bg77 Privacy Policy

bg77 operates the online betting and casino platform accessible at bg77.io (the "Platform"). This Privacy Policy explains how bg77 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform, including registered account holders and visitors who browse without registering.

bg77 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside the bg77 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform.

bg77 collects personal data in several categories depending on the nature of your interaction with the Platform. The table below summarises the key data types bg77 may hold about you:

bg77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation. If any such data is inadvertently received (for example, in a free-text support message), it will be deleted without being processed or retained.

bg77 collects personal data through the following mechanisms:

• Direct collection: Data you provide actively when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your Account profile.
• Automated collection: Technical and usage data collected automatically through server logs, cookies, and similar tracking technologies when you access or navigate the Platform. See Section 6 (Cookies & Tracking) for full details.
• Payment processor data: Transaction confirmation data shared with bg77 by payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) following a deposit or withdrawal instruction.
• Identity verification providers: Where bg77 engages a third-party KYC or identity verification service, that provider may return verified identity data to bg77 following document checks.
• Fraud detection services: Aggregated or derived data (e.g., device fingerprint scores, IP reputation data) shared by fraud detection partners to help bg77 identify suspicious account activity.

bg77 processes personal data only for specified, explicit, and legitimate purposes. The primary purposes for which bg77 processes your data, and the legal basis for each, are set out below:

• Account creation and management: To register your Account, authenticate your identity at login, and maintain your Account in good standing. Legal basis: performance of a contract.
• Payment processing: To process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and bank transfer in Bangladeshi Taka (৳). Legal basis: performance of a contract.
• Age and identity verification (KYC): To verify that you are aged 21 or above and that your identity matches the details provided at registration. Legal basis: legal obligation and legitimate interests (preventing underage gambling and fraud).
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling, and to administer self-exclusion, cooling-off, and deposit limit tools. Legal basis: legitimate interests and legal obligation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the Platform. Legal basis: legitimate interests and legal obligation.
• Customer support: To respond to your queries, complaints, and requests in a timely and accurate manner. Legal basis: performance of a contract and legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications, and betting tips relevant to your interests, where you have explicitly opted in. Legal basis: consent (withdrawable at any time).
• Platform improvement: To analyse usage patterns, test new features, and optimise the Platform experience for Bangladeshi players. Legal basis: legitimate interests.

bg77 does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. bg77 shares personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive only the minimum data necessary to process a specific transaction (e.g., account number, amount, transaction reference).
• Game providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other studio partners may receive a pseudonymous player identifier and session data necessary to deliver their game content through the bg77 Platform.
• Identity verification providers: Where a third-party KYC service is engaged, identity documents and personal data submitted for verification are shared with that provider under strict contractual confidentiality terms.
• Fraud detection and security partners: Aggregated technical data (IP address, device fingerprint, session behaviour) may be shared with fraud prevention platforms to protect the integrity of the Platform.
• Legal and regulatory authorities: bg77 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or regulatory direction.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bg77's business assets, personal data held by bg77 may be transferred to the successor entity, subject to equivalent data protection obligations.

All third parties with whom bg77 shares personal data are required to implement appropriate technical and organisational security measures and to use the data only for the specified purpose for which it was shared.

bg77 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the Platform. The types of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing tokens, and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings, and notification preferences, so you do not need to re-enter them on each visit.
• Analytics cookies: Used by bg77's internal analytics system to understand how players navigate the Platform, which features are most used, and where technical errors occur. This data is collected in aggregate and is not used to identify individual users.
• Responsible gaming cookies: Used to track session duration for the purpose of delivering session time reminders to players who have activated this tool in Account Settings.

bg77 does not use third-party advertising cookies or behavioural profiling cookies that track your activity across other websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Platform.

bg77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

• Account data (identity and contact information): Retained for the duration of the Account relationship and for a period of five years following Account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• KYC and identity documents: Retained for five years following the completion of the verification process or Account closure, whichever is later.
• Betting and gaming history: Retained for three years following the relevant session or bet settlement date, for the purposes of dispute resolution and responsible gaming monitoring.
• Support communications: Retained for two years following the resolution of the relevant query or complaint.
• Technical and analytics data: Retained for a maximum of 13 months in identifiable form, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your opt-in and for one year following any opt-out, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. bg77 conducts periodic data audits to ensure that data is not retained beyond its retention period.

bg77 implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:

