nm777 Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") is published by nm777, the online casino and cricket betting platform operating at https://nm777.cc ("Platform", "we", "us", "our"). This Policy applies to all individuals who visit, register on, or otherwise interact with the nm777 Platform, including registered players, prospective players, and visitors who browse without registering ("you", "your").

nm777 is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains what personal data we collect, the purposes for which it is processed, how long it is retained, with whom it may be shared, and what rights you have as a data subject.

By accessing or using the nm777 Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy. If you do not accept the terms of this Policy, you must not use the nm777 Platform. This Policy should be read alongside the nm777 Terms & Conditions, which are incorporated by reference.

For the purposes of this Privacy Policy, nm777 acts as the data controller in respect of all personal data collected through the Platform. As data controller, nm777 determines the purposes and means by which personal data is processed.

If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact the nm777 Data Protection team using the details provided in Section 15 of this Policy. We aim to respond to all data-related enquiries within 30 calendar days of receipt.

nm777 collects the following categories of personal data from players and platform visitors:

nm777 does not collect or process any special categories of sensitive personal data (such as health records, religious beliefs, political opinions, or biometric data) unless you voluntarily disclose such information in the context of a responsible gaming self-exclusion request. In such cases, the information is used solely to administer the self-exclusion and is not shared with third parties.

nm777 collects personal data through the following methods:

• Direct input: Data you provide when registering for an account, updating your profile, making a deposit or withdrawal, contacting customer support, or submitting a complaint or feedback form.
• Automated collection: Technical and usage data collected automatically by our servers and analytics systems each time you visit or interact with the Platform, including via cookies and similar tracking technologies (see Section 6).
• Third-party sources: Identity and fraud-risk data received from third-party identity verification providers, payment processors (such as bKash, Nagad, Rocket, and Upay), and fraud prevention services. This data supplements information you provide directly and is used solely to verify your eligibility and protect the integrity of the Platform.
• Publicly available sources: In certain circumstances, nm777 may supplement your profile with information obtained from publicly available records to assist with identity verification or fraud prevention.

nm777 processes your personal data for the following purposes, each of which is supported by a legitimate legal basis:

Where nm777 relies on your consent as the legal basis for processing (for example, to send promotional emails or SMS notifications), you have the right to withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

nm777 uses the following categories of cookies and tracking technologies:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They enable core features such as session management, login authentication, and secure payment processing. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — for example, which pages are visited most frequently and how long sessions last. This information is used solely to improve the Platform and is not linked to individual player identities.
• Functionality Cookies: These cookies remember your preferences such as language selection, preferred game category, and display settings, so you do not need to reconfigure them on each visit.
• Marketing and Targeting Cookies: These cookies are used only where you have given explicit consent. They allow nm777 to deliver personalised promotional content within the Platform that is relevant to your gaming interests. nm777 does not use third-party advertising networks to serve off-site targeted advertising.

You can control or disable cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies may prevent you from logging in or completing transactions. For full instructions on managing cookies in your browser, consult your browser's help documentation.

nm777 may share your personal data with the following categories of third party:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the financial data necessary to process your deposit and withdrawal transactions in ৳ BDT. These providers process data under their own privacy policies and are independently responsible for compliance.
• Identity verification providers: Third-party KYC and AML service providers may receive identity documents and personal details to assist with player verification. These providers are contractually bound to process data only for verification purposes.
• Game technology providers: Certified game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may receive technical session data (such as session tokens and game round IDs) to deliver their games within the nm777 Platform. These providers do not receive your full identity or payment data.
• Fraud prevention and security services: Specialist security providers may receive technical and usage data to assist in detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Legal and regulatory authorities: nm777 will disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required to do so by applicable law, court order, or regulatory directive. nm777 will notify affected players of such disclosures where legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of nm777 or its assets, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and of any material changes to this Privacy Policy that result from it.

