bs77 Privacy Policy

This Privacy Policy ("Policy") describes how bs77 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of users ("you", "your", "Player") who access or use the bs77 platform available at bs77.one. By registering an account on the Platform, or by continuing to use the Platform after this Policy has been made available to you, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the bs77 Terms and Conditions, which are incorporated by reference. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions. This Policy applies to data collected through the bs77 website, mobile browser interface, and any communication channels operated by bs77 (including live chat and support email). It does not apply to third-party websites or services that may be linked from the Platform — those third parties operate under their own privacy policies, and bs77 is not responsible for their data practices.

bs77 collects only the personal data that is necessary for the legitimate operation of the platform, the processing of transactions, compliance with legal obligations, and the provision of a safe and personalised gaming experience. The categories of data we collect are set out below:

We collect data directly from you (at registration, during KYC, and through account activity), automatically through your device and browser when you use the Platform, and from payment processors who provide transaction confirmation data necessary to credit your account or process a withdrawal. bs77 does not purchase data from data brokers or collect data from social media profiles without your explicit consent.

bs77 uses your personal data only for the purposes set out in this Policy. We do not use your data for any purpose that is incompatible with those listed below. The principal purposes for which we process your data are:

• Account creation and management — to register your account, authenticate your identity at login, and manage your account profile, preferences, and responsible gaming settings.
• Transaction processing — to receive and process deposits made via bKash, Nagad, Rocket, Upay, Visa, or Mastercard; to verify withdrawal requests and disburse funds to your registered payment method; and to maintain accurate financial records.
• KYC and fraud prevention — to verify your identity and age in compliance with our obligations; to detect, investigate, and prevent fraudulent transactions, money laundering, and other unlawful activity; and to protect the security and integrity of the Platform.
• Customer support — to respond to your enquiries, complaints, and support tickets; to maintain records of our communications with you; and to improve the quality of our support service based on interaction history.
• Responsible gaming — to monitor gaming activity for indicators of problem gambling; to enforce deposit limits, time-out periods, and self-exclusion requests that you have set; and to contact you if our monitoring identifies a pattern of behaviour that may suggest gambling-related harm.
• Platform improvement and analytics — to analyse aggregate usage patterns in order to improve platform performance, game selection, user interface, and the overall player experience. Analytics data used for this purpose is anonymised or pseudonymised wherever practicable.

bs77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated tools flag an account for review (for example, in the context of fraud detection or responsible gaming monitoring), a human review is conducted before any account restriction is applied.

bs77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance — processing necessary to create and manage your account, process deposits and withdrawals, and provide the gaming services you have requested. Without this processing, we cannot fulfil our contractual obligations to you.
• Legal obligation — processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and obligations to cooperate with law enforcement and regulatory authorities.
• Legitimate interests — processing carried out in bs77's legitimate interest in preventing fraud, securing the platform, improving our services, and ensuring a fair gaming environment, provided those interests are not overridden by your data protection rights.
• Consent — where you have given explicit consent to a specific processing activity, such as receiving promotional communications. You may withdraw consent at any time by updating your communication preferences in account settings or by contacting support.

bs77 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the relevant purpose:

• Payment processors — we share the minimum data necessary with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process deposits and withdrawals. Each payment processor operates under its own privacy policy and data protection obligations.
• Identity and KYC verification services — we may share identity documents and personal data with third-party KYC providers in order to verify the identity and age of players in compliance with our obligations. These providers are contractually bound to handle your data securely and only for the purpose of identity verification.
• Law enforcement and regulatory authorities — we will disclose personal data to law enforcement agencies, courts, or regulatory authorities where we are required to do so by applicable law, court order, or lawful authority. We will notify you of such disclosure where legally permitted to do so.
• IT and platform service providers — we may share technical and usage data with providers of cloud hosting, cybersecurity, analytics, and customer support infrastructure who act as data processors on our behalf. These providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to bs77.

bs77 requires all third parties with whom personal data is shared to maintain appropriate technical and organisational security measures, and to process personal data only in accordance with our written instructions and applicable data protection law. We do not permit third-party service providers to use your personal data for their own purposes.

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is processed directly through the mobile financial service provider's own infrastructure. bs77 receives only a transaction confirmation reference and the wallet number associated with the transaction — we do not store your mobile banking PIN, one-time passwords (OTP), or full authentication credentials at any point. Similarly, card-based payments processed via Visa or Mastercard are handled by a PCI-DSS compliant payment gateway. bs77 receives only a tokenised card reference and does not store full card numbers on its own systems.

