77tbaji Privacy
Policy

77tbaji collects personal data from players through three primary channels: information you provide directly during account registration and ongoing platform use; information generated automatically through your interactions with the platform; and information received from trusted third-party service providers as part of our payment processing and identity verification workflows.

Information you provide directly:

• Account registration data: Full legal name, date of birth, residential address (including city, district, and postal code within Bangladesh), email address, and mobile phone number.
• KYC verification documents: Copies of your National Identity Card (NID), passport, or other government-issued photo identification; proof of address documents; and proof of ownership of your registered payment method (e.g., bKash or Nagad account screenshot).
• Financial data: Payment method details including mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details for bank transfer transactions, and card details where Visa or Mastercard is used. Full card numbers are not stored by 77tbaji — card processing is handled by our certified payment partners.
• Communications data: Any messages, emails, or chat transcripts exchanged with the 77tbaji support team at [email protected].
• Responsible gaming preferences: Any deposit limits, session time limits, self-exclusion requests, or reality-check settings you configure through your account.

Information collected automatically:

• Device and technical data: IP address, device type (mobile/desktop/tablet), operating system, browser type and version, screen resolution, and device fingerprint identifiers used for fraud prevention.
• Usage data: Pages visited on 77tbaji.net, time spent on each page, game sessions initiated and completed, bet amounts, wager history, and navigation paths through the platform.
• Session data: Login timestamps, session duration, logout events, and failed login attempts.
• Geolocation data: Approximate geographic location derived from your IP address, used to verify jurisdiction eligibility and detect VPN or proxy use.

Information received from third parties:

• Payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners confirming deposit and withdrawal transaction statuses.
• Identity verification outcomes from KYC service providers used to cross-reference submitted documents against official records.
• Fraud risk scores from our payment fraud detection partners, which help 77tbaji identify and block suspicious financial activity before it affects genuine players.

77tbaji uses the personal data described in Section 1 for the following specific and legitimate purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account creation and management: To register your 77tbaji account, verify your identity, maintain your account settings, and ensure only you have authorised access to your account.
• Processing deposits and withdrawals: To initiate, verify, and complete financial transactions via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard in Bangladeshi Taka (BDT). Financial data is shared only with the relevant payment processor handling your specific transaction.
• KYC and age verification: To confirm that all 77tbaji players are aged 18 or above and that the identity of the account holder matches the payment methods registered to the account, as required for responsible gaming compliance.
• Fraud prevention and platform security: To detect and prevent account takeover attempts, multi-account abuse, bonus fraud, money laundering, and use of automated tools. Device fingerprinting and IP geolocation data play a key role in these security processes.
• Customer support: To respond to queries, complaints, and support requests submitted to [email protected], and to maintain a record of our communications with you for quality assurance purposes.
• Personalisation of gaming experience: To remember your game preferences, recently played titles, and favourite payment methods so the platform feels familiar on each visit.
• Promotions and marketing communications: To send you information about 77tbaji bonuses, seasonal promotions (such as BPL, Eid, and Pohela Boishakh offers), and platform updates — but only where you have given explicit consent to receive such communications. You may opt out at any time.
• Responsible gaming monitoring: To monitor player activity for signs of problem gambling behaviour and to enforce any deposit limits, session limits, or self-exclusion periods you have set through your account.
• Legal and regulatory compliance: To meet our obligations under applicable laws and regulations, including responding to lawful data requests from relevant authorities where required.
• Platform analytics and improvement: To analyse aggregate, anonymised usage data and improve the layout, speed, and game selection offered on 77tbaji.net.

77tbaji does not sell, rent, or trade your personal data to any third party. We share data only with carefully selected partners and service providers who are contractually obligated to process your data solely on our instructions and in strict accordance with applicable data protection standards. The categories of third parties with whom we may share data are as follows:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum necessary financial and identity data to process your deposit or withdrawal transaction. These partners are independently regulated financial institutions with their own data protection obligations.
• Identity verification providers: Specialist KYC service providers who assist 77tbaji in verifying the authenticity of submitted identity documents. These providers process document images and biometric data solely for verification purposes and do not retain your data beyond the verification workflow.
• Game content studios: Third-party game developers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and pseudonymised player identifiers to enable your game sessions. These studios do not receive your full name, address, or payment details.
• Fraud prevention and security partners: Specialist providers who supply device fingerprinting, IP reputation scoring, and transaction risk analysis services. These partners receive technical data (IP address, device identifiers) but not sensitive financial or identity documents.
• Customer support infrastructure: Our helpdesk and live chat platform providers who process support ticket content and communication logs strictly within the 77tbaji support workflow.
• Legal and regulatory authorities: Where 77tbaji is required by law, court order, or regulatory directive to disclose personal data, we will comply with such requirements and, where permitted, will notify the affected player of any such disclosure.

All third-party data processors engaged by 77tbaji are bound by written data processing agreements that prohibit secondary use of your data, require appropriate technical and organisational security measures, and mandate the deletion of your data once the processing purpose has been fulfilled.

77tbaji uses cookies and similar tracking technologies to operate the platform reliably, maintain your login session across page loads, and gather anonymous aggregate analytics that help us improve the site. We do not use third-party advertising cookies or social media tracking pixels.

Types of cookies used on 77tbaji.net:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session after login, remember your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate 77tbaji.net — which pages are visited most frequently, how long players spend on each game category, and where navigation drop-offs occur. This data is used exclusively to improve the platform and is never linked back to individual player identities.
• Functional cookies: These cookies remember your preferences such as your preferred deposit method, your recently played games list, and your notification settings. They improve your experience by reducing repetitive configuration steps each time you visit.
• Security cookies: Short-lived cookies used for fraud detection and device recognition. These help 77tbaji identify unusual login patterns (such as a login from an unrecognised device or location) and trigger appropriate security alerts.

