bd8777 Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register an account, verify your identity, make deposits or withdrawals, contact our support team, or participate in promotions on bd8777, you provide us with personal data. This includes:

• Registration data: Full legal name, date of birth, email address, mobile phone number (Bangladesh), chosen username, and account password (stored in hashed form — we never store plain-text passwords).
• Identity verification (KYC) data: Copies of government-issued identification documents such as your National Identity Card (NID), passport, or birth certificate; proof-of-address documents; and selfie photographs submitted for verification purposes.
• Payment data: Your bKash account number, Nagad account number, Rocket account number, Upay account number, or Bangladesh bank account details provided for deposits and withdrawals. Note: we do not store bKash/Nagad PINs or card CVV numbers — these are handled exclusively within the respective payment provider's secure interface.
• Communication data: Messages, emails, live chat transcripts, and other correspondence you send to bd8777 support.
• Preference data: Game preferences, language settings, notification preferences, and responsible gaming tool settings you configure on your account.

1.2 Automatically Collected Technical Data

When you access bd8777 through a web browser or mobile device, certain technical information is collected automatically. This data helps us maintain platform security, diagnose technical issues, and improve the user experience:

• Device data: Device type, operating system version, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, internet service provider (ISP), approximate geographic location (derived from IP address — not GPS), and connection type.
• Usage data: Pages visited, games played, session duration, click patterns, betting history, deposit and withdrawal history, and feature interactions.
• Cookie and tracking data: See Section 4 (Cookies & Tracking) for full details of how cookies and similar technologies are used on bd8777.

1.3 Data Received from Third Parties

bd8777 may receive personal data about you from third-party partners where this is necessary for the operation of our services:

• Payment processors: Transaction confirmation data, payment status updates, and fraud-screening results from bKash, Nagad, Rocket, Upay, and our banking partners.
• Identity verification providers: Results of automated document verification checks carried out by our KYC service partners.
• Fraud prevention services: Risk scores and flagging data from fraud detection systems used to protect the integrity of the bd8777 platform.
• Game providers: Game session data, round results, and RTP (return-to-player) records from providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe.

3. Data Sharing & Disclosure

3.1 Service Partners

bd8777 works with a carefully selected group of third-party service providers who assist us in delivering the platform. These partners are granted access only to the specific data they need to perform their function, and they are contractually bound to protect that data with the same level of care that bd8777 applies. Our service partners include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — for processing deposits and withdrawals.
• Identity verification providers: Third-party KYC partners who perform automated document verification and age-check processes.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others — for delivering certified game content. Game providers receive only the session data necessary to run the game; they do not receive your full personal profile.
• Platform infrastructure providers: Cloud hosting and content delivery network (CDN) providers that power the bd8777 platform.
• Fraud detection services: Specialist providers that help bd8777 identify and prevent fraudulent account activity and financial crime.
• Customer support platforms: Live chat and email support tools used to manage player enquiries.

3.2 Legal Disclosures

bd8777 may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where we are legally required to do so — for example, in response to a valid court order, a legal investigation into financial crime or money laundering, or a formal regulatory request. bd8777 will not voluntarily disclose personal data to authorities beyond what is legally required.

3.3 Business Transfers

In the event that bd8777 undergoes a business restructuring, merger, acquisition, or sale of assets, personal data held by bd8777 may form part of the transferred assets. In such circumstances, bd8777 will ensure that the receiving entity is bound by data protection obligations at least equivalent to those described in this Privacy Policy. Players will be notified of any material change in data controller through the on-site notification system or by email.

3.4 International Data Transfers

Some of bd8777's third-party service partners may process personal data outside of Bangladesh. Where data is transferred internationally, bd8777 ensures that appropriate contractual safeguards are in place to protect your data to a standard consistent with the principles set out in this Privacy Policy. If you have questions about the specific safeguards in place for international transfers, contact our support team.

5. Data Security

bd8777 implements a multi-layered security architecture designed to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include both technical controls and operational policies.

5.1 Technical Security Measures

• 256-bit SSL/TLS encryption: All data in transit between your device and bd8777 is encrypted using industry-standard TLS protocols, indicated by the padlock icon in your browser's address bar.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. bd8777 staff cannot see your plain-text password and will never ask you to share it.
• Access controls: Access to personal data within bd8777 is restricted on a strict need-to-know basis. Staff members can only access the data required to perform their specific role, and all access is logged.
• Firewalls and intrusion detection: bd8777's server infrastructure is protected by enterprise-grade firewalls, real-time intrusion detection systems, and regular penetration testing.
• Payment data isolation: Sensitive payment credentials (bKash PINs, card numbers, CVV codes) are never transmitted through bd8777 servers. These are handled entirely within the secure environment of the respective payment provider.

5.2 Operational Security Policies

In addition to technical measures, bd8777 maintains internal security policies that govern how staff handle personal data. All staff with access to personal data receive data protection training. Background checks are conducted on staff in sensitive roles. Incident response procedures are in place to detect, contain, and respond to any data security event rapidly.

5.3 Data Breach Notification

In the unlikely event of a data security breach that poses a risk to the rights and freedoms of bd8777 players, we will notify affected players as promptly as possible through the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps bd8777 is taking to address the situation. bd8777 will cooperate fully with any lawful investigation arising from a data breach.

7. Your Rights

As a bd8777 player, you have a number of rights in relation to your personal data. bd8777 is committed to facilitating the exercise of these rights in a timely and transparent manner. To exercise any of the rights listed below, contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request.

7.1 Right of Access

You have the right to request a copy of the personal data that bd8777 holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon receipt of a valid request, bd8777 will provide a summary of the data categories held, the purposes for which they are processed, and — where technically feasible — a copy of the relevant data. bd8777 aims to respond to access requests within 30 days of receipt.

7.2 Right to Rectification

If any personal data held by bd8777 about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as email address, phone number, or notification preferences, you may be able to update these directly through your account settings. For identity data (name, date of birth) that is linked to your KYC verification, corrections will require submission of supporting documents through the support team.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request that bd8777 delete your personal data. bd8777 will comply with such requests where there is no overriding legal obligation to retain the data. As noted in Section 6 (Data Retention), certain categories of financial and KYC data must be retained for a statutory minimum period. In these cases, bd8777 will confirm which data can be immediately deleted and which must be retained, along with the applicable retention period.

7.4 Right to Restrict Processing

You have the right to request that bd8777 restrict its processing of your personal data in certain circumstances — for example, where you have contested the accuracy of the data and bd8777 is in the process of verifying it, or where you have objected to processing and bd8777 is assessing whether its legitimate interests override your objection.

7.5 Right to Object

You have the right to object to bd8777's processing of your personal data where that processing is based on our legitimate interests (rather than your consent or a contractual necessity). You also have the right to object at any time to your personal data being used for direct marketing purposes, including the withdrawal of marketing consent as described in Section 2.2 of this Policy.

7.6 Right to Data Portability

Where bd8777 processes your personal data on the basis of consent or contract, and that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.

7.7 Exercising Your Rights

To exercise any of the rights described above, submit a written request to [email protected] with the subject line "Data Rights Request". bd8777 may request verification of your identity before processing any data rights request, to ensure that your information is not disclosed to an unauthorised party. bd8777 will acknowledge receipt of your request within 5 business days and will respond substantively within 30 days. If the complexity of the request requires additional time, bd8777 will notify you and explain the reason for the delay.