bd177 Privacy Policy

1Introduction

This Privacy Policy describes how bd177 ("bd177", "we", "us", "our") collects, processes, stores, and protects the personal data of all individuals ("you", "your", "the Player") who access or use the bd177 online casino and sports betting platform, available at bd177.io (the "Platform").

By creating an account on bd177, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are available on the bd177 Platform. Together, these documents set out the full framework governing your relationship with bd177.

2Who We Are

bd177 is an online casino and sports betting platform operating at bd177.io. The platform is designed for English-speaking players based in Bangladesh and provides access to cricket betting, live casino games, slot machines, and a range of bonus promotions.

For the purposes of this Privacy Policy, bd177 is the data controller — meaning we determine the purposes and means by which your personal data is processed. Our designated point of contact for all data-related queries and requests is:

• Email: [email protected]
• Platform: bd177.io
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

All data-related communications with bd177 should be directed to the email address above. Our team operates around the clock on Bangladesh Standard Time to ensure your queries receive a timely response.

3Personal Data We Collect

bd177 collects the following categories of personal data from players who register and use the Platform:

4How We Collect Your Data

bd177 collects personal data through the following methods:

• Direct collection: Information you provide when you complete the registration form, update your account profile, submit a KYC document, contact support, or fill in any other form on the Platform.
• Automated technical collection: Data collected automatically as you interact with the Platform, including server logs, cookies, pixel tags, and session tracking technologies. See Section 8 (Cookies) for further detail.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank when you make a deposit or withdrawal.
• Identity verification services: Data returned by our third-party KYC and age-verification partners when we verify your identity documents.
• Fraud prevention and security partners: Risk signals and device fingerprint data shared by our fraud prevention service providers to help us protect the integrity of the Platform.
• Publicly available sources: In limited circumstances, we may supplement your account data with information from publicly available databases where this is required for legal compliance purposes (for example, sanctions screening).

5How We Use Your Personal Data

bd177 uses your personal data for the following purposes:

• Account management: To create, verify, maintain, and close your bd177 player account.
• Age and identity verification: To confirm you are at least 21 years of age and that your identity matches the details provided at registration, in compliance with our responsible gaming obligations.
• Transaction processing: To process deposits, withdrawals, and bonus credits to and from your bd177 account via bKash, Nagad, Rocket, and other accepted payment methods.
• Platform personalisation: To present game recommendations, bonus offers, and content that are relevant to your playing history and preferences.
• Customer support: To respond to your queries, complaints, and support requests and to maintain a history of your interactions with our support team.
• Responsible gaming: To monitor your account activity for indicators of problem gambling behaviour, to enforce self-imposed limits and cooling-off periods, and to contact you where we have a responsible gaming concern.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal activity on the Platform.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) laws, financial record-keeping requirements, and any other legal obligations that apply to bd177's operations.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bd177 — but only where you have given your consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Platform improvement: To analyse aggregate usage data and improve the performance, security, and feature set of the bd177 Platform.

6Legal Basis for Processing

bd177 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and operate your account, process your transactions, and deliver the services you have signed up for under our Terms and Conditions.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for purposes that are in bd177's legitimate interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications and certain cookie placements. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7Data Sharing and Disclosure

bd177 does not sell your personal data. We share your personal data only in the following circumstances and with the following categories of recipient:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process your deposits and withdrawals. These providers receive only the transaction data necessary to process the specific payment.
• Identity verification and KYC providers: Third-party services that verify your identity documents and confirm your age (21+) as part of our onboarding and withdrawal processes.
• Fraud prevention and security partners: Services that help bd177 detect and prevent fraudulent account activity, unauthorised access, and money laundering.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios may receive session-level technical data (such as player session tokens) necessary to deliver their games within the bd177 Platform. These providers do not receive your full account profile.
• IT infrastructure and hosting providers: Third-party cloud hosting and IT service providers who process data on bd177's behalf under strict data processing agreements that prohibit independent use of your data.
• Legal authorities: Law enforcement agencies, financial intelligence units, courts, and other government authorities — where we are required to disclose data by law, court order, or regulatory directive, or where disclosure is necessary to prevent fraud or illegal activity.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by bd177, where they need access to player data to deliver their professional services, under binding confidentiality obligations.

All third parties with whom bd177 shares personal data are required, by contract, to maintain appropriate technical and organisational security measures and to process personal data only for the purposes specified by bd177.

8Cookies and Tracking Technologies

bd177 uses cookies and similar tracking technologies on bd177.io to operate the Platform and improve your experience. The following types of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function correctly. These cookies manage your login session, maintain your account authentication state, and ensure the security of your active session. They cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform — such as which pages are visited most frequently and where users encounter errors — so that we can improve the Platform's reliability and usability.
• Functional cookies: Used to remember your preferences, such as your preferred language settings and last-visited game category, so that the Platform delivers a more personalised experience on your return visits.
• Responsible gaming cookies: Used to track session duration data on your device for the purpose of delivering session time alerts and enforcing cooling-off periods that you have set through your account settings.

