b77777 Privacy Policy

b77777 collects personal data from players in Bangladesh through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and occasionally from third-party identity verification services. The categories of data collected are set out below.

1.1 Registration and Account Data

When you create a b77777 account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the 18+ age requirement.
• Residential address — including district, division, and postal code within Bangladesh.
• Email address — used for account communications, transaction receipts, and security alerts.
• Bangladesh mobile number — used for two-factor authentication and mobile payment linkage.
• Username and encrypted password — used to authenticate your access to the Platform.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer ("KYC") obligations and to prevent underage gambling, b77777 collects copies of government-issued identity documents. Accepted documents include:

• Bangladesh National Identity Card (NID) — front and back image.
• Valid Bangladesh passport — photo page image.
• Valid Bangladesh driving licence — front image.
• A recent utility bill or bank statement (dated within 90 days) as proof of residential address, where required.

Identity documents are processed through our secure verification system and are stored in encrypted form. They are used exclusively for the purposes of age verification, identity confirmation, and anti-money laundering ("AML") compliance. They are never shared with third parties for marketing purposes.

1.3 Financial Transaction Data

b77777 records all financial transactions associated with your account, including:

• Deposit and withdrawal amounts, dates, and times.
• Payment method identifiers — for example, the last four digits of a bKash or Nagad mobile number, or the last four digits of a Visa or Mastercard number. Full payment credentials are never stored on b77777 servers.
• Transaction reference numbers issued by b77777 and by your payment provider.
• Bonus credits, wagering activity, and promotional redemptions linked to your account.

1.4 Betting and Gaming Activity Data

b77777 records a complete history of your betting and gaming activity on the Platform. This includes individual bet amounts, bet outcomes, game sessions, stakes placed on cricket, slots, casino games, and Plinko, as well as any in-play or live betting transactions. This data is used to manage your account balance, resolve disputes, and to fulfil our responsible gaming obligations.

1.5 Technical and Device Data

When you access the b77777 Platform, our systems automatically collect certain technical data. This includes your IP address, device type and model, operating system version, browser type and version, session timestamps, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

b77777 does not sell, rent, or commercially transfer your personal data to any third party. However, in order to operate the Platform effectively and to meet our legal obligations, it is sometimes necessary to share specific categories of data with carefully selected third parties. All such sharing is governed by data processing agreements that require third parties to handle your data securely and only for the stated purpose.

3.1 Payment Processors

b77777 shares limited financial data — such as transaction amounts, your mobile number or masked card number, and transaction reference codes — with payment processors including bKash, Nagad, Rocket, Upay, and card network operators Visa and Mastercard. This sharing is strictly necessary to facilitate deposit and withdrawal transactions. Payment processors operate under their own privacy policies and are independently responsible for the data they handle.

3.2 Identity Verification Partners

To perform KYC verification at scale, b77777 may use a third-party identity verification service to check the authenticity of identity documents submitted by players. These partners operate in a strictly data-processor capacity and are contractually prohibited from retaining or using player identity data for any purpose beyond the scope of the verification task.

3.3 Game Studio and Content Providers

When you play a game provided by a third-party game studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — anonymised session data (game type, stake, outcome) is transmitted to the relevant studio's systems to generate the game outcome and to display the game interface. b77777 does not share your name, address, or payment details with game studios.

3.4 Legal and Regulatory Disclosures

b77777 may disclose personal data to law enforcement authorities, financial intelligence units, or other competent bodies where required to do so by applicable law, court order, or legitimate regulatory request. In such cases, b77777 will disclose only the minimum data necessary to satisfy the legal obligation, and will notify you of the disclosure where permitted by law.

3.5 Business Transfers

In the event that b77777 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, b77777 will notify registered players via email before their data is transferred to a new controller, and will ensure that the receiving entity is bound by privacy obligations at least as protective as those described in this Policy.

b77777 retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as required by applicable legal obligations. The specific retention periods applicable to each data category are set out in the table in Section 1 above.

5.1 Account Closure

When your b77777 account is closed — whether voluntarily at your request or by b77777 due to a terms breach — your personal data is not immediately deleted. We are required to retain certain data for a period following account closure in order to meet our financial record-keeping obligations and to respond to any subsequent legal claims, investigations, or regulatory enquiries. This post-closure retention period is typically five years for identity and account data, and seven years for financial transaction records.

5.2 Anonymisation

Where b77777 retains data beyond the period for which the original purpose requires, we will anonymise that data so that it can no longer be attributed to any identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction.

5.3 Deletion Requests

You may request deletion of your personal data by contacting our support team at [email protected]. b77777 will action deletion requests within 30 days, subject to the retention obligations described above. Please note that if your account is subject to an active investigation or if we have a legal obligation to retain your data, we may be unable to fulfil a deletion request in full until that obligation expires. We will inform you of any such limitation in our response to your request.

b77777 implements a range of technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• TLS Encryption in Transit: All data transmitted between your browser or mobile device and the b77777 Platform is protected by Transport Layer Security (TLS) encryption. Our SSL certificate is maintained at the highest available specification and is renewed on a rolling basis.
• Encrypted Data at Rest: Personal data stored on b77777 servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within b77777's systems is restricted on a strict need-to-know basis. Staff members access only the data categories required for their specific operational role, and all data access events are logged for audit purposes.
• Two-Factor Authentication: b77777 offers two-factor authentication (2FA) to all players. We strongly recommend enabling 2FA in your account settings to add an additional layer of protection against unauthorised login attempts.
• Penetration Testing: b77777's Platform is subject to regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: b77777 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, b77777 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.

While b77777 takes all reasonable precautions to secure your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password for your b77777 account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.