sand77 Privacy Policy

1 Introduction

sand77 is an online casino and sports betting platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We operate the website accessible at https://sand77.cam and all associated services, including cricket betting, live casino games, slots, fishing games, and player account management.

We are committed to handling your personal data with transparency, care, and respect. This Privacy Policy sets out in plain, formal English what data we collect, why we collect it, how we use it, who we may share it with, and how long we keep it. It also explains the rights available to you in relation to your personal data and how to exercise them.

This policy should be read together with the sand77 Terms and Conditions and Responsible Gaming policy, both of which are incorporated herein by reference.

2 Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal data is the operator of the sand77 platform. sand77 operates as an offshore online gaming platform. All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the sand77 support team at the contact details provided in Section 15 of this policy.

3 Data We Collect

sand77 collects personal data in two broad categories: data you provide to us directly, and data we collect automatically through your use of the Platform. The table below summarises the main categories of data we may hold about you.

We do not collect or store full payment card numbers, mobile banking PINs, or any biometric data beyond what is strictly necessary for identity verification. Verification documents are encrypted at rest and deleted once verification is complete and the applicable retention period has elapsed.

4 How We Collect Your Data

4.1 Directly from You

The majority of the personal data we hold about you is provided by you directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion or survey.

4.2 Automatically

When you visit the sand77 website, our servers automatically record certain technical and usage data including your IP address, device identifiers, browser type, and the pages you access. This data is collected using server logs, cookies, and similar tracking technologies as described in Section 8 of this policy.

4.3 From Third Parties

In limited circumstances, sand77 may receive data about you from third parties, including payment processors (for transaction confirmation), identity verification service providers (for KYC checks), and fraud detection partners. We use data received from third parties only for the purposes for which it was originally shared.

5 How We Use Your Data

sand77 uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your sand77 player account, including verifying your identity and age eligibility (18+).
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, and to maintain accurate financial records.
• Platform delivery: To provide access to cricket betting, live casino, slots, fishing games, and all other sand77 products and features.
• Customer support: To respond to your queries, complaints, and requests submitted through our support channels.
• Responsible gaming: To monitor gaming behaviour, identify potential problem gambling patterns, enforce deposit limits, and administer self-exclusion requests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct.
• Legal compliance: To fulfil record-keeping obligations and respond to lawful requests from competent authorities where applicable.
• Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the sand77 platform.
• Promotional communications: To send you information about sand77 promotions, bonuses, and offers — subject to your communication preferences. You may opt out of marketing communications at any time.

6 Legal Basis for Processing

sand77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between you and sand77 — i.e., to provide your player account and the services you have requested.
• Legitimate interests: Processing is necessary for sand77's legitimate interests in operating a secure, fraud-free, and commercially viable gaming platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing is necessary to comply with applicable legal or regulatory obligations, including anti-money-laundering (AML) and counter-terrorist-financing (CTF) requirements.
• Consent: Where we rely on your consent — for example, for sending you marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Data

sand77 does not sell, rent, or trade your personal data to third parties. We may share your personal data with a limited set of trusted third parties, strictly for the purposes described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank — to facilitate deposits and withdrawals. These providers receive only the transaction data necessary to process your payment.
• Identity verification providers: Third-party KYC and age-verification services that help us confirm your identity and that you are 18 years of age or older.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Playtech may receive session-level data (e.g., a session token) necessary to deliver their games through the sand77 platform. These providers do not receive your personal registration data.
• Fraud detection and security partners: Providers that assist sand77 in identifying and preventing fraud, multi-accounting, money laundering, and other prohibited conduct.
• IT and infrastructure providers: Cloud hosting, database, and content delivery providers who process data on sand77's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where sand77 is required by law, court order, or the request of a competent authority to disclose your data, we will do so to the minimum extent necessary.

All third-party service providers who process personal data on behalf of sand77 are required to maintain confidentiality and to process data only in accordance with sand77's instructions and the purposes described in this policy.

8 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, remember your preferences, and provide analytical information to site operators.

8.2 Cookies Used by sand77

sand77 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your sand77 account during a visit. These cannot be disabled without impairing Platform functionality.
• Preference cookies: Used to remember your settings such as language preference and display options.
• Analytics cookies: Used to understand how players interact with the Platform — which pages are visited most frequently, where users drop off, and how to improve the overall experience. We use anonymised or pseudonymised analytics data only.

8.3 What We Do Not Use

sand77 does not use third-party advertising or retargeting cookies that track your browsing activity across other websites. We do not participate in cross-site advertising networks.

8.4 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies may prevent you from logging into your sand77 account or using certain features of the Platform.

9 Data Retention

sand77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable record-keeping obligations. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a period of up to five years following permanent account closure.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, consistent with standard financial record-keeping practice.
• KYC and verification documents: Retained for the period required to satisfy our verification obligations, and deleted thereafter in accordance with our document deletion schedule.
• Gaming activity logs: Retained for up to three years for responsible gaming monitoring, fraud investigation, and dispute resolution purposes.
• Customer support communications: Retained for up to two years from the date of the last interaction.
• Technical and usage logs: Retained for up to 12 months on a rolling basis.

Where data is no longer required, sand77 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

10 Data Security

sand77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data in transit between your device and sand77's servers.
• Encryption of sensitive data fields at rest, including identity verification documents.
• Industry-standard password hashing — we never store plaintext passwords.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security reviews and penetration testing of Platform infrastructure.
• Monitoring for suspicious login patterns and unauthorised account access attempts.

11 Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that sand77 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data sand77 holds about you, along with information about how it is used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data we hold about you is corrected without undue delay.
• Right to erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations.
• Right to restriction: You have the right to request that we restrict our processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we process your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe option in any marketing email we send.
• Right to object: You have the right to object to our processing of your personal data where that processing is based on legitimate interests, including direct marketing.

sand77 will respond to all verified data rights requests within 30 days of receipt. We may request proof of identity before processing a request to protect your data from unauthorised disclosure.

12 Children's Privacy

sand77 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player account has been opened by a person under 18 years of age, we will immediately suspend the account, investigate, and take appropriate action including permanent closure and forfeiture of any funds in the account.

If you are a parent or guardian and you believe that a minor has registered an account on sand77, please contact us immediately at [email protected] so that we can take prompt remedial action.

13 Third-Party Links

The sand77 platform may contain references to or links involving third-party service providers such as payment partners. Once you leave the sand77 website and access a third-party service — for example, the bKash, Nagad, or Rocket payment interfaces — your data is subject to that third party's own privacy policy, not this one. sand77 is not responsible for the privacy practices of any third-party service.

We encourage you to review the privacy policies of any payment or service provider you use in connection with your sand77 account before submitting personal data to them.

14 Changes to This Privacy Policy

sand77 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this document. Where practicable, we will notify registered players of significant changes via email or a prominent Platform notice prior to the changes taking effect.

Your continued use of the sand77 Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you must stop using the Platform and may request deletion of your account and associated data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data sand77 holds about you, please contact our support team using the details below. All privacy-related correspondence must be submitted in writing via email.

• Email: [email protected]
• Subject line for data requests: "Data Rights Request"
• Subject line for privacy enquiries: "Privacy Policy Enquiry"
• Response time: Under 2 hours for general queries; up to 30 days for formal data rights requests
• Operating hours: 24/7, including Bangladesh public holidays