77sb Privacy Policy
Your Data, Protected at Every Step

1 Introduction

This Privacy Policy ("Policy") describes how 77sb ("77sb", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "you") who access or use the online gaming and sports betting platform operated at https://77sb.io (the "Platform").

By registering a 77sb account, making a deposit, accessing the 77sb Login page, or otherwise using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy is written in English and is intended for players based in Bangladesh. All customer support, privacy-related correspondence, and data rights requests are handled in English on Bangladesh Standard Time (BST, UTC+6).

2 Data Controller

77sb is the data controller responsible for personal data collected through the Platform. As data controller, 77sb determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities are conducted lawfully, fairly, and transparently.

For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints regarding how 77sb handles your personal data, please contact the 77sb Data Privacy team at:

• Email: [email protected] — include "Privacy Request" in the subject line for priority routing to the Data Privacy team.
• Live Chat: Available 24/7 on the 77sb Platform. Ask the support agent to escalate your request to the Data Privacy team.
• Response Time: Privacy-related requests are acknowledged within one (1) business day (BST) and resolved within fourteen (14) calendar days of receipt.

3 Personal Data We Collect

77sb collects the following categories of personal data from players. The specific data points collected depend on the stage of your relationship with the Platform:

3.1 Registration Data

Collected when you create a 77sb account:

• Full legal name (as it appears on your National ID Card or passport)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in Bangladesh (city, district, postcode)
• Bangladesh mobile phone number
• Email address
• Self-selected username and encrypted password

3.2 Identity Verification (KYC) Data

Collected during the Know Your Customer verification process:

• Scanned copy or photograph of National ID Card (NID), passport, or Bangladesh driving licence
• Proof of address document (utility bill, bank statement, or government correspondence dated within three months)
• Payment method verification (screenshot of bKash, Nagad, Rocket, or Upay account registered in your name)
• Selfie photograph for liveness verification (requested on a risk-triggered basis)

3.3 Financial & Transaction Data

• Deposit amounts, timestamps, and transaction reference numbers
• Withdrawal requests, processed amounts, and destination payment account identifiers (mobile wallet number or bank account ending digits)
• Bonus claim history and wagering activity records
• Account balance history and BDT wallet ledger entries

3.4 Gaming & Betting Activity Data

• Betting history across all sports markets (cricket, football, kabaddi, etc.)
• Casino and slot game session records (game name, stake, outcome, session duration)
• Live casino game participation records (table, dealer, session timestamps)
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion history)

3.5 Technical & Device Data

• IP address at login and during active sessions
• Device type, operating system, and browser type/version
• Session timestamps (login time, logout time, session duration)
• Geolocation data (country/city level, derived from IP address)
• Cookies and similar tracking technologies (see Section 9)

3.6 Communications Data

• Live chat transcripts between you and the 77sb support team
• Email correspondence with 77sb (support, KYC submissions, privacy requests)
• Feedback, complaints, and dispute records

4 How We Collect Your Data

77sb collects personal data through the following channels:

• Directly from you: When you complete the account registration form, submit KYC documents, contact live chat support, send an email to [email protected], set responsible gaming limits, or update your account profile.
• Automatically through Platform use: When you browse the 77sb website, log in, place bets, play casino games, or interact with any Platform feature — technical and behavioural data is collected automatically via server logs, session tracking, and cookies.
• From payment processors: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or bank transfer, the payment processor confirms the transaction status and provides 77sb with the transaction reference and account identifier necessary to credit or debit your 77sb wallet. 77sb does not receive or store full payment account credentials.
• From game providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may share aggregated game session data with 77sb for account management, dispute resolution, and responsible gaming monitoring purposes.
• From identity verification services: Where 77sb uses a third-party KYC or identity verification provider to assist with document validation, that provider will return a verification status and risk score to 77sb. 77sb does not grant such providers ongoing access to your gaming or financial data.

5 How We Use Your Personal Data

77sb uses personal data for the following purposes:

6 Legal Basis for Processing

77sb processes personal data on the following legal bases:

• Contract performance: Processing is necessary to create and maintain your 77sb account, process your deposits and withdrawals, deliver gaming services, and administer bonuses. Without this processing, 77sb cannot fulfil its contractual obligations to you as a player.
• Legal obligation: 77sb is required to process certain data — including identity verification and financial records — to comply with applicable anti-money-laundering, responsible gaming, and data protection obligations. 77sb cannot waive these requirements on a player's request.
• Legitimate interest: 77sb processes technical, device, and behavioural data to protect the Platform from fraud, abuse, and security threats; to monitor for signs of problem gambling; to improve platform performance; and to manage disputes. In each case, 77sb has assessed that its legitimate interests are not overridden by your privacy rights.
• Consent: Where 77sb sends marketing communications (promotional emails, bonus notifications, seasonal offers), this is done on the basis of your explicit consent, given at registration or subsequently in your account settings. You may withdraw consent for marketing at any time — see Section 15.

