bl77 Privacy Policy

About This Policy

bl77 is committed to handling personal data responsibly and transparently. This Policy applies to all personal data processed by bl77 in connection with the bl77 online betting and casino platform, including the website at https://bl77.io, any associated mobile-optimised pages, and communications sent by bl77 to registered players.

This Policy is intended for players who are resident in Bangladesh or who access the bl77 platform from within Bangladesh. bl77 recognises the importance of data privacy to players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, and we have designed our data practices to meet reasonable expectations of privacy for users in the Bangladesh market.

This Policy should be read in conjunction with the bl77 Terms and Conditions, which govern the overall contractual relationship between bl77 and its players. In the event of any inconsistency between this Policy and the Terms and Conditions on a data-related matter, this Policy shall prevail.

Data We Collect

bl77 collects the following categories of personal data from players and visitors to the bl77 platform. We collect only the data that is necessary and proportionate to the purposes described in this Policy.

bl77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for a legal compliance purpose and with appropriate safeguards in place.

How We Collect Data

bl77 collects personal data through the following channels and means:

• Direct registration: When you create a bl77 account, you voluntarily provide identity, contact, and financial data through the registration form.
• Deposits and transactions: Financial data is collected each time you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard.
• Identity verification (KYC): When bl77 requests verification documents, you provide identity and address documents directly to our support team.
• Platform usage: Technical and usage data is collected automatically as you browse the bl77 website, place bets, and play casino games. This includes data collected via cookies and similar tracking technologies (see Section 7).
• Support interactions: When you contact bl77 via email or live chat, we collect and retain the content of those communications.
• Third-party partners: bl77 may receive data from payment processors (such as bKash or Nagad) confirming the status of your financial transactions, or from identity verification service providers confirming the validity of documents you have submitted.

bl77 does not purchase personal data lists from third parties and does not obtain personal data about you from public social media profiles without your explicit involvement in the data collection event.

How We Use Your Data

bl77 uses your personal data for the following purposes. Each purpose is linked to one or more legal bases described in Section 5:

• Account creation and management: To register your bl77 account, authenticate your login sessions, and maintain accurate account records.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to reconcile transaction records.
• Identity verification and AML compliance: To verify your identity and age (21+), satisfy our anti-money-laundering obligations, and screen against relevant financial crime risk indicators.
• Service delivery: To provide access to bl77's sports betting markets (including cricket BPL, T20, IPL, and international matches), live casino, and slots products.
• Customer support: To investigate and resolve queries, disputes, and complaints submitted via our support channels.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, and other prohibited conduct as defined in the bl77 Terms and Conditions.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to apply deposit limits, cooling-off periods, or self-exclusion at the player's request or at bl77's discretion.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have provided their consent to receive such communications.
• Analytics and product improvement: To analyse aggregated usage data to understand how players interact with the bl77 platform and to inform product development decisions.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from government authorities, and fulfil record-keeping obligations.

bl77 does not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects, except as part of our fraud-detection and responsible gaming monitoring systems, which are subject to human review where a significant account action (such as closure or restriction) is contemplated.

Legal Basis for Processing

bl77 processes personal data only where a valid legal basis exists for doing so. The legal bases on which bl77 relies are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between bl77 and the player — including account management, payment processing, and service delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing that is required to comply with applicable laws and regulatory requirements — including AML checks, KYC verification, and transaction record retention — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of bl77's legitimate interests in operating a safe, fair, and commercially sustainable platform, provided those interests are not overridden by the player's privacy interests or fundamental rights.
• Consent: Processing for marketing communications and the use of non-essential cookies is carried out on the basis of the player's freely given, specific, informed, and unambiguous consent. Players may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

bl77 may share your personal data with the following categories of third parties:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment processors receive the financial data necessary to process your deposit and withdrawal instructions. These processors are contractually bound to handle your data securely and only for the purpose of transaction processing.
• Identity verification providers: Third-party KYC and AML verification service providers may receive your identity and address documents for the purpose of verifying your eligibility to hold a bl77 account.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session and wagering data as part of their technical game delivery infrastructure. These providers operate under their own data protection obligations.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics technology providers who support the operation of the bl77 platform may process technical and usage data on bl77's behalf under data processing agreements.
• Legal and regulatory authorities: bl77 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law or in response to a lawful court order or governmental request.
• Professional advisers: Legal counsel, auditors, and other professional advisers may access personal data to the extent necessary to provide their services to bl77, subject to professional confidentiality obligations.

Where bl77 transfers data to third-party service providers outside of Bangladesh, bl77 takes reasonable steps to ensure that appropriate data protection safeguards are in place for those transfers, consistent with the sensitivity of the data involved.

Cookies and Tracking Technologies

bl77 uses cookies and similar tracking technologies on the bl77 website. Cookies are small text files stored on your device when you visit a website. They allow bl77 to recognise your device across sessions, remember your preferences, and collect usage data to improve the platform.

bl77 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the bl77 platform to function. They enable core features such as login session management, account security, and payment page functionality. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences (such as language or display settings) and enhance your experience on the bl77 platform. They are not strictly essential but improve usability.
• Analytics cookies: These cookies collect anonymised or pseudonymised data about how visitors use the bl77 website — including pages visited, time on site, and navigation paths — to help bl77 understand user behaviour and improve the platform.
• Marketing and preference cookies: These cookies are used to track your interaction with bl77 promotional communications and to ensure that marketing messages are relevant to your interests. These cookies are activated only with your consent.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging into your bl77 account and using core platform features.

bl77 does not use third-party advertising network cookies for cross-site behavioural tracking.

