Privacy Policy — How bd977 Collects, Uses, and Protects Your Personal Data

Information We Collect

bd977 collects personal data through several channels during the normal course of providing its online gaming and sports betting services to players in Bangladesh and internationally. The categories of data we collect are set out below, along with the specific context in which each category is gathered.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data. If any such data is inadvertently provided during a support interaction, it will be deleted promptly and will not be processed for any purpose.

How We Use Your Information

The personal data collected by bd977 is used exclusively for legitimate, defined purposes related to the operation of the platform and fulfilment of our obligations to players. We do not process personal data in ways that are incompatible with the purpose for which it was originally collected. The primary uses of your data are as follows:

• Account Management: To create, verify, operate, and maintain your bd977 player account, including processing your login credentials and keeping your profile information up to date.
• Transaction Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and to process withdrawal requests to your nominated payment method. Financial data is shared with our payment processing partners solely to complete individual transactions.
• Identity Verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your account is not being used for money laundering or other fraudulent activity. KYC is a legal obligation for licensed gaming operators.
• Customer Support: To respond to your enquiries, investigate disputes, process complaints, and provide technical assistance when you contact our support team.
• Platform Security: To detect and prevent fraud, account takeover attempts, bonus abuse, multi-accounting, and other violations of the bd977 Terms & Conditions. Technical data such as IP addresses and device fingerprints is central to this function.
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering laws, to respond to lawful requests from law enforcement authorities, and to cooperate with any regulatory review process.
• Service Improvement: To analyse aggregated usage patterns, identify areas of the platform that underperform technically, and improve the overall gaming experience. Analytics data used for this purpose is anonymised wherever possible.
• Promotional Communications: To send you information about bonuses, promotions, new games, and special events — but only where you have opted in to receive marketing communications. You may withdraw your consent at any time by contacting [email protected].
• Responsible Gaming: To monitor your gaming behaviour for signs of problematic gambling activity and to enforce any self-exclusion or deposit limit arrangements you have requested. See our Responsible Gaming page for details.

bd977 will never use your personal data to make automated decisions that produce significant legal effects without a human review stage. Where profiling is used (for example, to flag unusual betting patterns for fraud review), a trained compliance officer will review the flagged case before any account action is taken.

Sharing and Disclosure of Data

bd977 does not sell, rent, broker, or otherwise commercially transfer your personal data to third parties. Data is shared only in the limited, specific circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with this Privacy Policy.

• Payment Processors: Your financial data — including mobile wallet numbers and bank account details — is shared with our payment partners (including bKash, Nagad, Rocket, Upay, and participating banks) solely to process the specific transaction you have initiated. These processors handle your data under their own privacy frameworks and are bound by applicable financial regulations.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session tokens or player identifiers necessary to deliver their game content within the bd977 platform. These studios do not receive your name, address, or financial information.
• KYC and AML Service Providers: Identity verification may be assisted by third-party compliance service providers who conduct document authentication checks on our behalf. These providers are bound by strict data processing agreements and may not use your data for their own purposes.
• IT Infrastructure Providers: Cloud hosting, database management, and network security services may be provided by third-party vendors. These vendors are engaged as data processors under contractual terms that reflect the security and privacy standards set out in this Policy.
• Law Enforcement and Regulatory Authorities: bd977 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order, court subpoena, or regulatory directive. We will notify you of such a disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bd977's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given an opportunity to close your account if you do not wish your data to be transferred.

Cookies and Tracking Technologies

bd977 uses cookies and similar browser-based technologies (including local storage and session storage) to ensure the platform functions correctly, to maintain your login session, and to gather anonymised performance data. The following categories of cookies are used on the bd977 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session management cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: bd977 uses first-party analytics to understand how players navigate the platform, which pages generate the most engagement, and where technical errors occur. This data is collected in aggregate and anonymised form. No individual player is profiled through analytics cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category, table stakes settings, or notification preferences — so that your experience is personalised across sessions.

bd977 does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. You will not be tracked across other websites based on your bd977 activity.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the bd977 platform, including your ability to log in and place bets. Most modern browsers provide a "Clear Cookies" function in the privacy or history settings menu.

Data Retention and Storage

bd977 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods applied to each category of data are guided by the following principles:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account's active status. This includes identity records, contact information, and financial data necessary for ongoing transaction processing.
• Transaction Records: Financial transaction records — including deposit and withdrawal histories — are retained for a minimum of five years following the date of the transaction. This retention period reflects standard anti-money laundering record-keeping obligations.
• KYC Documents: Identity verification documents (NID copies, passport scans, utility bills) are retained for a minimum of five years following the closure or last activity of the associated account. Copies submitted during the verification process are stored in an encrypted document vault with restricted access.
• Support Communications: Customer support ticket content and email correspondence is retained for three years from the date of the last interaction, allowing us to reference prior communications in the event of a recurring issue or escalated dispute.
• Closed Account Data: Following account closure, bd977 retains the minimum data set required for legal compliance purposes (principally transaction records and KYC documents) for the periods stated above. Data that is no longer required for any legal or operational purpose is securely deleted or anonymised.
• Technical Logs: Server logs, access logs, and IP address records are retained for up to 12 months for security monitoring and fraud investigation purposes, after which they are purged on a rolling basis.

All personal data stored by bd977 is held on secured servers protected by multi-layer access controls, encryption at rest, and regular security auditing. Backup copies of data are also encrypted and stored in geographically separate secure locations to ensure business continuity.

Your Privacy Rights

bd977 recognises and respects the privacy rights of all players. Irrespective of your country of residence, you are entitled to exercise the following rights with respect to the personal data bd977 holds about you:

• Right of Access: You have the right to request a copy of the personal data bd977 holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information directly through your account settings; for identity document corrections, contact [email protected].
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no overriding legitimate purpose exists. Note that erasure requests cannot be fulfilled for data that is subject to a legal retention obligation (such as AML transaction records).
• Right to Restriction of Processing: You have the right to request that bd977 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and we are assessing the grounds for that objection.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive the personal data you provided to bd977 in a portable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case bd977 will cease processing unless compelling overriding grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent (for example, the receipt of promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, submit a written request to [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. We may request proof of identity before actioning a request to ensure that personal data is not disclosed to an unauthorised party.

Security Measures

The security of your personal data is a standing operational priority at bd977. We employ a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Transport Layer Encryption: All data in transit between your browser or mobile device and the bd977 platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed automatically to prevent lapses in encryption coverage.
• Encryption at Rest: Sensitive fields in our databases — including password hashes, identity document references, and financial account numbers — are encrypted at rest using AES-256 encryption. Encryption keys are managed under a separate key management policy with strict access controls.
• Password Security: User passwords are never stored in plain text. All passwords are hashed using a modern cryptographic hashing algorithm with per-user salting. Even bd977's internal engineering team cannot recover a player's password from our database.
• Access Controls: Access to player data within bd977's internal systems is governed by a role-based access control (RBAC) framework. Employees can only access data that is necessary for their specific job function. All internal data access events are logged and periodically audited.
• Intrusion Detection: bd977's network infrastructure is monitored 24 hours a day, 7 days a week using automated intrusion detection systems. Anomalous access patterns — including unusual login locations, bulk data queries, or privilege escalation attempts — trigger immediate alerts and investigation.
• Vulnerability Management: The bd977 platform undergoes regular penetration testing and vulnerability scanning by qualified security professionals. Critical vulnerabilities identified during assessments are remediated on a priority basis before public exploitation is possible.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a risk to your personal data, bd977 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach. A detailed breach report will be prepared and retained in accordance with our incident response policy.

You can also protect your own account security by choosing a strong, unique password, not sharing your login credentials with anyone, logging out of shared devices after each session, and contacting [email protected] immediately if you suspect unauthorised access to your account.

Updates to This Policy

bd977 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, or improvements to how we communicate our privacy commitments to players. The effective date at the top of this document will be updated each time a material change is made.

Where changes are material — meaning they could meaningfully affect the way your personal data is processed or the rights available to you — bd977 will provide advance notice through one or more of the following channels:

• A prominent notice on the bd977 platform homepage or login page, visible to all visiting users.
• An email notification sent to the registered email address associated with your player account.
• An in-platform notification displayed when you next log in to your account after the updated Policy is published.

Minor changes — such as corrections to typographical errors, clarifications that do not alter the substance of our data practices, or updates to contact information — will be made without advance notice. The effective date will still be updated to reflect when the change was made.

Your continued use of the bd977 platform after a revised Privacy Policy becomes effective constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure by contacting [email protected].

Archived versions of previous Privacy Policies are retained internally and are available upon written request to [email protected] for players who wish to review the terms that were in force at a specific historical date.