sk77.io/privacy-policy with a revised "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — sk77 will notify registered Players by email to the address associated with their Account at least 14 days before the revised policy takes effect. The notification will summarise the key changes and provide a link to the full updated document.

Your continued use of the sk77 Platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree to the changes, you may request Account closure at any time by contacting [email protected].

Contact and Data Requests

For all privacy-related enquiries, data subject access requests, rectification requests, erasure requests, or complaints, please use the contact details below. All communications must be in English.

Privacy Contact Email: [email protected] (plain text — not a clickable link)

Subject Line for Data Requests: "Privacy Request" or "Data Rights Request"

Required Information: Your registered Account username; the specific right you wish to exercise or the nature of your complaint; a brief description of the data involved.

Response Time: sk77 aims to acknowledge all privacy-related requests within 2 business days and to provide a substantive response or complete the requested action within 30 calendar days.

Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays.