Privacy Policy
for yaya777

Data We Collect

yaya777 collects personal data from users through multiple channels during the normal course of operating our online casino and sports betting platform. The categories of data we collect fall into three broad areas: information you provide directly, information generated automatically through your use of the platform, and information obtained from third-party sources for the purposes of identity verification and fraud prevention.

Information You Provide Directly

Information Collected Automatically

When you access and use the yaya777 platform, certain technical and behavioural data is collected automatically by our systems. This data is used for platform security, performance optimisation, fraud detection, and to improve the overall user experience. Automatically collected data includes:

• IP address, device type, operating system, browser type and version, and screen resolution at the time of each session.
• Login timestamps, session duration, pages visited, game titles played, bet amounts placed, and navigation paths taken within the platform.
• Geolocation data derived from your IP address, used to verify access eligibility and detect suspicious activity originating from blocked jurisdictions.
• Cookie identifiers and session tokens used to maintain your logged-in state and remember your platform preferences across visits.
• Error logs and crash reports generated when a technical issue occurs during your use of the platform.

Information from Third-Party Sources

In limited circumstances, yaya777 may receive personal data about you from trusted third-party sources. This includes identity verification service providers used during the KYC process, fraud prevention databases, and payment processors who confirm the status of transactions initiated through bKash, Nagad, Rocket, Upay, and other supported payment channels. Data received from third parties is held to the same standard of care and security as data you provide directly.

How We Use Your Data

yaya777 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following table outlines the primary purposes for which we process personal data and the legal basis for each processing activity.

Where yaya777 relies on consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out prior to the withdrawal, nor will it affect your ability to continue using the yaya777 platform.

Data Sharing & Third Parties

yaya777 does not sell, lease, or rent your personal data to any third party. However, in the ordinary course of operating the platform, we share limited and necessary personal data with the following categories of trusted service partners, each of whom is contractually bound to process data only for the specific purpose for which it was shared and to maintain appropriate security standards.

Categories of Third-Party Recipients

• Payment Processors: Mobile money providers (bKash, Nagad, Rocket, Upay) and international card networks (Visa, Mastercard) receive transaction-specific data necessary to process deposits and withdrawals. Crypto transaction data (USDT, BTC) is processed on-chain and subject to the privacy characteristics of the respective blockchain networks.
• Identity Verification Services: Third-party KYC and anti-money laundering service providers receive identity and documentation data for the purpose of verifying player identities and screening against sanctions and politically exposed persons (PEP) databases.
• Game Providers: Software providers including Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Habanero, Microgaming, and Ezugi may receive anonymised or pseudonymised session and gameplay data for game performance monitoring and fairness auditing. No personally identifiable information is shared with game providers beyond what is technically required for game delivery.
• Cloud Infrastructure Providers: yaya777 uses reputable cloud hosting and content delivery services to operate the platform. These providers process data on our behalf under strict data processing agreements and do not have independent access to your personal data.
• Fraud Prevention Networks: Aggregated and pseudonymised fraud signals may be shared with industry fraud prevention networks to identify and block patterns of abuse across the online gambling industry.
• Legal & Regulatory Authorities: yaya777 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, valid legal process, or to protect the rights, property, or safety of yaya777, its players, or the general public.

All third-party service providers engaged by yaya777 are selected with due care and are required to demonstrate adequate data protection standards as a condition of engagement. yaya777 remains responsible for your personal data even when it is processed by an authorised third party on our behalf.

Cookies & Tracking Technologies

yaya777 uses cookies and similar tracking technologies — including local storage objects, session tokens, and pixel tags — to operate the platform efficiently, maintain your logged-in session, remember your preferences, and analyse how the platform is used. This section explains what types of cookies we use and how you can manage your cookie preferences.

Types of Cookies Used

Managing Your Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, and receive alerts when a new cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional cookies will mean your preferences are not remembered between sessions. Analytical cookies may be opted out of without affecting your ability to use yaya777.

Data Retention & Storage

yaya777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply to the main categories of personal data we hold.

