Privacy Policy — aha777

This Privacy Policy (hereinafter referred to as "the Policy") sets out how aha777 (the "Platform", "Operator", "we", "us", or "our"), accessible at aha777.bid, collects, processes, stores, and protects the personal data of individuals who access or use our services ("you", "the User", or "the Player").

aha777 is Bangladesh's premier online casino and sports betting platform, serving registered players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh. The protection of your personal information is a core operational obligation, not an afterthought.

By registering an account on aha777, accessing any part of the platform, or using any of its services, you confirm that you have read, understood, and agreed to the data practices described in this Policy. This Policy is incorporated by reference into the aha777 Terms & Conditions, which constitute the master agreement governing your use of the platform.

aha777 collects personal data through a number of channels during your interaction with the platform. The categories of data collected, and the circumstances under which they are gathered, are set out below.

2.1 Registration Data

When you create an aha777 account, we collect the information you provide directly, which typically includes your full legal name, date of birth, residential address (including city and division within Bangladesh), preferred contact method, and login credentials. This data is required to establish and operate your account.

2.2 Identity Verification Data

To satisfy our obligations under applicable anti-money laundering and know-your-customer requirements, we may request copies of identity documents such as a National Identity Card (NID), passport, or driving licence, as well as proof of address documents. Biometric data embedded in identity documents is processed solely for verification purposes and is not used for any other purpose.

2.3 Financial and Transaction Data

All financial interactions with the platform — including deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, and Mastercard — generate transaction records. We collect payment method identifiers (such as mobile wallet numbers or masked card details), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. Full payment credentials such as card numbers or mobile banking PINs are never stored on aha777 servers.

2.4 Gameplay and Betting Data

We collect a comprehensive record of all gaming and betting activity conducted on your account, including game sessions, wager amounts, outcomes, bonus redemptions, and sports betting selections. This data is used for account management, dispute resolution, bonus administration, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access the aha777 platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

If you contact aha777 customer support via email or any other communication channel provided by the platform, we retain records of that correspondence, including the content of messages and any attachments, for the purposes of resolving your query and maintaining a complete support history.

aha777 uses the personal data it collects for the specific, documented purposes set out in the table below. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your explicit consent.

aha777 processes your personal data on one or more of the following legal grounds, each of which is identified in relation to the purposes described in Section 3:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions you have accepted, including account management, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing is required to comply with applicable anti-money laundering regulations, age verification requirements, record-keeping obligations, and any other legal duties imposed on the Operator.
• Legitimate Interests: Processing is necessary for the legitimate interests of aha777 in maintaining platform security, detecting and preventing fraud, and improving the quality of our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as a legal basis (for example, for optional marketing communications), you may withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

aha777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with the following categories of recipients where it is necessary for the operation of the platform or required by law:

• Payment Processors: To facilitate deposits and withdrawals, we share the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks. These providers operate under their own data protection policies and are independently responsible for the data they process.
• Game Technology Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical session data necessary to deliver their games on the aha777 platform. These providers do not receive your full account profile.
• Identity Verification Services: Where we use third-party providers to assist with know-your-customer checks, your identity document data may be shared with those services solely for the purpose of verification.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulators, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety of users or to detect, prevent, or investigate fraud, money laundering, or other criminal activity.
• Platform Operations Partners: Service providers who assist in hosting, maintaining, and securing the aha777 platform infrastructure may have access to personal data in the course of providing those services. All such partners are contractually bound to process data only on our instructions and to maintain appropriate security standards.

aha777 uses cookies and similar tracking technologies on the platform to support essential functionality, maintain session security, and gather anonymised analytics data. A cookie is a small text file stored on your device when you visit a website. The cookies used on the aha777 platform fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session authentication, account security, and fraud prevention. The platform cannot operate correctly without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as language settings and game display preferences — to provide a more personalised experience. Disabling these cookies may affect the quality of your platform experience.
• Analytics Cookies: We use anonymised analytics data to understand how players interact with the platform, which pages are most visited, and where technical issues occur. This information helps us improve the platform for all users. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These cookies support fraud detection and abuse prevention systems. They help identify unusual access patterns and protect your account from unauthorised access.

