bf77 Privacy Policy

1 Introduction

bf77 ("we", "our", "us") is committed to protecting the privacy and personal data of all individuals who interact with the bf77 platform at bf77.bar ("the Platform"). This Privacy Policy describes how bf77 collects, uses, stores, shares, and protects personal data in connection with the operation of its online casino and sports betting services, which are directed at players in Bangladesh.

This Privacy Policy forms part of the overall agreement between bf77 and its registered players, alongside the Terms & Conditions and the Responsible Gaming Policy. By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data We Collect

bf77 collects personal data that is necessary for the operation of our platform, verification of player identity, processing of financial transactions, and delivery of a safe and personalised betting experience. The categories of personal data we may collect include:

We collect only the data that is necessary and proportionate to the purposes described in this Policy. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law.

3 How We Collect Data

bf77 collects personal data through the following channels:

• Direct registration: Information you provide when creating your bf77 account, including your name, date of birth, email address, and mobile number.
• Account activity: Data generated automatically as you use the Platform, including bets placed, games accessed, deposit and withdrawal transactions, and support interactions.
• KYC verification: Identity documents and photographs submitted in response to a verification request issued by bf77's compliance team.
• Payment processing: Transaction metadata shared by our payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard) at the point of deposit or withdrawal.
• Cookies and tracking technologies: Automatically collected data about your device and browsing behaviour on the Platform, as described in the Cookies section of this Policy.
• Third-party identity verification providers: Where we engage specialist KYC or fraud-screening services, those providers may return additional data points to us as part of the verification process.

4 Purpose & Legal Basis for Processing

bf77 processes your personal data only where there is a clear and lawful basis for doing so. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Where processing is based on consent, you may withdraw your consent at any time by contacting [email protected] or updating your notification preferences within your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing

bf77 does not sell, rent, or trade your personal data to unaffiliated third parties for commercial purposes. We may share your data with the following categories of authorised recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, solely for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Specialist third-party services engaged to verify the identity, age, and document authenticity of players as part of our compliance obligations.
• Fraud prevention and security partners: Technology providers engaged to detect and prevent fraudulent activity, account abuse, and money laundering on the Platform.
• Game content providers: Studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data necessary to deliver and audit game outcomes.
• Legal and regulatory authorities: Where bf77 is required by applicable law, court order, or regulatory instruction to disclose personal data, we will comply with such obligations in a manner consistent with applicable data protection standards.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by bf77 on a confidential basis in connection with the operation of the Platform.

6 Cookies

The bf77 Platform uses cookies and similar tracking technologies to ensure the site functions correctly, to protect against fraud, and to analyse how players use the Platform so that we can continue to improve it. A cookie is a small text file stored on your device when you visit a website.

bf77 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — for example, which pages are visited most frequently and whether any technical errors are occurring. This data helps bf77 improve the player experience.
• Functional cookies: Allow the Platform to remember preferences you have set, such as your preferred language or display settings, so you do not need to re-enter them on each visit.
• Fraud prevention cookies: Used to identify and flag unusual patterns of behaviour that may indicate account takeover attempts, bot activity, or collusion.

bf77 does not use third-party advertising cookies or retargeting pixels. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair the functionality of the Platform.

7 Data Retention

bf77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. Our standard retention periods are as follows:

• Account and transaction data: Retained for a minimum of five years from the date of account closure, in line with standard financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable anti-money laundering regulations.
• Support communications: Retained for three years from the date of the final interaction, to facilitate complaint resolution and quality assurance.
• Technical and usage logs: Retained for twelve months from the date of generation, after which they are anonymised or deleted.
• Marketing preferences and consent records: Retained for the duration of your account and for two years following account closure or withdrawal of consent, whichever is later.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be associated with any individual player.

8 Data Security

bf77 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and bf77 servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. Plaintext passwords are never stored on bf77 systems.
• Role-based access controls ensuring that bf77 staff can only access personal data that is strictly necessary for their job function.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Real-time intrusion detection and DDoS mitigation systems to protect Platform availability and data integrity.
• Secure, redundant data centre facilities with physical access controls and environmental monitoring.

In the event of a personal data breach that poses a risk to player rights or interests, bf77 will take prompt remedial action and will notify affected players as soon as reasonably practicable, providing details of the nature of the breach and the steps being taken to address it.

9 Your Rights

As a player whose personal data is processed by bf77, you have the following rights with respect to your information:

• Right of access: You may request a copy of all personal data bf77 holds about you. We will respond to valid access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details directly within your account settings.
• Right to erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that certain data must be retained for regulatory compliance purposes and cannot be deleted upon request.
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your personal data while a dispute or verification is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that bf77 provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interest, including the use of your data for direct marketing communications.

To exercise any of the above rights, please submit a written request to [email protected]. We will acknowledge your request within two business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days with prior notification to you.

10 Children's Privacy

The bf77 Platform is strictly intended for adults aged 21 and above. bf77 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of an individual under the age of 21, we will take immediate steps to close the associated account and securely delete the relevant data.

If you believe that a minor may have registered an account on bf77 or submitted personal data to the Platform, please contact us immediately at [email protected] so that we can investigate and act promptly.

11 Third-Party Links

The bf77 Platform may, from time to time, contain references to third-party content providers, game studios, or payment partners. This Privacy Policy applies solely to data collected and processed by bf77 through its own Platform. It does not govern the data practices of any third-party website, application, or service that may be accessed via links on the Platform.

bf77 does not endorse or take responsibility for the privacy practices or content of any third-party service. We encourage you to read the privacy policy of any third-party service you access in connection with your bf77 account before submitting any personal information to that service.

12 International Data Transfers

bf77's primary operations and data storage are oriented towards serving players in Bangladesh. In the course of providing certain platform services — such as game delivery, fraud screening, and payment processing — personal data may be transferred to or processed by service providers operating in other countries.

Where such transfers occur, bf77 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy. These safeguards may include contractual data protection clauses, adequacy assessments, or equivalent mechanisms appropriate to the jurisdiction of the recipient.

By using the bf77 Platform, you acknowledge and consent to the transfer of your personal data to authorised service providers in other jurisdictions where necessary for the delivery of Platform services, subject always to the protections described in this Policy.

13 Policy Updates

bf77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, or applicable legal requirements. Material changes to this Policy will be communicated to registered players via in-platform notification or by email to the address registered on their account, with a minimum of seven days' notice before the changes take effect.

The version of the Privacy Policy currently published at bf77.bar/privacy-policy is the binding version at all times. We encourage you to review this page periodically to stay informed of how bf77 is protecting your personal data. The effective date at the top of this document indicates when the current version was last updated.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bf77 processes your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the bf77 Platform in both English and Bengali
• Response Time: We aim to acknowledge all privacy-related enquiries within two business days and provide a full response within 30 days.