Most web browsers allow you to manage your cookie preferences through the browser settings menu. You can typically choose to block certain types of cookies or delete existing cookies. Please note that blocking strictly necessary cookies will impair your ability to log in and use bd177. Deleting functional cookies will reset your saved preferences.

9Data Retention

bd177 retains personal data for as long as is necessary to fulfil the specific purpose for which it was collected, subject to the following minimum retention periods:

• Account data and transaction records: Retained for a minimum of five years following account closure, as required by anti-money laundering and financial record-keeping regulations.
• KYC documentation: Retained for a minimum of five years following the completion of the verification process or account closure, whichever is later.
• Support communications: Retained for a minimum of three years following the closure of the relevant support ticket or dispute.
• Marketing consent records: Retained for the duration of your account plus three years following account closure, to demonstrate that we had a valid legal basis for any marketing communications sent to you.
• Technical and security logs: Retained for a period of 12 months from collection, unless a specific security incident requires us to preserve logs for a longer period for investigative purposes.

When personal data is no longer required for its original purpose and no legal retention obligation requires us to keep it, bd177 will securely delete or anonymise that data so that it can no longer be associated with you as an individual.

10Security Measures

bd177 takes the security of your personal data seriously and applies the following technical and organisational measures to protect it:

• 256-bit SSL/TLS encryption on all data in transit between your browser or device and bd177's servers.
• Encryption at rest for all sensitive personal data stored on bd177's servers, including financial data and KYC documents.
• Role-based access controls ensuring that only authorised bd177 personnel with a legitimate business need can access player account data.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of protection against unauthorised login.
• Automated fraud detection systems that monitor account activity in real time and flag unusual patterns for manual review.
• Regular security assessments and penetration testing of the bd177 Platform infrastructure.
• Staff training on data protection obligations and secure data handling practices, conducted on a regular basis.

While bd177 implements industry-standard security measures, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password, enable 2FA, and never share your login credentials with anyone. If you suspect your account has been compromised, contact [email protected] immediately.

11Your Privacy Rights

As a player on the bd177 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected]. bd177 will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data bd177 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that bd177 correct any inaccurate or incomplete personal data held in your account profile.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and there is no other legal basis for processing), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to legal retention obligations — bd177 may be required to retain certain data for up to five years post-account closure.
• Right to Restriction of Processing: You have the right to request that bd177 restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transmit it to another service provider, where the processing is based on consent or contractual necessity.
• Right to Object: You have the right to object at any time to processing of your personal data carried out on the basis of bd177's legitimate interests. bd177 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without penalty.

To exercise any of the above rights, email [email protected] with the subject line "Data Rights Request" and include your registered name, email address, and a description of the right you wish to exercise. We may ask you to verify your identity before processing your request.

12Minors and Age Restrictions

The bd177 Platform is strictly for adults aged 21 years and above. bd177 does not knowingly collect personal data from any person under the age of 21. Registration on the Platform by a person under 21 is prohibited under our Terms and Conditions.

Where bd177 discovers that a player account has been registered by a person under 21 years of age, the account will be closed immediately. Any funds deposited will be returned to the original payment source where technically possible, and any winnings generated will be forfeited. All personal data associated with the underage account will be securely deleted, subject only to any legal retention obligations that apply.

If you believe that a person under 21 has registered an account on bd177, or that a minor in your household may have accessed the Platform, please contact [email protected] immediately. bd177 takes underage gambling prevention extremely seriously and will act on all such reports without delay.

13International Data Transfers

bd177 primarily processes and stores player data on servers located in secure data centre facilities. In order to operate the Platform and deliver its services, certain personal data may be accessed by or transferred to service providers located outside Bangladesh — for example, cloud infrastructure providers, fraud prevention partners, and game technology providers.

Where personal data is transferred internationally, bd177 takes steps to ensure that the transfer is protected by appropriate safeguards, including:

• Standard contractual data processing agreements that require recipient parties to maintain data protection standards equivalent to those applied by bd177.
• Due diligence assessments of third-party security practices before engagement and on an ongoing basis.
• Strict contractual limitations on the purposes for which recipient third parties may use transferred data.

By using the bd177 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

14Changes to This Privacy Policy

bd177 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the policy — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify all registered players via their registered email address at least 14 days before the changes take effect.

The updated Privacy Policy will be published on the bd177 Platform with a revised "Last Updated" date at the top of the document. Minor changes — such as corrections to typographical errors or clarifications of existing practices that do not materially alter the substance of the policy — may be made without advance notice.

Your continued use of the bd177 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you must stop using the Platform and contact [email protected] to close your account. bd177 maintains archived versions of all previous Privacy Policies, which are available on request from [email protected].

15Contact Us

For all privacy-related queries, data rights requests, or concerns about how bd177 handles your personal information, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected]
• Subject Line (recommended): "Privacy Policy Query" or "Data Rights Request"
• Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general privacy queries.
• Platform: bd177.io

When submitting a data rights request, please include your registered name, the email address associated with your bd177 account, and a clear description of the right you wish to exercise or the concern you wish to raise. We may ask you to verify your identity before we process your request, to ensure that we are disclosing or modifying data only at the direction of the verified account holder.