77cbc Privacy Policy

This Privacy Policy ("Policy") sets out how 77cbc ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data belonging to registered players and site visitors ("you", "your") who access the 77cbc platform at https://77cbc.io (the "Website").

77cbc is committed to handling personal data with transparency, integrity, and security. We recognise that the players who trust 77cbc with their personal information — including Bangladeshi players transacting in BDT via bKash, Nagad, and Rocket — deserve a clear account of how that information is managed throughout the lifecycle of their relationship with the Platform.

This Policy is incorporated by reference into the 77cbc Terms & Conditions, available at https://77cbc.io/terms-conditions. By registering an account, depositing funds, or otherwise accessing the Platform, you confirm that you have read this Policy and that you consent to the collection and processing of your personal data as described herein.

The Policy is written in English. In the event of any conflict between a translated version of this Policy and the English version, the English version is authoritative.

77cbc collects personal data in several categories depending on the nature of your interaction with the Platform. The categories are set out in the table below, together with examples of the specific data points within each category.

We collect only the minimum data necessary for the stated purpose. Where a data category is optional, this will be indicated at the point of collection. Providing optional data may unlock additional platform features or personalised offers but is never a condition of basic account access.

77cbc collects personal data through the following channels and mechanisms:

• Direct Submission: Data you enter yourself during account registration, profile updates, KYC document uploads, deposit and withdrawal forms, and support communications.
• Automated Technical Collection: Session data, device fingerprinting, IP address logging, and behavioural analytics collected automatically as you navigate and interact with the Website.
• Payment Provider Confirmation: Transaction confirmation data returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard upon processing your financial transactions. 77cbc does not receive or store full payment card numbers; only masked references and transaction identifiers are retained.
• KYC Verification Partners: The result of identity checks performed by our third-party KYC verification service, including a pass/fail status, confidence score, and any flags raised during document or liveness verification.
• Cookies and Tracking Technologies: First-party cookies, local storage tokens, and analytics scripts that record how you use the Website. See Section 7 (Cookies & Tracking) for full details.
• Fraud Prevention Services: Risk scores and signals sourced from industry-standard fraud detection services, used to identify suspicious registration or transaction patterns.

77cbc processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the 77cbc Terms & Conditions, including account creation, payment processing, and bet settlement.
• Consent: Processing activities for which you have given clear, informed consent — primarily direct marketing communications and optional data collection for personalisation features. Consent may be withdrawn at any time without detriment to your account.
• Legitimate Interests: Processing carried out to serve the legitimate business interests of 77cbc, including fraud prevention, platform security, responsible gaming monitoring, and product improvement — provided those interests are not overridden by your data protection rights.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, record-keeping requirements, and lawful instructions from competent authorities.

The personal data collected by 77cbc is used for the following purposes:

• Account Management: Creating and maintaining your 77cbc account, verifying your identity, managing your login credentials, and processing changes to your account information.
• Payment Processing: Facilitating deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported payment methods; reconciling transaction records; issuing payment confirmations.
• KYC and AML Compliance: Verifying your age (21+ requirement), identity, and source of funds in compliance with our anti-money-laundering and know-your-customer obligations.
• Platform Operation: Delivering the sports betting, live casino, and slot game services; personalising your game lobby; tracking bonus eligibility and wagering requirements; operating the responsible gaming tools available to your account.
• Security and Fraud Prevention: Detecting and preventing unauthorised access, account takeover, bonus abuse, collusion, money laundering, and other fraudulent or prohibited activities.
• Customer Support: Responding to your queries, resolving disputes, managing complaints, and maintaining records of support interactions for quality and training purposes.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, enforcing self-exclusion and cooling-off requests, and proactively contacting players whose usage patterns suggest they may benefit from responsible gaming support.
• Marketing and Promotions: Sending you promotional offers, bonus notifications, and event-based communications (e.g., BPL season promotions, Eid offers, IPL specials) — subject to your marketing preferences and consent.
• Analytics and Product Improvement: Analysing aggregated, anonymised usage data to understand player behaviour, improve platform features, and optimise the overall 77cbc experience.
• Legal Compliance: Retaining records and responding to lawful requests from regulatory or law enforcement authorities.

