bcd77 Privacy Policy

01Introduction

This Privacy Policy describes how bcd77 ("bcd77", "we", "us", or "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", or "the player") who access or use the bcd77 platform, accessible at https://bcd77.io, including all associated games, betting markets, account features, and support services.

bcd77 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We recognise the trust you place in us when sharing your information, and we take that responsibility seriously.

This policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and bcd77. Where this Privacy Policy uses terms defined in the Terms & Conditions, those definitions apply here as well.

02Who We Are

bcd77 operates as an online casino and sports betting platform serving players primarily in Bangladesh, including users located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and other regions across the country.

For the purposes of this Privacy Policy, bcd77 acts as the data controller in respect of personal information collected from registered players and platform visitors. As data controller, bcd77 determines the purposes and means by which your personal data is processed.

If you have any questions about this policy or about how your data is handled, you may contact us at the email address provided in Section 15 of this document. All correspondence should be sent in English, which is the operative language of this policy and of all bcd77 communications.

03Data We Collect

bcd77 collects personal data in the following categories, depending on how you interact with the platform:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the 21+ age requirement.
• Email address, used for account communications, transaction notifications, and support correspondence.
• Mobile phone number, used for two-factor authentication and account security alerts.
• Residential address, including district, city, and postcode, as provided during KYC verification.
• Nationality, collected as part of the identity verification process.

3.2 Financial & Transaction Data

• Payment method identifiers, including bKash wallet numbers, Nagad account numbers, Rocket account references, and the last four digits of any linked Visa or Mastercard.
• Cryptocurrency wallet addresses used for deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and processing statuses.
• Account balance history maintained for compliance and dispute resolution purposes.

3.3 Identity Verification (KYC) Documents

• Scanned or photographed copies of government-issued photo ID (National ID card, passport, or driving licence).
• Proof of address documents such as utility bills or bank statements dated within the past three months.
• Selfie photographs taken as part of liveness verification, where required.

3.4 Platform Usage & Technical Data

• IP address and approximate geographic location derived from IP at the time of each session.
• Device type, operating system, browser type, and browser version.
• Session timestamps, login history, and session duration.
• Pages visited, games played, bets placed, and in-platform navigation patterns.
• Clickstream data used to analyse platform usage and identify technical issues.

3.5 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence between you and the bcd77 support team.
• Feedback and survey responses submitted voluntarily through the platform.
• Marketing preference records, including opt-in and opt-out history for promotional communications.

04How We Collect Your Data

bcd77 collects personal data through the following channels and methods:

• Direct submission: You provide data directly when you register an account, complete the KYC verification process, make a deposit or withdrawal request, contact support, or respond to a survey.
• Automated collection: Technical data such as IP addresses, device identifiers, session data, and browsing behaviour is collected automatically as you navigate the bcd77 platform, via server logs and cookies (see Section 8).
• Third-party identity verification providers: Where we use a third-party KYC provider to verify your identity documents, that provider may return data to us confirming the outcome of the verification check along with extracted data fields such as name and date of birth.
• Payment processors: Payment service providers including bKash, Nagad, Rocket, Upay, and cryptocurrency payment gateways may share transaction confirmation data with bcd77 following a deposit or withdrawal instruction initiated by you.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe may share session and gameplay data with bcd77 for the purposes of account reconciliation, dispute resolution, and fair play monitoring.

05How We Use Your Data

bcd77 uses your personal data only for legitimate, defined purposes. The table below sets out each primary use case alongside the category of data involved:

bcd77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

06Legal Basis for Processing

bcd77 processes your personal data on the following legal bases, depending on the purpose of the processing activity:

• Contractual necessity: Processing that is required to fulfil our obligations to you under the bcd77 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including anti-money-laundering legislation, know-your-customer requirements, and tax record-keeping obligations.
• Legitimate interests: Processing carried out to pursue bcd77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, primarily in the context of marketing communications and optional cookies. You may withdraw consent at any time without consequence to your core platform access.

07Data Sharing & Disclosure

bcd77 does not sell your personal data. We share your data only in the following defined circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency payment gateways to process your deposits and withdrawals.
• Identity verification providers: We share identity data with third-party KYC providers to verify your documents and age as part of the account registration and upgrade process.
• Game providers: We share player account identifiers and session data with third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to facilitate gameplay and resolve disputes.
• Regulatory and law enforcement authorities: We may disclose your data to competent authorities in response to lawful requests, court orders, or legal obligations. Such disclosures are made in good faith and in compliance with applicable law.
• IT infrastructure and security providers: We share technical data with providers who support our hosting, security monitoring, and platform infrastructure. These providers act as data processors on our behalf and are bound by strict data protection agreements.
• Professional advisers: In limited circumstances, we may share data with legal counsel, auditors, or compliance consultants who are subject to professional confidentiality obligations.

