Ash777 Privacy Policy — How We Keep Your Data Secure

When you create an account and use ash777's services, several types of information are collected. These can be grouped into two categories: information you provide directly, and information collected automatically.

Information You Provide Directly:

• Registration Details: Full name, date of birth, mobile number, and email address. These are required to create an account.
• Identity Verification (KYC): National ID (NID) or passport details. This may be requested for large withdrawals or in cases of suspicious activity.
• Payment Information: Your bKash, Nagad, or Rocket number. ash777 does not directly store card numbers or bank account numbers — all payments are processed through a payment gateway.
• Support Conversations: Information you share via live chat or email is retained solely for the purpose of resolving your issue.

Automatically Collected Data:

• Device Information: IP address, device type, operating system, and browser type.
• Usage Logs: Login times, betting activity, page visit history, and session duration.
• Cookies & Tracking Tokens: Used to keep your session active and remember your UI preferences.

Ash777 uses collected data only for defined purposes. Collecting unnecessary data or using it in any unauthorized way goes against our policy.

• Account Management: Your identity and contact details are used for login verification, password resets, OTP delivery, and account security.
• Payment Processing: Financial information is used to process deposits and withdrawals and to maintain transaction records.
• Fraud Prevention: Device and usage data are analyzed to detect multiple accounts, flag unusual transactions, and prevent bonus abuse.
• Service Improvement: Usage logs help us analyze which features are most popular and where users are running into difficulties.
• Personalized Offers: Your betting history is used to show you relevant bonuses and promotions based on how you play.
• Legal Compliance: Providing required information in response to lawful requests from government authorities.

Ash777 does not sell your data. However, limited information is shared with a select group of trusted third parties in order to keep our services running.

• Payment Providers: Necessary information is shared with bKash, Nagad, and Rocket to process transactions. Each of these providers has its own privacy policy.
• Cloud & Hosting Services: Trusted cloud services are used for data storage and platform operations. These providers are contractually obligated to keep your data secure.
• Anti-Fraud Services: Limited data may be shared with specific services to detect and prevent fraudulent activity.
• Legal Authorities: Information may be disclosed to comply with a court order or government directive.

Under no circumstances will your data be sold or handed over to advertisers, marketing companies, or unrelated third parties.

Ash777's website and app use cookies and similar technologies. Cookies are small text files stored in your browser that help improve your experience.

• Essential Cookies: Used to keep your login session active and to store security tokens and language preferences. These are essential for the site to function and cannot be disabled.
• Functionality Cookies: Used to remember your dark mode preference, default payment method, and app UI settings. These can be turned off through your browser settings.
• Analytics Cookies: Anonymous data — such as which pages are being viewed and for how long, and which features are used most — helps us improve our services.

Disabling cookies entirely in your browser may cause certain features (such as staying logged in) to stop working. You can manage site-specific cookie settings through the preferences in Chrome, Firefox, or Safari.

Ash777 uses industry-leading security technology to protect your data. That said, no one can guarantee absolute security on the internet — your own vigilance matters just as much.

• Transport Security: All data transmissions are encrypted with TLS 1.3. The lock icon in your browser confirms that your connection is secure.
• Password Storage: Passwords are stored using bcrypt hashing — meaning even ash777 cannot see your actual password.
• Two-Step Verification: OTP verification is required when logging in from a new device. Accounts are automatically locked upon detection of suspicious login activity.
• Regular Security Audits: Third-party security experts conduct regular penetration testing.
• Data Segmentation: Personal data and financial data are stored on separate servers — if one is ever compromised, the other remains secure.

Your part in staying secure: use a strong password, avoid logging in on public Wi-Fi, and report anything suspicious to support immediately.

Ash777 does not retain data beyond what is necessary. Each type of information has a defined retention period.

• Account Information: Retained for as long as your account remains active. After account closure, data may be kept for up to 5 years as required by legal obligations.
• Transaction History: Financial regulations require us to retain this data for up to 7 years. This is a legal obligation.
• Support Conversations: Deleted 3 years after the issue is resolved.
• Login Logs & Device Information: Automatically deleted after 18 months.
• Anonymous Analytics Data: Statistical data with all personally identifiable information removed may be retained indefinitely.

Once your account is closed, you may request deletion of your data. All data beyond what is legally required to be retained will be permanently removed.

As an ash777 member, you have certain fundamental rights over your personal data. Knowing these rights means you can use them whenever you need to.

• Access Rights: You have the right to know what information ash777 holds about you. Submit a request to our support team and a full data report will be sent to you within 30 days.
• Right to Rectification: You can correct any inaccurate or outdated information. If there's an error in your name or date of birth, please contact support.
• Right to Erasure: After closing your account, you can request deletion of your data. Any information not subject to legal retention requirements will be removed.
• Right to Restrict Processing: You can request that your data no longer be used for specific purposes — for example, to opt out of marketing emails.
• Right to Portability: You may request your data in a machine-readable format (JSON/CSV).

To exercise any of your rights, email support@ash777.click. All requests will be responded to within a maximum of 30 business days.

Ash777 is strictly for users aged 18 and above. Registration and use of the platform by minors is prohibited.

• Date of birth is verified at registration. Users under 18 are prevented from creating an account.
• We do not knowingly collect or store data from minors.
• If an underage account is identified, it is closed immediately and all associated data is deleted.
• If you believe a minor may have an account, please contact us at support@ash777.click.

Ash777 may update this Privacy Policy from time to time. Changes may occur due to service improvements, legal requirements, or technical upgrades.

• Minor updates — such as clarifying language or adding examples — will not be announced separately. You can check the date at the top of the page to see when it was last updated.
• For major changes — such as new data collection or new sharing practices — you will be notified via your registered email and in-app at least 30 days in advance.
• Continued use of the platform after receiving a notification will be considered acceptance of the updated policy.
• If you do not agree to the updated policy, you have the right to close your account and request deletion of your data within that period.