Your Privacy Matters
at 2b77

1 Introduction

2b77 ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the 2b77 online casino and sports betting platform accessible at https://2b77.io and any associated mobile-optimised pages (collectively, the "Platform").

This Privacy Policy sets out in clear terms what personal data we collect from you when you visit, register on, or use the 2b77 Platform; the purposes for which we use that data; the legal bases on which we rely to process it; how and with whom we may share it; how long we keep it; the security measures we apply to protect it; and the rights you hold in respect of your personal information.

Please read this Privacy Policy carefully before using the 2b77 Platform. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Privacy Policy is incorporated into, and forms part of, the 2b77 Terms and Conditions available at Terms & Conditions.

2 Data Controller

For the purposes of applicable data protection law, 2b77 is the data controller in respect of personal data collected from players using the Platform. As data controller, 2b77 determines the purposes and means by which your personal data is processed.

If you have any questions, requests, or concerns regarding the processing of your personal data, you may contact our designated data protection contact at:

Email: [email protected]

We aim to respond to all data-related enquiries within 30 days of receipt.

3 Personal Data We Collect

2b77 collects the following categories of personal data from players:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the minimum age requirement of 21 years)
• Residential address including district, division, and postal code
• Email address and mobile phone number registered to your account
• National ID card number, passport number, or other government-issued identifier submitted during KYC verification

3.2 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay) including the registered mobile number associated with those accounts
• Bank account or card details where card-based payments are used (Visa, Mastercard)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used for each transaction
• Account balance history and bonus credit records

3.3 Account and Activity Data

• Username and encrypted password credentials
• Game play history including games played, bet amounts, outcomes, and session durations
• Sports betting history including markets selected, odds accepted, stake amounts, and outcomes
• Bonus and promotion claim history
• Responsible gaming tool settings including deposit limits, session reminders, and self-exclusion status
• Customer support communication history including emails, chat logs, and ticket records

3.4 Technical and Device Data

• IP address and geolocation data derived from your IP address at the time of login and during active sessions
• Device type, operating system, browser type and version, and screen resolution
• Session timestamps, login and logout times, and session duration logs
• Cookie identifiers and similar tracking data as described in Section 8

3.5 Verification Documents

• Copies of government-issued photo identification documents submitted during KYC (National ID, passport, or driver's licence)
• Proof of address documents (utility bills, bank statements) dated within three months of submission
• Selfie or liveness-check images submitted to verify the authenticity of identity documents where required

4 How We Collect Your Data

2b77 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing the KYC verification process, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, server logs, and session tracking technologies described in Section 8.
• Third-party payment providers: Transaction confirmation data shared with us by bKash, Nagad, Rocket, Upay, Visa, and Mastercard when you initiate a deposit or withdrawal through those services.
• Identity verification partners: Where 2b77 uses a third-party KYC service to assist with document verification, that partner may share verification outcomes and supporting data with us as part of the KYC process.
• Fraud prevention and security services: Risk-scoring data and device fingerprint signals provided by fraud-prevention partners to protect the integrity of the Platform.

5 Legal Basis for Processing

2b77 processes personal data on one or more of the following legal bases depending on the purpose of processing:

6 How We Use Your Personal Data

2b77 uses the personal data we collect for the following purposes:

• Account creation and management: To create and maintain your 2b77 account, authenticate your identity at login, and manage your account preferences and settings.
• Service delivery: To process your bets, deposit and withdrawal transactions, bonus claims, and to provide access to all games and features available on the Platform.
• Age and identity verification: To verify that all players meet the minimum age requirement of 21 years and to confirm the accuracy of the identity information provided during registration and KYC.
• Financial compliance: To detect, investigate, and report suspicious transactions in accordance with applicable anti-money-laundering obligations. Financial transaction records are maintained as required by law.
• Responsible gaming: To monitor player behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide appropriate interventions where player welfare may be at risk.
• Fraud prevention and platform integrity: To identify and prevent fraudulent account activity, bonus abuse, multi-accounting, and any other conduct that violates the 2b77 Terms and Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and communicate important account information to you via your registered email address.
• Marketing and promotions: Where you have provided consent, to send you information about 2b77 promotions, seasonal offers (such as BPL, IPL, or Eid campaigns), and new platform features. You may opt out at any time.
• Platform improvement: To analyse aggregated usage patterns, identify technical issues, and improve the performance, design, and content of the 2b77 Platform.

7 Data Sharing and Disclosure

2b77 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances:

7.1 Game Providers

When you play a game on 2b77, limited technical session data (such as a session token and account identifier) is shared with the relevant game provider (e.g., Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) solely for the purpose of facilitating your game session. Game providers do not receive your full identity or financial data.

7.2 Payment Processors

To process deposits and withdrawals, 2b77 shares the minimum necessary transaction data with the relevant payment service provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These providers operate under their own privacy policies and are independently responsible for the data they hold in connection with your payment account.

