Privacy Policy — How bc77 Protects Your Data

1 Introduction & Scope

This Privacy Policy describes how bc77 (referred to throughout as "bc77", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of individuals who access or use the bc77 online casino and sports betting platform at bc77.io (the "Platform").

This Policy applies to all personal data processed in connection with your use of the bc77 Platform, regardless of whether you are a registered account holder, a visitor browsing the site without an account, or a former player whose account has been closed. It covers all services available on bc77, including casino games, live dealer games, crash games, sports betting, payment processing, customer support, and promotional activities.

By accessing or using the bc77 Platform, you acknowledge that you have read this Privacy Policy and understand how your personal data will be processed. If you do not agree with the practices described in this Policy, you should not use the bc77 Platform.

2 Who We Are

bc77 operates as an offshore online gaming platform serving players across Bangladesh, including in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. The Platform is the data controller responsible for the personal data of its players and users.

For all data protection enquiries, correction requests, deletion requests, or formal complaints relating to the handling of your personal data, you may contact the bc77 Data & Privacy team at: [email protected]

3 Data We Collect

bc77 collects the following categories of personal data:

3.1 Identity Data

When you register a bc77 account or complete the KYC verification process, we collect your full legal name, date of birth, gender, nationality, and government-issued identity document details (national ID card number, passport number, or driving licence number as applicable). This data is mandatory for account creation and for compliance with age verification and anti-money laundering obligations.

3.2 Contact Data

We collect your mobile phone number, email address, and, where voluntarily provided, your district or division of residence within Bangladesh. This data is used for account communications, transaction notifications, and support correspondence.

3.3 Financial Data

When you make a deposit or request a withdrawal, bc77 collects the mobile financial service account numbers associated with transactions (such as bKash, Nagad, Rocket, or Upay account numbers), transaction reference IDs, and the amounts and timestamps of all deposits and withdrawals in BDT. bc77 does not store full payment credentials on its own servers — payment transactions are processed by the respective payment providers through secure, encrypted channels.

3.4 Technical & Device Data

When you access the bc77 Platform, our systems automatically collect your IP address, device type (mobile, tablet, or desktop), operating system version, browser type and version, referring URL, session start and end timestamps, and geolocation data inferred from your IP address. This data is used for fraud prevention, security monitoring, and Platform performance optimisation.

3.5 Usage & Behavioural Data

bc77 logs data about how you interact with the Platform, including which games you play, the amounts and frequency of bets placed, session duration, bonus offers accessed, and pages visited. This data supports our responsible gaming monitoring obligations, helps us personalise your experience, and allows bc77 to identify and address any behavioural patterns that may indicate problem gambling.

3.6 Communications Data

If you contact bc77 via live chat, email, or any other support channel, we retain records of that communication — including chat transcripts, email content, and any attachments — for customer service quality assurance and dispute resolution purposes.

4 How We Collect Your Data

bc77 collects your personal data through the following means:

• Direct collection: data you provide when registering an account, completing KYC, making deposits or withdrawals, or contacting support.
• Automated collection: data collected automatically by our systems when you access or use the Platform, including through cookies, server logs, and session tracking technologies.
• Third-party sources: data received from payment processing partners (bKash, Nagad, Rocket, Upay) in connection with transaction processing; data from KYC verification service providers confirming identity document authenticity; and data from fraud-detection service providers flagging suspicious activity.

