Privacy Policy — gtc777

1. Introduction

gtc777 ("we", "us", "our") operates the online casino and sports betting platform accessible at https://gtc777.app (the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform. This Privacy Policy applies to all Players, registered account holders, and visitors to the gtc777 website, regardless of how they access the Platform.

This policy is written in plain, formal English and is intended to give you a clear and transparent account of how gtc777 handles your personal data — from the moment you visit our homepage to the moment you close your account. It should be read alongside our Terms & Conditions, which govern the overall relationship between you and gtc777.

2. Data Controller

The data controller responsible for your personal data is the operator of the gtc777 Platform. For the purposes of this Privacy Policy, the data controller can be contacted via the following details:

All data protection queries, subject access requests, and privacy-related complaints should be directed to [email protected] with the subject line "Privacy Request". We will acknowledge receipt of your request within two (2) business days and endeavour to resolve all requests within thirty (30) calendar days.

3. Personal Data We Collect

gtc777 collects only the personal data that is necessary to provide Platform services, comply with legal obligations, and protect the security and integrity of the Platform. The categories of personal data we may collect are set out in the table below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data beyond what is required for identity verification purposes.

4. How We Collect Your Data

gtc777 collects personal data through the following channels:

4.1 Direct Collection

Information you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions. This is the primary source of personal data held by gtc777.

4.2 Automated Collection

When you access the Platform, certain technical data is automatically collected by our servers and analytics systems. This includes your IP address, device identifiers, browser fingerprint, and session activity. This data is collected using server logs, cookies, and similar tracking technologies (see Section 9 for full details on cookies).

4.3 Third-Party Sources

In limited circumstances, gtc777 may receive information about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) to confirm transaction status and detect fraud.
• Identity verification services used during KYC processing to cross-check document authenticity.
• Fraud prevention and anti-money laundering (AML) screening databases.

In all cases, third-party data sharing is strictly limited to what is necessary for the stated operational or compliance purpose.

5. Purpose & Legal Basis for Processing

gtc777 processes your personal data only where a lawful basis exists. The table below outlines the primary purposes for which we process personal data and the corresponding legal basis.

6. Sharing Your Personal Data

gtc777 does not sell, rent, or trade your personal data to any third party. We may, however, share your personal data with the following categories of recipients where strictly necessary:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Data shared is limited to what is required to complete the transaction and verify payment method ownership.

6.2 Identity Verification Providers

During KYC processing, identity document data may be shared with third-party verification service providers that specialise in document authentication and age verification. These providers are contractually bound to process your data only for the purposes specified by gtc777 and in accordance with applicable data protection standards.

6.3 Game Software Providers

Certain gameplay data (such as player session tokens and bet histories) is processed by our game software partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely for the purpose of delivering game services. These providers do not have access to your full identity or financial data.

6.4 Legal and Regulatory Authorities

gtc777 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or in response to a legitimate legal process. In such cases, gtc777 will disclose only the minimum information necessary to comply with the legal obligation.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of gtc777's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material changes to the applicable privacy terms prior to the transfer taking effect.

7. Data Retention

gtc777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, to comply with anti-money laundering (AML) and financial record-keeping obligations.
• KYC identity documents: Retained for a minimum of five (5) years after the date of last verification, or longer if required by applicable law or an ongoing investigation.
• Support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form; subsequently anonymised or deleted.
• Responsible gaming records: Retained for the duration of any self-exclusion or limit period, plus five (5) years following account closure.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual.

8. Security Measures

gtc777 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• SSL/TLS Encryption: All data transmitted between your device and the gtc777 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Password Hashing: User passwords are stored exclusively in hashed, salted form using a secure one-way hashing algorithm. Plain-text passwords are never stored or accessible to gtc777 staff.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to personal data are bound by confidentiality obligations and undergo regular security awareness training.
• Fraud Detection Systems: Automated systems monitor Platform activity for unusual patterns indicative of fraud, account takeover attempts, or collusion. Suspicious activity triggers an immediate security review.
• Secure Data Storage: Personal data and financial records are stored on secured servers with access logging, intrusion detection, and regular vulnerability assessments.
• Incident Response: gtc777 maintains a data breach response plan. In the event of a breach that is likely to result in harm to affected individuals, we will notify impacted Players and relevant authorities in accordance with applicable law.

9. Cookies & Tracking Technologies

gtc777 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, and understand how users interact with our services. The following categories of cookies may be active on the Platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as user authentication, session management, and load balancing. You cannot opt out of strictly necessary cookies without disrupting Platform functionality.

9.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data helps gtc777 improve the Platform experience. These cookies do not collect personally identifiable information in their raw form.

9.3 Functional Cookies

Functional cookies remember your preferences and settings (such as your language preference and last selected payment method) to provide a more personalised and convenient experience on future visits.

9.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may impair your ability to use some features of the Platform, including the login function and payment processing. Instructions for managing cookies are available in your browser's help documentation.

10. Your Data Rights

As a data subject, you have a number of rights in relation to the personal data that gtc777 holds about you. These rights are subject to applicable law and may be limited in certain circumstances — for example, where gtc777 has a legal obligation to retain data beyond your request for deletion.

• Right of Access: You may request a copy of the personal data gtc777 holds about you at any time. We will provide this information in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data held by gtc777 is inaccurate or incomplete, you have the right to request correction. Account details such as email address and mobile number can be updated directly from your Account settings.
• Right to Erasure: You may request that gtc777 delete your personal data. This right is subject to legal retention obligations — in particular, transaction and KYC records that we are required to retain under AML law cannot be erased on request.
• Right to Restrict Processing: You may request that gtc777 restrict the processing of your personal data in certain circumstances, such as while a dispute regarding the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your personal data be provided to you in a portable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including for direct marketing purposes. If you object to marketing communications, gtc777 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will respond within thirty (30) calendar days. We may ask you to verify your identity before processing a request in order to protect your data from unauthorised disclosure.

11. Third-Party Services

The gtc777 Platform may incorporate third-party services or tools — such as game engines from studio partners, payment gateway iframes, or analytics services — that operate under their own privacy policies. gtc777 is not responsible for the data practices of third-party services once your data has left our Platform and entered their processing environments.

Where gtc777 engages third-party processors to handle personal data on our behalf, we enter into data processing agreements that require those processors to: (i) process personal data only on gtc777's documented instructions; (ii) implement appropriate technical and organisational security measures; and (iii) delete or return personal data upon termination of the service arrangement.

12. Children's Privacy

The gtc777 Platform is strictly intended for adults aged 18 years and above. gtc777 does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been provided by or on behalf of a person under 18, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account or provided personal data to gtc777 without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action within two (2) business days of receiving your notification.

13. Updates to This Privacy Policy

gtc777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. Where material changes are made, we will notify registered Players via email to their registered address and/or by displaying a prominent notice on the Platform at least seven (7) days prior to the changes taking effect.

The "Effective" date displayed in the hero section at the top of this page will be updated each time a new version of this Privacy Policy is published. We recommend reviewing this page periodically to stay informed about how gtc777 protects your personal data. Your continued use of the Platform following any update constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which gtc777 handles your personal data, please contact our support team using the details below. All privacy-related queries are handled in English by staff operating in Bangladesh Standard Time (BST, UTC+6).

For queries specifically about responsible gaming tools, self-exclusion, or account restrictions, please visit our dedicated Responsible Gaming page.