277bt Privacy Policy — How We Protect and Handle Your Personal Data

1. Introduction

1.1 277bt is an online betting and casino platform operating at https://277bt.io, serving players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. As a platform that processes financial transactions and verifies player identities, we handle a range of personal data categories and take our obligations in respect of that data with the utmost seriousness.

1.2 This Privacy Policy applies to all personal data collected through the 277bt website, any associated mobile applications, communications you send to our support team, and any other interactions you have with the 277bt platform. It applies equally to registered players and to unregistered visitors who browse the platform without creating an account.

1.3 The 277bt platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from individuals below this age. If you are under 21, you must not use this platform or provide us with any personal information.

1.4 This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the platform.

2. Data We Collect

2.1 We collect several categories of personal data depending on the nature of your interaction with the 277bt platform. The table below provides a structured overview of the categories of data we collect and the specific fields within each category.

Data Category	Specific Data Fields	Collection Stage
Identity Data	Full legal name, date of birth, gender, National ID number or passport number	Registration & KYC verification
Contact Data	Mobile phone number, email address, residential address (city, district, postcode)	Registration
Financial Data	bKash / Nagad / Rocket wallet numbers, bank account details, Visa/Mastercard last 4 digits, transaction history	Deposit & withdrawal
Verification Documents	Scanned copy or photograph of government-issued photo ID, proof of address document, selfie for liveness check	KYC verification
Account Activity Data	Bet history, casino game history, login timestamps, session durations, device type, browser type, operating system	Ongoing platform use
Technical Data	IP address, device fingerprint, cookie identifiers, referral source URL	Site visit & login
Communications Data	Content of support tickets, live chat transcripts, emails sent to [email protected]	Customer support interactions
Responsible Gaming Data	Deposit limits set, time-out activations, self-exclusion requests, responsible gaming questionnaire responses	Account settings & support

2.2 We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond identity document photographs used solely for verification purposes), or health data, except where voluntarily disclosed by a player in the context of a responsible gaming self-exclusion request.

3. How We Collect Your Data

3.1 Directly from you. The majority of personal data we hold is provided directly by you during account registration, identity verification, deposit and withdrawal transactions, support communications, and responsible gaming tool activations.

3.2 Automatically during platform use. When you visit the 277bt website or use the platform, certain technical data is collected automatically via server logs, cookies, and similar technologies. This includes your IP address, browser type, operating system, referring URL, pages visited, and session duration. See Section 7 (Cookies & Tracking) for further detail.

3.3 From third-party verification providers. To comply with our Know Your Customer (KYC) obligations, we may share your identity data with third-party identity verification service providers who return a verification result (pass/fail) and associated confidence score to us. These providers operate under strict data processing agreements with 277bt.

3.4 From payment processors. When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, our payment processing partners confirm the status of the transaction and return a transaction reference and status code to 277bt. We receive only the data necessary to reconcile the transaction; we do not receive your full bKash PIN or card number.

3.5 From fraud prevention and AML screening services. We may receive data from third-party fraud detection and anti-money laundering (AML) screening services that flag unusual patterns of behaviour or matches against sanctions lists. This data is used solely for compliance purposes.

4. How We Use Your Data

4.1 277bt uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account details, and provide access to all platform features.
• Payment processing: To process deposits and withdrawal requests accurately and securely, and to maintain a complete transaction history in your account.
• Identity verification (KYC): To confirm that you meet the 21+ age requirement, to verify your identity in accordance with our anti-money laundering obligations, and to prevent fraudulent account activity.
• Platform personalisation: To tailor the games, promotions, and content displayed to you based on your betting history and preferences, where you have not opted out of personalisation.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes in a timely and accurate manner.
• Responsible gaming: To administer deposit limits, time-out periods, self-exclusion requests, and other player protection tools you activate on your account.
• Marketing communications: To send you promotional emails and SMS notifications about 277bt bonuses, tournaments, and new game releases — but only where you have expressly opted in to receive such communications. You may opt out at any time.
• Fraud detection and security: To monitor account activity for unusual patterns, detect multi-accounting, and prevent bonus abuse and money laundering in accordance with our Terms & Conditions.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by relevant legislation.
• Platform improvement: To analyse aggregated, anonymised usage data to identify bugs, optimise performance, and develop new features that improve the player experience.

5. Legal Basis for Processing

5.1 For each purpose listed in Section 4, 277bt relies on one or more of the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and 277bt (i.e., operating your account, processing transactions, and delivering betting and casino services). This covers account management, payment processing, KYC, customer support, and responsible gaming tools.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering requirements, age verification mandates, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out for 277bt's legitimate business interests where those interests are not overridden by your privacy rights. This covers fraud detection, security monitoring, platform improvement, and aggregated analytics.
• Consent: Processing activities for which 277bt has obtained your specific, freely given, and informed consent. This covers direct marketing communications (email and SMS promotions) and optional platform personalisation features. You may withdraw consent at any time without affecting prior processing.

6. Data Sharing & Disclosure

6.1 277bt does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own marketing purposes. Data sharing with third parties occurs only in the circumstances described in this section.

6.2 Service Providers. We share personal data with carefully selected third-party service providers who assist us in operating the 277bt platform. These include identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), fraud detection and AML screening services, email delivery providers, and cloud infrastructure providers. All such providers are contractually bound to process your data only on our documented instructions, to maintain appropriate security standards, and not to use your data for their own purposes.

6.3 Game Software Suppliers. When you play games provided by third-party software studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, Hacksaw Gaming, and Spribe, those game engines may receive a player session token and anonymised player identifier to operate the game. No full name, payment details, or National ID data is shared with game providers.

6.4 Legal and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of 277bt, our players, or the public.

6.5 Business Transfers. In the event that 277bt undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via email if such a transfer materially affects the processing of their personal data.

