77ba Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 77ba ("we", "us", "our") collects, uses, stores, and protects personal data relating to individuals ("you", "your", "the Player") who register for and use the 77ba online betting and casino platform, accessible at https://77ba.io. This Policy applies to all personal data processed in connection with your use of the platform, regardless of the device or channel through which you access it.

77ba is committed to handling personal data responsibly and transparently. We recognise that players in Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been written in plain English so that every player can understand how their data is being used and what choices they have.

This Policy should be read alongside the 77ba Terms & Conditions, which govern the broader contractual relationship between you and the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data processing, this Policy shall take precedence.

2. Who We Are

77ba is the operator of the online betting and casino platform at https://77ba.io. For the purposes of data processing, 77ba acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under our instruction and are bound by appropriate data processing agreements.

If you have any questions about this Policy or wish to exercise any of your data rights, please contact us using the support email address displayed in the footer of every page on this site. We aim to acknowledge all privacy-related enquiries within two (2) business days (Bangladesh Standard Time, UTC+6).

3. Data We Collect

77ba collects personal data in the following categories. We only collect data that is necessary for a defined purpose — we do not collect data speculatively or beyond what is required to operate the platform effectively and responsibly.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data we hold about you is data you provide to us directly through the platform. This includes information entered during account registration (name, date of birth, contact details), identity documents uploaded during KYC verification, payment details provided when making a deposit or requesting a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, and communications you send to our support team.

4.2 Data Collected Automatically

When you use the 77ba platform, certain data is collected automatically by our technical systems. This includes your IP address, device type and operating system, browser type and version, session start and end times, pages and game titles accessed during your session, and error logs. This data is collected primarily for security monitoring, fraud prevention, and platform performance purposes.

4.3 Data from Third Parties

In limited circumstances, 77ba may receive data about you from third parties. For example, our payment processing partners may confirm the status of a transaction or flag a suspicious payment pattern. Our game providers, including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe, may share game session data necessary for dispute resolution. We do not purchase personal data lists from data brokers or marketing agencies.

5. How We Use Your Data

77ba uses personal data for the following purposes. Each use is tied to a specific legal basis as set out in Section 6 of this Policy:

• Account creation and management: Processing your registration, maintaining your account, and providing access to all platform features including cricket betting, slots, live casino, and the 77ba Casino product suite.
• Identity and age verification (KYC): Confirming that you are at least 21 years of age and that the identity and payment details you have provided are genuine, as required for responsible platform operation.
• Payment processing: Facilitating deposits and withdrawals in BDT via supported MFS providers and banking channels, and maintaining an accurate transaction history for your account.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, money laundering, collusion, or other prohibited conduct as defined in the Terms & Conditions. This includes automated risk-scoring of transactions and behavioural analysis.
• Responsible gaming compliance: Monitoring your betting patterns and session data to identify signs of problem gambling behaviour, enforcing deposit limits and self-exclusion requests, and providing proactive outreach where risk indicators are identified.
• Customer support: Processing and responding to enquiries, complaints, and disputes submitted through our support channels.
• Platform improvement and analytics: Analysing anonymised or aggregated usage data to understand how players interact with the platform, identify popular games and markets, and improve the overall product experience.
• Marketing communications: Sending you information about relevant promotions, bonuses, and platform updates — but only where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: Meeting any obligations imposed by applicable law, including cooperation with law enforcement or financial intelligence requests received in accordance with proper legal process.

6. Legal Bases for Processing

Every instance of personal data processing at 77ba is grounded in one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and KYC — is necessary for the performance of the contract between you and 77ba.
• Legal obligation: Certain processing — including identity verification, transaction record-keeping, and cooperation with law enforcement — is required by applicable law and regulation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product analytics is conducted on the basis of 77ba's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is based solely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Data

77ba does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other MFS or banking partners require transaction data to process your deposits and withdrawals. These providers handle such data in accordance with their own privacy policies and applicable financial regulations.
• Game content providers: Third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive session-level data (game ID, stake, outcome) necessary to deliver their games and resolve disputes. They do not receive your full identity or financial data.
• Technical service providers: Cloud hosting, data analytics, fraud detection, and customer support platform providers may process certain data on our behalf under strict data processing agreements. They act solely under our instruction.
• Law enforcement and regulatory bodies: Where required by applicable law, a court order, or a lawful regulatory request, 77ba may disclose personal data to relevant authorities. We will only do so to the extent strictly required by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 77ba's business, personal data may be transferred as part of that transaction. You will be notified of any such transfer and any changes to data processing that result from it.

