77bad Privacy Policy — Your Data, Protected

Data Controller

77bad is the data controller responsible for the personal data collected through the 77bad platform. For all data protection matters, you may contact us via the official support email: [email protected]. We will respond to all data-related enquiries within a reasonable timeframe and no later than 30 days from the date of receipt, unless the request is unusually complex or numerous, in which case we will notify you of any extension.

Where 77bad engages third-party service providers who process personal data on our behalf (such as payment processors, KYC verification services, or analytics providers), we ensure that appropriate data processing agreements are in place and that such providers process data only for the purposes we have specified and in compliance with applicable data protection standards.

Personal Data We Collect

When you register and use a 77bad account, we collect the following categories of personal data, which are necessary for operating the platform, verifying your identity, processing payments, and complying with our legal obligations:

• Identity data: full name, date of birth, gender (where provided), and government-issued identification document details submitted for KYC verification.
• Contact data: email address, mobile phone number, and residential address, as provided during registration or account updates.
• Financial data: payment method details (bKash wallet number, Nagad account, bank account details, card details where applicable), transaction history, deposit and withdrawal records.
• Technical data: IP address, device type, operating system, browser type, session timestamps, and geolocation data (country or city level) collected automatically when you access the platform.
• Usage data: game history, betting activity, session duration, pages visited, features used, and platform interaction logs retained for account security and responsible gaming monitoring purposes.
• Communications data: records of any correspondence between you and the 77bad support team, including emails, live chat transcripts, and support ticket content.

How We Use Your Personal Data

77bad processes your personal data only for specified, explicit, and legitimate purposes. We do not use your data in a manner incompatible with the purposes for which it was originally collected. The primary purposes for which we use personal data are as follows:

• Account creation and management: to register your account, verify your identity, authenticate your login sessions, and maintain your account in good standing.
• Payment processing: to process deposits, settle withdrawals, detect and prevent fraudulent transactions, and comply with anti-money laundering obligations.
• Legal and regulatory compliance: to meet KYC requirements, respond to regulatory enquiries, maintain legally required records, and cooperate with law enforcement authorities where legally required.
• Platform improvement and analytics: to analyse usage patterns, troubleshoot technical issues, improve game performance, and develop new features that better serve our players across Bangladesh.
• Responsible gaming monitoring: to identify patterns of play that may indicate problem gambling behaviour and to administer any self-exclusion, deposit limit, or cooling-off arrangements a player has requested.

Legal Basis for Processing

77bad processes your personal data on the following legal bases: (a) Contract performance — processing necessary to register your account, provide access to platform features, and process payments; (b) Legal obligation — processing required to comply with applicable laws including anti-money laundering regulations and KYC obligations; (c) Legitimate interests — processing carried out for fraud prevention, platform security, analytics, and responsible gaming monitoring, where these interests are not overridden by your fundamental privacy rights; and (d) Consent — where you have provided explicit consent for a specific processing activity, such as receiving promotional communications.

Where we rely on consent as a legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact us via the official support email or update your notification preferences within your account settings.

Data Sharing and Third Parties

77bad does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited and controlled circumstances:

• Payment service providers (bKash, Nagad, Rocket, Upay, and card processors): to process deposit and withdrawal transactions. These providers are contractually prohibited from using your data for any purpose other than completing the payment.
• KYC and identity verification providers: to verify your identity and age in compliance with our legal obligations. These providers process only the minimum data necessary for verification purposes.
• Regulatory and law enforcement authorities: where we are required by law, court order, or regulatory directive to disclose personal data. We will notify you of any such disclosure request where legally permitted to do so.
• IT infrastructure and platform analytics providers: who process data on 77bad's behalf under strict data processing agreements and have no independent right to use the data for their own purposes.

Data Retention

77bad retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention principles apply: account data and transaction records are retained for a minimum of 5 years from the date of the last account activity or the closure of the account, whichever is later, in order to meet our legal and regulatory obligations; communications data (support correspondence) is retained for 3 years from the date of the communication; and technical and usage logs are retained for up to 12 months for security and analytics purposes.

Where you request the deletion of your personal data and we are not subject to any overriding legal obligation to retain it, we will action the deletion request within 30 days and confirm completion to you in writing. Certain anonymised or aggregated data that cannot identify you individually may be retained beyond these periods for statistical analysis purposes.

Cookies and Tracking Technologies

77bad uses cookies and similar tracking technologies on the platform to support essential functionality, improve performance, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: essential for the platform to function correctly, including maintaining your login session, remembering your language preferences, and enabling secure transactions. These cannot be disabled without impairing core platform functionality.
• Analytical and performance cookies: used to collect anonymised data about how players navigate the platform, which pages are visited most frequently, and how long sessions last. This data helps us improve the user experience and optimise platform performance.
• Functional cookies: used to remember your preferences and personalisation settings, such as your chosen language, display options, and recently visited sections of the platform.
• Security cookies: used to authenticate users, prevent fraudulent use of account credentials, and protect the platform from automated bot activity and other security threats.
• You may manage or disable non-essential cookies at any time via your browser settings. Please note that disabling certain cookies may affect the functionality of some platform features. 77bad does not use third-party advertising or retargeting cookies.

Your Rights as a Data Subject

Subject to applicable law and certain limited exceptions, you have the following rights in relation to the personal data that 77bad holds about you. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and your registered account details.

Right of access: you may request a copy of the personal data we hold about you, together with information about how it is used and shared. Right of rectification: you may request correction of any inaccurate or incomplete personal data. Right to erasure: you may request deletion of your personal data, subject to our legal retention obligations. Right to restrict processing: you may ask us to temporarily halt processing of your data while a correction or objection request is pending. Right to data portability: you may request your data in a structured, machine-readable format. Right to object: you may object to processing based on legitimate interests. Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.

Security Measures

77bad implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption on all data transmissions between your device and the 77bad platform.
• Access controls restricting internal access to personal data to authorised personnel on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of platform infrastructure and third-party integrations.
• Secure storage of sensitive data, including hashed password storage and tokenisation of financial instrument details wherever technically feasible.

Children and Age Restrictions

The 77bad platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided to us by a person under the minimum age, we will delete that data promptly and close the associated account. If you believe that a minor may have registered an account or provided personal data to 77bad, please notify us immediately at [email protected].

Our age verification procedures are applied at the point of registration and may be reinforced at any subsequent stage, including prior to the processing of any withdrawal request. We take our obligation to prevent underage access to gambling services extremely seriously and will continue to invest in robust age verification technologies.

Changes to This Policy

77bad reserves the right to revise this Privacy Policy at any time. The most current version of the Policy will always be accessible on the platform at the Privacy Policy page. Where changes are material — meaning they affect your rights or the way we use your data in a significant way — we will notify registered players by email or by a prominent notice on the platform at least 7 days before the changes take effect.

Your continued use of the 77bad platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree to the revised Privacy Policy, you must cease using the platform and may request account closure by contacting our support team.

Contact and Data Requests

For all privacy-related enquiries, subject access requests, correction requests, deletion requests, or complaints regarding the handling of your personal data by 77bad, please contact us at: [email protected]. Please include your registered username, the nature of your request, and any relevant supporting details to help us process your request as efficiently as possible. We will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 days, or notify you if additional time is required.