bd777a Privacy Policy — How We Handle Your Personal Data

When you interact with the bd777a platform — whether by registering an account, making a deposit, playing a game, contacting support, or simply browsing — we collect certain categories of personal data. This section sets out, in full, every category of data we may collect and the context in which that collection occurs. We collect only the minimum data necessary to deliver our services, comply with our legal obligations, and protect the security of the platform and our users.

Identity and Contact Data

When you register an account with bd777a, we collect your legal full name, date of birth, residential address (including city, district, and postcode), mobile phone number, and email address. This information is required to verify your identity, comply with age verification obligations, and contact you in connection with your account. For players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar, we may also collect division-level location data for fraud prevention and regional compliance purposes.

Identity Verification (KYC) Documents

To comply with age verification and anti-money-laundering requirements, bd777a may request one or more of the following identity documents: a Bangladesh National Identity Card (NID), a passport, a driving licence, or a birth certificate. We may also request a recent utility bill or bank statement as proof of residential address, and documentation confirming ownership of the payment method used for deposits or withdrawals (for example, a screenshot of a bKash or Nagad transaction confirmation).

Financial Transaction Data

For every deposit and withdrawal processed through your bd777a account, we collect the transaction amount (in BDT), the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other accepted method), the payment account reference (for example, the last four digits of a mobile wallet number or bank account), and the date and time of the transaction recorded in Bangladesh Standard Time (BST, UTC+6).

Gaming Activity Data

We record data relating to your activity on the bd777a platform, including the games you play, the stakes placed, the outcomes of those sessions, the total time spent on the platform per session, and any bonuses or promotions applied to your account. This data is used for account management, responsible gaming monitoring, fraud detection, and improving our game offering.

Technical and Device Data

When you access the bd777a platform, our servers automatically collect certain technical information from your device, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security purposes, platform analytics, and to detect unusual access patterns that may indicate unauthorised use.

The following table summarises the categories of data collected, the legal basis for processing, and the primary purpose of each category:

Data Category	Legal Basis	Primary Purpose
Identity & Contact	Contract performance	Account creation, verification, communication
KYC Documents	Legal obligation	Age verification, anti-money-laundering compliance
Financial Transactions	Contract performance / legal obligation	Payment processing, fraud prevention, audit trail
Gaming Activity	Contract performance / legitimate interest	Account management, responsible gaming, analytics
Technical & Device	Legitimate interest	Security monitoring, fraud detection, performance
Support Communications	Contract performance	Resolving support queries, quality assurance

bd777a processes your personal data only for the specific, lawful purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following list sets out every purpose for which we may process your personal data:

• Account management: Creating, maintaining, and administering your bd777a account, including processing your registration, verifying your identity, updating your account details, and communicating with you about your account status.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers. Processing your financial data is necessary for the performance of the contract between you and bd777a.
• Age and identity verification: Confirming that you meet the minimum age requirement of 18 years and that the identity you provided at registration is genuine. This is both a contractual and a legal obligation.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of platform misuse. This includes automated analysis of transaction patterns and gaming behaviour.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling, applying deposit limits or cooling-off periods where appropriate, and responding to self-exclusion requests.
• Legal and regulatory compliance: Meeting any reporting, record-keeping, or disclosure obligations imposed by applicable law or by competent authorities.
• Customer support: Responding to queries, complaints, and requests submitted via live chat or email. Support communications are retained for quality assurance and audit purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall user experience.
• Promotional communications: Where you have given explicit consent, sending you information about bd777a promotions, bonuses, and seasonal offers relevant to your account. You may withdraw this consent at any time by contacting support.

bd777a does not sell, rent, trade, or otherwise transfer your personal data to any third party for their own commercial purposes. Your information is shared only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processors

To process your deposits and withdrawals, bd777a shares the minimum necessary financial data with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your nominated Bangladeshi bank). This sharing is required for the performance of the contract between you and bd777a. Each payment partner operates under its own privacy policy and security standards. bd777a selects payment partners that maintain industry-standard data protection practices.

Game Studio Providers

The games available on the bd777a platform are provided by third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. To deliver these games, a limited set of technical session data (such as a pseudonymous session token and stake information) is transmitted to the game studio's servers. No directly identifying personal data such as your full name, NID number, or payment account details is transmitted to game studios.

Identity Verification Services

bd777a may use an automated identity verification service to assist with KYC document checks. Such services receive only the identity documents you submit and return a verification result. They are contractually prohibited from retaining or independently processing your documents beyond the verification task.

Legal and Regulatory Authorities

bd777a may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, by a valid court order, or where disclosure is necessary to prevent or detect serious crime, including money laundering and fraud. In such cases, bd777a will disclose only the minimum data required to satisfy the legal obligation.

Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of bd777a's assets, personal data held by bd777a may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, bd777a will notify affected users in advance and ensure that the acquiring entity is bound by privacy obligations no less protective than those set out in this policy.

The bd777a platform uses cookies and similar local storage technologies to deliver a functional, secure, and personalised experience. This section explains what cookies we use, why we use them, and how you can control them.

A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember information about your visit, such as your login session, preferred language settings, and the contents of your account interface. Cookies do not contain executable code and cannot access other files on your device.

Cookie Type	Purpose	Retention
Session (Essential)	Maintains your authenticated login session while you are using the platform. Without this cookie the platform cannot function.	Deleted when browser closes
Security Token	Protects against cross-site request forgery (CSRF) attacks by verifying that form submissions originate from the bd777a platform.	Deleted when browser closes
Preferences	Remembers your display preferences such as interface language (English), notification settings, and responsible gaming limit configurations.	Up to 12 months
Analytics (First-party)	Collects anonymised, aggregated data about how pages are navigated within the platform. No personally identifiable information is included in analytics data.	Up to 13 months
Fraud Prevention	Assists in identifying unusual device or session behaviour that may indicate account compromise or automated abuse attempts.	Up to 6 months

bd777a does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural profiling technologies. You will not be served targeted advertisements based on your bd777a activity on any external website or platform.