77cbc does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the minimum transaction data required to process your deposits and withdrawals. These partners process data under their own privacy frameworks and are subject to their own regulatory obligations.
• KYC and Identity Verification Services: Your identity documents and personal details are shared with our third-party KYC provider to verify your age, identity, and address. The KYC provider acts as a data processor under a binding data processing agreement with 77cbc.
• Game Technology Providers: Evolution Gaming, Pragmatic Play, Pragmatic Play Live, NetEnt, Microgaming, Spribe, Ezugi, and other game studio partners receive session tokens and game-relevant data to deliver their games and resolve disputes. These providers do not receive your full identity data.
• Fraud Detection and Security Services: Anonymised or pseudonymised risk signals may be shared with industry-standard fraud prevention platforms to improve detection accuracy across the platform.
• Legal and Regulatory Authorities: 77cbc may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or in connection with a lawful investigation into suspected financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 77cbc's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.

The 77cbc website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to collect analytical data about how players use the site. The following types of cookies are in use:

• Essential Cookies: Required for the basic operation of the Platform, including session management, authentication tokens, CSRF protection, and load balancing. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Store your preferences such as language settings (English), selected currency display (BDT), and responsible gaming tool configurations so that these are preserved across sessions.
• Analytical Cookies: Collect anonymised data on page views, session duration, navigation paths, and feature usage. This data is used in aggregate form to improve platform performance and usability. Individual player data from analytical cookies is not linked back to your identity.
• Security Cookies: Support fraud detection and bot-prevention systems by recording device fingerprint signals and flagging anomalous session behaviour.

Most web browsers allow you to control cookies through their settings preferences. Blocking all cookies will prevent you from logging in to your 77cbc account. Blocking only non-essential cookies will limit analytical tracking but will not affect core platform functionality. Please refer to your browser's help documentation for instructions on managing cookie preferences.

77cbc implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. The technical and organisational measures in place include:

• Transport Encryption: All data transmitted between your device and the 77cbc servers is encrypted using TLS 1.3, the current industry standard for secure data in transit.
• Password Hashing: Account passwords are never stored in plaintext. They are processed using bcrypt with a per-user salt before storage, making them computationally infeasible to reverse even in the event of a database breach.
• Role-Based Access Controls: Access to personal data within 77cbc's operational systems is restricted on a need-to-know basis. Staff roles are assigned minimum required permissions, and access is reviewed periodically.
• Access Logging and Monitoring: All administrative access to personal data systems is logged with timestamps and user identifiers. Anomalous access events trigger automated alerts for review by the security team.
• Two-Factor Authentication: Two-factor authentication (2FA) is available to players as an additional account security layer and is required for all internal staff who access production systems.
• Regular Security Reviews: 77cbc conducts periodic internal security reviews and engages with vulnerability assessment processes to identify and remediate potential weaknesses in the platform's security posture.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 77cbc will notify affected players promptly and take immediate steps to contain the breach and mitigate harm.

77cbc retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable legal and regulatory obligations. The retention periods below are indicative:

• Active Account Data: Retained for the full duration of your registered account. While your account is active, all identity, contact, financial, and behavioural data associated with it is maintained to support ongoing platform operation.
• Post-Closure Account Data: Following voluntary or involuntary account closure, core identity and transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping and AML obligations. After this period, data is securely deleted or irreversibly anonymised.
• KYC Verification Documents: Identity and address documents submitted for KYC verification are retained for a minimum of five (5) years after account closure or the date of the final transaction, whichever is later.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years after the close of the relevant support interaction for quality assurance, dispute resolution, and legal protection purposes.
• Analytical Data: Aggregated, anonymised analytical data that cannot be re-linked to an individual may be retained indefinitely for platform improvement purposes.
• Marketing Preference Records: Consent and opt-out records for marketing communications are retained for five (5) years to evidence compliance with consent obligations, even after a player opts out of marketing.

