by77 Privacy Policy — Your Data, Your Rights

by77 ("we", "us", "Platform") is committed to protecting the privacy and personal data of all users ("you", "Player") who access or use the by77 website and services. This Privacy Policy describes the categories of personal information we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights available to you in relation to your personal data.

By registering an account on by77, making a deposit, placing a bet or otherwise using our services, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the platform and contact support to request account closure.

Our Privacy Commitments at a Glance

These four principles guide how by77 approaches data privacy. They apply to every player on the platform, regardless of location within Bangladesh.

1. Information We Collect

by77 collects personal information through several channels: directly from you when you register or transact; automatically when you use the platform; and from third-party service providers who process payments or assist with identity verification. The categories of personal data we may collect include:

• Identity DataFull name, date of birth, nationality and copies of government-issued identity documents submitted during KYC verification.
• Contact DataEmail address, mobile phone number and, where provided, a residential address in Bangladesh (e.g. Dhaka, Chittagong, Sylhet).
• Financial DataPayment method details (bKash wallet number, Nagad number, Rocket number, Upay account, or bank account details), transaction history, deposit amounts and withdrawal requests.
• Technical DataIP address, device type, browser type and version, operating system, time zone, session duration, pages visited and in-game activity logs.

2. How We Use Your Information

by77 uses the personal data we collect for the following specific, legitimate purposes. We do not use your data for any purpose beyond those listed below without your explicit consent:

• Account ManagementTo create and manage your by77 account, verify your identity through KYC, process your deposits and withdrawals, and deliver the services you have requested.
• Fraud Prevention and AMLTo detect, investigate and prevent fraudulent transactions, money laundering, account abuse and any other prohibited conduct in accordance with applicable anti-money laundering (AML) obligations.
• Platform ImprovementTo analyse usage patterns, fix technical issues, improve our games catalogue and optimise the mobile experience for players across Bangladesh.
• Legal ComplianceTo comply with applicable legal obligations, respond to lawful requests from regulatory authorities and maintain records required under relevant laws.
• Customer SupportTo respond to your enquiries, resolve disputes, process complaints and deliver communications about your account status, promotions and platform updates where you have opted in to receive them.

3. Sharing Your Information

by77 does not sell, lease or trade your personal data. We may share your information with carefully selected third parties only in the following limited circumstances:

• Payment ProcessorsbKash, Nagad, Rocket, Upay and partner banking institutions receive transaction data strictly necessary to process your deposit or withdrawal. They are contractually prohibited from using your data for any other purpose.
• Technology and Game ProvidersGame providers such as Pragmatic Play, Evolution Gaming, Spribe and Ezugi may receive anonymised or pseudonymised session data to deliver game content and ensure RNG certification standards are met.
• Legal and Regulatory AuthoritiesWhere required by law, or in response to a valid court order or regulatory directive, by77 may disclose personal data to the relevant authorities. We will notify you of any such disclosure where permitted by law to do so.

4. Cookies and Tracking Technologies

The by77 platform uses cookies and similar tracking technologies (including local storage and session tokens) to operate the site correctly, remember your preferences, keep your session authenticated and analyse how players interact with our games and features. Cookies are small text files stored on your device by your browser when you visit the site.

We use strictly necessary cookies (required for the platform to function), functional cookies (to remember your language preference and session state), and analytical cookies (to understand aggregate player behaviour so we can improve the service). We do not use cookies to deliver third-party advertising. You may configure your browser to block or delete cookies; however, doing so may affect the functionality of the by77 platform.

5. Data Security

by77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL/TLS encryption for all data in transit, server-side encryption for sensitive data at rest, role-based access controls limiting staff access to player data on a strict need-to-know basis, regular security audits and penetration testing of our infrastructure, and automated fraud detection systems monitoring account activity in real time.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that affects your personal information, by77 will notify affected players and take all reasonable steps to mitigate harm in accordance with applicable obligations.

6. Your Rights Over Your Personal Data

As a by77 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the by77 support team with your registered email address and a clear description of the right you wish to exercise:

• Right to AccessYou may request a copy of all personal data by77 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to RectificationIf any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. You can update most account details directly via the account dashboard.
• Right to ErasureYou may request deletion of your personal data. We will action this request where it does not conflict with our legal obligations to retain certain records (e.g. AML transaction records which must be retained for a minimum period under applicable regulations).
• Right to Withdraw ConsentWhere processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time by updating your notification preferences in the account dashboard or by contacting support.

7. Data Retention and Protection of Minors

by77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. Account data is retained for the duration of your active account relationship with by77 and for a minimum period thereafter as required by applicable law. Financial transaction records are retained for a minimum of five years following the date of the transaction in accordance with AML obligations.

by77 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly for adults. If we become aware that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account. Parents and guardians who believe a minor has accessed by77 should contact our support team immediately.

8. Changes to This Policy and How to Contact Us

by77 reserves the right to update this Privacy Policy at any time. When we make material changes, we will notify registered players by email or by a prominent notice on the platform at least seven days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent version. Your continued use of the by77 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or the way by77 handles your personal data, please contact our support team using the email address displayed in the footer of this page. We aim to respond to all privacy-related enquiries within five business days.