7 Data Sharing & Third Parties

77sb does not sell personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

7.1 Game Providers

To deliver live casino, slots, and virtual sports games, 77sb integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and player identifier sufficient to load and operate the game. They do not receive your full name, date of birth, or financial details. All game providers are contractually required to handle session data in accordance with applicable data protection standards.

7.2 Payment Processors

To process deposits and withdrawals in BDT, 77sb shares transaction data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Data shared is limited to what is required to execute and confirm the transaction. 77sb does not store full payment credentials.

7.3 Identity Verification Providers

For KYC document validation, 77sb may use a third-party identity verification service. That provider receives document images and returns a verification result to 77sb. Document data is not retained by the provider beyond the verification session.

7.4 Legal & Regulatory Disclosure

77sb may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required by applicable law, a valid legal order, or in connection with the investigation of fraud, money laundering, or other criminal activity. In such cases, 77sb will disclose only the minimum data required and will notify the affected player where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of assets involving 77sb, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer via their registered email address, and the acquiring entity will be required to honour the terms of this Privacy Policy.

8 Payment Data & Financial Security

All financial transactions on the 77sb Platform — deposits via bKash, Nagad, Rocket, Upay, or bank transfer, and withdrawals to those same channels — are processed over encrypted connections. 77sb applies the following specific protections to payment-related data:

• 77sb does not store full payment card numbers. Only the last four digits of a Visa or Mastercard may be retained for reference purposes in your transaction history.
• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form. Only the last four digits are displayed in your account transaction history for identification purposes.
• Deposits and withdrawals must originate from and be directed to payment accounts registered in your own legal name. This requirement is enforced both as a KYC obligation and as a fraud-prevention measure.
• All BDT transaction records are retained for a minimum of five (5) years in accordance with financial record-keeping requirements applicable to online payment platforms.
• Any suspicious financial activity — including structuring deposits to avoid verification thresholds or repeated rapid deposit-withdrawal cycles — may be flagged for review and reported to relevant authorities as required by applicable law.

9 Cookies & Tracking Technologies

The 77sb Platform uses cookies and similar technologies to deliver core platform functionality, maintain login sessions, detect fraud, and analyse platform performance. The following cookie categories are in use:

You may control non-essential cookies through your browser settings. Disabling strictly necessary or fraud-prevention cookies may prevent you from logging in or using core Platform features. 77sb does not use third-party advertising cookies or retargeting pixels on the Platform.

10 Data Retention

77sb retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal or financial record-keeping obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (where no individual can be identified) may be retained indefinitely for aggregated statistical analysis and platform improvement purposes.

11 Your Data Rights

Every 77sb player whose personal data is processed under this Policy holds the following rights. All rights may be exercised free of charge by contacting 77sb at [email protected] with "Privacy Request" in the subject line, or via live chat support:

• Right of Access: You may request a copy of all personal data that 77sb holds about you. 77sb will provide this in a structured, readable format within fourteen (14) calendar days of a verified request.
• Right to Rectification: If any personal data held by 77sb is inaccurate or incomplete, you may request that it be corrected or updated. Updates to registered mobile number and address can also be made directly via your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. 77sb will action deletion requests subject to legal retention obligations — data required for AML compliance, financial record-keeping, or ongoing dispute resolution cannot be deleted until the applicable retention period expires.
• Right to Restriction: You may request that 77sb restrict processing of your data (i.e., retain but not actively process it) while a correction or objection request is being investigated.
• Right to Data Portability: You may request your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interest — in particular, processing for direct marketing purposes. Where you object to marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

12 Minors & Age Restriction

The 77sb Platform is strictly intended for adults aged 21 years and above. 77sb does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the 77sb registration process, and KYC document checks are used to confirm that every registered player meets the minimum age requirement.

If 77sb discovers that a player account has been registered by or on behalf of a person under the age of 21, that account will be immediately suspended, all funds will be frozen pending investigation, and all personal data associated with the account will be deleted as soon as legally permissible. Any winnings generated by an underage player will be forfeited.

