bdt77 Privacy Policy

1 Data Controller

For the purposes of this Privacy Policy, bdt77 acts as the data controller in respect of all personal data collected from players who register and use our platform. As the data controller, bdt77 determines the purposes for which your personal data is processed and the manner in which it is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated support contact:

bdt77 is committed to handling all data-related requests promptly, respectfully, and in accordance with the principles of data minimisation, purpose limitation, and storage limitation described throughout this policy.

2 What Personal Data We Collect

The personal data collected by bdt77 falls into the following categories:

We do not collect or store full payment card numbers. Card payment data is processed directly by our PCI-DSS compliant payment partners; bdt77 retains only a masked card reference for transaction matching purposes.

3 How We Collect Your Data

bdt77 collects personal data through the following channels:

• Direct Registration: When you complete the bdt77 registration form, you voluntarily provide identity and contact data. This data forms the core of your account profile.
• KYC Submission: When you submit identity documents for account verification, those documents are collected and reviewed by our verification team. Document uploads are encrypted in transit and stored on secured servers with restricted staff access.
• Transaction Processing: Each time you make a deposit via bKash, Nagad, Rocket, Upay, or a bank card, our payment processing system records the transaction reference, amount, timestamp, and masked payment method identifier.
• Platform Activity: Your interactions with the bdt77 platform — including which games you play, how long you play, your wagering patterns, and your use of responsible gaming tools — are recorded automatically as part of normal platform operation.
• Support Communications: Any communication you initiate with the bdt77 support team via email, live chat, or our support ticket system is logged and stored to maintain a record of the interaction.
• Automated Technologies: Our website uses cookies, session storage, and server-side logging to collect technical data about your visit. See Section 9 (Cookies & Tracking) for full detail on how these technologies operate.
• Third-Party Identity Verification: bdt77 may use third-party identity verification services to cross-reference the details you provide during registration or KYC. These services return a verification outcome to bdt77; the underlying data remains subject to the third party's own privacy practices.

4 Why We Use Your Personal Data

bdt77 processes your personal data for the following clearly defined purposes:

• Account Creation and Management: To register your account, maintain your profile, authenticate your login sessions, and communicate account-related notifications to you.
• Identity and Age Verification: To confirm that you are 21 years of age or older and that the details you have provided are accurate. This is a legal and responsible gaming obligation, not optional.
• Payment Processing: To execute deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard) and to maintain accurate transaction records.
• Platform Service Delivery: To operate the games, sportsbook, live casino, and all other features available on bdt77 for your use.
• Responsible Gaming: To monitor wagering patterns for signs of problem gambling behaviour, to enforce responsible gaming limits you have set, and to apply platform-level interventions where necessary to protect your wellbeing.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, collusion, bonus abuse, and any other prohibited conduct defined in the bdt77 Terms & Conditions.
• Legal and Regulatory Compliance: To meet applicable legal obligations including anti-money laundering (AML) record-keeping requirements, which mandate retention of certain transaction and identity records for a minimum of five years.
• Customer Support: To respond to your enquiries, resolve disputes, and process account closure or self-exclusion requests promptly and accurately.
• Platform Improvement: To analyse anonymised usage data in aggregate for the purpose of improving platform performance, identifying technical issues, and developing new features that better serve Bangladeshi players.
• Direct Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional communications about relevant offers and bonuses. You may opt out of promotional messages at any time without affecting your account standing.

5 Legal Basis for Processing

Every instance of personal data processing at bdt77 is carried out on one of the following recognised legal grounds:

• Contract Performance: Processing necessary to deliver the services you have signed up for, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable law, including identity verification, AML record-keeping, and fraud reporting obligations.
• Legitimate Interests: Processing undertaken for bdt77's legitimate business interests — such as fraud detection, platform security, and anonymised analytics — where those interests are not overridden by your privacy rights.
• Consent: Where we process data solely on the basis of your consent — such as sending promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent for promotional communications does not affect the lawfulness of any processing carried out before the withdrawal.

6 Sharing Your Personal Data

bdt77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Transaction data is shared with payment gateway providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard solely for the purpose of executing your deposit or withdrawal request. These partners are PCI-DSS compliant and operate under strict data security obligations.
• Identity Verification Providers: Where automated KYC verification is used, your identity data may be transmitted to a third-party verification service. That service returns only a pass/fail outcome; it does not retain a copy of your data for its own commercial purposes.
• Game Content Providers: When you play a game supplied by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and your account identifier are shared with that provider to initialise the game. These providers do not receive your full identity profile.
• Legal and Regulatory Authorities: bdt77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court judgment, or statutory obligation. We will notify you of such disclosure where legally permitted to do so.
• Anti-Fraud and AML Networks: Transaction and identity data may be cross-referenced with fraud prevention databases and shared with financial crime intelligence networks where a specific fraud or money laundering suspicion arises.
• Technology Infrastructure Providers: bdt77 uses cloud hosting and infrastructure services to operate the platform. These providers have access only to encrypted data and are bound by confidentiality agreements that prohibit independent use of your data.

