ash777 Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the collection and processing of your personal data is ash777, the operator of the online casino and sports betting platform accessible at https://ash777.app ("the Platform"). ash777 operates the Platform primarily for players based in Bangladesh and processes personal data in accordance with the data protection principles outlined in this policy.

When we refer to "ash777", "we", "us", or "our" in this Privacy Policy, we are referring to the operational entity that runs the ash777 Platform and makes decisions about how your personal data is collected, processed, stored, and shared. When we refer to "you", "your", or "the player", we mean any individual who accesses or uses the ash777 Platform, whether as a visitor, a registered account holder, or a former account holder whose data we continue to retain for legal or operational reasons.

This Privacy Policy applies to all personal data collected through the ash777 website, mobile-optimised web interface, any communications you have with the ash777 support team, and any data provided during the registration, KYC verification, deposit, withdrawal, or bonus claim processes.

ash777 collects personal data through several means: information you provide directly during registration and KYC, information generated automatically through your use of the Platform, and information received from third-party payment providers. The categories of data we collect are set out below.

Information You Provide Directly

• Account Registration Data: Full name, date of birth, mobile number (Bangladesh-registered), email address, username, and password (stored in hashed form — we never store your plain-text password).
• KYC Verification Documents: National Identity Card (NID), passport, or driver's licence — including the document number, issue date, expiry date, and the document image itself. This data is required before withdrawal privileges are activated.
• Payment Information: bKash, Nagad, Rocket, or Upay account numbers used for deposits and withdrawals. ash777 does not store full card numbers or mobile banking PINs. Only the registered account number associated with your payment method is retained.
• Support Communications: The content of messages, emails, and WhatsApp conversations you initiate with the ash777 support team, including any attachments or screenshots you voluntarily provide.
• Responsible Gaming Preferences: Deposit limit settings, self-exclusion requests, cooling-off period activations, and session time reminder configurations you set via your account dashboard.

Information Collected Automatically

• Device & Technical Data: IP address, browser type, browser version, operating system, device type (mobile or desktop), and screen resolution.
• Usage & Behavioural Data: Pages visited, game sessions played, bets placed, wagers staked, time spent on the Platform, navigation paths, and session duration.
• Transaction Logs: A complete log of all deposits, withdrawals, bonus claims, and wager transactions associated with your account, including timestamps (recorded in Bangladesh Standard Time, UTC+6).
• Cookie & Tracker Data: Session identifiers, preferences cookies, and performance analytics data collected via the cookies described in Section 6 of this policy.

Information Received from Third Parties

• Payment Gateway Confirmation Data: Transaction reference numbers, payment status codes, and sender account identifiers received from bKash, Nagad, Rocket, and Upay when processing your deposits and withdrawals.
• Fraud & Risk Screening Data: Risk scores and identity match indicators returned by third-party AML and fraud screening tools used as part of our KYC process.

ash777 processes your personal data on the following legal bases, depending on the specific processing activity:

Where ash777 relies on legitimate interests as a legal basis for processing, we have carried out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The personal data collected by ash777 is used exclusively for the following purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or being required to do so by law.

Platform Operation & Account Management

• Creating, maintaining, and securing your ash777 registered account.
• Verifying your identity and age during the KYC process before activating withdrawal privileges.
• Processing deposits and withdrawals to and from your registered bKash, Nagad, Rocket, or Upay account.
• Crediting bonus funds and tracking wagering requirement progress in accordance with active promotional offers.
• Sending transactional notifications — including deposit confirmations, withdrawal status updates, and security alerts — to your registered email address and mobile number.

Legal Compliance & Safety

• Fulfilling our Anti-Money Laundering (AML) obligations, including screening transactions against risk thresholds and maintaining transaction logs for the statutory retention period.
• Enforcing the 18+ age restriction by verifying date of birth against KYC documents submitted during verification.
• Detecting, investigating, and preventing fraudulent activity, account abuse, bonus abuse, multi-accounting, and any other conduct prohibited under the ash777 Terms & Conditions.
• Applying and managing responsible gaming restrictions, including deposit limits, cooling-off periods, and self-exclusion orders requested by you or imposed by ash777.

Platform Improvement

• Analysing aggregated, anonymised usage data to identify platform performance issues, improve navigation, and optimise the game lobby layout for Bangladeshi players.
• Monitoring game session behaviour to detect technical anomalies and improve game loading performance across devices commonly used in Dhaka, Chittagong, Sylhet, Khulna, and other major Bangladeshi cities.

Marketing Communications (Consent-Based Only)

With your consent, ash777 may send promotional emails or WhatsApp messages regarding seasonal bonus offers, BPL cricket betting promotions, Eid special campaigns, or new game launches. You may withdraw consent and opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe".

ash777 does not sell your personal data. We do not share your data with third-party advertisers, data brokers, or marketing networks. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Payment Processors

To process your deposits and withdrawals, ash777 must share the minimum necessary transaction data — including your registered mobile number and transaction amount — with the relevant payment gateway: bKash, Nagad, Rocket, or Upay. These providers operate under their own privacy policies and are bound by Bangladesh Bank regulations governing mobile financial services. ash777 does not share any additional personal data with payment processors beyond what is required to complete the transaction.