13 Security Measures

77sb implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 77sb Platform, including login sessions, game play, and payment processing.
• Encrypted password storage using industry-standard hashing algorithms. 77sb staff cannot view your account password in plain text.
• Role-based access controls (RBAC) ensuring that 77sb employees can only access personal data to the extent required to perform their specific job function. Access to KYC documents and financial records is restricted to a small number of authorised personnel.
• Regular security audits and penetration testing carried out by independent security professionals to identify and remediate vulnerabilities in the Platform infrastructure.
• Two-factor authentication (2FA) available to all players on the 77sb Platform — strongly recommended for all accounts holding a BDT balance.
• Anomaly detection systems that monitor login patterns, deposit behaviour, and session activity for signs of account compromise or fraudulent access, with automatic alerts and account-locking capabilities.
• Secure data centres with physical access controls, redundant storage, and regular encrypted backups.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 77sb will notify affected players via their registered email address within seventy-two (72) hours of becoming aware of the breach, in accordance with applicable data breach notification obligations.

14 International Data Transfers

The 77sb Platform is operated for and primarily targeted at players based in Bangladesh. However, some of the third-party service providers used by 77sb — including certain game studios, identity verification providers, and cloud infrastructure partners — may process data in jurisdictions outside of Bangladesh.

In all cases where personal data is transferred outside Bangladesh, 77sb ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or greater than, the protections described in this Privacy Policy. Such safeguards include:

• Contractual clauses requiring the recipient to handle data in accordance with this Policy and applicable data protection standards.
• Transfer only to providers operating in jurisdictions with recognised data protection frameworks, or to providers that have individually committed to equivalent standards through binding contractual obligations.
• Minimisation of the personal data transferred — only data strictly necessary for the specific service function is shared with international processors.

You may request information about the specific international transfers applicable to your account data by contacting the 77sb Data Privacy team at [email protected].

15 Marketing Communications

With your consent, given at the time of account registration or subsequently via your account settings, 77sb may send you marketing communications including:

• Promotional bonus offers and welcome package notifications (e.g., deposit match bonuses, free bet credits)
• Seasonal and festival promotion alerts (Eid, Pohela Boishakh, Victory Day, IPL, BPL, T20 World Cup)
• New game launch announcements from providers such as Pragmatic Play, Evolution Gaming, and Spribe
• Platform updates, feature releases, and responsible gaming reminders

Marketing communications are delivered via email and, where consented separately, via SMS to your registered Bangladesh mobile number. 77sb does not conduct unsolicited phone marketing calls.

15.1 Withdrawing Marketing Consent

You may withdraw your consent to receive marketing communications at any time through any of the following methods:

• Click the "Unsubscribe" link in any marketing email sent by 77sb — this will immediately remove you from the email marketing list.
• Log in to your 77sb account, navigate to Account Settings, and toggle off "Marketing Communications" under the Notifications section.
• Contact live chat support or email [email protected] with the subject line "Unsubscribe from Marketing" and your registered username.

Withdrawal of marketing consent does not affect the delivery of transactional communications (deposit confirmations, withdrawal notifications, KYC status updates, security alerts, and responsible gaming notifications) — these are sent on the basis of contract performance and cannot be opted out of while your account remains active.

16 Amendments to This Policy

77sb reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes to the Platform's data processing activities, or improvements to our privacy practices. The most current version of this Policy is always available at https://77sb.io/privacy-policy.

In the event of a material amendment — meaning a change that affects the type of data collected, the purposes for which it is used, the third parties with whom it is shared, or your rights as a data subject — 77sb will:

• Email registered players at their registered email address no less than fourteen (14) calendar days before the amendment takes effect, summarising the key changes in plain English.
• Display a prominent in-platform notification at next login for a period of no less than seven (7) days following the effective date of the amendment.
• Update the "Effective Date" and "Last Reviewed" dates shown at the top of this Policy.

Continued use of the 77sb Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should discontinue use of the Platform and contact support to close your account.

17 Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the way 77sb handles your personal data, please reach out to the 77sb Data Privacy team through the following channels:

• Email: [email protected] — use the subject line "Privacy Request" for priority routing. Responses within one (1) business day (BST).
• Live Chat: Available 24/7 on the 77sb Platform. Typical response time under three (3) minutes during Bangladesh peak hours (6 PM – 11 PM BST).
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), every day of the year including public holidays.

77sb is committed to resolving all privacy-related queries promptly and transparently. If you are not satisfied with the resolution provided by the 77sb Data Privacy team, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.