Privacy Policy — bd6777

bd6777 operates the online cricket betting and casino platform accessible at https://bd6777.club (the "Platform"). In the course of providing our services to registered players and visitors in Bangladesh, we collect and process certain personal data. This Privacy Policy has been prepared to be transparent about exactly what data we collect, why we collect it, how we use it, how long we keep it, and what rights you have in relation to it.

bd6777 acts as the data controller in respect of all personal data collected through the Platform. We are committed to handling personal data responsibly and in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

This Policy applies to all users of the Platform, including registered players, former players, and visitors who access the Platform without creating an account. If you have questions about how your personal data is handled, you can contact us at any time using the details in Section 12 of this Policy.

bd6777 collects several categories of personal data in connection with the operation of the Platform. The categories of data we collect, and the specific data points within each category, are set out in the table below:

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity photographs submitted for verification purposes), or health data, except where such data is incidentally included in documents you submit to us for verification.

bd6777 collects personal data through the following channels:

• Direct submission: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to promotional communications.
• Automated collection: Technical and usage data collected automatically when you access the Platform, using server-side logging, session tracking, and standard web analytics technologies.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal. bd6777 receives only transaction reference numbers, amounts, and timestamps — not your full mobile banking credentials or PIN.
• Third-party game providers: Game session data and outcomes received from game studio providers including Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, and Ezugi, for the purpose of settling bets and maintaining accurate account records.
• Identity verification services: Where bd6777 uses a third-party identity verification service to assist with KYC checks, that service may return a verification result and confidence score to bd6777. bd6777 does not receive raw biometric data from these services.

bd6777 processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose alongside the legal basis on which that processing is carried out:

bd6777 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where automated checks are required as part of a mandated fraud or AML screening process. In such cases, a member of the bd6777 compliance team reviews any outcome that results in account restriction before it takes effect.

bd6777 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum data necessary to process your payment transactions, including your registered mobile number and transaction amount. These providers operate under their own privacy policies and are responsible for the security of data processed on their platforms.
• Game studio providers: Pragmatic Play, Evolution Gaming, Microgaming, Spribe, NetEnt, Ezugi, and other integrated studios receive a player session token and stake/result data necessary to run the game. They do not receive your full identity or financial data.
• Identity verification service providers: Where bd6777 engages a third-party KYC service, your identity documents may be transmitted to that service for the sole purpose of verifying your identity. These providers are bound by confidentiality obligations and data processing agreements.
• IT and hosting providers: Server infrastructure and security service providers who host the Platform and protect it from malicious traffic may have access to system logs containing technical data. These providers are engaged under strict data processing agreements.
• Legal and regulatory authorities: bd6777 will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of bd6777, its players, or the public.
• Professional advisors: Legal, accounting, and auditing professionals engaged by bd6777 who require access to data to provide their professional services. These advisors are bound by professional confidentiality obligations.

Any third party that receives personal data from bd6777 is required to process that data only for the specific purpose for which it was shared, to maintain appropriate technical and organisational security measures, and to comply with applicable data protection obligations.

bd6777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general framework:

• Active account data: Retained for the duration of your active player relationship with bd6777, plus a minimum of five years following account closure, in line with standard financial recordkeeping and anti-money laundering obligations.
• Transaction records: Financial transaction records, including deposits and withdrawals, are retained for a minimum of five years from the date of each transaction to satisfy audit and compliance requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the completion of the last transaction, whichever is later.
• Communications data: Support correspondence and related records are retained for three years from the date of the last communication in a given thread.
• Technical and usage data: Server logs and aggregated analytics data are retained for up to 24 months and then deleted or anonymised.
• Marketing consent records: Records of your marketing preferences and consent decisions are retained for the duration of your account and for two years following account closure.

When personal data is no longer required, bd6777 will securely delete or anonymise it. Where full deletion is not immediately practicable due to technical constraints (for example, data held in encrypted backup systems), the data will be isolated from active processing until deletion is completed at the next scheduled backup cycle.

bd6777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the bd6777 Platform is encrypted using industry-standard SSL/TLS protocols, protecting your data in transit from interception.
• Password hashing: Account passwords are never stored in plain text. bd6777 uses a strong cryptographic hashing algorithm with per-user salting to store password credentials.
• Access controls: Access to personal data within bd6777's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific role. All internal access is logged and subject to periodic review.
• Network security: The Platform is protected by firewall systems, intrusion detection infrastructure, and distributed denial-of-service (DDoS) mitigation services.
• Regular security assessments: bd6777 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in the Platform's infrastructure.
• Staff training: All bd6777 personnel who handle personal data receive regular data protection and security awareness training.

bd6777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse Platform usage, and support security functions. Cookies are small text files placed on your device by your browser when you visit the Platform.

The categories of cookies used on the bd6777 Platform are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include session authentication tokens that keep you logged in during your visit, security cookies that help detect and prevent fraudulent activity, and load-balancing cookies. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a more personalised experience on subsequent visits.
• Analytics cookies: bd6777 uses analytics technologies to collect aggregated, anonymised data about how visitors navigate the Platform, including which pages are most visited, session durations, and error occurrences. This data helps us improve Platform performance and user experience. This data is not linked to your personal identity.
• Security cookies: Short-lived cookies used to support CSRF (cross-site request forgery) protection and other security mechanisms that protect your account during an active session.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. bd6777 does not use third-party advertising tracking cookies or retargeting pixels.

bd6777 respects your rights in relation to your personal data. The following rights are available to you in connection with the personal data we hold about you:

• Right of access: You have the right to request a copy of the personal data bd6777 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic account information directly through your account settings, or by contacting our support team.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis for processing), or where you object to processing on legitimate interest grounds. Please note that erasure requests cannot be honoured where bd6777 is required by law to retain the data (for example, financial transaction records subject to AML retention obligations).
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to object: Where bd6777 processes your data on the basis of legitimate interest, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as receipt of promotional communications), you may withdraw your consent at any time by contacting [email protected] or by updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". We may need to verify your identity before processing your request. We will respond within 30 days of receiving a complete and verified request.

bd6777 applies age verification controls at the point of registration and as part of its KYC process to identify and prevent underage access. Any account found to have been registered by a person under the age of 18 will be closed immediately, all funds will be returned to the originating payment method, and any winnings generated during the underage play period will be forfeited in accordance with our Terms & Conditions.

The bd6777 Platform primarily serves players located in Bangladesh. However, certain service providers engaged by bd6777, including game studio technology providers and cloud infrastructure partners, may process data on servers located outside Bangladesh. In such cases, bd6777 takes appropriate steps to ensure that any international transfer of personal data is carried out under contractual safeguards that require the recipient to protect the data to a standard equivalent to the protections applied within Bangladesh.

Where personal data is transferred to a game studio provider or infrastructure partner operating in another jurisdiction, that transfer is governed by a data processing agreement that imposes obligations of confidentiality, security, and purpose limitation consistent with the standards described in this Privacy Policy. bd6777 does not transfer player data to jurisdictions that lack adequate data protection frameworks without appropriate contractual safeguards in place.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bd6777 handles your personal data, please contact our data protection team in the first instance:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Privacy Complaint")
• Response time: We aim to respond to all privacy-related enquiries within 5 business days (Bangladesh Standard Time).

bd6777 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge receipt, investigate the matter thoroughly, and provide you with a substantive response within 30 days. If the matter is complex, we may request an extension and will notify you accordingly.

If you are not satisfied with our response to a complaint, or if you believe that bd6777 is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

Last updated: 1 January 2026  ·  Contact: [email protected]