You can manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary or security cookies may prevent you from accessing certain features of the aha777 platform, including account login. aha777 does not use advertising or retargeting cookies, and does not permit third-party advertising networks to place cookies on the platform.

aha777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applicable to each category of data are set out below:

• Account and Registration Data: Retained for the duration of your active account plus a minimum of five years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping and anti-money laundering compliance obligations.
• Identity Verification Documents: Retained for a minimum of five years following account closure. Copies of identity documents may be retained for longer where required by applicable law.
• Gameplay and Betting Records: Retained for a minimum of three years from the date of the relevant game session or bet, and for longer where records are required in connection with a dispute or investigation.
• Customer Support Communications: Retained for a minimum of two years from the date of the final communication in each support case.
• Technical and Device Data (Logs): Retained for up to 12 months from the date of collection, after which they are deleted or anonymised.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data lifecycle management procedures.

aha777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the aha777 platform is encrypted in transit using industry-standard SSL/TLS protocols, preventing interception by unauthorised parties.
• Encryption at Rest: Sensitive personal data stored on aha777 servers — including identity document data and financial records — is encrypted at rest using robust encryption algorithms.
• Access Controls: Access to personal data within the aha777 organisation is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive appropriate data protection training.
• Intrusion Detection and Monitoring: Our platform infrastructure is continuously monitored for suspicious activity, unauthorised access attempts, and security incidents. Automated alerts are in place to enable rapid response to potential threats.
• Secure Payment Processing: Financial transactions are processed through established, encrypted payment channels. Full payment credentials are never stored on aha777 servers.
• Regular Security Assessments: aha777 conducts periodic security reviews and vulnerability assessments to identify and address weaknesses in our systems before they can be exploited.

While aha777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all threats. You also bear responsibility for maintaining the security of your account credentials — do not share your password with anyone, and contact support immediately if you suspect unauthorised access to your account.

As a player on the aha777 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered account username and a clear description of your request.

• Right of Access: You have the right to request a copy of the personal data that aha777 holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data held by aha777 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal retention obligations — we may be required to retain certain data even after an erasure request.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain situations, for example while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Where we process your data on the basis of our legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

aha777 aims to acknowledge all data rights requests within 5 business days and to respond substantively within 30 days of receipt. Complex requests may require additional time, in which case we will notify you of the extended timeframe.

The aha777 platform is strictly intended for adults aged 18 years and above. aha777 does not knowingly collect, process, or retain personal data from any individual under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to permanently delete that data and close the associated account.

Parents and legal guardians are encouraged to monitor their children's internet usage and to make use of parental control tools to prevent minors from accessing online gambling services. If you believe that a minor has registered an account on aha777, please contact our support team immediately at [email protected] so that we can investigate and take the appropriate action without delay.

The aha777 platform may contain references to third-party game providers or payment partners whose services are integrated into the platform. While aha777 takes care to work with reputable partners, we do not control the privacy practices of third-party organisations and cannot accept responsibility for their data handling.

Each third-party provider — including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, and payment providers such as bKash, Nagad, and Rocket — operates under its own privacy policy. We encourage you to review the privacy policies of any third-party service you interact with. The presence of a third-party provider's name or logo on the aha777 platform does not constitute an endorsement of that provider's privacy practices.

aha777 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to the Policy, we will take reasonable steps to inform registered players — which may include displaying a notice on the platform or communicating via the contact method associated with your account.

The "Last Updated" date displayed at the top of this document and in the table of contents reflects the date on which the most recent revision was made. We encourage you to review this Policy periodically to remain informed about how we are protecting your personal data. Your continued use of the aha777 platform following publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way aha777 handles your personal data, please contact our support team using the details below. All privacy-related communications should be sent in English and include your registered account username to allow us to process your request efficiently.

aha777 aims to acknowledge all privacy-related enquiries within 5 business days and to resolve requests fully within 30 days. Where a request is particularly complex, we will notify you of the extended timeframe and keep you informed of progress throughout.