77db Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") is published by 77db ("we", "us", "our"), the operator of the online casino and sports betting platform available at 77db.im and its associated subdomains, mobile applications, and any other digital properties operated under the 77db brand.

This Policy applies to all personal data we collect and process in connection with your use of the 77db platform, including data collected during account registration, identity verification, payment processing, customer support interactions, and general browsing of our website. It applies to all users who access the platform from Bangladesh or any other permitted jurisdiction.

By registering an account with 77db, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the 77db platform.

This Policy should be read alongside our Terms and Conditions, which govern the overall legal relationship between you and 77db. In the event of any conflict between this Policy and the Terms and Conditions on a data privacy matter, this Policy shall take precedence.

Data Controller Information

For the purposes of applicable data protection law, 77db is the data controller in respect of the personal data collected and processed through the 77db platform. As data controller, we determine the purposes for which and the means by which your personal data is processed.

You may contact our data protection team at any time using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request — [Your Registered Username]"
• Response Time: Within 30 calendar days of receipt of a valid request
• Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

If you submit a data subject request, you will be asked to verify your identity before we process the request. This is to protect your privacy and to ensure that personal data is not disclosed to unauthorised individuals. Identity verification for data requests typically requires confirmation of your registered email address, username, and one government-issued identity document.

Information We Collect

We collect personal data through several channels and for several different purposes. The categories of personal data we may collect include the following:

Registration and Account Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you are aged 21 or above)
• Email address and mobile phone number
• Residential address, city, and postal code (e.g., Dhaka, Chittagong, Sylhet)
• Username and encrypted password
• Account preferences and communication settings

Identity Verification (KYC) Data

• Copies of government-issued identity documents (National ID card, passport, or driver's licence)
• Proof of address documents (utility bill, bank statement)
• Proof of payment method (screenshot or partial statement confirming ownership of the bKash, Nagad, Rocket, or Upay account used)
• Selfie or photograph as required for biometric identity confirmation

Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Transaction IDs from payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank)
• Account balance history and bonus credit/debit records
• Wagering activity records including bet amounts, game titles, and outcomes

Technical and Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, browser type and version
• Session timestamps, pages visited, features used, and clickstream data
• Error logs and crash reports used for platform stability diagnostics

Communications Data

• Records of live chat, email, and support ticket correspondence
• Responses to surveys or promotional campaigns where you have participated voluntarily
• Feedback or complaints submitted to our team

How We Use Your Information

We use the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or establishing another lawful basis.

We will not use your personal data to make solely automated decisions that produce significant legal effects on you without providing an opportunity for human review. If profiling or automated decision-making is employed for responsible gaming or fraud prevention purposes, you have the right to request human review of any automated decision that affects your account.

Legal Basis for Processing

Every instance of personal data processing at 77db is carried out on one or more of the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player, including running your account, processing your payments, and delivering the gaming services you have requested.
• Legal Obligation: Processing is required for us to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, counter-terrorism financing (CTF) requirements, age verification mandates, and any applicable data protection laws.
• Legitimate Interests: Processing serves our legitimate business interests — such as fraud prevention, platform security, network and system administration, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities where none of the above bases apply — particularly the sending of optional marketing and promotional communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment.

Where we rely on legitimate interests as a legal basis, we conduct a balancing test to confirm that our interests do not outweigh your rights. The results of these assessments are documented internally and are available on request.

Sharing Your Information

77db does not sell, rent, or trade your personal data to any third party. We may share your personal information only in the following limited and controlled circumstances:

• Payment Processors: We share necessary financial and identity data with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank) to process your deposit and withdrawal transactions. These providers process data as independent data controllers under their own privacy policies.
• Identity Verification Partners: We may use third-party KYC and identity verification service providers to validate documents submitted during the account verification process. These providers act as data processors on our behalf under binding data processing agreements.
• Game Providers: When you play games on the 77db platform, certain session data (such as a player token, game round ID, and bet result) is transmitted to the relevant game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, or Microgaming) as required for game operation. Game providers do not receive your full identity data.
• Fraud and Security Providers: We may share technical data (including IP addresses, device fingerprints, and transaction patterns) with specialist fraud prevention and cybersecurity firms to protect the integrity of the platform and all users.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by law, court order, or binding regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of 77db's business, personal data held by us may be transferred to the successor entity. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

Cookies and Tracking Technologies

77db uses cookies and similar tracking technologies on its platform to provide core functionality, remember your preferences, analyse usage patterns, and support security operations. The following categories of cookies are in use:

• Strictly Necessary Cookies: These are essential for the platform to function. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: These remember your preferences such as language settings, display options, and game lobby filters to improve your experience across sessions.
• Analytics Cookies: These help us understand how users interact with the platform — which pages are visited most, how long sessions last, and where users encounter difficulties. Analytics data is aggregated and anonymised where possible.
• Security Cookies: These support our fraud detection and account protection systems by flagging unusual access patterns and device changes that may indicate unauthorised access.