You may configure your browser to block or delete cookies at any time. Please note that blocking essential session cookies will prevent you from logging in to your bd777a account, as the session cookie is technically necessary for authenticated access to the platform. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and the built-in Android browsers commonly used by players in Bangladesh.

bd777a retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Once the applicable retention period has expired, personal data is either securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

Data Category	Retention Period	Basis for Retention
Account identity data	Duration of account + 5 years after closure	Anti-money-laundering regulations
KYC verification documents	Duration of account + 5 years after closure	Legal obligation / regulatory audit requirements
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Gaming activity logs	3 years from last recorded session	Responsible gaming monitoring / dispute resolution
Support communications	3 years from date of communication	Quality assurance / dispute resolution
Technical / device logs	12 months from collection	Security monitoring / fraud investigation
Analytics data (anonymised)	13 months from collection	Platform improvement (no personal data retained)

When an account is closed — whether at the player's own request, by bd777a for breach of the Terms & Conditions, or for any other reason — the personal data associated with that account is retained for the applicable retention periods set out above. It is not deleted immediately upon account closure, because regulatory obligations require that certain records be preserved for defined periods after the end of the customer relationship.

Once all applicable retention periods have expired, bd777a will permanently delete or fully anonymise the relevant data. Anonymised data — which contains no information that could reasonably be used to identify an individual — may be retained indefinitely for aggregate statistical purposes.

As a user of the bd777a platform, you hold meaningful rights over your personal data. bd777a is committed to honouring these rights promptly and without unnecessary obstacle. The following rights apply to all registered account holders:

• Right of access: You may request a copy of all personal data that bd777a holds about you. We will provide this in a structured, commonly used format within 3 business days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details such as your email address and phone number can often be updated directly through your account settings; for identity and KYC data, contact the support team.
• Right to erasure: In certain circumstances, you may request that bd777a delete your personal data. This right is subject to our legal obligation to retain certain records (such as financial transaction data and KYC documents) for the periods set out in the Data Retention section. Where deletion is not possible due to a legal retention obligation, we will inform you of this and explain the applicable retention period.
• Right to data portability: You may request that your personal data be provided to you in a machine-readable format (such as JSON or CSV) so that it can be transferred to another service provider if you choose.
• Right to restrict processing: In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict processing of your personal data to storage only.
• Right to object: Where bd777a processes your data on the basis of legitimate interests (for example, for platform analytics), you have the right to object to that processing. If you object and we cannot demonstrate a compelling legitimate ground that overrides your interests, we will cease processing for that purpose.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the rights listed above, contact the bd777a support team via live chat or email at [email protected]. We will verify your identity before processing any data rights request to ensure that personal data is not disclosed to, or acted on by, an unauthorised party. Requests are processed within 3 business days; in complex cases we may require up to 10 business days and will inform you of this extension.

bd777a takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to prevent unauthorised access, accidental loss, destruction, or disclosure. The following security measures are in place across the bd777a platform and its supporting infrastructure:

• Transport encryption: All data in transit between your device and bd777a's servers is encrypted using TLS 1.2 or higher, with 256-bit SSL certificates. This prevents interception of login credentials, payment data, and personal information during transmission.
• Data at rest encryption: Sensitive stored data — including personal identity records, KYC documents, and financial transaction logs — is encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key rotation policy.
• Access controls: Access to personal data stored on bd777a's systems is restricted on a strict need-to-know basis. Employees and contractors who require access to personal data as part of their role are subject to confidentiality obligations and regular security awareness training.
• Intrusion detection: bd777a's infrastructure is monitored around the clock by automated intrusion detection and anomaly-alerting systems. Suspicious access patterns trigger immediate security review procedures.
• Regular security audits: The bd777a platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited. Findings from these assessments inform ongoing improvements to the security posture of the platform.
• Payment data security: bd777a does not store full payment account credentials (such as complete mobile wallet PINs or bank account numbers) on its own servers. Payment transactions are processed through the secure APIs of the respective payment providers, and only a masked reference is retained by bd777a for reconciliation purposes.

Despite the measures described above, no data transmission over the internet or method of electronic storage is completely free from risk. In the unlikely event of a data security incident that affects your personal data in a way that poses a risk to your rights, bd777a will notify you without undue delay and take all reasonable steps to contain and remediate the incident.

bd777a may update this Privacy Policy from time to time to reflect changes in our data practices, the introduction of new platform features, or changes in applicable law. When we make material changes to this policy, we will post a prominent notice on the bd777a platform indicating that the Privacy Policy has been updated, along with the date on which the revised policy takes effect.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your personal data. The "Last Updated" date at the top of this page indicates when the most recent revision was published. Your continued use of the bd777a platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

If a proposed change to this Privacy Policy would involve processing your personal data in a materially different way — for example, sharing data with a new category of third party, or using it for a purpose not previously disclosed — we will seek your explicit consent before applying the new processing activity to your existing data.

This Privacy Policy should be read alongside the bd777a Terms & Conditions and the Responsible Gaming Policy, which together govern your use of the platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall take precedence.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd777a handles your personal data, please contact our support team at any time via live chat or by email at [email protected]. Our average live chat response time is 2–5 minutes, and email inquiries are typically answered within 1–3 hours. 18+