Privacy Policy — How bbd77 Collects, Uses, and Protects Your Personal Data

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means by which personal data is processed — in this context, bbd77.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a contractual obligation.
• "Player", "you", or "your" refers to any individual who accesses, registers with, or uses the bbd77 platform.
• "Platform" means the bbd77 website at bbd77.io and all associated services, including casino games, sports betting, live dealer tables, and account management tools.
• "KYC" means Know Your Customer — the identity and age verification process bbd77 is required to conduct on registered players.
• "Cookie" means a small text file placed on your device by the bbd77 website to store session state, preferences, or analytics data.

2. Data Controller

bbd77 is the Data Controller in respect of all personal data collected from players who access the platform. As Data Controller, bbd77 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently, and that appropriate technical and organisational safeguards are in place to protect that data.

All data-related enquiries, subject access requests, and complaints should be directed to our support team using the contact details set out in Section 14 of this Privacy Policy. We are committed to responding to all privacy-related requests in a timely and thorough manner.

3. Data We Collect

3.1 Registration Data

When you create a bbd77 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are at least 21 years of age)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Email address
• Mobile telephone number
• Preferred username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with age verification and anti-money laundering obligations, bbd77 may request the following documents:

• National Identity Card (NID) or passport scan
• Proof of address (utility bill, bank statement dated within 90 days)
• Payment method verification documentation (e.g., screenshot of bKash or Nagad account showing your registered mobile number)
• Source of funds declaration where required by our compliance team

3.3 Financial Transaction Data

For every deposit and withdrawal processed on the platform, bbd77 records the following:

• Transaction amount in BDT (৳)
• Payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer)
• Transaction reference numbers provided by the payment provider
• Timestamp of each transaction
• Running account balance before and after the transaction

3.4 Usage and Behavioural Data

bbd77 automatically collects the following data when you use the platform:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, game sessions initiated, and time spent on each section
• Betting and wagering history (game type, stake amount, outcome)
• Session duration and login frequency
• Referral source (how you arrived at bbd77.io)

3.5 Communications Data

When you contact bbd77 customer support, we retain records of those communications, including the channel used (email, live chat), the date and time of contact, the nature of the enquiry, and the resolution provided. This data is used to improve service quality and to maintain an accurate customer service history for your account.

4. How We Use Your Data

bbd77 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your bbd77 account, authenticate your identity at login, and maintain your account settings and preferences.
• Age and identity verification: To confirm that all players are at least 21 years of age and that the personal details provided are accurate, in fulfilment of our responsible gaming obligations.
• Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer methods, and to maintain accurate financial records for your account.
• Game and betting service delivery: To provide access to casino games, live dealer tables, cricket sports betting, and slots, and to accurately record game outcomes and wager results.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other forms of abuse on the platform.
• Responsible gaming: To monitor betting patterns for indicators of problem gambling behaviour and to enforce deposit limits, cooling-off periods, and self-exclusion requests applied by you or flagged by our responsible gaming tools.
• Customer support: To respond to enquiries, resolve complaints, and maintain a service history for your account.
• Legal compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering checks and responses to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage data and improve the bbd77 platform experience, game selection, and user interface.
• Promotional communications: To send you relevant bbd77 promotions, bonus offers, and platform updates by email or SMS, where you have given consent to receive such communications. You may opt out at any time.

bbd77 does not use personal data for automated individual decision-making that produces significant legal effects without human review. Where automated processes flag an account (e.g., for potential fraud), a member of the bbd77 compliance team reviews the case before any restrictive action is taken.

5. Legal Basis for Processing

bbd77 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contract performance: Processing necessary to create and manage your bbd77 account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with age verification, anti-money laundering, fraud prevention, and record-keeping obligations imposed by applicable law.
• Legitimate interests: Processing necessary for bbd77's legitimate business interests, including platform security, fraud detection, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Third-Party Disclosure

6.1 Permitted Disclosures

bbd77 does not sell or rent your personal data. We may share personal data with the following categories of third parties only to the extent necessary to operate the platform and fulfil our obligations to you:

• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive transaction data necessary to process deposits and withdrawals.
• Game software providers: Licensed game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session tokens and game-specific identifiers to deliver their titles. These providers do not receive your full personal profile.
• Identity verification services: Third-party KYC providers may process identity documents submitted by you as part of the account verification process. These providers are bound by data processing agreements with bbd77.
• Fraud prevention and analytics: Aggregated or pseudonymised usage data may be processed by analytics and security service providers to detect abnormal platform behaviour.
• Legal and regulatory authorities: bbd77 will disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by a lawful order or where we have a good-faith belief that disclosure is necessary to prevent criminal activity or protect the safety of individuals.

6.2 Data Processing Agreements

All third-party processors that handle personal data on behalf of bbd77 are required to enter into data processing agreements that set out the scope, purpose, and security requirements applicable to that processing. bbd77 conducts due diligence on data processors and reviews agreements periodically.

6.3 International Transfers

Some of bbd77's third-party service providers operate outside Bangladesh. Where personal data is transferred internationally, bbd77 ensures that appropriate contractual safeguards are in place to protect the data to a standard equivalent to that applied within Bangladesh.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

A cookie is a small text file stored on your device when you visit bbd77.io. Cookies allow the platform to recognise your device between sessions, maintain your login state, and remember your preferences. bbd77 also uses similar technologies such as web beacons and local storage for equivalent purposes.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a game session and security tokens that prevent cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your language preference, currency display (BDT/৳), and interface settings between sessions.
• Analytics Cookies: Used to collect aggregated information about how players navigate and use bbd77.io, enabling us to improve page performance and game discovery. Data collected via analytics cookies is pseudonymised.
• Marketing Cookies: Used, with your consent, to show relevant bbd77 promotional content and measure the effectiveness of our campaigns. You may opt out of marketing cookies at any time via your browser settings.