8. Cookies and Tracking Technologies

77ba uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and understand how players use the site. Cookies are small text files stored on your device when you visit the platform.

8.1 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate the platform — which pages and games are visited most frequently, how long sessions last, and where errors occur. This data helps us improve the platform experience.
• Preference cookies: Store your platform preferences, such as language settings, to improve your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

8.2 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You can choose to block or delete cookies at any time; however, please note that disabling essential cookies will prevent you from logging in to your 77ba account and using the platform. Non-essential analytics and preference cookies can be disabled without affecting core platform functionality.

9. Data Security

77ba implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and the 77ba platform.
• Encryption of sensitive data — including financial data and identity documents — at rest in our database systems.
• Role-based access controls ensuring that only authorised 77ba personnel can access personal data, limited to the scope required for their role.
• Regular security assessments and monitoring of the platform infrastructure for vulnerabilities and intrusion attempts.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised account access.
• Strict data processing agreements with all third-party providers who handle personal data on our behalf.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. While 77ba takes every reasonable precaution to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players as promptly as practicable in accordance with applicable law.

10. Data Retention

77ba retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status on the platform.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping obligations applicable in the relevant jurisdiction.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, unless a longer period is required by applicable anti-money laundering regulation.
• Support communications: Retained for a minimum of two (2) years to facilitate dispute resolution and quality assurance.
• Closed account data: Following account closure, personal data is retained for the applicable statutory period and then securely deleted or irreversibly anonymised.

Where data is retained beyond the period strictly necessary for operational purposes — for example, to satisfy a legal retention obligation — access to that data is restricted to authorised personnel only, and it is not used for any active processing purpose.

11. Children and Minors

The 77ba platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under your care may have registered a 77ba account using false information, please contact our support team immediately. We will investigate and act promptly upon receipt of a verified report.

12. Exercising Your Privacy Rights

To exercise any of the data rights described in Section 3 of this Policy — including the rights of access, rectification, erasure, objection, portability, and restriction — please contact the 77ba support team via the email address displayed in the footer of this page. To protect the security of your account, we may need to verify your identity before processing any data rights request.

We aim to respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months; you will be informed of any such extension and the reasons for it within the initial thirty-day period. There is no charge for submitting a data rights request, unless the request is manifestly unfounded or excessive — in which case we may charge a reasonable fee or decline to act, with written reasons provided.

13. International Data Transfers

In the course of providing the 77ba platform to players in Bangladesh, certain personal data may be transferred to and processed in countries outside Bangladesh. This may occur, for example, where our third-party game providers or cloud infrastructure providers are based in other jurisdictions.

Where such transfers occur, 77ba takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that which it would receive within Bangladesh. These steps include ensuring that receiving entities are subject to contractual data protection obligations that meet an appropriate standard, and that technical security measures are applied to data in transit.

14. Changes to This Privacy Policy

77ba may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material — meaning they meaningfully affect your rights or how your data is processed — we will notify you via a notice displayed on the platform upon login, and where possible by email to your registered address.

The effective date at the top of this Policy indicates when the current version was last reviewed and updated. We encourage you to review this page periodically. Continued use of the platform following notification of a material change constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how your personal data has been handled, please contact the 77ba data privacy team via the support email address displayed in the footer of this page. We take all privacy enquiries seriously and aim to respond within two (2) business days (Bangladesh Standard Time, UTC+6).

For responsible gaming requests, account security concerns, or general support, our team is available 24 hours a day, 7 days a week. Please include your account username or registered mobile number in any privacy-related correspondence so that we can locate your records and respond accurately.