sou777 Privacy Policy — How We Protect Your Data

1. Information We Collect

sou777 collects personal data that is necessary to provide a safe, compliant, and high-quality gaming experience to players in Bangladesh and other supported markets. We collect only the data we genuinely need, and we are transparent about every category of information gathered through the Platform.

1.1 Registration Data

When you create a sou777 account, we collect the following information: your full legal name, date of birth, email address, mobile phone number, and residential address (including city, district, and postcode). This data is mandatory for account creation and is used to verify your identity, communicate with you about your account, and fulfil our legal obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements.

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, sou777 requires you to complete a KYC identity verification process. During this process, we collect scanned or photographed copies of government-issued identity documents (such as your National ID card or passport), proof of address documents (such as a recent utility bill or bank statement), and, where applicable, confirmation of payment method ownership. These documents are processed securely and retained only for as long as required by applicable law or our internal compliance obligations.

1.3 Financial Transaction Data

We collect records of all financial transactions conducted through the Platform, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and the payment methods used (such as bKash, Nagad, Rocket, Upay, USDT, BTC, or ETH wallet addresses). This data is essential for account management, financial record-keeping, fraud prevention, and AML compliance. We do not store full payment card numbers or mobile banking PINs — only the minimal transaction reference data required to manage your account.

1.4 Technical and Device Data

When you access the Platform, we automatically collect certain technical data about your device and browsing session. This includes your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone setting, language preferences, referring URLs, pages visited within the Platform, session duration, and in-game activity logs. This data helps us maintain platform security, detect suspicious behaviour, optimise the user experience, and resolve technical issues.

1.5 Communications Data

If you contact sou777's support team via email, live chat, or any other communication channel, we retain a record of that correspondence, including the content of your messages, the date and time of contact, and any resolution notes. This data is used to manage your support request, maintain quality standards, and refer back to prior communications in the event of a follow-up query or dispute.

2. How We Use Your Data

sou777 uses the personal data it collects for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following describes the primary ways in which we process your personal information.

2.1 Account Management and Service Delivery

Your registration data is used to create and maintain your sou777 account, authenticate your identity each time you log in, manage your balance, process deposits and withdrawals, and provide access to the full range of casino games and sports betting markets available on the Platform. This processing is necessary for the performance of the contract between you and sou777.

2.2 Identity Verification and Compliance

We use KYC data and financial transaction records to verify your identity, confirm that you meet our eligibility requirements (including the minimum age of 18), comply with applicable AML regulations, detect and prevent fraudulent activity, and fulfil any reporting obligations required by law. This processing is carried out on the basis of legal obligation and legitimate interest in maintaining a safe, compliant platform.

2.3 Customer Support

Communications data is used to respond to your support queries, resolve disputes, and improve the quality of our customer service. Support interactions may be reviewed internally for training and quality assurance purposes. sou777 support staff are trained to handle personal data with discretion and in accordance with this Privacy Policy.

2.4 Platform Security and Fraud Prevention

Technical and device data is processed to monitor the Platform for suspicious access patterns, detect and prevent account takeovers and fraud, enforce our single-account policy, and maintain the integrity of our gaming environment. This processing is carried out on the basis of our legitimate interest in protecting the Platform and its users.

2.5 Marketing Communications

Where you have opted in to receive marketing communications, we use your email address and/or mobile phone number to send you information about promotions, bonuses, new game releases, and seasonal offers relevant to the Bangladesh market (such as Eid, BPL season, or Pohela Boishakh campaigns). You may withdraw your consent to receive marketing communications at any time by updating your preferences in your account settings or by following the unsubscribe instructions in any marketing message we send.

2.6 Platform Improvement and Analytics

Aggregated and anonymised technical data may be used to analyse usage patterns across the Platform, identify areas for improvement, test new features, and optimise the overall player experience. This data is processed in anonymised form and cannot be used to identify individual players.

3. Data Sharing & Disclosure

sou777 does not sell, rent, or trade your personal data to third parties. However, in order to deliver our services effectively and meet our legal obligations, we do share certain data with trusted third parties in specific, controlled circumstances as described below.

3.1 Game Providers

The games available on sou777 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, the game provider's platform may receive a session token and anonymised player identifier necessary to run the game and record outcomes. Game providers do not receive your full name, payment details, or contact information. All game providers used by sou777 are required to maintain data security standards consistent with their own regulatory certifications.

3.2 Payment Processors

To process deposits and withdrawals, sou777 shares the minimum necessary transaction data with the relevant payment processors, including bKash, Nagad, Rocket, Upay, and cryptocurrency network infrastructure providers. This data is limited to transaction amounts, references, and the account identifiers required to route payments correctly. Payment processors are contractually bound to use this data only for the purpose of processing the transaction.

3.3 Identity Verification Providers

sou777 may use third-party KYC and identity verification service providers to assist with the verification of identity documents submitted during the KYC process. These providers are certified specialists in document verification and are contractually required to handle all data in accordance with applicable data protection standards. Your identity documents are not retained by these providers beyond the period required to complete verification.

3.4 Legal and Regulatory Authorities

sou777 may be required by law to disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies in response to a lawful request, court order, or legal process. In cases where we are legally prohibited from notifying you of such disclosure (for example, in connection with an active AML investigation), we will comply with that prohibition. Where permitted, we will notify you of any such disclosure request.

3.5 Business Transfers

In the event that sou777 undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data held at the time of the transaction may be transferred to the acquiring entity as part of that business transfer. In such circumstances, sou777 will make reasonable efforts to notify affected players in advance and to ensure that the acquiring entity is bound by data protection obligations no less stringent than those set out in this Privacy Policy.

