77bd9 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") governs the collection, processing, storage, and use of personal data by 77bd9 ("we", "us", "our") in connection with the online sports betting and casino platform operated at 77bd9.vip ("the Platform"). By registering for an account, accessing the Platform, or otherwise providing personal information to 77bd9, you acknowledge that you have read and understood this Policy and consent to the practices described herein.

77bd9 is committed to safeguarding the privacy and personal data of all registered players and visitors to the Platform, including players located across all eight divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. This Policy applies to all personal data collected through 77bd9.vip, including data collected via desktop browsers, mobile browsers, and any progressive web application ("PWA") version of the Platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, both of which are published at 77bd9.vip and incorporated herein by reference. Where any conflict arises between this Policy and any other document, this Policy shall prevail with respect to matters of personal data and privacy.

2. Data We Collect

77bd9 collects personal data from you in several ways: directly from you when you register an account or interact with the Platform; automatically as you use the Platform; and from third-party service providers such as payment processors and game studios. The categories of personal data we collect are detailed below.

2.1 Identity & Contact Data

• Full legal name as provided during account registration
• Date of birth (used to verify that you are at least 21 years of age)
• Residential address, including city and division within Bangladesh
• Registered mobile phone number (used for OTP two-step verification)
• Email address (used for account communications and support)
• Copies of government-issued identity documents provided during KYC verification (e.g., National Identity Card, passport, driving licence)

2.2 Financial & Transaction Data

• Mobile Financial Service (MFS) account identifiers for bKash, Nagad, Rocket, and Upay registered to your account
• Full transaction history including deposits, withdrawals, bets placed, winnings credited, bonuses awarded, and bonus wagering activity — all denominated in Bangladeshi Taka (BDT, ৳)
• KYC proof-of-payment-method documentation where required for withdrawal verification

2.3 Technical & Usage Data

• IP address and approximate geolocation data derived from IP lookup
• Device type, operating system, browser type and version
• Session logs, login timestamps, login location data, and session duration records
• Pages visited, games played, betting markets accessed, and in-platform navigation patterns
• Error logs and crash reports where applicable

2.4 Communications Data

• Content of messages sent to 77bd9 support via email at [email protected]
• Records of live chat sessions initiated through the Platform
• Responses to surveys, feedback forms, or promotional engagement activities

2.5 Data We Do Not Collect

77bd9 does not collect or store full payment card numbers, bank account numbers, or any payment credential that would expose you to financial risk. All payment transactions via bKash, Nagad, Rocket, and Upay are processed directly through the respective MFS provider's secure gateway; 77bd9 receives only the confirmation reference and account identifier necessary to credit or debit your 77bd9 wallet.

3. How We Use Your Data

77bd9 uses the personal data we collect exclusively for the purposes set out in this Policy. We do not sell your personal data to third parties for their own marketing purposes under any circumstances. The primary purposes for which we process your personal data are as follows:

77bd9 will not use your personal data for any purpose not listed in this Policy without first obtaining your explicit consent or as otherwise required by law.

4. Legal Basis for Processing

77bd9 processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and 77bd9 — for example, registering your account, processing your deposits and withdrawals via bKash or Nagad, and crediting your BDT winnings.
• Legal obligation: Processing is required to comply with applicable legal requirements, including Know Your Customer (KYC) identity verification, anti-money laundering checks, and age verification (21+).
• Legitimate interests: Processing is necessary for 77bd9's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of services delivered to players across Bangladesh — provided these interests are not overridden by your rights and freedoms.
• Consent: For optional processing activities such as sending promotional communications about BPL season offers, IPL betting markets, or casino bonuses, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time by contacting [email protected].

5. Data Sharing & Third Parties

77bd9 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data protection obligations:

5.1 Payment Service Providers

When you make a deposit or withdrawal, your transaction reference and registered MFS account identifier are shared with your chosen payment provider (bKash, Nagad, Rocket, or Upay) solely to facilitate the transaction. These providers operate their own independent privacy policies and are responsible for their own data handling practices.

5.2 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — may receive a pseudonymous player identifier and session token in order to initialise and operate game sessions on the 77bd9 Platform. No full personal identity data is transmitted to game studios without your knowledge.

5.3 Identity Verification Services

For the purpose of KYC verification, 77bd9 may engage third-party identity verification service providers to authenticate government-issued identity documents. These providers process identity data solely on 77bd9's instruction and may not use it for any independent purpose.

5.4 Legal and Regulatory Authorities

77bd9 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the safety of our players or the public, or to prevent financial crime including money laundering.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of 77bd9's business assets, personal data held by 77bd9 may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and of any consequent changes to this Privacy Policy prior to the transfer taking effect.