• Account and Identity Data: Retained for the duration of your active account relationship with yaya777, plus a minimum of five (5) years following permanent account closure. This retention period reflects anti-money laundering regulatory requirements applicable to online financial services.
• Financial Transaction Records: All deposit and withdrawal records are retained for a minimum of five (5) years following the date of each transaction to comply with financial record-keeping obligations.
• KYC Verification Documents: Identity and address verification documents are retained for the duration of your account plus five (5) years following closure, consistent with AML compliance requirements.
• Customer Support Communications: Support chat transcripts and email correspondence are retained for three (3) years from the date of the interaction to enable quality assurance, dispute resolution, and continuity of service.
• Marketing Preferences and Consent Records: Records of your marketing consent status are retained for the lifetime of your account and for three (3) years following account closure, to demonstrate compliance with consent obligations.
• Analytical and Behavioural Data: Aggregated, anonymised analytical data may be retained indefinitely as it cannot be used to identify individual players. Pseudonymised behavioural logs are retained for up to twelve (12) months.
• Self-Exclusion Records: Where a player has requested self-exclusion from yaya777, the self-exclusion record is retained permanently to prevent re-registration in violation of the exclusion period.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with yaya777's data disposal procedures. Secure deletion means data is overwritten or destroyed in a manner that makes recovery impossible. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until secure deletion is completed.

All personal data held by yaya777 is stored on servers located in secure data centre facilities. Data is encrypted at rest using industry-standard encryption. Access to stored personal data is restricted to authorised yaya777 personnel and contracted service providers on a strict need-to-know basis, enforced through role-based access controls and audit logging.

Your Privacy Rights

As a registered player on yaya777, you hold a number of rights in relation to the personal data we hold about you. yaya777 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at support@yaya777.

yaya777 will respond to all data rights requests within 30 calendar days of receipt of a verified request. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day window. There is no charge for submitting a data rights request.

Data Security Measures

yaya777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address emerging threats and maintain alignment with industry best practices.

Technical Safeguards

• All data transmitted between your device and the yaya777 platform is protected by Transport Layer Security (TLS 1.2 or higher), preventing interception by unauthorised third parties.
• Sensitive data at rest — including account credentials, payment details, and identity documents — is encrypted using AES-256 or equivalent industry-standard encryption algorithms.
• Passwords are never stored in plain text. Account passwords are processed through a one-way cryptographic hashing function with salt before storage, meaning even yaya777 staff cannot retrieve your original password.
• Two-factor authentication (2FA) is available to all registered players and is strongly recommended. When enabled, 2FA provides an additional layer of protection against unauthorised account access even if your password is compromised.
• All administrative access to production systems and personal data is protected by multi-factor authentication, VPN requirements, and comprehensive audit logging. Access is granted on a least-privilege basis and reviewed regularly.
• yaya777 conducts regular vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
• Automated fraud detection and rate-limiting systems monitor login attempts, transaction patterns, and API usage in real time to detect and block suspicious activity.

Organisational Safeguards

• All yaya777 staff and contractors with access to personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities.
• yaya777 maintains a documented incident response plan for data security breaches. In the event of a breach that is likely to result in a risk to your rights or freedoms, you will be notified without undue delay.
• Third-party service providers are subject to data processing agreements that include binding security requirements, and their security posture is reviewed as part of the vendor onboarding and ongoing management process.

Policy Updates & Contact

yaya777 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made to this Policy, we will notify registered players via the email address on file, or by displaying a prominent notice within the platform, at least 14 days before the updated Policy takes effect.

The effective date at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Continued use of the yaya777 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and contact support to request account closure.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or yaya777's data processing practices — including requests to exercise your data rights as described in Section 6 — please contact us using the details below. Our team aims to acknowledge all privacy-related enquiries within 48 hours (BST) and to provide a substantive response within 30 calendar days.

This Privacy Policy applies solely to the yaya777 platform and does not extend to any third-party websites, services, or applications that may be linked to from within the platform or that integrate with yaya777's services. yaya777 is not responsible for the privacy practices of any third-party operator. We encourage you to review the privacy policies of any third-party services you access in connection with your use of yaya777.