7.3 Managing Cookies

You can control cookie placement through your browser settings. Instructions for managing cookies vary by browser (Chrome, Firefox, Edge, Safari) and are available in each browser's help documentation. Please note that disabling strictly necessary cookies will prevent the bbd77 platform from functioning correctly and may result in your being unable to log in or play games.

8. Data Retention

bbd77 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active account data: Retained for the duration of your bbd77 account plus a minimum of 5 years following permanent account closure, to comply with financial record-keeping and anti-money laundering obligations.
• KYC / identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Analytics and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Raw session logs are retained for up to 12 months before anonymisation.
• Marketing consent records: Retained for the duration of your consent plus 3 years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. You may request early deletion of your personal data subject to the conditions set out in Section 10.

9. Data Security

bbd77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and bbd77 servers.
• One-way cryptographic hashing of all stored passwords. bbd77 never stores your password in readable form and cannot retrieve it — only reset it.
• Access controls: Personal data is accessible only to bbd77 staff and authorised processors who have a documented, role-specific need to access it. All access is logged and audited.
• Intrusion detection systems that monitor for unauthorised or anomalous access attempts in real time.
• Regular security assessments of platform infrastructure, including penetration testing and vulnerability scanning.
• Data minimisation principles applied to internal reporting — staff see only the minimum level of personal detail required to perform their function.

Despite these safeguards, no online system can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights or interests, bbd77 will notify you without undue delay and will take immediate steps to contain and remediate the breach.

You play an important role in keeping your account secure. Always use a strong, unique password for your bbd77 account, do not share your login credentials with anyone, and log out fully at the end of each session — particularly on shared or public devices.

10. Your Rights Over Your Personal Data

As a bbd77 player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will verify your identity before processing any data request.

• Right of Access: You may request a copy of the personal data bbd77 holds about you (commonly known as a Subject Access Request). We will provide a response within 30 days.
• Right to Rectification: If any personal data bbd77 holds about you is inaccurate or incomplete, you may request that it be corrected. Log in to your account to update basic profile details directly, or contact support for corrections to verified identity documents.
• Right to Erasure: You may request that bbd77 delete your personal data. This right is subject to legal retention obligations — bbd77 may be required to retain certain records (e.g., transaction data) for a minimum period regardless of an erasure request. Where deletion is not possible in full, bbd77 will delete all data that can lawfully be removed and inform you of what is retained and why.
• Right to Restriction of Processing: You may request that bbd77 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: You may request that bbd77 provide your personal data in a structured, commonly used, machine-readable format, or transfer it directly to another controller where technically feasible.
• Right to Object: You may object to the processing of your personal data where bbd77 relies on legitimate interests as the legal basis. bbd77 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

bbd77 will not charge a fee for exercising any of the above rights in ordinary circumstances. If a request is manifestly unfounded or excessive, bbd77 reserves the right to charge a reasonable administrative fee or to decline the request, and will explain the reason for doing so.

11. Children's Privacy and Underage Access

The bbd77 platform is strictly for individuals aged 21 and above. bbd77 does not knowingly collect personal data from any person under the age of 21. All account registrations require confirmation of date of birth, and KYC verification is used to confirm that players meet the minimum age requirement.

If bbd77 discovers that personal data has been collected from an individual who is under 21 years of age, we will immediately:

• Suspend the account and block all access to platform services.
• Void all transactions, bets, and game activity associated with that account.
• Delete the personal data of the underage individual as promptly as legally permissible.
• Notify relevant authorities if required by applicable law.

Parents and guardians who believe their child may have registered on the bbd77 platform should contact our support team immediately at [email protected]. We will act on all such reports with the utmost urgency.

12. Third-Party Links

The bbd77 platform does not contain links to external third-party websites. However, payment provider interfaces (such as the bKash or Nagad transaction confirmation screens) are operated by those respective providers and are governed by their own privacy policies. bbd77 has no control over how those providers handle personal data within their own systems and accepts no responsibility for their privacy practices.

We encourage you to review the privacy policy of any payment provider or financial institution you use in connection with your bbd77 account, so you are informed about how they handle data associated with your transactions.

13. Updates to This Privacy Policy

bbd77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made, bbd77 will post the updated Privacy Policy on bbd77.io with a revised "Effective" date and, where the changes are significant, will notify registered players by email.

The current version of this Privacy Policy is always accessible at bbd77.io/privacy-policy. We encourage you to review this page periodically. Your continued use of the bbd77 platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes.

If you have questions or concerns about any update to this Privacy Policy before its effective date, please contact our support team as described in Section 14 below.

14. Contact Us

For all privacy-related enquiries, subject access requests, data correction requests, erasure requests, consent withdrawals, or complaints, please contact the bbd77 data team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please include "PRIVACY REQUEST — [Your Name]" in the subject line to ensure your message is routed to the correct team.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: bbd77 aims to acknowledge all privacy requests within 3 business days and to provide a full response within 30 calendar days of receipt of a verified request.

If you are not satisfied with bbd77's response to a privacy complaint, you may escalate the matter to a relevant data protection authority or seek independent legal advice. bbd77 will cooperate fully with any lawful regulatory enquiry.