4. Cookies & Tracking

sou777 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your authenticated session, and analyse how players interact with our services. This section explains the types of cookies we use and how you can manage them.

4.1 Essential Cookies

Essential cookies are strictly necessary for the Platform to function. They maintain your login session, remember your language and currency preferences, provide security against cross-site request forgery (CSRF) attacks, and ensure that the platform loads correctly across different devices. These cookies cannot be disabled without significantly impairing your ability to use the Platform.

4.2 Analytics Cookies

We use analytics cookies to understand how players navigate the Platform, which pages are most visited, where players encounter technical difficulties, and how overall engagement evolves over time. This data is collected in aggregated form and is used solely to improve the Platform experience. Analytics data is not linked to your personal account unless you are logged in at the time.

4.3 Preference Cookies

Preference cookies remember settings you have applied during your visit, such as your chosen display currency (BDT or crypto), game category filters, and notification preferences. These cookies improve your experience by ensuring the Platform remembers your choices between sessions.

4.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookie data, or receive a notification before a cookie is stored. Please note that disabling essential cookies may prevent you from logging in or using core Platform functionality. Instructions for managing cookies in commonly used browsers are available in your browser's help documentation.

5. Data Security

sou777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. We treat the security of player data as a core operational priority, not an afterthought.

5.1 Encryption in Transit and at Rest

All data transmitted between your device and the sou777 Platform is protected using 256-bit SSL/TLS encryption, ensuring that your personal information, financial transaction data, and login credentials cannot be intercepted during transmission. Personal data stored on our servers is encrypted at rest using industry-standard encryption algorithms, meaning that even in the unlikely event of a server compromise, stored data would not be readable without the corresponding decryption keys.

5.2 Access Controls

Access to personal data within sou777's internal systems is restricted on a strict need-to-know basis. Only authorised personnel with a specific operational requirement are granted access to player data, and all internal access is logged and audited. Staff with access to sensitive data are required to complete data protection training and are bound by confidentiality obligations as part of their employment or engagement terms.

5.3 Fraud Detection and Monitoring

sou777 employs automated systems that continuously monitor Platform activity for signs of unauthorised access, unusual account behaviour, and potential fraud. Where suspicious activity is detected, the relevant account may be temporarily restricted pending a security review. Players will be notified of any security-related account actions via their registered email address wherever permitted by law.

5.4 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, sou777 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as soon as practicable. We will provide clear information about the nature of the breach, the data affected, the likely consequences, and the steps we are taking to address it. sou777 maintains an internal incident response plan that is reviewed and updated regularly.

6. Data Retention

sou777 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply to the different categories of data we hold.

6.1 Active Account Data

For as long as your sou777 account remains active, we retain all registration data, KYC documents, financial transaction records, and communications history associated with your account. This ongoing retention is necessary to manage your account, process transactions, and comply with our legal and regulatory obligations.

6.2 Post-Closure Retention

Following the closure of your sou777 account — whether initiated by you or by sou777 — we retain certain categories of data for defined periods as required by law or for legitimate business purposes. Financial transaction records and KYC documents are typically retained for a period of five years following account closure, in line with standard AML and financial record-keeping requirements. Communications records are retained for a period of two years following the closure of a support interaction. Technical log data is retained for a maximum of 12 months and then permanently deleted or anonymised.

6.3 Inactive Accounts

Accounts that have been inactive for a period of 12 consecutive months (no login or wagering activity) will be flagged for review. sou777 will attempt to contact you at your registered email address before closing an inactive account. Upon closure of an inactive account, standard post-closure retention periods apply as described in Section 6.2. Any remaining real-money balance will be returned to your last verified payment method prior to closure.

6.4 Deletion Requests

You may request the deletion of your personal data by contacting our support team at [email protected]. Where we are legally permitted to fulfil a deletion request, we will do so within 30 days of receiving a valid request. Please note that certain categories of data (primarily financial transaction records and KYC documents) cannot be deleted while retention is required by law, even if you have requested account closure. We will always communicate clearly about which data can be deleted immediately and which must be retained, and for how long.

7. Your Privacy Rights

sou777 respects your rights over your personal data. The following rights are available to all sou777 players. To exercise any of these rights, contact our support team at [email protected] with your request and registered account details. We aim to respond to all privacy rights requests within 30 days.

8. Policy Updates & Contact

8.1 Changes to This Policy

sou777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify registered players via their registered email address and/or via a prominent notice on the Platform prior to the changes taking effect. The "Effective" date at the top of this policy will be updated to reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how we are protecting your personal information.

8.2 Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or the way sou777 handles your personal data, please contact us at [email protected]. We take all privacy-related enquiries seriously and aim to acknowledge your message within one hour and provide a substantive response within five business days (Bangladesh Standard Time, UTC+6).

8.3 Third-Party Links

The sou777 Platform may contain references to third-party services such as payment processors. This Privacy Policy applies solely to data collected and processed by sou777 directly. sou777 is not responsible for the privacy practices of third-party platforms, and we encourage you to review the privacy policies of any third-party service you use in connection with your sou777 account (for example, bKash's privacy policy when using bKash to deposit funds).

8.4 Children's Privacy

sou777 does not knowingly collect personal data from individuals under the age of 18. Our Platform is strictly for adults aged 18 and above. If you believe that a person under the age of 18 has provided personal data to sou777, please notify us immediately at [email protected] and we will take prompt action to delete that data and close the associated account.