bac77 Privacy Policy – Your Data, Your Rights, Our Commitment

This Privacy Policy applies to all personal data collected, processed, and stored by bac77 in connection with the operation of the online betting and casino platform available at https://bac77.io. It covers every interaction you have with bac77, including account registration, identity verification, deposits and withdrawals, sportsbook wagering, live casino gameplay, slots, customer support communications, and participation in promotional campaigns.

bac77 is committed to maintaining the highest practical standards of data privacy for all players in Bangladesh. This document is written in plain English to ensure that every player can understand how their personal information is handled, what choices they have, and how to exercise their rights.

This Privacy Policy should be read alongside the bac77 Terms & Conditions and the bac77 Responsible Gaming policy, both of which are incorporated by reference. By creating a bac77 account or continuing to use the platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, bac77 acts as the data controller — meaning bac77 determines the purposes and means by which your personal data is processed. If you have any questions, concerns, or requests relating to your personal data, you may contact the bac77 data protection team using the following details:

• Platform: bac77 (https://bac77.io)
• Contact Email: [email protected]
• Operating Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: bac77 aims to respond to all data-related enquiries within five (5) business days and will in any case respond within thirty (30) calendar days as required for formal data subject access requests.

All formal data subject requests — including access requests, rectification requests, erasure requests, and objection notices — should be submitted in writing to [email protected] with the subject line "Data Subject Request" along with the full name and account username associated with the bac77 account. bac77 may request a copy of your identity document to verify the request before processing it.

bac77 collects personal data across several categories, depending on your level of interaction with the platform. The table below summarises the main data types collected, the source of collection, and the primary purpose for which each is used.

3.1 Sensitive Data

bac77 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. If you voluntarily disclose such information during a support interaction, bac77 will handle it with heightened care and will not use it for any purpose other than responding to your query.

3.2 Data Collected from Minors

bac77 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from a user who is under 21, we will immediately close the account, void all associated transactions, and delete the personal data in question as promptly as possible. See Section 11 for further details on our approach to minors.

bac77 uses the personal data it collects for clearly defined operational, legal, and security purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which bac77 processes your personal data are as follows:

• Account creation and management: To register your bac77 account, verify your identity through KYC, maintain your account settings, and manage your login credentials securely.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi bank partners, and to maintain accurate financial records of all transactions conducted through your account.
• Platform operation: To provide access to the bac77 sportsbook, live casino, and slots products; to record bet placements and game outcomes; and to calculate and credit winnings accurately.
• Customer support: To respond to your queries, complaints, and requests, and to maintain a record of our communications with you for quality and dispute resolution purposes.
• Anti-fraud and security: To detect and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct. bac77 uses automated systems to monitor account activity for suspicious patterns.
• Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) requirements, retain records as required by law, and cooperate with lawful requests from competent authorities.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to apply responsible gaming tools, deposit limits, and self-exclusion mechanisms where appropriate.
• Platform improvement: To analyse aggregated, anonymised usage data and improve the performance, design, and feature set of the bac77 platform over time.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal campaign updates — but only where you have opted in to receive such communications and only via channels (email or SMS) you have authorised.

bac77 processes your personal data on the following legal grounds, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to fulfil our obligations to you under the bac77 Terms & Conditions — including account creation, transaction processing, and gameplay access — is carried out on the basis of contractual necessity.
• Legal obligation: Certain processing activities, including KYC identity verification, AML record-keeping, and cooperation with lawful authority requests, are carried out to comply with legal obligations applicable to bac77's operations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and service improvement is based on bac77's legitimate interest in maintaining a safe, secure, and fair platform for all players. We carry out a balancing assessment to ensure these interests do not override your fundamental privacy rights.
• Consent: Processing your data for marketing communications — including promotional emails and SMS updates about bac77 bonuses, seasonal offers, and new game launches — is based solely on your prior, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bac77 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to gather anonymised analytics that help us understand how players interact with the site.

6.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the bac77 platform to operate. They maintain your login session, store your language and display preferences, and ensure secure navigation between pages. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: bac77 uses anonymised analytics to understand aggregated traffic patterns, page performance, and feature usage. No personally identifiable information is contained in analytics data. This helps bac77 improve the platform experience over time.
• Functional cookies: These cookies remember your preferences — such as your preferred payment method in the cashier or your responsible gaming settings — so you do not need to re-enter them on every visit.
• Marketing cookies: Where you have consented to receive marketing from bac77, we may use cookies to measure the effectiveness of our promotional campaigns and to avoid showing you the same promotional message repeatedly.

