Privacy Policy — 77kd Bangladesh

This Privacy Policy describes how 77kd collects, processes, stores, shares, and protects personal data in connection with the operation of the 77kd online betting and casino platform at https://77kd.io (the "Platform"). It applies to all registered users, prospective users who browse the Platform, and any individual whose personal data is processed in connection with the Platform's services.

By registering an account, depositing funds, placing bets, or otherwise using the 77kd Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the Platform immediately.

This Privacy Policy should be read together with the 77kd Terms & Conditions, which govern the overall relationship between you and 77kd. Defined terms used in the Terms & Conditions carry the same meaning in this Privacy Policy unless otherwise specified.

All amounts referenced in this Privacy Policy in connection with transaction thresholds are denominated in Bangladeshi Taka (৳) unless otherwise stated. This Privacy Policy is written exclusively in English and shall be interpreted according to its plain English meaning.

For the purposes of this Privacy Policy, the data controller responsible for the personal data of 77kd users is the operating entity behind the 77kd brand, which owns and operates the Platform at https://77kd.io. References to "77kd", "we", "us", or "our" throughout this document refer to this data controller.

As data controller, 77kd determines the purposes for which personal data is collected and the means by which that data is processed. Where 77kd engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or game studio partners — those parties act as data processors under instruction from 77kd and are bound by data processing agreements that ensure your data is handled with equivalent care.

For all privacy-related enquiries, requests, and notices, please contact the 77kd Data Protection team at: [email protected]. Please include "Privacy" or "Data Request" in the subject line of your message to ensure prompt routing to the appropriate team.

77kd collects the minimum personal data necessary to deliver the Platform's services safely, securely, and in compliance with responsible gaming obligations. The categories of personal data we collect are set out in the table below:

77kd does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (except as minimally necessary for responsible gaming self-exclusion requests), biometric data, or genetic data.

77kd collects personal data through the following means:

• Direct submission: Data you provide voluntarily when creating an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or communicating with our team via email or live chat.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs. This collection is necessary for Platform security, fraud prevention, and service delivery.
• Payment processor data: Transaction reference data returned by mobile wallet providers (bKash, Nagad, Rocket, Upay) and banking partners upon processing deposit or withdrawal instructions. 77kd does not receive or store full mobile wallet PINs or bank passwords.
• Third-party game studios: Session-level game play data returned by studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely for the purpose of crediting winnings, resolving disputes, and maintaining game history records.
• Cookies and similar technologies: Session cookies, functional cookies, and analytics identifiers as described in Section 10 of this Privacy Policy.

77kd does not purchase, rent, or obtain personal data from data brokers or marketing list providers. All personal data we hold about you was either provided directly by you or generated automatically through your use of the Platform.

77kd uses personal data collected from users for the following defined purposes only:

• Account management: Creating, maintaining, and administering your 77kd account, including authentication, password recovery, and account settings management.
• Identity and age verification: Conducting KYC checks to confirm your identity and verify that you meet the 21-year minimum age requirement before allowing account activation or withdrawal processing.
• Payment processing: Processing deposit instructions and withdrawal requests through your nominated mobile wallet (bKash, Nagad, Rocket, or Upay) or supported bank account. Payment data is used solely to execute and record transactions.
• Service delivery: Enabling you to browse and participate in sports betting markets (including BPL, IPL, T20 World Cup, and Bangladesh Tigers cricket fixtures), live casino games, slots, and other Platform features.
• Fraud prevention and security: Monitoring account activity to detect and prevent unauthorised access, money laundering, multi-accounting, bonus abuse, match-fixing activity, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: Operating deposit limit tools, self-exclusion programs, session time reminders, and reality check features. Retaining records of responsible gaming interactions as required.
• Customer support: Responding to account queries, payment disputes, technical issues, and responsible gaming requests submitted via [email protected] or live chat.
• Legal and regulatory compliance: Retaining records and responding to lawful requests from relevant authorities as required by applicable law.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's design, performance, game offering, and user experience. No individual profiling is conducted for this purpose.
• Marketing communications (with consent): Sending promotional emails or platform notifications about bonuses, new game launches, seasonal promotions (such as Eid or BPL season offers), and Platform updates — only where you have provided explicit consent and have not subsequently withdrawn it.

77kd does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on users, except where required by fraud prevention systems. Where automated fraud detection flags an account, a human review is conducted before any account action is taken.

77kd processes personal data only where a valid legal basis exists. The legal bases on which 77kd relies for its data processing activities are:

• Contractual necessity: Processing necessary to perform the contract between 77kd and you as a registered user — including account creation, payment processing, game delivery, and withdrawal execution.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML (anti-money laundering) obligations, record-keeping requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for 77kd's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, non-essential cookies, and any other processing activity where 77kd has obtained your explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

77kd shares personal data with third parties only in the following circumstances:

• Payment service providers: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive the minimum data necessary to execute and confirm transactions. These parties process data under their own privacy frameworks, which govern how they handle transaction data.
• KYC and identity verification providers: Regulated third-party providers engaged to assist with identity document verification, age verification, and anti-money laundering screening. All such providers are contractually bound to process data solely for verification purposes.
• Game studio partners: Studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game result data necessary to operate their respective game engines. These studios do not receive your full identity data.
• IT infrastructure and hosting providers: Cloud hosting, database, and content delivery network providers who store or process Platform data on 77kd's behalf under binding data processing agreements.
• Customer support platform providers: Live chat and ticketing system providers used to deliver support services. Support data is processed solely for the purpose of resolving your enquiry.
• Law enforcement and regulatory authorities: 77kd will disclose personal data to law enforcement agencies, financial intelligence units, or other relevant authorities where required to do so by applicable law, court order, or lawful regulatory request. 77kd will notify you of such disclosure where legally permitted to do so.
• Business transfer: In the event of a merger, acquisition, or sale of substantially all of 77kd's business assets, personal data held by 77kd may form part of the transferred assets. Users will be notified via the Platform or by email in advance of any such transfer where possible.