7.3 Identity Verification and KYC Partners

Where 2b77 uses a third-party service to assist with document verification or biometric liveness checks, the relevant identity documents and verification data are shared with that partner for processing. All KYC partners used by 2b77 are contractually bound to process this data solely for the purpose of providing the verification service and to maintain appropriate data security standards.

7.4 Fraud Prevention and Security Partners

2b77 shares certain technical data (including IP addresses, device fingerprints, and risk-scoring signals) with fraud-prevention partners to detect and prevent fraudulent activity on the Platform. This processing is based on our legitimate interest in maintaining the integrity and security of the Platform for all players.

7.5 Legal and Regulatory Disclosure

2b77 may disclose personal data to law enforcement authorities, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 2b77, its players, or the general public. Such disclosures will be made in strict compliance with applicable law.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 2b77's business assets, personal data held by 2b77 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via the email address registered to their account prior to their data being transferred and before the new entity's privacy policy takes effect.

8 Cookies and Tracking Technologies

2b77 uses cookies and similar technologies on the Platform for the following purposes:

2b77 does not use third-party advertising cookies, cross-site tracking pixels, or any cookie that would allow advertisers to build a profile of your browsing behaviour across websites other than 2b77.io.

You may manage your cookie preferences through your browser settings. Please note that disabling essential or security cookies will impair the functionality of the 2b77 Platform and may prevent you from logging in or accessing certain features.

9 Data Security

2b77 implements industry-standard technical and organisational security measures to protect the personal data we hold against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 2b77 Platform, ensuring that your credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive data categories including identity documents, payment details, and account credentials stored in our databases.
• Access controls: Personal data is accessible only to 2b77 employees and contractors who require it to perform their specific job functions. Access is governed by role-based permissions and is regularly audited.
• Two-factor authentication is available to all registered players and is strongly recommended to protect account access.
• Regular security testing including vulnerability assessments and penetration testing conducted on the Platform infrastructure.
• Incident response procedures: In the event of a data breach that poses a risk to your rights and freedoms, 2b77 will notify affected players via their registered email address within a reasonable period of identifying the incident.

While 2b77 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that no unauthorised person has access to the device or account through which you access 2b77.

10 Data Retention

2b77 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of the player's registration on 2b77. Players may request account closure at any time, after which active account data is archived.
• Identity and KYC documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later, in accordance with anti-money-laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years following the date of each transaction for financial compliance and dispute resolution purposes.
• Customer support records: Retained for 3 years from the date of the last communication, unless the matter relates to an unresolved dispute or legal claim in which case records are retained until final resolution.
• Marketing consent records: Retained for the duration of your active consent and for 12 months following your withdrawal of consent, as evidence of consent management.
• Technical logs: Retained for up to 12 months from the date of generation, used for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11 Your Privacy Rights

As a 2b77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered username:

• Right of access: You may request a copy of the personal data 2b77 holds about you, together with information about how it is processed. We will provide this within 30 days of your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (such as name changes) may require supporting documentation.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that certain data must be retained for legal compliance purposes as described in Section 10 and cannot be deleted on request.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12 Children's Privacy

The 2b77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the 2b77 registration and KYC process, and accounts that cannot be verified as belonging to an adult aged 21 or over will be suspended pending verification or permanently closed.

If you have reason to believe that a person under the age of 21 has created an account on 2b77 or has provided personal data to 2b77 without proper age verification, please notify us immediately at [email protected]. We will investigate and take appropriate action, including account closure and deletion of any data collected in connection with an underage individual, as quickly as reasonably practicable.

13 International Data Transfers

2b77 operates its core platform infrastructure in data centres that may be located outside the country in which you are based. Where your personal data is transferred to and processed in a jurisdiction outside your own, 2b77 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections applicable in your home jurisdiction.

These safeguards may include standard contractual clauses, data processing agreements with our service providers, and technical security measures as described in Section 9. By using the 2b77 Platform, you acknowledge and consent to the transfer of your personal data to the extent necessary to provide the services you have requested.

14 Third-Party Links

The 2b77 Platform may contain references to third-party game providers and payment service partners. While 2b77 takes care to work only with reputable partners, we are not responsible for the privacy practices of any third-party organisation and this Privacy Policy does not extend to any website, service, or application operated by a third party. We encourage you to review the privacy policies of any third-party service you use in connection with your 2b77 account.

15 Updates to This Privacy Policy

2b77 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered players via the email address associated with their account and will update the "Last Reviewed" date displayed at the top of this document.

The most current version of this Privacy Policy is always available at https://2b77.io/privacy-policy. We encourage you to review this Policy periodically. Continued use of the 2b77 Platform following notification of any update constitutes your acceptance of the revised Privacy Policy.

16 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which 2b77 processes your personal data, please contact our support team. We are available 24 hours a day, 7 days a week.

Email: [email protected]

Please include your registered username and the subject line "Privacy Policy Enquiry" in all correspondence related to data protection matters. We aim to respond to all data-related requests within 30 days of receipt.

For responsible gaming concerns, please also visit our dedicated Responsible Gaming page or contact support directly for immediate assistance.

21+ Only — 2b77 is strictly for adults aged 21 and above.