Data Retention

bl77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable law or legitimate business need. The following retention guidelines apply:

• Active account data: Personal data associated with an active bl77 account is retained for the duration of the account relationship and for a minimum of five years after the account is closed, to satisfy AML record-keeping obligations.
• Transaction records: Records of deposits, withdrawals, bets, and casino game rounds are retained for a minimum of five years from the date of the transaction.
• KYC and identity documents: Copies of identity and address documents submitted for KYC purposes are retained for five years following account closure or the date of the verification event, whichever is later.
• Support communications: Customer support correspondence is retained for three years from the date of the interaction, or longer where the matter relates to a dispute or legal claim that remains unresolved.
• Marketing consent records: Records of marketing consent (including consent withdrawal) are retained for the duration of the account relationship plus three years, to demonstrate compliance with consent obligations.
• Technical logs: IP address logs and session data are retained for 12 months from the date of the session, unless a longer period is required for a fraud or security investigation.

Where bl77 no longer has a legal or legitimate basis to retain your personal data, we will securely delete or anonymise it. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

Data Security

bl77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and bl77's servers is encrypted using SSL/TLS technology. You can verify this by checking for the padlock icon in your browser address bar when visiting bl77.
• Access controls: Access to systems containing personal data is restricted to authorised bl77 personnel on a need-to-know basis. Access privileges are reviewed regularly.
• Password security: Player account passwords are stored in hashed form. bl77 does not store plaintext passwords. Players are encouraged to use strong, unique passwords for their bl77 accounts.
• Fraud monitoring: bl77's risk management systems continuously monitor for suspicious account activity, including unusual login patterns, atypical transaction behaviour, and indicators of account compromise.
• Incident response: bl77 maintains procedures for identifying and responding to data security incidents. In the event of a data breach that is likely to result in a risk to player rights, bl77 will take appropriate steps to notify affected individuals in a timely manner.

Your Rights

As a player whose personal data is processed by bl77, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bl77 support using the details provided in Section 14. bl77 will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that bl77 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that bl77 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. This right is subject to bl77's legal obligations — bl77 may be required to retain certain data for AML or regulatory purposes notwithstanding a deletion request.
• Right to restriction of processing: You have the right to request that bl77 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of bl77's legitimate interests, including processing for direct marketing purposes. Where you object to direct marketing, bl77 will cease marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.

bl77 will not charge a fee for handling standard data rights requests. Where a request is manifestly unfounded, excessive, or repetitive, bl77 reserves the right to charge a reasonable administrative fee or decline to act on the request, with reasons provided in writing.

Children and Minors

If you believe that a person under 21 has registered on the bl77 platform or that bl77 has inadvertently collected personal data from a minor, please notify bl77 support immediately at [email protected]. bl77 will investigate all such reports as a matter of priority.

bl77 recommends that parents and guardians make use of parental control software and tools to restrict access to online gambling platforms on devices used by minors. bl77 is committed to responsible gaming and takes the protection of underage persons from exposure to gambling services extremely seriously.

Marketing Communications

bl77 may send marketing and promotional communications to players who have provided their explicit consent to receive such messages. These communications may include information about deposit bonuses, free bet offers, seasonal promotions (such as Eid and Pohela Boishakh campaigns), new game launches, and cricket betting specials for Bangladesh Premier League, IPL, and T20 World Cup events.

Marketing communications may be delivered via email or SMS to the contact details registered to your bl77 account. bl77 does not send unsolicited marketing messages to persons who have not provided consent.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email sent by bl77;
• Contacting bl77 support at [email protected] and requesting removal from marketing communications;
• Updating your communication preferences within your bl77 account settings.

bl77 processes opt-out requests promptly. You may continue to receive transactional communications (such as account notifications, withdrawal confirmations, and security alerts) even after opting out of marketing, as these are sent on the basis of contractual necessity rather than consent.

bl77 does not send marketing communications to players who have activated a self-exclusion or cooling-off period under bl77's responsible gaming programme.

Changes to This Policy

bl77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The effective date at the top of this Policy indicates when it was last updated.

Where changes to this Policy are material — meaning they significantly affect how bl77 processes your personal data or your rights in relation to it — bl77 will notify registered players via the email address associated with their account at least 14 days before the revised Policy takes effect.

Your continued use of the bl77 platform after the revised Policy has taken effect constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should stop using the bl77 platform and may request account closure by contacting bl77 support.

bl77 encourages players to review this Policy periodically to remain informed about how their personal data is being handled. Previous versions of this Policy are available on request from bl77 support.

Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bl77 has handled your personal data, please contact the bl77 support team using the details below. All contact information is provided as plain text and is not a clickable link.

Support Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, 365 days a year (Bangladesh Standard Time, UTC+6).

When submitting a data rights request, please include your registered username, the nature of your request, and any relevant account details to help bl77 locate your records and process your request efficiently. bl77 may request proof of identity before acting on a data rights request to protect against fraudulent or unauthorised requests.

bl77 aims to acknowledge all data rights requests within 5 business days and to fulfil valid requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, bl77 may extend this period by a further 30 days, with notice provided to the requesting individual.