b2777 Privacy Policy — How We Protect & Handle Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how b2777 ("b2777", "we", "our", "us") collects, receives, stores, processes, and uses personal information about individuals ("you", "your", "Member", "User") who visit, register on, or otherwise interact with the b2777 online casino and sports betting platform accessible at https://b2777.io and any associated mobile or web applications (collectively, the "Platform").

b2777 is committed to handling personal data responsibly, lawfully, and transparently. This Policy is designed to give you a clear and complete understanding of our data practices so that you can make informed decisions about your use of the Platform and the personal information you share with us.

This Policy should be read alongside b2777's Terms & Conditions, which govern your use of the Platform more broadly, and the Responsible Gaming page, which describes how we use certain data to promote safer gambling practices. This Policy was last updated in January 2026.

If you have any questions about this Policy or about how b2777 handles your personal data, please contact our support team at [email protected] before registering an account or engaging with any paid features of the Platform.

2 Data Controller

For the purposes of this Privacy Policy, b2777 acts as the data controller in respect of the personal information collected from members and visitors of the Platform. As data controller, b2777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

b2777 operates the Platform specifically for the Bangladesh market. The Platform is designed to serve players located in Bangladesh and is offered in English, with customer support available in both English and Bengali. All financial transactions are conducted in Bangladeshi Taka (BDT) via local payment methods including bKash, Nagad, Rocket, and Upay.

You may contact b2777's data team at any time by emailing [email protected] with the subject line "Data Privacy Enquiry". Our support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

3 Personal Data We Collect

b2777 collects several categories of personal data depending on the nature of your interaction with the Platform. The categories of data we collect, and the specific data points within each, are described in detail below.

b2777 does not collect or process special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, political opinions, or biometric data) except where strictly required for responsible gaming compliance purposes, in which case such collection will be clearly disclosed to you at the point of collection.

4 How We Collect Your Data

b2777 collects personal data through several distinct channels and mechanisms:

• Direct Submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or participating in a promotional offer.
• Automated Technologies: Data collected automatically when you visit or use the Platform, including cookies, web beacons, pixel tags, session replay tools, and server log files. This includes your IP address, device identifiers, and browsing behaviour on the Platform.
• Payment Processors: b2777 receives confirmation data from payment processors (bKash, Nagad, Rocket, Upay) when transactions are completed. b2777 does not receive or store your full mobile banking credentials — only the transaction reference, amount, and associated mobile number.
• Game Providers: Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may transmit game outcome data and session metadata to b2777 as part of the game delivery and audit process.
• Identity Verification Partners: During KYC verification, b2777 may use third-party identity verification services to authenticate documents submitted by members. These partners process your identity documents on b2777's behalf and under b2777's instructions.
• Analytics Providers: b2777 uses web analytics tools to understand how members interact with the Platform. These tools generate aggregated and pseudonymised data about Platform usage patterns, which b2777 uses to improve its services.

5 Legal Basis for Processing

b2777 processes your personal data on the following legal bases, depending on the specific purpose and category of data involved:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and b2777 — specifically, to operate your account, process your deposits and withdrawals, and deliver gaming services to you. Without this processing, b2777 cannot provide the services you have requested.
• Legal Obligation: Processing that is necessary for b2777 to comply with applicable legal requirements, including Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, fraud detection and prevention requirements, and record-keeping obligations.
• Legitimate Interests: Processing for purposes that are in b2777's legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms. This includes Platform security monitoring, fraud prevention beyond regulatory minimums, analytics to improve the service, and responsible gaming monitoring.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in connection with the sending of direct marketing communications. Where we process your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Personal Data

b2777 uses your personal data for the following specific and defined purposes:

• Account Management: To create, maintain, and manage your b2777 account, including processing registration, verifying your identity, managing your profile settings, and handling account closures.
• Service Delivery: To provide you with access to b2777's full range of gaming services, including casino games from Pragmatic Play, Evolution Gaming, NetEnt, and other providers, sports betting on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), football, and other events, as well as crash games, fishing games, and slot games.
• Payment Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported payment channels, and to maintain accurate financial records of all transactions.
• KYC and AML Compliance: To verify your identity, confirm your age (you must be 21 or older to use b2777), and detect and prevent money laundering, fraud, and other financial crimes.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, to enforce deposit limits and self-exclusion settings you have applied to your account, and to reach out to you proactively if our monitoring systems identify concerning patterns in your gameplay.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 bilingual support channels.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion between players, abuse of promotional offers, and any other activity that may harm b2777 or its members.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and develop new features and improvements to the b2777 Platform based on how members interact with it.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about new games or features on b2777, where you have consented to receive such communications. You may opt out at any time via your account settings or by emailing [email protected].
• Legal and Regulatory Compliance: To comply with all applicable laws and regulations, to respond to lawful requests from law enforcement or regulatory authorities, and to establish, exercise, or defend legal claims.