6. Cookies & Tracking Technologies

77bd9 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and support security operations. A "cookie" is a small text file placed on your device by a website server. The categories of cookies used by 77bd9 are as follows:

• Strictly necessary cookies: These cookies are required for the Platform to function and cannot be disabled. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. No personal information is stored in these cookies beyond a pseudonymous session identifier.
• Functional cookies: These cookies remember your preferences such as language settings, last-visited game category, and display preferences to personalise your experience on return visits.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which game categories are most popular, average session duration, and navigation flow — to help 77bd9 improve the Platform experience for players across Bangladesh.
• Security cookies: These cookies support 77bd9's fraud detection and brute-force login protection systems. They help identify unusual access patterns that may indicate account compromise or automated bot activity.

77bd9 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from logging in or accessing certain Platform features.

7. Data Retention

77bd9 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial compliance obligations.
• KYC verification documents: Retained for the duration of the account relationship plus five (5) years following account closure. Documents are stored in encrypted form with access restricted to authorised compliance personnel only.
• Support communications: Retained for three (3) years from the date of the last interaction, unless the matter relates to an ongoing dispute, legal claim, or compliance investigation.
• Technical and usage logs: Retained for up to twelve (12) months in active log storage, after which they are either deleted or anonymised such that individual users can no longer be identified.
• Marketing consent records: Retained for the duration of consent plus two (2) years to evidence compliance with consent requirements, even if consent is subsequently withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. 77bd9 does not retain personal data beyond the periods stated above except where required by a specific legal obligation or court order.

8. Data Security

77bd9 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls include:

• SSL/TLS encryption: All data transmitted between your device and the 77bd9 Platform is encrypted using industry-standard TLS 1.2 or higher. This applies to all connections, including login, deposit, withdrawal, and game sessions.
• OTP two-step verification: Your registered mobile number receives a one-time password for every login session, providing a second layer of authentication that protects your account even if your password is compromised.
• Encrypted data storage: Sensitive personal data — including KYC identity documents and financial records — is stored in encrypted form using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data held by 77bd9 is restricted to authorised personnel on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Brute-force login protection: Automated systems detect and block repeated failed login attempts to prevent credential-stuffing attacks against 77bd9 accounts.
• Session management: Inactive sessions are automatically terminated after a defined timeout period to reduce the risk of unauthorised access on shared devices.
• Penetration testing and security audits: 77bd9 conducts periodic security assessments to identify and remediate vulnerabilities in the Platform's infrastructure and application code.

While 77bd9 takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring your registered mobile number remains under your personal control.

9. Your Rights

As a registered 77bd9 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with your registered account details:

• Right of access: You have the right to request a copy of the personal data that 77bd9 holds about you, along with information about how and why it is being processed.
• Right to rectification: If any personal data held by 77bd9 is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account-level information such as your registered address or contact details, you may be able to update these directly from your account settings.
• Right to erasure: In certain circumstances — for example, where processing was based solely on consent which you have since withdrawn, and where no overriding legal obligation requires continued retention — you may request that 77bd9 delete your personal data. Please note that data subject to mandatory financial record-keeping obligations (see Section 7) cannot be erased before the applicable retention period has expired.
• Right to restrict processing: You may request that 77bd9 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that 77bd9 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data for direct marketing purposes (including BPL and IPL promotional communications). You may also object to processing based on legitimate interests, although 77bd9 may demonstrate compelling legitimate grounds that override your objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

77bd9 will respond to all verified data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. 77bd9 will not charge a fee for handling your data rights request unless it is manifestly unfounded or excessive.

10. Children & Minors

The 77bd9 Platform is strictly restricted to individuals aged 21 years and above. 77bd9 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory step in the account registration process, and 77bd9 reserves the right to request documentary proof of age at any time.

If 77bd9 becomes aware that personal data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or any other means — the relevant account will be suspended immediately, all associated personal data will be deleted or rendered inaccessible as soon as practicable, and any deposits made will be returned via the original payment method subject to verification.

Parents and guardians who have reason to believe that a minor in their care has registered on the 77bd9 Platform are encouraged to contact [email protected] immediately. 77bd9 treats all such reports with absolute priority and complete confidentiality.

11. Policy Updates

77bd9 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the 77bd9 Platform. The "Last Updated" date at the top of this Policy will be revised whenever a substantive change is made.

Where changes to this Policy are material — for example, a new category of data being collected, a new third-party sharing arrangement, or a change to your rights — 77bd9 will provide notice via a prominent announcement on the Platform homepage or by direct communication to your registered email address or mobile number, at least 7 days before the revised Policy takes effect.

Your continued use of the 77bd9 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and close your account by contacting [email protected].

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 77bd9 processes your personal data, please contact our Data Protection team using the details below. All enquiries will be treated with strict confidentiality and acknowledged promptly.

• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response time: All privacy-related enquiries will receive an initial response within 3 business days
• Data rights requests: Formal data rights requests (access, erasure, rectification, portability) will be resolved within 30 days of receipt of a verified request

77bd9 is committed to resolving all privacy-related concerns directly and transparently. If after contacting us you remain unsatisfied with the outcome of your enquiry, you may have the right to escalate your complaint to the applicable data protection authority in your jurisdiction.