277bdt Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") describes how 277bdt ("we", "us", "our", "the Company") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "your", "the Player") who register for or use the 277bdt online sports betting and casino platform available at https://277bdt.net and all associated mobile-optimised versions and subdomains thereof (collectively, the "Platform").

277bdt is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is intended to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the Platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here as well. The most current version of this Policy is always available at https://277bdt.net/privacy-policy. The "Last Updated" date at the top of this page indicates when material changes were last made.

2. Data Controller

For the purposes of this Privacy Policy, 277bdt acts as the data controller in respect of personal data collected from players registered on the Platform. As data controller, 277bdt determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are carried out lawfully, fairly, and transparently.

All data-related enquiries, rights requests, and complaints should be directed to the 277bdt Data Protection contact at [email protected]. Please include "Data Privacy Request" in the subject line of your email. 277bdt will acknowledge all data-related requests within 5 business days and will provide a substantive response within 30 calendar days.

3. Data We Collect

277bdt collects personal data that is necessary for operating a secure, compliant, and high-quality online betting and casino platform. The categories of personal data we collect are set out in the table below.

277bdt does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond photographic ID for identity verification), or health data, unless you voluntarily provide such information in the context of a responsible gaming self-exclusion request.

4. How We Collect Your Data

4.1 Directly From You

The majority of the personal data 277bdt holds about you is provided directly by you at the time of account registration, during the identity verification process, when you make a deposit or withdrawal request, when you contact our support team, and when you participate in promotions or surveys. You are under no obligation to provide personal data, but failure to provide required data may mean we are unable to open an account or process transactions for you.

4.2 Automatically During Platform Use

When you access and use the 277bdt Platform, we automatically collect technical and usage data through server logs, cookies, pixel tags, and similar tracking technologies embedded in our web pages. This data is collected continuously during your session and is used primarily for security, performance monitoring, and responsible gaming analytics. See Section 10 for a full explanation of our cookies practices.

4.3 From Third Parties

277bdt may receive personal data about you from the following categories of third parties: (a) identity verification service providers who confirm the authenticity of the documents you submit during KYC; (b) payment processors such as bKash, Nagad, Rocket, and Upay who confirm transaction status; (c) fraud prevention and AML screening services that check your details against sanctions lists and risk databases; and (d) game software providers who may transmit gameplay data back to 277bdt for dispute resolution purposes. In each case, the third party is contractually required to share only the minimum data necessary for the stated purpose.

5. How We Use Your Data

277bdt uses your personal data for the following purposes. We will only process your data where we have a valid legal basis for doing so, as described in Section 6.

• Account management: Creating, maintaining, and administering your 277bdt player account, including processing deposits, withdrawals, and bet settlements.
• Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that your identity is genuine, in accordance with our KYC obligations.
• Transaction processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and processing withdrawal requests to your verified payment methods.
• Security and fraud prevention: Monitoring your account activity for signs of unauthorised access, suspicious betting patterns, bonus abuse, and money laundering, and taking appropriate action where required.
• Legal and regulatory compliance: Fulfilling our obligations under applicable anti-money-laundering laws, record-keeping requirements, and any court orders or regulatory directives that require us to disclose or retain personal data.
• Responsible gaming: Monitoring your gambling behaviour to identify potential signs of problem gambling and, where appropriate, contacting you with information about responsible gaming tools and support resources.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of communications for quality assurance and complaint management purposes.
• Platform improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform, identify technical issues, and improve the overall user experience.
• Promotional communications: Where you have given explicit consent, sending you personalised offers, bonus notifications, and promotional updates relevant to your betting preferences. You may withdraw this consent at any time by emailing [email protected].

277bdt does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is necessary for fraud prevention or AML screening. In those cases, you have the right to request human review of any automated decision that affects you.

6. Legal Basis for Processing

277bdt processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and 277bdt — including account registration, transaction processing, and bet settlement — is carried out on this basis.
• Legal obligation: Processing that is required to comply with applicable laws — including anti-money-laundering obligations, age verification requirements, and responses to lawful regulatory or judicial requests — is carried out on this basis.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 277bdt's legitimate interest in operating a safe, fair, and commercially viable platform. We have conducted legitimate interests assessments to confirm that our interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications is carried out on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing

7.1 Categories of Recipients

277bdt does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners, solely to facilitate deposits and withdrawals from your account.
• Identity verification providers: Third-party KYC service providers that verify the authenticity of identity documents and perform age verification checks on behalf of 277bdt.
• Fraud and AML screening services: Providers that screen player information against sanctions lists, politically exposed persons (PEP) databases, and adverse media databases.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe may receive gameplay session data necessary to resolve technical disputes, confirm bet outcomes, or investigate RNG integrity complaints.
• IT infrastructure and hosting providers: Cloud infrastructure providers that host the 277bdt Platform and data storage systems, subject to strict security and confidentiality obligations.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or courts where we are required by applicable law to disclose your personal data, or where disclosure is necessary to protect the safety of any individual or the integrity of the Platform.