7 Data Sharing & Third Parties

b2777 does not sell your personal data to third parties under any circumstances. We may share your personal data with third parties only in the following limited and controlled circumstances:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and any other payment processors we engage to facilitate financial transactions. These providers receive only the data necessary to process your specific transaction.
• Game Content Providers: Third-party game studios and content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) receive pseudonymised player session data as required to deliver game content and maintain audit trails of game outcomes.
• Identity Verification Services: Third-party KYC and identity verification partners who process your identity documents on b2777's behalf as part of the account verification process. These partners operate under contractual data processing agreements with b2777.
• Analytics and Technology Providers: Third-party technology vendors who provide Platform infrastructure, security monitoring, analytics, fraud detection, and customer support tooling. These providers act as data processors and may only process your data in accordance with b2777's written instructions.
• Law Enforcement and Regulatory Authorities: Where b2777 is required by law, court order, or lawful regulatory directive to disclose personal data, we will do so. Where legally permissible, b2777 will attempt to notify affected members of such disclosures.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of b2777's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being in place.

All third-party data processors engaged by b2777 are required to enter into formal data processing agreements that contractually obligate them to process your personal data only on b2777's instructions, to implement appropriate technical and organisational security measures, and to refrain from using your data for any purpose other than those specified by b2777.

8 Data Retention

b2777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised. Anonymised data, which can no longer be associated with any identifiable individual, may be retained indefinitely for analytical and statistical purposes.

9 Security Measures

b2777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and b2777's servers is encrypted using TLS 1.3, the current industry-standard secure transport protocol. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data and financial records stored on b2777's servers are encrypted at rest using AES-256 encryption, providing an additional layer of protection in the event of any physical or logical server compromise.
• Access Controls: Access to systems containing personal data is restricted to authorised b2777 personnel on a strictly enforced need-to-know basis. All access is governed by role-based access control (RBAC) policies and is logged for audit purposes.
• Multi-Factor Authentication: Administrative access to b2777's internal systems requires multi-factor authentication (MFA). We strongly recommend that all members also enable any available account security features on their b2777 account.
• Intrusion Detection and Monitoring: b2777's infrastructure is continuously monitored by automated intrusion detection systems and a dedicated security team. Anomalous access patterns, unusual transaction behaviour, and potential security incidents are investigated in real time.
• Regular Security Assessments: b2777 conducts regular security assessments, including penetration testing and vulnerability scanning, to proactively identify and remediate security weaknesses before they can be exploited.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, b2777 will notify affected members without undue delay and will take all reasonable steps to contain and remediate the breach.

While b2777 employs robust security measures, no system is entirely immune to security risks. You also play an important role in keeping your account secure — please use a strong, unique password for your b2777 account, do not share your credentials with anyone, and contact our support team immediately if you suspect any unauthorised activity on your account.

10 Cookies & Tracking Technologies

b2777 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies serve several functions on the b2777 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login sessions, session state management, fraud detection, and security monitoring. The Platform cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences and settings — such as your selected language, preferred game categories, and responsible gaming settings — so that you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies collect anonymised or pseudonymised information about how visitors use the Platform, including which pages are visited most frequently, where users navigate from, and how long they spend on each section. This data helps b2777 understand usage patterns and improve the Platform experience.
• Performance Cookies: These cookies monitor the technical performance of the Platform, including page load times, server response times, and error rates, enabling b2777's engineering team to quickly identify and resolve performance issues.

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain categories of cookies may affect the functionality of the b2777 Platform — in particular, disabling strictly necessary cookies will prevent you from logging in to your account.

b2777 does not use cookies to serve third-party advertising or to track your activity on other websites outside of the b2777 Platform.

