Privacy Policy — How 77 bd Collects, Uses, and Protects Your Personal Data

77 bd collects personal data through three main channels: information you provide directly, information generated automatically through your use of the platform, and information received from third-party service providers.

Information You Provide Directly

When you register an account, verify your identity, contact support, or interact with any feature on 77 bd, you may provide the following categories of personal data:

Information Collected Automatically

When you access the 77 bd platform, our servers and analytics systems automatically record certain technical and behavioural data. This includes:

• Device and technical data: IP address, browser type and version, operating system, screen resolution, device identifiers, and time zone setting (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, game sessions initiated, bet amounts and outcomes (aggregated), session duration, click paths, and feature interactions.
• Transaction data: Deposit and withdrawal records, amounts in BDT, timestamps, payment method used, and transaction reference numbers.
• Log data: Server access logs, error logs, and security event logs associated with your account activity.

Information from Third Parties

77 bd may receive personal data about you from the following third-party sources in connection with platform operations:

• Identity verification providers: Confirmation of document authenticity and age from KYC service partners.
• Payment processors: Transaction confirmation and fraud risk signals from bKash, Nagad, Rocket, Upay, and affiliated banking partners.
• Fraud and anti-money laundering screening services: Risk scores and watchlist check results from compliance data providers.
• Game studios: Game session data and round outcomes from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other platform content providers.

77 bd does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers and Data Processors

We engage trusted third-party service providers to support platform operations. These providers act solely on our instructions and are contractually prohibited from using your data for their own purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to execute and settle financial transactions.
• KYC and identity verification providers: Third-party document verification services that authenticate identity documents submitted during the account verification process.
• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios that deliver game content and process game session data to settle outcomes.
• IT infrastructure and cloud hosting providers: Secure data centre and cloud service providers used to host the platform, store data, and deliver content.
• Fraud screening and AML compliance services: Third-party providers that assess transaction risk and screen accounts against sanctions and watchlists.

Legal and Regulatory Disclosure

77 bd may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, a lawful court order, or a legally enforceable request from a competent authority. Such disclosures are made only to the extent required and are not subject to your prior consent where disclosure is mandated by law.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 77 bd's business assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 77 bd will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this Policy, and will notify affected players via an on-platform announcement before any transfer takes effect.

International Data Transfers

Some of the third-party service providers engaged by 77 bd may process personal data in jurisdictions outside Bangladesh. Where such transfers occur, 77 bd ensures that appropriate contractual safeguards are in place — such as data processing agreements that require the recipient to maintain data protection standards consistent with this Policy — before any personal data is transferred internationally.

77 bd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and legal obligations. The following retention schedule applies to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where deletion is requested by a player prior to the end of the applicable retention period, 77 bd will delete data that is not subject to a mandatory regulatory retention obligation and will notify the player of any data categories that must be retained and the reason for retention.

As a player whose personal data is processed by 77 bd, you hold the following rights in respect of that data. To exercise any of these rights, submit a written request to the 77 bd privacy team using the contact details at the bottom of this section.

Right of Access

You may request a copy of the personal data that 77 bd holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. We will respond to a valid access request within 30 days of receipt.

Right to Rectification

If any personal data held by 77 bd about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or phone number) can be made directly through your account settings. For corrections to identity data, a support request is required and documentary evidence may be needed.

Right to Erasure

You may request that 77 bd delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where you object to processing and there is no overriding legitimate interest. Note that 77 bd may be required to retain certain categories of data beyond your erasure request where a legal or regulatory retention obligation applies — in such cases we will inform you of the data categories retained and the applicable retention period.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold — you may request that we restrict processing of your personal data while the matter is resolved. During a restriction period, we will continue to store your data but will not actively process it except with your consent or for the establishment of legal claims.

Right to Withdraw Marketing Consent

Where 77 bd processes your contact data for marketing purposes on the basis of your consent, you may withdraw that consent at any time with immediate effect. Withdrawal does not affect the lawfulness of any marketing communications sent before the withdrawal. You can opt out of marketing communications via your account notification settings or by emailing the address below.

How to Contact the 77 bd Privacy Team

For all privacy-related requests, questions, or concerns — including subject access requests, erasure requests, and objections to processing — please contact us in writing:

Email: [email protected]
Subject line: Privacy Request — [Your Registered Username]
Response time: Within 30 days of receipt of a valid written request

We may need to verify your identity before processing a privacy request to ensure that personal data is not disclosed to an unauthorised party. Verification typically involves confirming details that match your registered account profile.