277bit Privacy Policy

1. Who We Are & How to Contact Us

1.1 277bit is the data controller responsible for the personal information collected through the 277bit platform at 277bit.bet. References to "277bit", "we", "us", and "our" in this Policy refer to the operator of the 277bit platform.

1.2 For all privacy-related enquiries, data subject access requests, or complaints regarding our data handling practices, please contact our data protection team at:

2. Legal Bases for Processing

2.1 277bit processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to open and maintain your account, process deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer, and deliver the games and betting services you have requested.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) requirements, know-your-customer (KYC) verification obligations, fraud prevention duties, and responsible gaming regulations, including the mandatory 21+ age verification.
• Legitimate Interests: Processing carried out to detect and prevent fraud, protect platform security, investigate suspicious account activity, improve platform performance, and conduct internal analytics — where these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional communications such as promotional offers, bonus notifications, and marketing emails about new games and BPL cricket betting markets, where you have opted in. You may withdraw this consent at any time by contacting [email protected].

3. How We Use Your Personal Data

3.1 277bit uses the personal data we collect for the following specific purposes:

• To create, verify, and manage your 277bit player account
• To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank
• To verify your identity and age as part of our mandatory KYC process (21+ verification)
• To detect, investigate, and prevent fraud, collusion, money laundering, and other prohibited activities
• To enforce our Terms and Conditions and resolve disputes fairly
• To provide customer support through our live chat and email channels
• To comply with legal and regulatory reporting obligations
• To monitor responsible gaming indicators and intervene where a player may be at risk
• To improve platform performance, fix bugs, and develop new features based on aggregated usage analytics
• To send you transactional messages such as deposit confirmations, withdrawal updates, and security alerts
• To send promotional communications about bonuses, new games, cricket betting markets, and seasonal campaigns (Eid, Pohela Boishakh, Victory Day) — only where you have given consent

4. Sharing Your Personal Data

4.1 277bit does not sell, rent, or trade personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment Processors: Your payment account details (bKash, Nagad, Rocket, Upay, bank details) are shared with payment gateway providers solely to facilitate your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and may not use it for other purposes.
• Identity Verification Providers: KYC documents and identity data may be shared with third-party verification service providers to confirm your identity and age in compliance with our legal obligations.
• Game Providers: Certain gaming data (user session identifiers, game history) is shared with licensed game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi solely for the purposes of game delivery and fair play auditing. No financial or identity data is shared with game providers.
• Fraud Prevention & Security: We may share data with third-party fraud detection services and cybersecurity providers to protect the integrity of the platform and player accounts.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or a legitimate regulatory demand, 277bit may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Registered players will be notified of any such transfer before it takes effect.

4.2 All third-party service providers engaged by 277bit are vetted for data security compliance and are contractually required to process personal data only on 277bit's documented instructions.

5. Cookies & Tracking Technologies

5.1 277bit uses cookies and similar tracking technologies (local storage, session tokens, pixel tags) to enable platform functionality, maintain session security, and gather aggregated analytics data. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing core platform functionality.
• Analytics Cookies: Used to understand how players navigate the platform — which pages are visited most frequently, where players encounter issues, and how long sessions typically last. This data is processed in aggregated, anonymised form. No individual player behaviour is reported to external advertising networks.
• Preference Cookies: Used to remember your language and display settings across sessions so you do not need to reconfigure them on each visit.

5.2 You may control or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the 277bit platform. Disabling analytics cookies will not affect your ability to use the platform.

5.3 277bit does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts that would allow external platforms to build profiles of your behaviour across websites.

6. Data Security Measures

6.1 277bit implements a layered approach to data security designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 277bit servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Tokenisation of payment account identifiers (bKash numbers, Nagad numbers, bank account details)
• Multi-factor authentication (MFA) available for all player accounts
• Role-based access controls ensuring 277bit staff can only access personal data necessary for their specific job function
• Regular security audits and penetration testing of the platform infrastructure
• Automated fraud detection systems monitoring for unusual account activity in real time

6.2 Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, 277bit will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

6.3 You are responsible for maintaining the confidentiality of your own account credentials. 277bit will never ask you to provide your password via email, chat, or phone. If you suspect your account has been compromised, contact [email protected] immediately.

7. Data Retention

7.1 277bit retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account Data (name, contact details, login records): Retained for the duration of your active account plus 5 years following permanent account closure
• KYC Documents (NID, passport, proof of address): Retained for 5 years following account closure to satisfy anti-money laundering obligations
• Transaction Records (deposits, withdrawals, bet history): Retained for 7 years from the date of each transaction in line with financial record-keeping requirements
• Customer Support Communications: Retained for 3 years from the date of the last communication in the relevant support thread
• Marketing Preferences & Consent Records: Retained for the duration of your active account; deleted upon account closure or withdrawal of consent, whichever is earlier
• Device & Usage Data (IP logs, session data): Retained for 12 months on a rolling basis for security and fraud detection purposes

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player.

8. Your Rights as a Data Subject

8.1 As a registered player, you hold the following rights in relation to your personal data held by 277bit. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data 277bit holds about you. We will provide this in a commonly used electronic format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For account details, you may also update certain information directly via your Account Settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to our legal obligations to retain certain data (see Section 7) and may not result in complete erasure where retention is legally required.
• Right to Restriction of Processing: You may request that we restrict our processing of your data while a rectification request is being resolved, or where you contest the lawfulness of processing.
• Right to Data Portability: You have the right to receive the personal data you provided to 277bit in a structured, commonly used, machine-readable format, and to request transfer of that data to another controller where technically feasible.
• Right to Object: You may object at any time to processing based on legitimate interests, including profiling for fraud detection, where you have grounds relating to your particular situation. You may also object unconditionally to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8.2 277bit will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

9. Children & Minors

9.1 The 277bit platform is strictly for adults aged 21 years and older. 277bit does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that an account has been opened by or on behalf of a person under 21, we will immediately suspend the account, void any outstanding bets and bonuses, and securely delete all personal data associated with that account.

9.2 If you believe that a minor has registered a 277bit account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate and act without delay.

10. Changes to This Privacy Policy

10.1 277bit reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made, we will notify registered players by email to the address on file and by posting a prominent notice on the platform no fewer than 7 days before the revised Policy takes effect.

10.2 The "Effective Date" shown at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the 277bit platform following the effective date of any revision constitutes your acceptance of the updated Policy.

10.3 For changes that materially reduce your privacy protections, we will seek your fresh consent before the revised processing activities begin, where consent is the applicable legal basis.

11. Complaints

11.1 If you have concerns about how 277bit handles your personal data and are not satisfied with our response to your enquiry, you have the right to escalate your complaint through applicable legal channels available in your jurisdiction.

11.2 Before escalating, we strongly encourage you to raise the issue directly with our data protection team at [email protected] (subject line: "Privacy Complaint"). The majority of concerns can be resolved promptly through direct communication, and we are committed to addressing all privacy complaints in good faith within 10 business days.