bp77 Privacy Policy

bp77 is an online sports betting and casino gaming platform accessible at https://bp77.io, operated for the benefit of players primarily based in Bangladesh. Throughout this Privacy Policy, references to "bp77", "we", "us", or "our" refer to the operators of the bp77 platform and its associated entities responsible for determining how your personal data is collected and processed.

bp77 acts as the data controller in respect of the personal information you provide when registering for an account, making deposits or withdrawals, participating in promotions, or otherwise using the bp77 platform. As data controller, bp77 is responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with the commitments set out in this Privacy Policy.

If you have any questions about how bp77 handles your personal data, you may contact our support team at any time using the details provided in Section 13 of this document.

bp77 collects personal data through several channels in the course of operating the platform. The categories of information we collect are as follows:

2.1 Information You Provide Directly

• Registration data: Your full legal name, date of birth, email address, mobile phone number, and preferred username when you create a bp77 account.
• Identity verification (KYC) data: Copies of government-issued identification documents (National ID Card, Passport, or Driving Licence), proof of address documents, and payment method ownership evidence submitted during the KYC verification process.
• Financial data: Payment method details — including your bKash, Nagad, Rocket, or Upay mobile wallet numbers, bank account details, or card details (last four digits and card type only; full card numbers are handled directly by our payment processors and are never stored by bp77) — provided when making deposits or requesting withdrawals.
• Communication data: The content of any messages, emails, or live chat conversations you initiate with bp77's customer support team.
• Responsible gaming data: Any voluntary disclosures you make when using self-exclusion tools, deposit limit settings, or session time reminder features.

2.2 Information Collected Automatically

• Device and technical data: Your IP address, browser type and version, operating system, device model, screen resolution, and time zone setting.
• Usage data: Pages visited on the bp77 platform, time and duration of visits, games played, bets placed, betting markets accessed, and navigation paths through the platform.
• Cookie data: Information collected via cookies, pixels, and similar tracking technologies as described in Section 5.
• Transaction logs: A complete record of all deposits, withdrawals, bets, wagers, bonus activations, and balance changes associated with your account, including timestamps in Bangladesh Standard Time (BST, UTC+6).

2.3 Information from Third Parties

• Payment processor confirmations: Transaction reference numbers, payment status updates, and fraud screening results provided by our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank).
• Identity verification services: Confirmation of identity document authenticity provided by third-party KYC verification service providers.
• Fraud and risk data: Risk signals and fraud alerts provided by security partners to help us identify and prevent fraudulent account activity, money laundering, or underage gambling.

bp77 uses the personal data we collect for specific, clearly defined purposes. The table below sets out each purpose and the corresponding category of data used:

bp77 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human oversight. Where automated tools are used for fraud detection or responsible gaming monitoring, flagged cases are reviewed by our compliance team before any account action is taken.

bp77 processes your personal data on the following legal bases, depending on the specific purpose of the processing:

• Performance of a contract: The majority of data processing at bp77 is necessary for the performance of the contract between you and bp77 — specifically, your Account Terms of Service. This covers account creation, payment processing, provision of betting and gaming services, and customer support.
• Legal obligation: Certain processing activities — particularly KYC identity verification, transaction record-keeping, and fraud reporting — are required by bp77 in order to comply with applicable anti-money laundering obligations and responsible gaming requirements.
• Legitimate interests: bp77 processes certain data for its legitimate business interests, including fraud prevention, platform security monitoring, abuse detection, and anonymised analytics for platform improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Where bp77 sends you optional marketing communications — such as promotional emails, SMS notifications about new bonuses, or personalised game recommendations — we do so only on the basis of your explicit consent. You may withdraw this consent at any time by emailing [email protected] with the subject line "Unsubscribe" or by adjusting your communication preferences in your account settings.

bp77 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players use the platform so we can improve it.

5.1 Types of Cookies We Use

• Essential cookies: These cookies are strictly necessary for the bp77 platform to function. They enable core features such as maintaining your logged-in session, preserving your account settings during a visit, and ensuring the security of the platform. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting or display preferences — to give you a more personalised experience. They are set only with your consent.
• Analytics cookies: These cookies help bp77 understand how players navigate the platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is aggregated and anonymised. bp77 uses this information to improve the platform experience for all users.
• Security cookies: These cookies assist in identifying and preventing fraudulent access attempts, bot activity, and other security threats to the platform and its users' accounts.

5.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling essential cookies will impair your ability to use the bp77 platform, including logging in to your account and processing transactions.

Blocking analytics or functional cookies will not prevent you from using bp77, but may result in a reduced or less personalised experience. Instructions for managing cookies in the most commonly used browsers can be found in the help documentation of your specific browser.

bp77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We share your personal information only in the following limited and specific circumstances:

• Payment processors: Your financial transaction data is shared with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — solely for the purpose of processing your deposits and withdrawals. Each payment partner operates under its own privacy and data security framework.
• KYC and identity verification providers: Your identity documents and verification data are shared with our third-party KYC service providers for the purpose of verifying your identity. These providers are contractually bound to handle your data securely and to use it only for verification purposes.
• Fraud prevention and security partners: Certain technical identifiers (such as IP addresses and device fingerprints) are shared with security and fraud detection services to identify and prevent fraudulent activity, multiple account creation, and unauthorised access attempts.
• Game content providers: When you play games provided by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — your in-game activity data is processed by those providers in order to operate the game and determine outcomes. These providers are bound by their own data processing agreements with bp77.
• Legal and regulatory requirements: bp77 may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or legal process.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bp77's business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to the applicable privacy policy in advance.