You may manage your cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may degrade certain aspects of your platform experience. Disabling strictly necessary cookies may prevent you from logging in or using real-money features.

77db does not use third-party advertising cookies or serve targeted advertisements based on your browsing behaviour outside of our own platform.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention schedule provides an overview of our standard retention periods:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in compliance with financial record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years following the end of the business relationship, as required by anti-money laundering regulations.
• Transaction Records: Retained for 5 years from the date of each transaction. This includes deposit histories, withdrawal records, bonus credit/debit records, and wagering activity logs.
• Customer Support Communications: Retained for 3 years from the date of last contact, to support dispute resolution and service quality monitoring.
• Marketing Consent Records: Retained for as long as you remain opted in, plus 3 years following opt-out, as evidence of consent status.
• Technical and Usage Logs: Standard access and session logs are retained for 12 months. Security-flagged logs may be retained for up to 3 years for fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data derived from your usage may be retained indefinitely for aggregate analytics purposes.

Data Security

77db employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or TLS 1.3 protocols. HTTPS is enforced on all platform pages.
• Encryption at Rest: Sensitive personal data, including identity document images and financial records, is encrypted at rest using AES-256 standard encryption on our secure servers.
• Access Controls: Access to personal data is restricted to authorised 77db staff who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Two-Factor Authentication: Administrative access to systems that process personal data requires multi-factor authentication. We also offer two-factor authentication to all registered players for their own account security.
• Regular Security Audits: Our platform and data infrastructure undergo regular penetration testing and security reviews conducted by qualified independent security professionals.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, 77db will notify affected users and relevant authorities within the timeframes required by applicable law.

While we take every reasonable precaution to safeguard your data, no digital platform can guarantee absolute security. You also play a role in keeping your account secure by maintaining a strong password, enabling two-factor authentication, and reporting any suspicious activity to us immediately at [email protected].

Your Rights

Subject to applicable data protection law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Rights Request".

We will respond to all valid data subject requests within 30 calendar days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it. Exercising your rights is free of charge. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

Protection of Minors

77db's services are strictly for adults aged 21 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. All registration attempts are subject to age verification controls, and accounts where we determine or suspect that the holder is underage will be closed immediately.

If you are a parent or guardian and believe that a minor has registered on the 77db platform or submitted personal data without your knowledge, please contact us immediately at [email protected]. We will investigate promptly, close any such account, and delete any associated personal data to the extent legally permissible.

International Data Transfers

77db's primary operations and data infrastructure serve the Bangladesh market. In the course of operating the platform, your personal data may be processed by service providers whose infrastructure is located outside Bangladesh. Such transfers may occur, for example, when identity verification services or cloud infrastructure providers operate data centres in other countries.

Where personal data is transferred outside Bangladesh to a jurisdiction that does not provide an equivalent level of data protection, we ensure that appropriate safeguards are in place. These safeguards may include:

• Standard contractual clauses that impose data protection obligations on the recipient equivalent to those we apply ourselves.
• Binding corporate rules where the transfer is to a member of the same corporate group.
• Adequacy determinations or other recognised transfer mechanisms where available.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting us at [email protected].

Changes to This Policy

77db may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or business operations. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — we will notify you in advance via your registered email address or via a prominent in-platform notification. Minor corrections, clarifications, or editorial updates may take effect immediately upon publication without separate notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the 77db platform after the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to the revised Policy, you should stop using the platform and may request account closure by contacting our support team.

Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 77db handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry — [Your Registered Username]"
• Response Time: Within 5 business days for general enquiries; within 30 calendar days for formal data subject requests
• Available: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

If you are dissatisfied with our response to your privacy enquiry or data subject request, you have the right to escalate the matter as a formal complaint. We ask that you first allow us the opportunity to resolve the issue directly, as we aim to address all concerns at the first point of contact. Should you remain unsatisfied following our response, you may seek further recourse through any applicable dispute resolution or consumer protection mechanism available in your jurisdiction.

We take all privacy complaints seriously and will investigate each one thoroughly. All complaints are logged internally and reviewed by our data protection team. Where a complaint reveals a systemic issue with our data handling practices, we will take appropriate corrective action and update our internal procedures accordingly.