Where a legal obligation or regulatory investigation requires that data be retained beyond the periods stated above, 77cbc will retain the relevant data for the duration of that obligation or investigation.

77cbc respects your rights over your personal data. The following rights are available to you and may be exercised by contacting our support team at support at 77cbc.io:

• Right of Access: You may request a copy of the personal data 77cbc holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data held in your account. Minor corrections (e.g., contact number, address) can be made directly via your account profile settings.
• Right to Erasure: You may request the deletion of your personal data. Note that this right is subject to our legal retention obligations — data that we are required to retain for AML or record-keeping purposes cannot be erased until those obligations have been satisfied.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being investigated.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided to 77cbc, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will assess your objection and respond with the outcome within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time via your account settings or by contacting support. Withdrawal does not affect prior lawful processing.

The 77cbc platform is strictly for adults aged 21 and above. We do not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the 77cbc registration and KYC process, and accounts found to belong to persons under 21 are immediately closed in accordance with the Terms & Conditions.

If you believe that a minor has registered a 77cbc account or that personal data belonging to a minor is held by 77cbc, please notify us immediately at support at 77cbc.io. We will investigate the report promptly and, where confirmed, will delete the relevant data and close the account without delay.

Parents and guardians are encouraged to use parental control software to prevent under-age individuals from accessing online gambling content. 77cbc supports responsible gaming initiatives and takes its obligations regarding the protection of minors seriously.

The 77cbc website may contain references to or integrations with third-party services including game studio interfaces (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) and payment provider portals (bKash, Nagad, Rocket). When you interact with these third-party environments — for example, when a game launches in a studio-hosted iframe or when you are redirected to a payment provider's confirmation page — you are subject to that third party's own privacy policy.

77cbc has no control over the data practices of third-party providers and is not responsible for the content, security, or privacy practices of any external service. We recommend that you review the privacy notices of any third-party service you interact with via the 77cbc platform.

With your consent, 77cbc may send you promotional communications by email or SMS relating to platform bonuses, seasonal offers (such as BPL cricket promotions, Eid specials, and IPL season campaigns), new game releases, and loyalty reward updates. These communications will always be sent from an identifiable 77cbc address and will clearly identify 77cbc as the sender.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 77cbc account settings panel;
• Clicking the unsubscribe link included in every marketing email; or
• Contacting our support team at support at 77cbc.io with the subject line "Marketing Opt-Out" and your registered account username.

Opting out of marketing communications will not affect your ability to receive transactional and account-related notifications such as deposit confirmations, withdrawal status updates, KYC status notifications, and security alerts. These service communications are not marketing and are sent regardless of your marketing preference settings because they relate to the operation of your account.

77cbc reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, new product features, or feedback from players. The "Last Updated" date at the top of this Policy will be revised each time a material change is made.

Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — we will provide advance notice by posting a prominent notice on the 77cbc website and, where practicable, by sending a notification to the email address registered to your account. The notice period for material changes will be no less than fourteen (14) days prior to the revised Policy taking effect.

Your continued use of the 77cbc platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how 77cbc protects your personal data. Previous versions of this Policy are available on request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 77cbc processes your personal data, please contact our support team through any of the following channels:

• Email: support at 77cbc.io — for formal data rights requests, privacy queries, and complaints. Please include "Privacy Policy" or "Data Rights Request" in your subject line.
• Live Chat: Available 24 hours a day, 7 days a week inside your 77cbc account portal — for general privacy questions and guidance on exercising your data rights.
• Support Hours: Email responses are provided within 48 hours of receipt. Data rights requests are acknowledged within 48 hours and fully resolved within 30 days. Formal privacy complaints receive a senior review within 14 business days.