11 Your Data Protection Rights

b2777 respects your rights in relation to your personal data. Subject to applicable law and certain conditions, you have the following rights with respect to the personal data b2777 holds about you:

• Right of Access: You have the right to request a copy of the personal data b2777 holds about you, along with information about how that data is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request that we correct any inaccurate personal data we hold about you, or to complete any incomplete data. You may update many of your profile details directly through your account settings.
• Right to Erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. This right is subject to our obligations to retain certain data under applicable law, including AML and KYC regulations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where the processing is unlawful but you do not want the data deleted.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit that data directly to another organisation where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on b2777's legitimate interests, including profiling for responsible gaming purposes. You also have an unconditional right to object to the processing of your data for direct marketing purposes.
• Rights Related to Automated Decision-Making: b2777 may use automated systems to flag accounts for responsible gaming review or fraud investigation. You have the right to request human review of any automated decision that has a significant effect on you.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request", including your registered username, a description of your request, and a copy of your identification document to enable us to verify your identity before processing the request.

12 Minors & Age Restriction

b2777 operates an absolute and strictly enforced 21+ age policy. The Platform is not intended for, marketed to, or directed at individuals under the age of 21. b2777 does not knowingly collect, store, or process personal data from individuals under the age of 21 under any circumstances.

During the registration process, all applicants are required to confirm their date of birth. Any applicant found to be under the age of 21 will be refused registration. Where b2777 discovers, at any point after registration, that a member is under the age of 21, b2777 will immediately close that account , freeze any associated funds pending investigation, and permanently delete all personal data collected from that individual in accordance with applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has registered on the b2777 Platform or submitted personal data to us, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay, including account closure and data deletion.

b2777 encourages all members to make use of parental control and filtering software to prevent minors from accessing online gambling platforms. Resources and guidance on parental controls are available through our Responsible Gaming page.

13 International Data Transfers

b2777 primarily serves the Bangladesh market and processes member data within secure data centre environments. However, certain third-party service providers engaged by b2777 — including game content providers such as Pragmatic Play, Evolution Gaming, and NetEnt, as well as analytics and infrastructure partners — may be based in or operate from jurisdictions outside Bangladesh.

Where personal data is transferred to a third-party provider located outside Bangladesh, b2777 takes appropriate steps to ensure that your personal data continues to receive an adequate and consistent level of protection. These steps may include entering into standard contractual clauses with the receiving party, obtaining your explicit consent for specific transfers, or relying on other lawful transfer mechanisms as applicable.

b2777 does not transfer your personal data to any jurisdiction where doing so would be prohibited by applicable law or where adequate data protection standards cannot be assured. If you have specific questions about the locations in which your personal data is processed, please contact us at [email protected].

14 Changes to This Privacy Policy

b2777 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes in b2777's data processing practices, new product features, or feedback received from members and data protection authorities.

Where we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify all registered members by email to the address associated with their b2777 account at least 14 days before the changes take effect. A prominent notice will also be displayed on the b2777 Platform during this notice period.

For minor or administrative changes that do not materially affect your rights or our data practices (such as correcting typographical errors or clarifying existing language), we may update the Policy without providing individual notice, but we will always update the "Last Updated" date at the top of this page.

Your continued use of the b2777 Platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised Policy. If you do not agree with any changes, you must discontinue use of the Platform and, if you wish, submit a data erasure request as described in Section 11 above.

We encourage you to review this Privacy Policy periodically to stay informed about how b2777 is protecting your personal information. The most current version of this Policy will always be available at https://b2777.io/privacy-policy.

15 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, about how b2777 processes your personal data, or about how to exercise any of the rights described in Section 11, please contact our support and data team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 directly through the b2777 Platform
• Response Time: We aim to respond to all privacy-related enquiries within 48 hours
• Languages: English and Bengali
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data rights request, please include your registered username and sufficient identification information to enable us to verify your identity and locate your records. b2777 cannot process data rights requests without identity verification, as this is necessary to protect members against fraudulent access to their personal data by third parties.

b2777 values every member's privacy and takes all data protection matters seriously. Our support team — available around the clock across Bangladesh from Dhaka, Chittagong, and Sylhet to Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh — is ready to assist with any privacy concern you may have.