bff77 Privacy Policy

01Introduction & Scope

This Privacy Policy ("Policy") describes how bff77 ("Platform", "We", "Us", "Our") collects, processes, stores, and protects the personal data of individuals ("You", "User", "Player") who access or use the bff77 website, its sub-domains, and all associated betting, casino, and gaming services. This Policy applies to all users of the bff77 platform regardless of the device or network used to access the service.

By registering an account or continuing to use the bff77 platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the bff77 platform.

02Personal Data We Collect

When you register an account with bff77 or interact with our platform, we collect the following categories of personal data:

• Identity data: full legal name, date of birth, nationality, and a copy of a government-issued identification document where KYC verification is required.
• Contact data: mobile phone number (used for bKash, Nagad, or Rocket transaction verification), email address if provided at registration, and residential address within Bangladesh.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. last four digits of a registered mobile wallet number), account balance history, and bet history.
• Technical data: IP address, device type and operating system, browser type and version, time zone setting, and session logs generated during each visit to the bff77 platform.
• Usage data: pages visited, game categories explored, bet placement patterns, session duration, promotional offers viewed or claimed, and customer support interactions.
• Communications data: any messages, emails, or chat transcripts exchanged between you and the bff77 support team, including the content and metadata of those communications.

We collect only the minimum data necessary to provide our services safely and in compliance with applicable financial crime prevention requirements. We do not collect sensitive personal data such as racial origin, religious beliefs, or health information unless legally required in specific circumstances.

03How We Use Your Personal Data

bff77 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

• Account creation and management: verifying your identity, creating and maintaining your player account, and processing your deposits and withdrawals via bKash, Nagad, and Rocket.
• Service delivery: providing access to cricket betting, live casino, slots, fishing games, crash games, and any other gaming products available on the bff77 platform.
• Fraud prevention and security: detecting and preventing fraudulent transactions, money laundering, match fixing, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Responsible gaming: monitoring account activity for indicators of problem gambling behaviour and, where appropriate, initiating outreach or applying account restrictions in accordance with our Responsible Gaming obligations.
• Marketing communications: sending you promotional offers, VIP programme updates, and bonus notifications via your registered mobile number or contact method — but only where you have not opted out. You may withdraw marketing consent at any time by contacting [email protected].

04Sharing Your Data with Third Parties

bff77 does not sell, rent, or trade your personal data to third parties. We share your data only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform:

• Payment processors: transaction data (amount, timestamp, wallet identifier) is shared with bKash, Nagad, and Rocket solely to facilitate the processing of your deposits and withdrawals. These providers operate under their own privacy frameworks and are not permitted to use your data for any other purpose.
• Game content providers: your player session identifiers and bet history may be shared with licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi solely to facilitate real-time game delivery and dispute resolution.
• Fraud prevention and KYC partners: identity documents and verification data may be shared with specialised identity verification service providers to fulfil our KYC obligations. These providers are contractually bound to process data only for the stated purpose.
• Legal and regulatory authorities: where required by applicable law or a valid legal order, bff77 may disclose personal data to law enforcement, regulatory bodies, or courts. We will notify you of such disclosures where we are legally permitted to do so.

05Cookies & Tracking Technologies

bff77 uses cookies and similar technologies to improve your experience on the platform, maintain your login session, and understand how players interact with our services. The table below summarises the types of cookies we use:

You can manage or delete cookies through your mobile browser settings at any time. Disabling essential cookies will prevent you from logging in and using the bff77 platform. Analytics and preference cookies can be disabled without affecting core functionality.

06Data Retention

bff77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, and resolve any disputes that may arise. The following retention periods apply:

• Active account data (identity, contact, financial): retained for the full duration of your active account relationship with bff77, plus a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: all deposit, withdrawal, and bet transaction records are retained for a minimum of 5 years from the date of the transaction, regardless of whether the account is active or closed.
• Communications data: support tickets, chat transcripts, and email correspondence are retained for 2 years from the date of the last interaction, after which they are securely deleted unless a live dispute requires their continued retention.
• Technical and analytics data: IP logs, session logs, and device data are retained for 12 months from the date of collection and then automatically purged from our systems.

When the retention period for any category of personal data expires, that data is either securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data may be retained indefinitely for statistical and service improvement purposes.

07Your Data Rights

As a user of the bff77 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account details:

• Right of access: you may request a copy of all personal data we hold about you. We will provide this within 10 business days of receiving a verified request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Identity document corrections may require re-submission of verification materials.
• Right to erasure: subject to our legal retention obligations (see Section 08), you may request that we delete your personal data. Requests relating to data we are legally required to retain will be refused with an explanation.
• Right to restrict processing: you may ask us to suspend processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data or the legitimacy of our processing.
• Right to withdraw marketing consent: you may withdraw your consent to receive promotional communications at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before withdrawal.

08Data Security Measures

bff77 implements a layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS encryption for all data in transit between your device and bff77 servers, ensuring that payment data and account credentials cannot be intercepted on public or shared mobile networks common in Bangladesh.
• Encrypted storage for all sensitive personal data at rest, including identity documents and financial records, using industry-standard encryption protocols.
• Access controls limiting personal data access to authorised bff77 personnel only, with role-based permissions and mandatory two-factor authentication for all staff accounts with access to player data.
• Regular security assessments and penetration testing conducted by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bff77 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You are encouraged to use a strong, unique password for your bff77 account and to enable any additional account security features we make available.

09Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bff77 handles your personal data, please contact our support team using the details below. All privacy-related queries are handled confidentially and will receive a substantive response within 3 business days:

• Email (preferred): [email protected] — use the subject line "Privacy Query" for the fastest routing to our data protection team.
• Response time: bff77 targets a first response within 24 hours for urgent security-related privacy queries (e.g., suspected unauthorised access to your account) and within 3 business days for general privacy questions.
• Data rights requests: when submitting a request to access, correct, or delete your data, please include your registered mobile number and full name so we can verify your identity before processing the request.

10Changes to This Privacy Policy

bff77 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or the services we offer. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where practicable, notify registered players via their registered contact method.

We encourage you to review this page periodically to stay informed about how bff77 protects your data. Your continued use of the bff77 platform following the publication of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with an updated Policy, you must stop using the bff77 platform and may request account closure in accordance with our Terms & Conditions.

11Governing Law

This Privacy Policy and any disputes arising from it shall be governed by and construed in accordance with the laws applicable to the jurisdiction in which bff77 operates. Players accessing the platform from Bangladesh are subject to applicable Bangladeshi laws relating to data privacy, consumer protection, and digital transactions to the extent that such laws apply to online services operated through digital platforms.

Nothing in this Policy limits any rights you may have under applicable consumer protection or data privacy legislation. If you believe bff77 has not handled your personal data in accordance with this Policy, you have the right to raise a complaint directly with us at [email protected]. We take all privacy complaints seriously and commit to a full investigation and written response within 10 business days.