In all cases where bp77 shares your data with third-party processors, we require those parties to maintain appropriate technical and organisational security measures consistent with our own standards.

As bp77 operates a digital platform that relies on globally distributed infrastructure and third-party service providers, your personal data may in some cases be processed, stored, or accessed outside of Bangladesh. Such transfers may occur in connection with our use of cloud hosting services, KYC verification providers, and game content providers whose infrastructure is located in different countries.

Where personal data is transferred outside Bangladesh, bp77 takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include contractual data processing agreements with service providers that impose data protection obligations consistent with our own standards.

By using the bp77 platform and providing us with your personal data, you acknowledge and consent to the transfer of your data to countries outside Bangladesh where bp77 or its service providers operate, subject to the safeguards described in this section.

bp77 retains your personal data for as long as your account remains active and for a defined period after account closure, in accordance with the following retention schedule:

• Account and registration data: Retained for the duration of your active account plus a minimum of five (5) years following account closure. This retention period reflects bp77's obligation to maintain records for fraud prevention, dispute resolution, and compliance purposes.
• KYC identity documents: Retained for a minimum of five (5) years following the date of verification or account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in line with standard financial record-keeping practices.
• Customer support communications: Retained for up to two (2) years following the closure of the relevant support case, unless the communication forms part of a formal dispute record, in which case it is retained for the duration of the dispute resolution process plus a further two (2) years.
• Analytics data: Aggregated and anonymised analytics data, which cannot be linked back to any individual player, may be retained indefinitely for platform improvement purposes.
• Marketing consent records: Retained for the duration of your consent plus a period of two (2) years following withdrawal of consent, for evidence purposes.

When personal data is no longer required for the purposes for which it was collected, and no legal retention obligation applies, bp77 will securely delete or irreversibly anonymise that data.

As a bp77 player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below:

To exercise any of the rights above, please contact bp77's support team by email at [email protected] with the subject line "Data Rights Request". Please include your full registered name, the email address associated with your account, and a clear description of the right you wish to exercise.

bp77 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or bp77 has received a high volume of requests, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

bp77 will not charge a fee for handling data rights requests unless the request is manifestly unfounded, repetitive, or excessive — in which case bp77 reserves the right to charge a reasonable administrative fee or to decline to act on the request, with written reasons provided.

The bp77 platform is strictly intended for adults aged 21 years and above. bp77 does not knowingly collect, process, or store personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm that they are aged 21 or above. Where bp77 has reason to believe that personal data has been submitted by a person under the age of 21 — whether through a direct disclosure, a KYC document review, or a third-party report — bp77 will immediately suspend the relevant account, delete the associated personal data, and void any transactions made during the period of underage access.

If you are a parent or guardian and believe that a minor in your care has registered for a bp77 account without your knowledge, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.

bp77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the bp77 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal data — including identity documents and payment details — is stored in encrypted form on secure servers with restricted access controls.
• Access controls: Access to personal data within bp77 is restricted on a strict need-to-know basis. Only staff members whose roles require access to specific categories of personal data are granted that access, and all such access is logged and audited.
• Intrusion detection: bp77 operates real-time intrusion detection and monitoring systems that flag unusual access patterns and potential security incidents for immediate investigation by our security team.
• Regular security reviews: bp77 conducts periodic reviews of its information security policies, procedures, and technical controls to ensure they remain effective against evolving threats.
• Staff training: All bp77 staff members who handle personal data receive training on data protection obligations and security best practices as part of their onboarding and on an ongoing basis.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data security breach that poses a risk to your rights and freedoms, bp77 will notify affected players without undue delay and will take all appropriate steps to contain the breach, mitigate its impact, and prevent recurrence.

You also play an important role in keeping your data secure. Please refer to the Account Security section of our Terms & Conditions for guidance on protecting your bp77 Login credentials and device security.

bp77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements in how we describe our practices to players.

When we make material changes to this Privacy Policy — meaning changes that significantly affect your rights or the way we process your personal data — we will notify registered players via the email address associated with their bp77 account, or via an on-platform notification, at least seven (7) days before the revised policy takes effect.

For minor changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact information — the revised policy will be published on this page and will take effect immediately upon publication. The effective date displayed in the hero section and at the bottom of this document will be updated accordingly.

Your continued use of the bp77 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a revised Privacy Policy, you should cease using the bp77 platform and contact us to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how bp77 protects your personal data. The most current version of this policy is always available at https://bp77.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bp77 handles your personal data, please contact us using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.

• Email: [email protected] (please use the subject line "Privacy Enquiry" for data protection matters)
• Response time: bp77 aims to acknowledge all privacy enquiries within two (2) business days and to provide a substantive response within ten (10) business days of receipt.
• Data rights requests: Please use the subject line "Data Rights Request" when exercising any of the rights described in Section 9 of this policy.

If you are not satisfied with bp77's response to your privacy enquiry or data rights request, or if you believe that bp77 has processed your personal data in a manner inconsistent with this Privacy Policy, you may escalate your complaint in writing to our senior compliance team at the same email address, marking your message "Escalated Privacy Complaint".

bp77 takes all privacy complaints seriously and will endeavour to resolve escalated complaints fairly and within thirty (30) calendar days. We value your trust and are committed to maintaining the highest standards of data protection for every player on the bp77 platform.