You should review the privacy policy of your chosen payment provider for full details of how they handle your financial and identity data during a transaction. bs77 is not responsible for the data handling practices of bKash, Nagad, Rocket, Upay, Visa, Mastercard, or any other payment provider used in connection with the Platform.

bs77 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you between sessions, maintain your login state, remember your preferences, and analyse how the Platform is used. The categories of cookies we use are:

• Essential cookies — strictly necessary for the Platform to function. These include session management cookies that keep you logged in during a session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform's core functionality.
• Performance and analytics cookies — collect anonymised or pseudonymised data about how players use the Platform (pages visited, session duration, error rates). This data helps us identify and fix performance issues and improve the user experience. You may opt out of performance cookies by adjusting your browser settings.
• Functional cookies — remember your language and display preferences so you do not need to re-select them at each visit. Disabling functional cookies will not prevent you from using the Platform but may mean that certain preferences are not retained between sessions.

Most modern browsers allow you to control cookies through browser settings. You may set your browser to refuse all cookies, accept only essential cookies, or delete cookies after each session. Note that refusing essential cookies will prevent you from logging into your bs77 account. bs77 does not use third-party advertising or tracking cookies.

bs77 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our legitimate operational needs. The principal retention periods that apply to player data are as follows: account registration data and KYC documents are retained for a minimum of five years from the date of account closure; transaction records are retained for a minimum of five years from the date of the transaction; support interaction records are retained for three years from the date of the most recent interaction; technical and session log data is retained for twelve months and then deleted or anonymised. These retention periods reflect minimum legal requirements and may be extended where data is required in connection with an ongoing legal proceeding, regulatory investigation, or unresolved dispute.

At the end of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Where anonymisation is not technically feasible for a specific data type, that data will be stored in a restricted access environment with access limited to those with a documented operational need.

bs77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform; encryption of sensitive data fields at rest in our database; role-based access controls ensuring that only authorised personnel can access player data, and only to the extent necessary for their specific role; regular security audits and penetration testing of platform infrastructure; and real-time monitoring systems to detect and respond to potential security incidents.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bs77 will notify affected players without undue delay after becoming aware of the breach, providing information about the nature of the breach, the categories of data affected, and the steps we are taking to address it. You are responsible for maintaining the confidentiality of your own login credentials; bs77 is not liable for unauthorised access to your account resulting from your failure to keep your credentials secure.

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by bs77. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within 30 days of receiving a valid request, and we will not charge a fee for responding to any reasonable request.

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to rectification — you may request that we correct any inaccurate personal data we hold about you, or complete any incomplete data. We may ask you to provide supporting documentation before making the correction.
• Right to erasure — you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to legal retention obligations — where applicable law requires us to retain data, we cannot delete it before the end of the mandatory retention period.
• Right to restriction of processing — you may request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data, or where you have objected to processing based on legitimate interests pending our verification of whether our legitimate interests override your rights.
• Right to data portability — you may request that we provide your personal data in a structured, commonly used, machine-readable format, so that you may transfer it to another service provider. This right applies only to data that you provided to us and that we process on the basis of consent or contract performance.
• Right to object — you may object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

If you believe that bs77 has not handled your personal data in accordance with this Policy or applicable data protection law, you have the right to lodge a complaint with the relevant data protection authority. Before doing so, we encourage you to contact us directly at [email protected] so that we may have the opportunity to address your concern informally and promptly.

The bs77 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, use, or store personal data from individuals under the age of 21. Registration on the Platform by a person under 21 constitutes a breach of our Terms and Conditions. If a parent or guardian becomes aware that their child has registered on the Platform or provided personal data to bs77, they should contact us immediately at [email protected]. Upon confirmation that data has been collected from a person under 21, we will promptly close the associated account and delete all personal data collected in connection with that account.

bs77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of our business. Where a change is material — meaning it could reasonably be expected to affect your rights under this Policy — we will provide advance notice to registered players via the registered email address or a Platform notification before the change takes effect. Non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy) may take effect immediately upon publication on the Platform.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this Policy periodically to stay informed about how bs77 protects your personal data. Continued use of the Platform after any update to this Policy constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how bs77 has handled your personal data, please contact our Data Support team. We are available 24 hours a day, 7 days a week via the live chat function on the Platform.

You may also reach us by email at: [email protected]