7.2 No Unauthorised Disclosure

277bdt will not disclose your personal data to any third party outside the categories listed above without your prior explicit written consent, except where required by law. All third parties who receive personal data from 277bdt are contractually bound to process that data only for the purposes for which it was shared and to maintain appropriate technical and organisational security measures.

8. International Data Transfers

277bdt operates as an internationally licensed offshore platform. As a result, your personal data may be transferred to, and stored or processed in, countries outside Bangladesh. These countries may not have data protection laws equivalent to those in your home jurisdiction.

Where personal data is transferred internationally, 277bdt takes steps to ensure that appropriate safeguards are in place to protect your data, including contractual clauses that require recipient organisations to process personal data to a standard consistent with internationally recognised data protection principles. By registering on the 277bdt Platform and accepting this Privacy Policy, you consent to the international transfer of your personal data as described in this section.

9. Data Retention

277bdt retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account plus a minimum of five years following account closure, in order to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of seven years from the date of each transaction for financial compliance and audit purposes.
• Identity verification documents: Retained for five years following account closure or the completion of the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the relevant interaction for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for three years from the date of consent or withdrawal of consent, whichever is later, to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for 13 months on a rolling basis for security monitoring and fraud prevention purposes.

When personal data is no longer required, 277bdt will securely delete or anonymise it in accordance with our internal data destruction procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and analytical purposes.

10. Cookies Policy

10.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognise your device, remember your preferences, and collect information about how you use the site. 277bdt uses cookies and similar technologies — including session tokens, local storage objects, and pixel tags — on the Platform.

10.2 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the Platform — such as which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps 277bdt identify and resolve performance issues and improve the overall user experience.
• Functional cookies: These cookies remember choices you have made on the Platform — such as your preferred game view or responsible gaming limit settings — so that you do not need to re-enter these preferences on each visit.
• Fraud prevention cookies: These cookies help 277bdt identify and prevent fraudulent activity, including the detection of account sharing, bot activity, and multiple-account registration attempts from the same device.

10.3 Managing Cookies

You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, restrict cookie use to first-party sites, or receive a notification before a cookie is set. Please note that disabling strictly necessary cookies will impair the functionality of the 277bdt Platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in commonly used browsers are available through the browser's help documentation. 277bdt does not use advertising network or cross-site tracking cookies.

11. Security Measures

277bdt implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 277bdt servers.
• AES-256 encryption for personal data and financial records stored on 277bdt databases.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication required for all internal staff accessing player data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous intrusion detection and monitoring of all Platform infrastructure.
• Formal incident response procedures that include player notification in the event of a data breach that poses a risk to your rights and freedoms.

While 277bdt takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own account credentials. If you believe your account has been compromised, contact [email protected] immediately.

12. Your Data Rights

Regardless of your location, 277bdt respects and upholds the following data rights for all registered players. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and include sufficient detail to identify your account and the specific right you wish to exercise. We will verify your identity before processing any request and will respond within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data 277bdt holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients with whom it has been shared, and the retention periods that apply.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you be corrected or completed without undue delay. You may also update certain personal details directly within your account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent is the legal basis), or where the data has been unlawfully processed. This right is subject to overriding legal obligations — for example, we are required to retain transaction records for AML compliance purposes and cannot delete these on request.
• Right to restriction of processing: You have the right to request that 277bdt restricts the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. 277bdt will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent — for example, for direct marketing — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

13. Children's Privacy

The 277bdt Platform is strictly intended for adults aged 18 years and over. 277bdt does not knowingly collect personal data from individuals under the age of 18. If we discover or are notified that personal data has been collected from a person under 18, we will immediately close the relevant account, void all bets placed, return any deposits to the originating payment method following verification, and permanently delete all personal data associated with the account.

277bdt strongly encourages parents and guardians who share devices with minors to install appropriate parental control software to prevent underage access to gambling platforms. If you believe that a minor has registered on or is using the 277bdt Platform, please contact [email protected] immediately so that we can investigate and take appropriate action.

14. Third-Party Links

The 277bdt Platform does not contain links to third-party websites for commercial or advertising purposes. Any third-party services referenced in this Policy — such as payment providers bKash, Nagad, Rocket, and Upay, or game providers such as Evolution Gaming and Pragmatic Play — operate under their own privacy policies and terms of service. 277bdt is not responsible for the privacy practices of these third parties. Where your use of a payment method or game provider's service involves a direct relationship with that third party, we recommend that you review their privacy documentation independently.

15. Changes to This Policy

277bdt may update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect. Non-material changes — such as clarifications of existing provisions or corrections of typographical errors — may take effect immediately without prior notification.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 277bdt protects your personal data. Your continued use of the Platform after any changes to this Policy constitutes your acceptance of the revised terms.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 277bdt processes your personal data, please contact our Data Protection team using the details below. All correspondence must be in English and should include your registered account username or email address so that we can locate your records promptly.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Data Privacy Enquiry"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, 365 days a year
• Time zone: Bangladesh Standard Time (BST, UTC+6)

277bdt does not provide a telephone line for data protection enquiries. All requests are handled exclusively via email to maintain a complete and accurate written record of all communications. If you are dissatisfied with our response to a data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.