All third-party recipients of bdt77 member data are contractually required to handle that data in a manner consistent with this Privacy Policy and to implement appropriate technical and organisational security measures.

7 Data Retention

bdt77 retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, bdt77 will securely delete or anonymise the relevant data so that it can no longer be associated with your identity. Where data has been anonymised rather than deleted, the anonymised aggregate may be retained indefinitely for statistical analysis.

8 Security Measures

bdt77 implements a multi-layered approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the bdt77 servers is encrypted using industry-standard TLS 1.3 protocol. This protects your login credentials, payment details, and personal information in transit.
• Encryption at Rest: Sensitive data fields — including identity documents, payment method identifiers, and verification records — are encrypted at rest using AES-256 encryption on our production database servers.
• Access Controls: Access to production systems and member data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all administrative access is logged and auditable.
• Multi-Factor Authentication: Internal system access for bdt77 staff requires multi-factor authentication, reducing the risk of credential-based intrusion.
• Penetration Testing: bdt77 conducts periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, bdt77 will notify affected members within 72 hours of becoming aware of the incident and will provide clear guidance on protective steps you can take.

9 Cookies & Tracking Technologies

bdt77 uses cookies and similar tracking technologies to operate core platform functionality, maintain your session, and collect anonymised analytics data. The following categories of cookies are used:

bdt77 does not use advertising cookies, retargeting cookies, or third-party tracking pixels that share your browsing behaviour with ad networks. You may manage or delete cookies through your browser settings at any time. Disabling essential cookies will affect platform functionality, including the ability to stay logged in during a gaming session.

10 Your Data Rights

As a bdt77 member, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with your registered account details and a clear description of your request:

11 Children & Minors

The bdt77 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes an age declaration and, where necessary, identity verification checks to enforce this age restriction.

If bdt77 discovers or is credibly informed that personal data has been collected from an individual under 21, we will:

• Immediately suspend the relevant account pending investigation.
• Delete the personal data associated with the underage individual from our systems as quickly as is practicable.
• Refund any deposits made by the underage individual to the payment method from which the deposit originated.
• Document the incident as part of our internal responsible gaming incident log.

12 Third-Party Services

The bdt77 platform integrates with third-party service providers to deliver a complete gaming experience. These providers operate their own data practices and privacy policies, which are independent of this document. The relevant categories are:

• Game Studios: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the games available on bdt77. When you launch a game, a session is established directly with the relevant studio's game server. Those studios process session-level technical data in accordance with their own privacy and data security standards.
• Payment Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard each operate as independent data controllers in respect of the payment information you submit through their interfaces. bdt77 receives only a transaction confirmation and a masked reference — full payment credentials are never stored on bdt77 servers.
• Analytics and Performance Tools: bdt77 may use anonymised, aggregated analytics services to understand platform performance. No personally identifiable data is transmitted to these services; all data is anonymised before transmission.

bdt77 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party service you interact with during your use of the bdt77 platform, particularly payment providers and game studios.

13 Changes to This Privacy Policy

bdt77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational procedures, or applicable legal requirements. When material changes are made, we will:

• Update the "Effective Date" and "Last Reviewed" fields at the top of this page.
• Display a notice on the bdt77 platform informing active members that the Privacy Policy has been updated.
• Where a change is particularly significant — such as a change in how we share data with third parties — send a direct notification to registered members via their account email address.

Your continued use of the bdt77 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any change to this Privacy Policy, you may close your account by contacting [email protected] and requesting account closure. All data associated with your closed account will be retained for the periods specified in Section 7 to meet legal obligations, after which it will be securely deleted.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bdt77 handles your personal data, please contact our support team using the details below:

When submitting a data rights request or privacy complaint, please include:

• Your registered bdt77 username or account email address (so we can locate your account).
• A clear description of your request or concern.
• Any relevant dates or transaction references if your enquiry relates to a specific event.

bdt77 is committed to resolving all privacy concerns fairly and transparently. If you are not satisfied with our response to your complaint, you may escalate the matter through any dispute resolution mechanism available to you under applicable Bangladeshi law. We will cooperate fully with any such process.