All third-party data processors engaged by 77kd are required to implement technical and organisational security measures equivalent to those applied by 77kd, and to process personal data solely in accordance with 77kd's documented instructions.

77kd retains personal data for as long as necessary to fulfil the purposes for which it was collected, as set out in this Privacy Policy, and for as long as required or permitted by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's active status plus a minimum period of 5 years following account closure, to satisfy legal and regulatory record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction.
• Betting and game play history: Retained for 5 years from the date of the relevant session or bet settlement, and may be retained longer where a dispute or investigation is outstanding.
• Support communications: Retained for 3 years from the date of last interaction, or longer where the communication is relevant to an ongoing or reasonably anticipated dispute.
• Marketing consent records: Retained for the duration of your account plus 2 years, to demonstrate compliance with consent obligations.
• Technical and server logs: Typically retained for 12 months from the date of generation, unless required for a specific security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised such that it can no longer be associated with an identifiable individual. Where anonymisation is used in preference to deletion, the anonymised data may be retained indefinitely for aggregated statistical analysis.

77kd takes data security seriously and has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 77kd Platform is encrypted using 256-bit SSL/TLS protocols. The Platform enforces HTTPS at all times.
• Encrypted password storage: Account passwords are never stored in plain text. Passwords are hashed using industry-standard cryptographic algorithms before storage.
• Access controls: Access to personal data held within 77kd's systems is restricted on a strict need-to-know basis. Staff with access to personal data receive mandatory privacy and security training.
• Payment data isolation: Full mobile wallet PIN codes and bank credentials are never transmitted to or stored on 77kd's servers. Payment authentication is handled directly by the relevant payment service provider.
• Fraud detection systems: Automated monitoring systems operate continuously to detect suspicious account activity, unusual transaction patterns, and potential security threats.
• Session management: User sessions expire automatically after a defined period of inactivity. Active sessions are bound to the originating device and IP context.
• Regular security reviews: 77kd conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities.

While 77kd implements robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying 77kd immediately at [email protected] if you suspect any unauthorised access to your account.

77kd uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The cookies used by 77kd fall into the following categories:

• Strictly necessary cookies: Essential for the Platform to function. These cookies maintain your login session, remember your account preferences, and enable secure navigation between pages. They cannot be disabled without disrupting core Platform functionality.
• Functional cookies: Enable enhanced features such as remembering your preferred language settings, last visited game category, and responsible gaming tool configurations. These cookies do not track browsing activity outside the 77kd Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including which pages are visited most frequently, session durations, and navigation paths. This information helps 77kd improve the Platform layout and user experience. No individual user profiles are created from analytics data.
• Security cookies: Support fraud detection and platform integrity functions by recording session metadata and flagging anomalous access patterns for review.

77kd does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform. Analytics and functional cookies can be disabled without affecting core Platform access.

As a user of the 77kd Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request":

• Right of access: You have the right to request confirmation of whether 77kd holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by 77kd be corrected or updated. You may update certain account details directly via your account settings panel.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to retention obligations under applicable law — for example, transaction records required for AML compliance cannot be deleted on request.
• Right to restriction of processing: You may request that 77kd restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive personal data you have provided to 77kd in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing of your personal data where 77kd relies on legitimate interests as its legal basis, unless 77kd can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

77kd will respond to all verified privacy rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days with notification. 77kd will not charge a fee for responding to requests unless they are manifestly unfounded or excessive.

77kd does not knowingly collect, solicit, or retain personal data from individuals under the age of 21. If 77kd becomes aware that personal data has been collected from a person under 21 — whether through a KYC verification failure, a parental notification, or any other means — the following actions will be taken without delay:

• The relevant account will be immediately suspended and then permanently closed.
• All bets placed will be voided and any remaining verified balance will be returned via the original payment method.
• All personal data associated with the underage user will be securely deleted from 77kd's systems, subject to any minimum retention obligations required by applicable law.

If you are a parent or guardian and you believe that a person under 21 in your care has registered on the 77kd Platform, please contact us immediately at [email protected]. We will investigate and act on all such reports as a matter of urgency.

77kd may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When changes are made, the updated version of this Privacy Policy will be published on this page with a revised effective date shown at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 77kd will provide at least 14 days' advance notice via a prominent notification on the Platform. Where reasonably practicable, notice may also be sent to your registered contact details.

Non-material changes — such as typographical corrections, clarifications of existing practices, or formatting updates — may take effect immediately upon publication. Your continued use of the 77kd Platform after any revision to this Privacy Policy constitutes your acknowledgement of the updated version. If you do not agree with the revised Privacy Policy, you should cease using the Platform and request account closure as described in Section 12 of the Terms & Conditions.

We recommend that you review this Privacy Policy periodically, particularly before making deposits or providing new personal data, to ensure you remain informed about how 77kd handles your information.

For all privacy-related enquiries, data subject rights requests, or concerns about how your personal data is handled by 77kd, please contact our Data Protection team using the details below. All correspondence should be in English.

Please include your registered account username or email address and a clear description of your request in all correspondence. Where a request relates to data access or erasure, we may ask you to verify your identity before processing the request to ensure your data is protected.

77kd is committed to resolving all privacy concerns in a fair, timely, and transparent manner. If you are not satisfied with our response to a privacy complaint, you may wish to seek independent advice or contact a relevant data protection authority in your jurisdiction.