277bad Privacy Policy — How We Protect and Handle Your Personal Data

1 Information We Collect

277bad collects personal information in the course of providing its online casino and sports betting services to players in Bangladesh. The categories of information we collect, and the contexts in which we collect them, are described below.

Information You Provide Directly

When you register a 277bad account, complete identity verification, contact our support team, or participate in promotions, you voluntarily provide us with personal information, which may include:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify the 18+ age requirement)
• Residential address in Bangladesh (including division, district, and postal code)
• Email address and mobile phone number registered in your name
• Username and encrypted password for your 277bad account
• Copies of identity documents submitted during KYC verification (National ID, passport, or driving licence)
• Mobile wallet details (bKash, Nagad, Rocket, or Upay account number registered in your name) used for deposits and withdrawals
• Any information you voluntarily share when contacting support via Live Chat, WhatsApp, or email

Information Collected Automatically

When you access and use the 277bad platform, certain technical information is collected automatically by our systems:

Data Type	Examples	Purpose
Device Information	Device model, operating system, browser type and version	Platform optimisation and fraud detection
IP Address	IPv4 or IPv6 address at time of login or transaction	Security monitoring, geolocation, duplicate account detection
Session Data	Login timestamps, session duration, pages visited	Responsible gaming monitoring, analytics
Transaction Logs	Deposit amounts, withdrawal requests, bet history	Account management, dispute resolution, compliance
Game Activity	Games played, wager amounts, win/loss records	Fair play assurance, bonus eligibility, responsible gaming
Communication Records	Live Chat transcripts, support emails, WhatsApp messages	Service quality, dispute resolution, training

2 How We Use Your Information

277bad uses the personal information we collect strictly for the purposes outlined below. We do not use your data for purposes that are incompatible with the original reason for collection, and we do not sell your personal data to third parties for their own marketing use.

Account Management & Service Delivery

Your registration information is used to create and maintain your 277bad account, verify your identity in accordance with our KYC obligations, process deposits and withdrawals via your registered payment method, and provide you with access to all casino and sports betting services on the platform.

Security & Fraud Prevention

Technical data including your IP address, device fingerprint, and login patterns are analysed by our security systems to detect and prevent unauthorised account access, duplicate account creation, bonus abuse, money laundering, and other fraudulent or prohibited activities. Where suspicious activity is identified, our compliance team may place a temporary hold on your account pending investigation.

Responsible Gaming Compliance

Your gameplay history, session duration data, and transaction records are monitored by our responsible gaming systems to identify patterns that may indicate problematic gambling behaviour. Where such patterns are detected, 277bad may proactively contact you to offer responsible gaming tools or to apply account restrictions in accordance with our Responsible Gaming policy.

Customer Support

When you contact 277bad support via Live Chat, WhatsApp, or email, your personal information and communication history are used to verify your identity, understand your query, and provide an accurate and efficient resolution. Support records are retained for quality assurance and training purposes.

Promotions & Marketing Communications

With your consent, 277bad may use your email address or mobile number to send you information about promotions, bonuses, seasonal offers (such as Eid, Pohela Boishakh, or BPL tournament specials), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support or updating your communication preferences within your account settings. Withdrawal of marketing consent does not affect service-critical communications such as transaction confirmations and security alerts.

Legal & Regulatory Obligations

277bad may be required to process and retain your personal data in order to comply with applicable anti-money laundering standards, respond to legally valid requests from law enforcement authorities, or fulfil any other legal obligation applicable to our operations.

3 Data Sharing & Third Parties

277bad does not sell, rent, or trade your personal information to third parties for their independent commercial use. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

Game & Platform Providers

To deliver game content on the 277bad platform, we work with licensed third-party game studios and platform providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to facilitate game delivery and verify fair play outcomes. They do not receive your full personal profile.

Payment Processing Partners

To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, 277bad shares the minimum transaction data necessary with each payment partner to initiate and confirm the transaction. This typically includes a transaction amount, reference number, and your registered mobile wallet number. Full KYC identity documents are never shared with payment partners.

Identity Verification & KYC Services

277bad may use third-party identity verification service providers to assist with KYC document checks. These providers process your submitted documents under strict data processing agreements and are not permitted to use your data for any purpose other than the specific verification task for which they have been engaged.

Legal & Compliance Disclosures

277bad may disclose your personal information to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally obliged to do so, or where we reasonably believe that disclosure is necessary to protect the rights, property, or safety of 277bad, its players, or the general public. Such disclosures are made on a case-by-case basis and are limited to the information strictly required.