08Cookies & Tracking Technologies

bcd77 uses cookies and similar tracking technologies (such as web beacons and local storage) to improve your experience on the platform. The following table describes the main categories of cookies we use:

Strictly necessary cookies are deployed without consent as they are essential for the platform to function. All other cookie categories are deployed only where you have provided consent, or where bcd77 has a legitimate interest that has been assessed and documented. You may manage or withdraw your cookie preferences at any time via your browser settings. Please note that disabling certain cookies may affect the functionality of the bcd77 platform.

09Data Security

bcd77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the bcd77 servers, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at rest for sensitive data categories including KYC documents, financial identifiers, and authentication credentials stored on bcd77 servers.
• Access controls that restrict access to personal data to only those bcd77 staff and authorised third parties who require it to perform defined business functions, enforced through role-based permissions and multi-factor authentication for administrative access.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that enable bcd77 to detect, investigate, and respond to suspected data security incidents promptly, and to notify affected players where required.

While bcd77 takes all reasonable steps to secure your personal data, no security system is completely impenetrable. You also play an important role in protecting your account: please use a strong, unique password for your bcd77 account and do not share your login credentials with any other person. If you suspect any unauthorised access to your account, contact our support team immediately.

10Data Retention

bcd77 retains your personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with bcd77, plus a minimum of five years following account closure, in order to satisfy anti-money-laundering, tax, and regulatory record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable law or an ongoing regulatory matter.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a period of three years from the date of the final communication in a given support thread, unless the communication relates to an unresolved dispute or legal matter.
• Marketing preference records: Retained for the duration of your account relationship and for three years following account closure to maintain an accurate suppression list.
• Technical and usage logs: Retained for a rolling period of 12 months for platform performance and security monitoring purposes.

When personal data is no longer required, bcd77 will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

11Your Data Rights

As a bcd77 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in Section 15. We will respond to all verified requests within a reasonable period and in any event within 30 days of receipt.

• Right of access: You may request a copy of the personal data we hold about you and information about how it is being processed.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is not absolute and does not apply where we are required by law to retain the data or where it is necessary for the establishment, exercise, or defence of legal claims.
• Right to restrict processing: You may request that we restrict the processing of your personal data in defined circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Please note that exercising certain rights (such as requesting erasure of all data) may require the closure of your bcd77 account, as we cannot maintain an active account relationship without holding certain minimum personal data required by law.

12Children & Minors

bcd77 is strictly an adult platform. Registration and use of the platform is prohibited for any person under the age of 21. bcd77 does not knowingly collect personal data from individuals under 21 years of age.

If bcd77 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to suspend the associated account, delete the data collected, and return any deposited funds in accordance with our standard procedures for underage account closure.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has created a bcd77 account or accessed the platform, please contact our support team immediately at the email address in Section 15 so that we can investigate and take appropriate action without delay.

13International Data Transfers

bcd77 operates a platform that serves players in Bangladesh. Some of our third-party service providers — including game studios, KYC verification providers, and IT infrastructure partners — may be located in jurisdictions outside Bangladesh. Where personal data is transferred to such providers, bcd77 takes appropriate steps to ensure that the transfer is subject to adequate data protection safeguards, including contractual protections binding the recipient to standards equivalent to those described in this policy.

bcd77 does not transfer your personal data to jurisdictions that have been assessed as providing inadequate data protection without first implementing appropriate supplementary safeguards. If you have concerns about a specific international transfer of your data, please contact us using the details in Section 15.

14Updates to This Privacy Policy

bcd77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or business operations. When we make material changes to this policy, we will notify registered players by email to the address associated with their account and by posting a notice on the bcd77 platform, no less than 7 days before the updated policy takes effect.

The effective date at the top of this document will be updated each time a new version of the policy is published. Your continued use of the bcd77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

Prior versions of this Privacy Policy are available on request by contacting the bcd77 support team. All archived versions are maintained in English and are dated for reference.

15Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bcd77 handles your personal information, please contact our data protection team using the details below. All email addresses are provided as plain text — please copy them manually into your email client.

All privacy-related correspondence will be handled in English. Our support team operates on Bangladesh Standard Time (BST, UTC+6), though written privacy enquiries submitted by email are reviewed on business days and will receive a response within the stated timeframe regardless of the time of submission.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to a competent supervisory authority or seek independent legal advice. bcd77 will cooperate fully with any lawful investigation by a competent authority into our data processing activities.