6.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent you from logging in to your bac77 account or using certain platform features. Refer to your browser's help documentation for instructions on managing cookie settings on your specific device.

bac77 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, bac77 does share limited personal data with carefully selected third-party partners where this is necessary to deliver the bac77 service. All third-party data processors engaged by bac77 are contractually required to handle your data securely, to use it only for the agreed purpose, and to comply with applicable data protection obligations.

7.1 Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners receive the minimum financial data necessary to process your deposit and withdrawal transactions securely. Each payment partner operates under its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC verification services may process your identity documents (NID, passport, driving licence) on behalf of bac77 for the purpose of age and identity verification. These providers are contractually bound to use your data for KYC purposes only.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi may receive anonymised session data necessary for game operation, fairness certification, and technical support. These providers do not receive your name, financial details, or contact information.
• IT and infrastructure providers: Cloud hosting and platform infrastructure providers that support the technical operation of the bac77 platform may have access to data stored on their infrastructure. All such providers are bound by strict data processing agreements.
• Legal and regulatory authorities: bac77 will disclose personal data to competent law enforcement authorities, regulatory bodies, or courts where required by applicable law or pursuant to a lawful order. bac77 will notify you of such disclosures where legally permitted to do so.

bac77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

When personal data is no longer required for any of the purposes listed above and no legal obligation requires its further retention, bac77 will securely delete or anonymise that data in accordance with our internal data disposal procedures.

As a bac77 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Request". We will verify your identity before processing any request and will respond within thirty (30) calendar days.

• Right of access: You have the right to request confirmation of whether bac77 holds personal data about you and, if so, to receive a copy of that data along with an explanation of how it is used, shared, and retained.
• Right to rectification: If any personal data bac77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: Subject to bac77's legal retention obligations (see Section 8), you have the right to request the deletion of your personal data. Erasure requests will be honoured to the maximum extent possible once all mandatory retention periods have been satisfied.
• Right to restriction of processing: In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that bac77 restrict the processing of your personal data to storage only, pending resolution of the relevant matter.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to bac77.
• Right to object: You have the right to object to the processing of your personal data where bac77 relies on legitimate interests as the legal basis. bac77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right not to be subject to solely automated decisions: You have the right to request human review of any automated decision made by bac77 that significantly affects your account or access to the platform.

bac77 takes the security of your personal data seriously and implements a comprehensive range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• 256-bit SSL / TLS encryption on all data transmitted between your device and the bac77 platform, preventing interception of data in transit.
• Encrypted storage of sensitive account data, including financial identifiers and KYC documents, within access-controlled, encrypted databases.
• Mobile OTP two-factor authentication for account login and for sensitive account changes such as withdrawal method updates and password resets.
• Role-based access controls within bac77's internal systems, ensuring that only authorised personnel with a legitimate business need can access player personal data.
• Continuous security monitoring via automated intrusion detection systems that flag and investigate anomalous access patterns in real time.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.

While bac77 employs robust security measures, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure: use a strong, unique password for your bac77 Login, do not share your credentials with anyone, and contact [email protected] immediately if you suspect any unauthorised access to your account.

10.1 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, bac77 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures bac77 has taken or proposes to take in response.

The bac77 platform is strictly for adults aged 21 years and above. bac77 does not knowingly collect, process, or store personal data from individuals under the age of 21 under any circumstances. Age verification is a mandatory step during the registration process, and further KYC verification may be requested at any point to confirm that a player meets the minimum age requirement.

If bac77 becomes aware that personal data has been collected from a player who is under the age of 21, bac77 will take the following steps immediately: (a) permanently close the account; (b) void all wagers placed from the account; (c) return any net deposited funds to the payment method used; and (d) securely delete all personal data associated with the account within the shortest practicable timeframe consistent with any mandatory legal hold obligations.

If you are a parent or guardian and believe that a minor in your care has registered on the bac77 platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate the matter and act promptly.

12.1 Updates to This Policy

bac77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, bac77 will notify registered players via the email address associated with their account at least seven (7) calendar days before the revised policy takes effect. The "Effective Date" at the top of this document will be updated to reflect the date on which the latest version came into force. We recommend reviewing this Privacy Policy periodically to stay informed of how bac77 protects your data.

12.2 Governing Language

This Privacy Policy is published exclusively in English. In the event of any dispute or ambiguity regarding the meaning of any provision, the English-language version shall be the authoritative and binding text.

12.3 Contact Details

For all privacy-related enquiries, data subject requests, or concerns regarding bac77's data practices, please contact the bac77 data protection team:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Subject Request" as appropriate.
• Response time: General privacy enquiries are answered within five (5) business days. Formal data subject requests are processed within thirty (30) calendar days.
• Operating hours: 24/7, Bangladesh Standard Time (BST, UTC+6).