4 Cookies & Tracking Technologies

277bad uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to remember your preferences, and to gather aggregated analytical data that helps us improve the player experience. This section explains the types of cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred settings and login state, making your next visit more efficient. Cookies cannot execute programs or deliver viruses to your device.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Required for core platform functions: login state, session management, security tokens	Session (deleted on browser close)
Functional	Remember your language preference, notification settings, and responsible gaming tool configurations	Up to 12 months
Analytical	Aggregate usage statistics: page views, navigation paths, error reports — used to improve the platform	Up to 24 months
Security	Fraud detection signals, bot detection, device fingerprint tokens	Up to 6 months

Managing Cookies

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to refuse new cookies, delete existing cookies, or be notified before a cookie is placed. Please note that disabling strictly necessary cookies will impair the functionality of the 277bad platform — in particular, you may not be able to maintain a logged-in session or use certain account features. Disabling functional or analytical cookies will not prevent you from using the platform but may affect personalisation features.

5 Data Security Measures

277bad takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and the 277bad platform is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser address bar confirms that your connection is secure.
• Encrypted Storage: Sensitive personal data held on 277bad servers — including identity documents and payment references — is stored in encrypted form using AES-256 encryption at rest.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a one-way cryptographic hash function so that even 277bad staff cannot view your password.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: 277bad operates 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.

Your Role in Account Security

While 277bad maintains robust technical security measures, the security of your account also depends on you. You should choose a strong, unique password for your 277bad account, never share your login credentials with any third party, log out of your account when using a shared or public device, and report any suspected unauthorised account activity to our support team immediately via Live Chat or by emailing [email protected].

6 Data Retention & Deletion

277bad retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account in active service, and to comply with applicable legal and compliance obligations.

Active Accounts

For as long as your 277bad account remains active, we retain all personal information associated with your account, including registration data, KYC documents, transaction history, game activity logs, and support communications. This data is necessary to provide you with uninterrupted service, to process any future withdrawal requests, and to comply with our ongoing legal obligations.

Closed or Suspended Accounts

Following the closure or permanent suspension of a 277bad account, we retain certain categories of personal data for a minimum period of five (5) years from the date of closure. This retention period is maintained to satisfy anti-money laundering record-keeping requirements and to enable us to respond to any legal proceedings, regulatory enquiries, or dispute resolution requests that may arise after account closure. After the mandatory retention period has elapsed, your personal data is securely deleted or anonymised.

Marketing Data

If you have consented to receive marketing communications from 277bad and subsequently withdraw that consent, your contact details will be removed from our active marketing lists within 30 days of your withdrawal request. A suppression record (containing only a hashed identifier to prevent future re-addition) may be retained indefinitely to honour your opt-out preference.

Anonymised & Aggregated Data

277bad may retain anonymised or aggregated datasets derived from player activity (for example, aggregated game popularity statistics or anonymised responsible gaming trend data) indefinitely, as these datasets contain no personally identifiable information and cannot be used to identify any individual player.

7 Your Data Rights

As a player registered with 277bad, you hold a set of rights in respect of the personal data we hold about you. 277bad is committed to honouring these rights and will respond to any valid request within a reasonable timeframe, typically within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that 277bad holds about you. Upon receipt of a verified request, we will provide you with a summary of the personal information held on your account, the purposes for which it is being processed, and any third parties with whom it has been shared.

Right to Rectification

If any personal data held by 277bad about you is inaccurate or incomplete, you have the right to request that it be corrected. For information such as your email address or mobile number, you may update these directly in your account settings. For information such as your full legal name or date of birth — which is tied to your KYC verification — updates require submission of supporting documentation to our support team.

Right to Erasure

You may request the deletion of your personal data from 277bad's systems. Please note that this right is subject to our legal retention obligations described in Section 6 above. Where a legal obligation requires us to retain certain data after account closure, we will inform you of the applicable retention period and the specific categories of data that must be retained. All data not subject to a mandatory retention obligation will be deleted promptly upon receipt of a valid erasure request.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to processing pending verification of our legitimate grounds — you may request that we restrict the processing of your personal data. During a restriction period, your data will be stored but not actively processed, except for the purposes of storage and legal compliance.

Right to Withdraw Consent

Where processing of your personal data is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to the withdrawal.

How to Exercise Your Rights

To exercise any of the rights described above, please contact the 277bad data team by emailing [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We may ask you to verify your identity before processing your request to ensure that we do not disclose or delete data belonging to another person.

8 Changes to This Policy

277bad reserves the right to update or amend this Privacy Policy at any time. When we make changes, the updated policy will be published on this page with a revised effective date at the top of the document. For material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will endeavour to provide advance notice via email or a prominent on-platform notification prior to the changes taking effect.

Your continued use of the 277bad platform after the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the platform and contact our support team to discuss your options, including account closure and data deletion in accordance with Section 6 and Section 7 of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 277bad is protecting your personal information. If you have any questions about this policy or about how 277bad handles your data, please do not hesitate to reach out to us at [email protected] — our support team is available 24/7 via Live Chat, WhatsApp, and email, with email responses delivered within 2–12 hours (Bangladesh Standard Time, UTC+6).