5 How We Use Your Data

bc77 uses the personal data it collects for the following purposes:

• Account management: creating and maintaining your bc77 account, verifying your identity and age, and managing your account settings and preferences.
• Payment processing: processing BDT deposits and withdrawals via bKash, Nagad, Rocket, and Upay; reconciling transactions; and handling refunds where applicable.
• Legal and regulatory compliance: fulfilling age verification, anti-money laundering (AML), and know-your-customer (KYC) obligations; retaining financial records for the legally required retention period; and cooperating with lawful requests from relevant authorities.
• Security and fraud prevention: detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, multi-accounting, and other forms of prohibited conduct as defined in the bc77 Terms & Conditions.
• Responsible gaming: monitoring usage patterns to identify players who may be experiencing gambling-related harm and proactively offering responsible gaming tools, account restrictions, or support referrals.
• Customer support: responding to account, payment, and technical support enquiries; investigating and resolving complaints; and maintaining records for dispute resolution.
• Platform improvement: analysing aggregated, anonymised usage data to improve game performance, page load times, navigation design, and overall Platform quality.
• Marketing communications (consent-based only): sending promotional emails, bonus notifications, and Platform updates to players who have explicitly opted in to receive such communications. Marketing is never sent without consent, and consent can be withdrawn at any time.

6 Legal Bases for Processing

bc77 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contract performance: processing is necessary to fulfil the contractual relationship established when you register a bc77 account and accept the Terms & Conditions — including operating your account, processing payments, and delivering the gaming services you have signed up for.
• Legal obligation: processing is required to comply with applicable legal obligations, including age verification, AML checks, KYC procedures, and financial record-keeping requirements.
• Legitimate interest: processing is necessary for bc77's legitimate business interests — specifically, fraud prevention, Platform security, responsible gaming monitoring, and Platform performance analytics — provided those interests are not overridden by your rights and interests.
• Consent: for marketing communications and certain non-essential cookies and tracking technologies, bc77 relies on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7 Sharing Your Data with Third Parties

bc77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with the following categories of third parties, and only to the extent strictly necessary for the specified purpose:

• Payment processing partners (bKash, Nagad, Rocket, Upay): to process your BDT deposit and withdrawal transactions. Each payment partner processes your data in accordance with its own privacy policy and applicable financial services regulations.
• KYC and identity verification providers: to verify the authenticity of identity documents and confirm that you meet the 21+ age requirement. These providers process identity data under contractual data processing agreements with bc77.
• Fraud detection and security providers: to identify and prevent fraudulent activity, including multi-accounting, bonus abuse, and financial fraud.
• Game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Habanero, Ezugi, and Play'n GO): to deliver game content within the bc77 Platform. Game providers may receive technical session data necessary to render game content and calculate outcomes. They do not receive personal identity data unless required for compliance purposes under their own regulatory obligations.
• Legal and regulatory authorities: bc77 may disclose your personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or where bc77 believes in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

All third-party partners who process data on behalf of bc77 are required to enter into data processing agreements that bind them to handle your data securely, use it only for the specified purpose, and not to disclose it further without bc77's authorisation.

8 International Data Transfers

bc77 operates as an offshore platform and some of the third-party service providers it works with may process data in jurisdictions outside Bangladesh. Where such transfers occur, bc77 takes appropriate steps to ensure that your personal data remains protected to a standard equivalent to the protections described in this Policy, including through the use of standard contractual clauses and data processing agreements that impose binding obligations on the receiving party.

9 Data Retention

bc77 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Account and identity data: retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with standard AML and financial record-keeping obligations.
• Financial transaction data: retained for a minimum of 5 years from the date of each transaction.
• KYC verification documents: retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: retained for 3 years from the date of the final communication in each support interaction.
• Technical and usage data (non-identifying): retained in aggregated, anonymised form for Platform analytics purposes with no fixed maximum retention period.
• Marketing consent records: retained for the duration of your consent and for 2 years following withdrawal of consent, as evidence of the consent record.

When data is no longer required and no legal retention obligation applies, bc77 securely deletes or anonymises the data in accordance with its internal data lifecycle management procedures.

10 Cookies & Tracking Technologies

bc77 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: these are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional cookies: these remember your preferences — such as your preferred language, currency display, and game lobby layout — to provide a more personalised experience. These cookies are set with your implied consent based on your use of the Platform.
• Analytics cookies: these collect anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur, helping bc77 improve performance and usability. Analytics cookies are set only with your consent.
• Marketing and retargeting cookies: bc77 does not use third-party advertising or retargeting cookies. bc77 does not participate in cross-site advertising networks.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair the functionality of the Platform. Disabling functional or analytics cookies will not prevent you from accessing the core gaming services.