6.6 With Your Consent. In circumstances not covered by the categories above, we will share your personal data with third parties only with your explicit, informed prior consent.

7. Cookies & Tracking Technologies

7.1 277bt uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate the platform, remember your preferences, maintain your session security, and analyse platform usage patterns.

7.2 The following categories of cookies are used on the 277bt platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language, game display settings, and responsible gaming tool configurations between sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are visited most often, where players encounter errors, and how long sessions last. This data is used to improve the platform experience.
• Marketing Cookies: Track whether you arrived at 277bt via a specific referral link or promotional campaign, enabling us to measure the effectiveness of our acquisition activities. These are only set where you have consented to marketing data processing.

7.3 You can manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may impair some platform functions. Detailed instructions for managing cookies in major browsers are available on the browser developers' official support pages.

8. Data Retention

8.1 277bt retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

Data Category	Retention Period	Reason
Identity & Contact Data	5 years after account closure	AML and regulatory compliance obligations
Financial Transaction Data	7 years after transaction date	Financial record-keeping and audit requirements
KYC Verification Documents	5 years after account closure	Regulatory identity verification requirements
Account Activity & Betting History	3 years after account closure	Dispute resolution and responsible gaming review
Support Communications	3 years after resolution	Dispute resolution and quality assurance
Marketing Consent Records	Until consent withdrawn + 2 years	Proof of consent for regulatory purposes
Technical & Analytics Data	13 months on a rolling basis	Platform analytics and fraud detection
Self-Exclusion Records	Permanent (unless exclusion expires)	Responsible gaming obligations and player protection

8.2 Where data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical analysis.

9. Data Security

9.1 277bt implements a multi-layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, or alteration. Key security measures in place include:

• TLS/SSL Encryption: All data transmitted between your browser or device and the 277bt platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. This means that even internal 277bt staff cannot view your password — only a hash of it is stored.
• Access Controls: Access to personal data within 277bt's internal systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and audited. Only staff with a legitimate operational need can access specific data categories.
• Infrastructure Security: 277bt's server infrastructure is hosted in secure data centres with physical access controls, environmental monitoring, and redundant power and connectivity systems.
• Penetration Testing: Our platform and infrastructure undergo regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Fraud Monitoring: Automated real-time systems monitor account activity for indicators of compromise, unusual login locations, and suspicious transaction patterns, triggering alerts and account protections where anomalies are detected.

9.2 While 277bt applies robust security measures, no internet-based system can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your own account credentials — see Section 5 of the Terms & Conditions for your obligations in this regard.

9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 277bt will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

10. Your Rights

10.1 As a player on the 277bt platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "DATA RIGHTS REQUEST" and your full account username.

• Right of Access: You have the right to request a copy of the personal data 277bt holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly from your profile settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and we have no overriding legitimate grounds. Note that we may be required to retain certain data for legal compliance purposes even after an erasure request — in such cases, we will explain the specific retention obligations that apply.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, such as while we investigate a data accuracy dispute.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including profiling for direct marketing purposes. Where you object to marketing processing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. You can unsubscribe from marketing emails via the unsubscribe link in any marketing email or by contacting support.

10.2 277bt will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

11. Children & Minors

11.1 The 277bt platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or store personal data relating to individuals below the age of 21.

11.2 Our registration process includes date-of-birth verification and age-gate controls designed to prevent underage access. All accounts are subject to KYC verification which includes confirmation of the player's date of birth against a government-issued identity document.

11.3 If 277bt becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the originating payment method after identity confirmation. If you are a parent or guardian and believe your child has registered on the 277bt platform, please contact us immediately at [email protected].

12. Third-Party Links

12.1 The 277bt platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game software suppliers. While we take care to work only with reputable partners, 277bt is not responsible for the privacy practices of third-party organisations.

12.2 When you interact with a third-party payment interface or game provider's platform, you do so subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party services you use in connection with your 277bt account.

12.3 277bt does not control and is not responsible for the content, privacy policies, or practices of third-party websites that may be linked to or from the 277bt platform in the course of game provision or payment processing.

13. International Data Transfers

13.1 277bt's primary player base is in Bangladesh. However, some of our third-party service providers — particularly identity verification providers, cloud infrastructure operators, and game software suppliers — may process data in jurisdictions outside Bangladesh.

13.2 Where personal data is transferred to third-party processors in other jurisdictions, 277bt ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, transfer impact assessments, and technical measures such as encryption.

13.3 By using the 277bt platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence in the circumstances described in this section, subject always to the safeguards described above.

14. Policy Amendments

14.1 277bt reserves the right to update or amend this Privacy Policy at any time. When we make changes, the revised Policy will be published at https://277bt.io/privacy-policy with an updated "Last updated" date at the top of this page.

14.2 Where an amendment is material — meaning it significantly changes how we collect or use your personal data, or affects your rights — we will notify registered players via email at least 7 days before the amended Policy takes effect.

14.3 Non-material changes (such as editorial corrections, clarifications of existing practices, or updates to contact details) may take effect immediately upon publication without advance notice.

14.4 Your continued use of the 277bt platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must close your account and cease using the platform.

15. Contact & Complaints

15.1 If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to report a suspected data breach, please contact the 277bt Data Protection team using the details below. All correspondence should be in English.

Privacy Contact: [email protected]

Subject Line for Data Rights Requests: DATA RIGHTS REQUEST

Subject Line for Data Breach Reports: DATA BREACH REPORT

15.2 277bt aims to acknowledge all privacy-related enquiries within 24 hours (Bangladesh Standard Time, UTC+6) and to resolve requests within 30 calendar days.

15.3 If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.