• TLS/SSL encryption: All data transmitted between your device and bg77's servers is encrypted using current industry-standard Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive personal data fields — including payment account numbers and identity document references — are encrypted within bg77's database using AES-256 or equivalent encryption.
• Access controls: Access to personal data is restricted to bg77 staff on a need-to-know basis. All internal access is logged and subject to periodic review by bg77's security team.
• Two-factor authentication (2FA): bg77 supports OTP-based two-factor authentication for player Accounts and mandates 2FA for all internal administrative access to production systems.
• Intrusion detection and monitoring: bg77's infrastructure is monitored continuously for anomalous activity. Automated alerts notify the security team of potential intrusion attempts in real time.
• Regular security audits: bg77 conducts periodic penetration testing and vulnerability assessments on its Platform infrastructure to identify and remediate security weaknesses before they can be exploited.

As a user of the bg77 Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact bg77 support at [email protected] with a clear description of your request and sufficient information to verify your identity:

• Right of access: You may request a copy of all personal data bg77 holds about you. bg77 will provide this within 10 business days of receiving a verified request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data fields (such as your registered name and date of birth) can be updated directly in Account Settings; others require support assistance and documentary evidence.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that bg77 may be required to retain certain data for legal or regulatory reasons even following an erasure request.
• Right to restriction: You may request that bg77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to bg77, which you may then transfer to another service provider of your choice.
• Right to object: You may object to the processing of your personal data where bg77 relies on legitimate interests as the legal basis. You may also object at any time to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via Account Settings or by contacting support. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

bg77 aims to respond to all data rights requests within 10 business days. Where a request is complex or involves a large volume of data, bg77 may extend this period by a further 10 business days and will notify you of the extension in writing.

The bg77 Platform is strictly for adults aged 21 and above. bg77 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. If bg77 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated Account will be closed.

If you are a parent or guardian and believe that a person under 21 in your care has registered an Account or provided personal data to bg77, please contact bg77 support immediately at [email protected]. bg77 will investigate and act on all such notifications as a matter of priority.

The bg77 Platform may display content from third-party game providers (such as Evolution Gaming, Pragmatic Play, and Spribe) rendered within the Platform interface. While bg77 takes reasonable steps to ensure these providers operate to appropriate data protection standards, bg77 does not control and is not responsible for the privacy practices of these third parties in respect of any data they may independently collect through their game interfaces.

The bg77 Platform does not include outbound links to external third-party websites. If you navigate away from bg77.io independently, the privacy practices of any third-party website you visit are governed by that site's own privacy policy, for which bg77 accepts no responsibility.

bg77 sends promotional communications — including bonus offers, seasonal promotions (Eid, Pohela Boishakh, BPL season, IPL season), new game announcements, and cricket betting tips — only to players who have explicitly opted in to receive them at the time of registration or subsequently through Account Settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the Notifications section of Account Settings after login.
• Contacting bg77 support at [email protected] with a clear opt-out request, specifying your registered username or mobile number.

Opt-out requests are processed within one business day. You will continue to receive essential transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and KYC reminders) regardless of your marketing opt-out status, as these are necessary for the operation of your Account.

bg77's primary data processing infrastructure is located in data centres that serve the Bangladesh region. However, some of bg77's third-party service providers — including certain game studios and fraud detection platforms — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, bg77 ensures that adequate safeguards are in place, including contractual data protection clauses that impose equivalent obligations to those described in this Privacy Policy.

bg77 does not transfer personal data to any jurisdiction known to have inadequate data protection standards without implementing the contractual safeguards described above. If you have questions about international data transfers relating to your Account, please contact bg77 support.

bg77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When a material change is made to this Policy, bg77 will notify registered account holders via a notice displayed prominently on the Platform and, where the change is significant, by direct communication to the registered contact details on the Account.

The "Effective Date" displayed at the top of this page will be updated each time a new version of the Policy is published. We encourage you to review this page periodically. Your continued use of the Platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or the way bg77 handles your personal data, please contact the bg77 data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy queries: "Privacy Request — [Your Username]"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Languages: English and Bengali
• Response target: Privacy-related queries within 2 business days; formal data rights requests within 10 business days

bg77 takes all privacy complaints seriously and will investigate every concern raised. If you are not satisfied with the outcome of bg77's internal review of your complaint, you may escalate the matter to bg77's disputes committee, whose decision will be communicated in writing within 15 business days of escalation.

bg77 is committed to fair, transparent, and consistent handling of all privacy-related matters. Every complaint is logged and reviewed as part of bg77's ongoing data protection compliance programme.