bde77 Privacy Policy

This Policy applies to all personal data processed by bde77 in connection with the bde77 platform and services, regardless of the country from which you access bde77. It supplements, and should be read alongside, the bde77 Terms & Conditions.

bde77 acts as the data controller in respect of personal data collected directly from players. Where bde77 engages third-party service providers to process data on its behalf, those providers act as data processors and are bound by strict contractual obligations to protect the data they handle.

This Policy may be updated from time to time. The current effective date is shown in the header of this page. Continued use of bde77 following publication of a revised Policy constitutes acceptance of the updated terms. Where changes are material, we will notify registered account holders by email.

bde77 collects personal data in the following categories, depending on the nature of your interaction with the platform:

bde77 does not collect special-category personal data (such as health data, biometric data, or racial or ethnic origin) unless explicitly required by applicable law or regulation and with your express consent.

bde77 collects personal data through the following channels:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you navigate bde77.
• Third-party sources: Identity and address verification data from third-party KYC / AML service providers; fraud-prevention signals from financial intelligence partners; device fingerprinting data from security vendors.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and banking partners following a deposit or withdrawal instruction.

bde77 processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which bde77 processes personal data and the corresponding legal basis in each case.

Where bde77 relies on legitimate interest as the legal basis for processing, we have carried out a balancing test and determined that our interests are not overridden by your rights and freedoms. You may request a copy of this balancing test by contacting our privacy team.

bde77 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and gather analytical data that helps us improve bde77 for all users.

Types of cookies used by bde77:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing your use of bde77.
• Functional cookies: Remember your preferences such as preferred language, last visited game category, and display settings.
• Analytics cookies: Collect aggregated, anonymised data about how users navigate bde77, which pages are visited most frequently, and where errors occur. This data is used solely to improve the platform.
• Security and fraud-prevention cookies: Assist in detecting suspicious login patterns, bot activity, and account takeover attempts.

bde77 does not use third-party behavioural advertising cookies that track you across external websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect platform functionality.

bde77 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors and financial partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive only the minimum transactional data required to process your deposit or withdrawal instruction.
• KYC and identity verification providers: Third-party verification services receive identity and document data solely to perform age and identity verification on bde77's behalf.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and wagering data necessary to operate their games within bde77. They do not receive your full name, contact details, or financial data.
• IT infrastructure and cloud service providers: Hosting, data storage, and cybersecurity vendors who process data strictly on bde77's instructions under binding data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulator request, bde77 will disclose personal data to the relevant authority. Where legally permitted, bde77 will notify you of such a disclosure.
• Fraud prevention and financial intelligence networks: Anonymised or pseudonymised risk signals may be shared with industry fraud-prevention bodies to protect the wider online gaming community.

bde77 operates internationally, and your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, bde77 implements appropriate safeguards to ensure your data receives a level of protection equivalent to that provided within your jurisdiction. These safeguards include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with all third-party data processors located outside Bangladesh.
• Data processing agreements requiring recipient organisations to implement technical and organisational security measures at least as stringent as those applied by bde77.
• Transfer impact assessments carried out before initiating any new cross-border data transfer to a jurisdiction with materially lower data protection standards.

You may request details of the specific safeguards applied to any cross-border transfer of your personal data by contacting bde77's privacy team at the address in Section 14.

bde77 retains personal data for as long as necessary to fulfil the purpose for which it was collected, comply with applicable legal and regulatory obligations, and resolve any disputes or enforce our agreements. The following standard retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with bde77 plus five (5) years after account closure, to satisfy anti-money laundering and gaming regulatory record-keeping requirements.
• Financial and transaction data: Retained for seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• KYC verification documents: Retained for five (5) years from account closure or the completion of the verification event, whichever is later.
• Customer support and communications records: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an unresolved complaint or legal matter.
• Technical and usage data (logs): Retained for twelve (12) months from collection, after which logs are anonymised or deleted.
• Marketing consent records: Retained for as long as you hold a bde77 account plus two (2) years, to demonstrate compliance with consent-based marketing obligations.

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical and platform improvement purposes.

bde77 implements a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, loss, alteration, or disclosure.

Technical controls include:

• AES-256 SSL/TLS encryption for all data in transit between your device and bde77 servers.
• Encryption at rest for all databases containing personal or financial data.
• One-time password (OTP) two-factor authentication available for all bde77 accounts.
• Automated intrusion detection and prevention systems monitoring for anomalous access patterns 24/7.
• Regular independent penetration testing and vulnerability assessments by certified security firms.
• Strict role-based access controls ensuring bde77 staff access only the data necessary for their specific job function.

Organisational controls include:

• Mandatory data protection training for all bde77 staff with access to personal data.
• A documented incident response plan with defined notification timelines in the event of a data breach.
• Regular internal audits of data processing activities and access logs.
• Data processing agreements with all third-party vendors, obligating them to maintain equivalent security standards.

While bde77 takes every reasonable precaution, no data transmission over the internet or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, bde77 will notify you without undue delay and in accordance with applicable regulatory requirements.

Subject to applicable law, you hold the following rights in respect of the personal data bde77 holds about you. To exercise any of these rights, please contact our privacy team using the details in Section 14.

• Right of access: You may request a copy of all personal data bde77 holds about you, along with information about how that data is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bde77. You may also update certain information directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Note that regulatory retention obligations may prevent immediate erasure of certain categories of data.
• Right to restriction of processing: You may request that bde77 restricts processing of your personal data in certain circumstances, for example while the accuracy of data is contested.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest, including profiling for direct marketing purposes. bde77 will cease that processing unless compelling legitimate grounds exist that override your interests.
• Rights related to automated decision-making: bde77 does not make solely automated decisions that produce legal or similarly significant effects on you without human review.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bde77 will respond to all verified data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will inform you of the extension and the reason for the delay within the initial 30-day window.

bde77 is strictly an adult platform. Registration and use of bde77 is limited to individuals who are at least 21 years of age. bde77 does not knowingly collect, process, or retain personal data belonging to persons under 21 years of age.

If bde77 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. If you believe that bde77 may have inadvertently collected data from a minor, please contact our privacy team immediately at the address provided in Section 14.

The bde77 platform may contain links to third-party websites or services — for example, game provider landing pages or payment gateway interfaces — that are operated independently of bde77 and are not covered by this Privacy Policy. bde77 has no control over the content, privacy practices, or data handling of third-party sites and accepts no responsibility or liability for their policies or actions.

We encourage you to review the privacy policy of any third-party service you access via bde77 before providing personal information to that service. The presence of a link on bde77 does not constitute an endorsement of the linked site's privacy practices.

bde77 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised effective date.

Where changes are material — meaning they meaningfully affect how your personal data is used or the rights available to you — bde77 will notify registered account holders by email at least fourteen (14) days before the revised Policy takes effect. For non-material updates (such as typographical corrections or clarifications that do not affect your rights), the revised Policy will take effect upon publication.

Your continued use of bde77 after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any update to this Policy, you may close your bde77 account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bde77 holds about you, please contact our dedicated privacy team using the details below. All enquiries are handled in English and responded to within 30 days.

• Privacy Team Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Enquiry" in the subject line of your email so it is routed correctly.
• Response Time: Acknowledgement within 48 hours; substantive response within 30 calendar days.
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)