The nm777 Platform is operated primarily for players in Bangladesh. However, certain third-party service providers (including game technology providers and cloud infrastructure partners) may be located in other countries. Where personal data is transferred outside Bangladesh, nm777 takes appropriate steps to ensure that such transfers are conducted in a manner that provides an adequate level of protection for your data, including through the use of contractual safeguards and data processing agreements with recipient parties.

nm777 does not transfer financial data (including bKash, Nagad, Rocket, or Upay wallet details) to service providers outside of Bangladesh's payment processing ecosystem without explicit necessity and appropriate contractual protections.

The security measures currently in place at nm777 include:

• Transport Layer Security (TLS/SSL): All data in transit between your device and nm777 servers is encrypted using 256-bit SSL/TLS encryption, preventing interception by third parties.
• Encrypted data storage: Sensitive data fields — including identity verification documents, payment details, and authentication credentials — are stored in encrypted form. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access controls: Access to player data within nm777 is restricted to authorised personnel on a strict need-to-know basis. All internal access to personal data is logged and audited.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their nm777 accounts to provide an additional layer of protection against unauthorised login.
• Intrusion detection and monitoring: nm777 employs real-time security monitoring and intrusion detection systems to identify and respond to potential security incidents promptly.
• Regular security reviews: nm777 conducts periodic reviews of its security infrastructure and data handling practices to identify vulnerabilities and ensure ongoing compliance with data protection best practices.

While nm777 takes extensive precautions to protect your data, no digital system can guarantee absolute security. In the event of a data breach that poses a material risk to your rights, nm777 will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

nm777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account relationship with nm777, plus a minimum of 5 years following account closure, to satisfy legal, regulatory, and anti-money laundering record-keeping requirements.
• Financial transaction data: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping requirements.
• Technical and usage data: Retained for up to 24 months from collection, unless required for longer periods in the context of an ongoing fraud investigation or legal proceeding.
• Communications data: Support chat logs and email correspondence are retained for up to 3 years from the date of the last interaction, to assist with dispute resolution and quality assurance.
• Verification documents: KYC documents are retained for as long as your account is active and for a minimum of 5 years following account closure.

When personal data is no longer required, nm777 will securely delete, destroy, or anonymise it in a manner that ensures it can no longer be linked to any individual. Anonymised and aggregated data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

As a data subject, you have the following rights in relation to your personal data held by nm777. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". nm777 will respond within 30 calendar days.

nm777 will not charge a fee for handling data rights requests unless they are manifestly unfounded, repetitive, or excessive. In such cases, nm777 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for the decision.

If you believe that a person under the age of 21 has registered on the nm777 Platform or has provided their personal data without appropriate consent, please notify us immediately at [email protected]. nm777 takes the protection of minors extremely seriously and will act promptly upon receiving such a report.

The nm777 Platform may contain references to third-party game providers, payment processors, and technology partners. While nm777 carefully selects its partners, we are not responsible for the privacy practices of those third parties. Each third-party provider operates under its own privacy policy, and nm777 encourages you to review those policies before providing personal data directly to any third-party service.

Game providers such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi may collect limited technical data (such as session identifiers) as part of game delivery. This data collection is governed by each provider's own privacy documentation and is separate from the data collected by nm777 directly.

nm777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, nm777 will notify registered players by email and/or by placing a prominent notice on the Platform at least 14 days before the changes take effect.

The effective date at the top of this Policy indicates when the current version was last reviewed. Continued use of the nm777 Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure by contacting [email protected].

All previous versions of this Privacy Policy are archived and available upon request by emailing [email protected] with the subject line "Privacy Policy Archive Request".

For all privacy-related enquiries, data rights requests, or concerns about how nm777 handles your personal data, please contact the nm777 Data Protection team using the details below. All communications are handled in English during support hours of 08:00 – 24:00 BST (UTC+6) daily.

nm777 takes all privacy complaints seriously. If you are not satisfied with our response to a data rights request or privacy complaint, you may escalate the matter through the appropriate data protection channels available to you under applicable law.