11 Children's Privacy

The bc77 Platform is strictly intended for adults aged 21 and above. bc77 does not knowingly collect personal data from any person under the age of 21. If bc77 becomes aware that personal data has been collected from a person under 21, that data will be immediately deleted and the corresponding account closed. bc77 enforces mandatory age verification for all accounts through the KYC process.

If you are a parent or guardian and believe that a person under 21 has registered on bc77, please contact our support team immediately at [email protected] and we will investigate and take appropriate action within 24 hours.

12 Security Measures

bc77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bc77 Platform.
• Encryption at rest for all sensitive stored data, including identity documents and financial records.
• Access controls: personal data is accessible only to bc77 personnel and contractors who have a legitimate business need to access it, and only under the principle of least privilege.
• Two-factor authentication (2FA) available for all player accounts and mandatory for administrative access by bc77 staff.
• Real-time intrusion detection and automated threat monitoring across all bc77 Platform infrastructure.
• Regular security audits and penetration testing carried out by independent security professionals.
• Data breach response procedures: in the event of a data breach that poses a risk to player data, bc77 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

While bc77 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely risk-free. You also play a role in protecting your own data by keeping your bc77 account credentials confidential and enabling two-factor authentication on your account.

13 Your Privacy Rights

As a bc77 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the bc77 privacy team at [email protected] with the subject line "Privacy Rights Request". bc77 will respond within 30 days of receiving your verified request:

• Right of access: request a copy of the personal data bc77 holds about you.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing: request that bc77 restrict the processing of your data in certain circumstances, such as during a dispute investigation.
• Right to data portability: request a copy of your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interest or to the receipt of marketing communications.
• Right to withdraw consent: withdraw any consent you have previously given at any time, without affecting the lawfulness of processing before withdrawal.

bc77 may request proof of identity before processing any privacy rights request to ensure that data is not disclosed to or modified by an unauthorised party.

14 Marketing Communications

bc77 sends promotional communications — including bonus offers, seasonal promotions tied to events like Eid, Pohela Boishakh, the BPL season, and the IPL — only to players who have explicitly opted in to receive such communications during or after account registration.

bc77 will never send unsolicited marketing communications to players who have not opted in. Every marketing email includes a clear unsubscribe link. You may also update your communication preferences at any time by logging into your bc77 account settings or by contacting support directly. Withdrawal of marketing consent does not affect your ability to use the bc77 Platform or receive transactional communications (such as deposit confirmations and withdrawal notifications), which are sent regardless of marketing preferences as they are necessary for the operation of your account.

15 Changes to This Policy

bc77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. Where changes are material — meaning they affect how we collect, use, or share your personal data — bc77 will notify registered players via email at least 7 days before the updated Policy takes effect.

Where changes are minor — such as correcting typographical errors or clarifying existing provisions without changing their substance — bc77 may update the Policy without advance notice. The "Last Updated" date at the top of this document will always reflect the most recent revision. Your continued use of the bc77 Platform after any update to this Policy constitutes your acceptance of the revised terms.

16 Contact & Data Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how bc77 handles your personal data, please contact us at:

Email: [email protected]
Subject line: Privacy Rights Request
Response time: Within 30 days of receipt of your verified request
Live chat: Available 24/7 directly on the bc77 Platform — average response time 2–5 minutes

bc77's support team includes English-speaking agents available around the clock to assist players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

Disclaimer: bc77 operates as an offshore platform. This Privacy Policy reflects bc77's internal data protection standards and commitments to players. It is the sole responsibility of each player to verify whether using the bc77 Platform is lawful in their jurisdiction before registering. 21+ only. Gambling involves financial risk. Please play responsibly.