Cookie duration: Session cookies are deleted automatically when you close your browser. Persistent cookies used for preference and analytics purposes are retained for a maximum of 12 months before expiry. You can delete all cookies stored by 77tbaji.net at any time by clearing your browser's cookie storage.

Managing cookies: You may configure your browser to block or delete cookies at any time. Instructions for the most common browsers are available in your browser's Help section. Please note that disabling strictly necessary cookies will prevent you from logging in to your 77tbaji account.

77tbaji implements a multi-layered data security architecture to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include but are not limited to the following:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers, covering login, registration, deposit, withdrawal, and document upload workflows.
• AES-256 encryption at rest for all sensitive personal data stored in our databases, including identity documents, payment method details, and KYC records.
• Access controls: Personal data is accessible only to authorised 77tbaji staff whose roles require access for legitimate operational purposes (e.g., KYC review, fraud investigation, customer support). Access is logged, audited, and subject to periodic review.
• Two-factor authentication (2FA) for all 77tbaji staff accounts with administrative or database access, and offered as an optional security feature for player accounts.
• Regular penetration testing and security audits carried out by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection systems that monitor platform traffic in real time and alert our security team to anomalous patterns indicative of automated attacks or unauthorised access attempts.
• Segregated data environments: Player identity data, financial data, and gameplay data are stored in logically separate systems with independent access controls, minimising the blast radius of any potential breach.

Data breach response. In the unlikely event of a data breach that poses a risk to your personal information, 77tbaji will notify affected players by email within 72 hours of confirming the breach. The notification will describe the nature of the breach, the categories of data affected, the steps taken to contain it, and the actions you should take to protect your account.

Server location. 77tbaji's primary data infrastructure is hosted on servers with ISO 27001-certified security controls. While we do not disclose specific server locations for security reasons, we ensure that all hosting partners maintain security standards consistent with international best practices for personal data protection.

As a 77tbaji player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the 77tbaji data team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and complete the action within five business days unless exceptional circumstances require additional time.

• Right of access: You have the right to request a complete copy of all personal data that 77tbaji holds about you. We will provide this in a readable format, typically as a structured PDF or CSV export.
• Right to rectification: If any personal data held by 77tbaji is inaccurate or incomplete, you have the right to request its correction. This includes updating your registered address, correcting a name spelling, or updating your contact email address.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). Please note that 77tbaji is required to retain certain data (e.g., transaction records and KYC documents) for a minimum period to meet regulatory obligations — such data cannot be deleted early even upon request.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller. This applies to data you have actively provided to 77tbaji (e.g., account registration data) and data generated through your use of the platform.
• Right to restrict processing: In certain circumstances — such as where you contest the accuracy of data we hold, or where you have objected to processing and we are assessing your objection — you may request that we restrict processing of your personal data to storage only.
• Right to object to marketing: You may opt out of receiving promotional communications from 77tbaji at any time by clicking the unsubscribe link in any marketing email, or by emailing [email protected]. Opting out of marketing does not affect operational communications related to your account (e.g., deposit confirmations, security alerts).
• Right to withdraw consent: Where 77tbaji processes your data on the basis of your consent (e.g., marketing preferences), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

77tbaji retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data held by 77tbaji:

• Account registration data (name, date of birth, address, email, phone number): Retained for the lifetime of your account plus five years following permanent account closure. This period is required to meet anti-money laundering (AML) record-keeping obligations.
• KYC identity documents (NID copies, passport scans, proof of address): Retained for five years following the completion of the KYC verification process or following account closure, whichever is later. Documents are stored in encrypted form throughout the retention period.
• Financial transaction records (deposit and withdrawal history, payment method details): Retained for a minimum of five years from the date of each transaction in accordance with financial record-keeping requirements.
• Gameplay and betting history: Retained for three years following the last recorded activity on your account, then anonymised. Anonymised aggregate data (with no individual identifiers) may be retained indefinitely for platform analytics purposes.
• Customer support communications: Retained for two years from the date of the last message in each support thread, then permanently deleted.
• Marketing consent records: Retained for the duration of your account, updated whenever you change your marketing preferences. Opt-out records are retained for five years as evidence of compliance with your stated preference.
• Security and access logs: Retained for 12 months, after which they are permanently deleted unless specifically flagged as part of an active fraud investigation.

At the end of each applicable retention period, personal data is permanently and securely deleted or anonymised using industry-standard data sanitisation procedures. Deletion requests submitted under the right to erasure (Section 6) will be processed subject to the mandatory minimum retention periods described above.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 77tbaji holds about you, please contact our data team directly. We are committed to handling all privacy enquiries promptly, professionally, and in accordance with the rights described in this document.

Contact details:
Data Privacy Team, 77tbaji
Email: [email protected]
Subject line for data requests: "Data Rights Request"
Subject line for data complaints: "Data Complaint — Escalation"
Response time: Within 2 business days for acknowledgement; within 5 business days for resolution.

Updates to this Privacy Policy. 77tbaji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When material changes are made, we will notify active account holders by email to the address registered on their 77tbaji account at least 7 days before the updated policy takes effect. The updated policy will also be published at 77tbaji.net/privacy-policy with a revised effective date.

Your continued use of the 77tbaji platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your account and cease using the platform before the updated policy takes effect. Account closure instructions are available by contacting [email protected].

Governing language. This Privacy Policy is written in English. English is the authoritative language of this document. In the event of any translation or interpretation dispute, the English text shall prevail.