Game Providers

Casino games and live dealer titles on the ash777 Platform are operated by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. To facilitate your gameplay, a session token and a non-personally-identifiable player reference ID are transmitted to the game provider's servers when you launch a game. Your full name, NID number, email address, and mobile number are never shared with game providers.

Fraud & AML Service Providers

ash777 uses third-party fraud detection and AML screening tools to fulfil its compliance obligations. These tools may process your name, date of birth, and identity document reference number against sanctions lists and risk databases. All such providers are contractually bound to process your data solely for the purposes specified by ash777 and to maintain adequate data security standards.

Legal Disclosure

ash777 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or any other applicable jurisdiction if we are legally required to do so by a court order, regulatory directive, or applicable law. In such cases, ash777 will disclose only the minimum data required to comply with the legal obligation and, where legally permissible, will notify you of the disclosure.

ash777 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session when you are logged in, and to collect anonymised analytics data that helps us improve the player experience. The following table describes the categories of cookies used on ash777.

No Third-Party Advertising Cookies

ash777 does not use third-party advertising networks, retargeting pixels, social media tracking tags, or any other tracking technology designed to build a profile of your browsing activity across other websites for the purpose of targeted advertising. The cookies deployed on ash777 are limited strictly to the categories listed in the table above.

ash777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, ash777 will securely delete or irreversibly anonymise your personal data. Anonymised data that can no longer be linked to any individual may be retained indefinitely for aggregate statistical analysis without further notice to you.

As a registered player on the ash777 Platform, you hold the following rights with respect to your personal data. You may exercise any of these rights at any time by contacting the ash777 support team at [email protected].

• Right of Access: You have the right to request a copy of all personal data that ash777 holds about you. We will provide this in a commonly used electronic format (such as a CSV or PDF document) within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that corrections to KYC identity documents require resubmission of a valid, current identity document.
• Right to Erasure ("Right to be Forgotten"): You may request that ash777 delete your personal data. This right is subject to exceptions where ash777 is required to retain data by law — for example, AML transaction records must be retained for 7 years regardless of your erasure request. We will inform you of any such exceptions at the time of your request.
• Right to Restriction of Processing: You may request that ash777 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing on the basis of legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another organisation where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where ash777 is relying on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where ash777 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

ash777 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

Technical Measures

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and ash777 servers is encrypted using TLS 1.2 or TLS 1.3. The connection is enforced via HTTPS across the entire ash777 domain.
• Password Hashing: Player passwords are never stored in plain text. ash777 uses industry-standard one-way hashing algorithms with salt to store password credentials. Even ash777 staff cannot retrieve your password — only a reset is possible.
• Two-Factor Authentication (2FA): ash777 supports 2FA via your Bangladesh-registered mobile number. Players are strongly encouraged to enable 2FA to add an additional layer of protection to their account.
• Access Controls: Access to player personal data within ash777's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
• Secure Document Storage: KYC identity documents are stored in encrypted, access-controlled storage systems. Documents are not accessible to front-line support staff; they are reviewed only by the designated KYC compliance team.

Organisational Measures

• All ash777 staff who handle personal data are trained in data protection principles and are contractually bound by confidentiality obligations.
• ash777 conducts periodic internal reviews of data handling processes and security controls to identify and address vulnerabilities.
• Third-party service providers who process data on ash777's behalf are required to maintain data security standards equivalent to those maintained by ash777, and are subject to contractual data processing agreements.

Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, ash777 will notify affected players without undue delay, providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures ash777 has taken or proposes to take to address the breach. Where required by applicable law, ash777 will also notify the relevant regulatory authority within the statutory timeframe.

ash777 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, improvements to the Platform, or recommendations from data protection advisors. The most current version of this Privacy Policy will always be available at https://ash777.app/privacy-policy.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. Where ash777 considers a change to be material — for example, a change that significantly affects how we use your personal data, introduces a new category of data sharing, or alters your rights under this policy — we will make reasonable efforts to notify registered players via email to their registered address or via a notice displayed upon next login.

Your continued use of the ash777 Platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any amendment, your sole remedy is to cease use of the Platform, request deletion of your account, and submit a data erasure request to [email protected] in accordance with your rights described in Section 8 above.

ash777 maintains an internal version history of all changes made to this Privacy Policy. If you have a question about a specific change or wish to understand how a particular provision has evolved over time, you may contact the support team at [email protected] and we will provide clarification within 48 hours.

This Privacy Policy was last reviewed and approved by the ash777 compliance team on 1 January 2026 and is effective as of that date. All prior versions of the ash777 Privacy Policy are superseded by this document.