bn77 Privacy Policy — How We Protect Your Personal Data

1. Introduction

bn77 is Bangladesh's most trusted online betting and casino platform, offering sports betting, live casino games, and slots to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All services are provided at bn77.io and are accessible exclusively in English for adult players aged 21 and above.

This Privacy Policy applies to all personal data processed in connection with the bn77 platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay, customer support interactions, and marketing communications. It covers data processed through the bn77 website and any associated communication channels including SMS and email.

bn77 takes its data protection responsibilities seriously. We are committed to handling your personal information with integrity, transparency, and in accordance with applicable data protection principles. This policy is reviewed and updated periodically to reflect changes in our practices or applicable requirements, and the current version is always accessible at bn77.io/privacy-policy.

2. Data We Collect

bn77 collects personal data through several channels during the course of providing its services. The categories of personal data we collect include:

Category	Examples of Data Collected	Collection Point
Identity Data	Full name, date of birth, National Identity Card number, passport number	Registration, KYC verification
Contact Data	Bangladeshi mobile number, email address, residential address	Registration, account updates
Financial Data	bKash / Nagad / Rocket / Upay account numbers, transaction records, deposit and withdrawal history	Payment processing, KYC
Gameplay Data	Bet history, game session records, win/loss records, bonus usage, wagering activity	Platform activity
Technical Data	IP address, device type, browser type, operating system, session timestamps, login history	Automatic collection (cookies, server logs)
Communications Data	Support ticket content, live chat transcripts, email and SMS correspondence	Customer support interactions
Verification Documents	Scanned copies of NID, passport, utility bills, payment method screenshots	KYC process

We do not collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a legal obligation specifically requires it (for example, in connection with a formal regulatory investigation).

3. How We Use Your Data

bn77 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain accurate account records, and provide access to the full range of bn77 services.
• Transaction processing: To process deposits, withdrawals, and bonus credits to and from your account via bKash, Nagad, Rocket, Upay, and supported bank transfer services. Financial data is shared with payment processors only to the extent necessary to complete each transaction.
• Identity verification (KYC/AML): To verify your identity and age, confirm ownership of payment methods, and comply with anti-money laundering obligations. This is a legal requirement and cannot be waived.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and money laundering. Technical data including IP addresses and device identifiers are used for this purpose.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests (such as self-exclusion and deposit limit changes), and handle complaints.
• Responsible gaming: To monitor gameplay patterns, identify indicators of problem gambling, apply account restrictions at your request, and fulfil our player welfare obligations.
• Legal compliance: To meet obligations under applicable laws and regulations, including record-keeping requirements, responding to lawful requests from authorities, and cooperating with regulatory investigations.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform news via SMS or email, where you have explicitly opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with bn77, identify technical issues, and improve the overall user experience.

4. Legal Basis for Processing

bn77 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and bn77 — specifically, to operate your account, process bets, execute payments, and deliver the services described in the Terms & Conditions.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, and lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for bn77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your individual rights and freedoms.
• Consent: For marketing communications specifically, processing is based on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

bn77 does not sell your personal data. We share personal data only in the following carefully controlled circumstances:

• Payment processors: Financial data is shared with our approved payment service providers — including bKash, Nagad, Rocket, Upay, and supported banks — solely for the purpose of processing deposit and withdrawal transactions. Each provider is bound by its own data protection obligations.
• Identity verification partners: KYC and age verification data may be shared with third-party identity verification services engaged by bn77. These partners are contractually bound to process data only for verification purposes and may not use it for any other purpose.
• Game providers: When you play a game provided by a third-party studio (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe), limited technical data (such as a player session token and account ID) is shared with the provider's platform for the purpose of operating the game. No identifiable personal contact or financial data is shared with game studios.
• Legal and regulatory authorities: bn77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, pursuant to a valid legal order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of bn77, its players, or the public.
• Professional advisors: In limited circumstances, anonymised or aggregated data may be shared with legal advisors, accountants, or auditors engaged by bn77 for professional services. These parties are bound by professional confidentiality obligations.

6. Cookies & Tracking Technologies

bn77.io uses cookies and similar tracking technologies to operate the platform effectively, maintain your login session, and understand how the site is used. The following categories of cookies may be active on your device when you visit bn77.io:

• Essential cookies: These are strictly necessary for the website to function. They maintain your login session, remember your account preferences, and enable secure transactions. Essential cookies cannot be disabled without disrupting core platform functionality.
• Analytical cookies: These cookies collect anonymised data about how visitors use bn77.io — such as which pages are visited most frequently and how long sessions last. This information is used in aggregate form to improve platform performance and navigation. No personally identifiable information is included in analytical data.
• Security cookies: These cookies assist in fraud detection and platform security, including identifying unusual login patterns and flagging suspicious activity. They are a necessary component of our security infrastructure.
• Preference cookies: These cookies remember your account settings and display preferences, such as your preferred language and layout choices, so that you do not need to re-enter them on each visit.

You may manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from accessing your bn77 account. bn77 does not use third-party advertising cookies or share cookie data with advertising networks.

7. Data Security

bn77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• All data transmitted between your device and bn77.io is encrypted using 256-bit SSL/TLS encryption. This applies to every page of the platform, not just payment pages.
• Account passwords are stored using one-way cryptographic hashing. bn77 staff cannot retrieve your password in plain text under any circumstances. If you lose your password, a secure reset process is used rather than password retrieval.
• Access to personal data within bn77's internal systems is restricted on a strict need-to-know basis. Staff members can only access the personal data necessary for their specific role and are bound by confidentiality obligations.
• Financial data and KYC documents are stored in encrypted, access-controlled storage environments. Access logs are maintained and reviewed regularly.
• bn77's systems are subject to regular security assessments to identify and remediate potential vulnerabilities.
• Two-factor authentication (2FA) is available for registered player accounts and is strongly recommended for all users, particularly those with significant account balances.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a significant risk to affected players, bn77 will notify impacted users as promptly as practicable via the contact details registered on their account.

8. Data Retention

bn77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, in accordance with standard financial record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven years following each transaction to comply with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for five years following the closure of the account to which they relate, or longer if required by a regulatory authority.
• Customer support communications: Retained for three years from the date of the last interaction, to support dispute resolution and quality assurance.
• Gameplay and bet history: Retained for five years from the date of each activity record, to support responsible gaming monitoring and regulatory compliance.
• Marketing consent records: Retained for the duration of your consent, plus two years following withdrawal of consent, to demonstrate compliance with marketing regulations.

Where a retention period is required by a specific legal or regulatory obligation that exceeds the periods stated above, the longer period applies. bn77 will not retain data beyond what is required for a legitimate documented purpose.

9. Your Data Protection Rights

As a registered player on bn77, you hold the following data protection rights. To exercise any of these rights, please contact the bn77 support team using the email address displayed in the footer of this page:

• Right of access: You have the right to request a copy of the personal data bn77 holds about you. We will provide this information in a structured, readable format within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Account details can also be updated directly within your account settings for certain data types.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where you believe it has been processed unlawfully. This right is subject to legal retention obligations — we cannot delete financial or KYC records within their mandatory retention periods.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved, or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests at any time. bn77 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

10. Children and Minors

bn77 is strictly an adult platform. Access to the platform is prohibited for any person under the age of 21. bn77 does not knowingly collect personal data from individuals under the age of 21, and no part of the bn77 platform is directed at or designed to appeal to minors.

If bn77 discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all balances will be withheld pending investigation, and any personal data collected in connection with that account will be securely deleted following the conclusion of any required regulatory or legal process.

If you are a parent or guardian and you believe that a minor in your care has registered an account on bn77, please contact our support team immediately using the email address in the footer. We will investigate the matter as a priority and take all appropriate steps to protect the minor's welfare and personal data.

11. Third-Party Game Providers

The bn77 platform integrates games supplied by third-party software providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you launch and play a game from one of these providers, a secure game session is established between your device and the provider's game server. The following privacy considerations apply to third-party game sessions:

• bn77 passes a session token and an anonymised player identifier to the game provider's platform for the purpose of loading the game and recording your bet and win results in the provider's system. No personally identifiable contact information (such as your name, mobile number, or email address) is passed to game providers.
• Each third-party game provider operates under its own privacy policy in relation to session data processed on its servers. bn77 is not responsible for the data practices of third-party providers beyond the data shared at the point of session initiation.
• Game providers used by bn77 are certified software studios operating under recognised gaming certifications, and their data handling practices are subject to independent oversight within their respective operating frameworks.
• If you have questions about the data practices of a specific game provider, you should refer to that provider's published privacy policy directly.

12. Changes to This Privacy Policy

bn77 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the features and services offered on the platform. When material changes are made to this policy, bn77 will:

• Publish the updated Privacy Policy at bn77.io/privacy-policy with a revised "Last Updated" date at the top of the page.
• Notify registered players of material changes via SMS or email to the contact details registered on their account, providing a reasonable period of notice before the changes take effect.

Your continued use of the bn77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with a revised policy, you must stop using the platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bn77 handles your personal data. The current version of this policy is always the governing version.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bn77 handles your personal data, please contact our support team. All privacy-related enquiries are handled in English and treated as strictly confidential.

The bn77 support email address is displayed as plain text in the footer of every page on this website. When contacting us about a privacy matter, please include the phrase "Privacy Request" in the subject line of your message so that it is routed promptly to the appropriate team member. We will acknowledge all privacy enquiries within 72 hours and aim to provide a full response within 30 days.

For responsible gaming matters — such as self-exclusion requests, deposit limit changes, or cooling-off period applications — please include the phrase "Responsible Gaming Request" in your subject line instead. Responsible gaming requests are treated as a priority and actioned within 24 hours wherever possible.