gb77 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by gb77 in connection with the operation of the gb77 online betting and casino platform, accessible at gb77.io (the "Platform"). It applies to all registered players, prospective players who interact with the Platform without completing registration, and visitors to the gb77 website.

gb77 acts as the data controller in respect of all personal data collected through the Platform. As data controller, gb77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection principles.

This Privacy Policy should be read alongside the gb77 Terms and Conditions, which govern the overall relationship between gb77 and its players. In the event of any inconsistency between this Privacy Policy and the Terms and Conditions regarding a data protection matter, this Privacy Policy shall prevail.

gb77 collects the following categories of personal data from players and platform visitors:

gb77 does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required by applicable law or with your explicit consent.

gb77 collects personal data through the following means:

• Direct submissions: Data you provide when completing the registration form, updating your account profile, submitting KYC documents, or contacting our support team.
• Automated technical collection: Data collected automatically as you interact with the Platform, including IP addresses, cookie data, and session logs, gathered through our web servers and analytics infrastructure.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank card, the relevant payment provider shares transaction confirmation data with gb77 to verify and reconcile your account balance.
• Identity verification providers: Where gb77 uses a third-party KYC or fraud-screening service to verify your identity documents, that provider may return verification outcomes and data extracts to gb77.
• Third-party game providers: Casino game and sportsbook providers such as Evolution Gaming, Pragmatic Play, Microgaming, Spribe, and Ezugi may share game session data, round results, and player activity logs with gb77 for account reconciliation and responsible gaming monitoring purposes.

gb77 processes your personal data only for specific, lawful purposes. The table below sets out the primary purposes for which we process personal data and the legal basis on which each processing activity rests:

Where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, contact gb77 support or update your communication preferences within your account settings.

gb77 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the data necessary to execute and verify financial transactions (e.g., wallet number, transaction amount, reference ID).
• Identity verification providers: Third-party KYC services receive identity document images and player-submitted details solely for the purpose of verifying age and identity as required for responsible gaming compliance.
• Game technology providers: Providers such as Evolution Gaming, Pragmatic Play, Spribe, Microgaming, NetEnt, and Ezugi receive a pseudonymous player identifier and session data necessary to deliver and audit game rounds. These providers are contractually prohibited from using this data for their own marketing purposes.
• IT infrastructure providers: Cloud hosting, content delivery, and platform monitoring providers may have access to data held on infrastructure they operate on gb77's behalf, subject to strict data processing agreements.
• Legal and regulatory authorities: gb77 may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by law, court order, or in connection with a lawful investigation.
• Business transfers: In the event of a merger, acquisition, or transfer of gb77's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being applied.

gb77 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how the Platform is used. A cookie is a small text file placed on your device by a web server when you visit a website. The following types of cookies are used on gb77.io:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a betting session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language setting and last-used payment method, so that you do not need to re-enter this information on each visit.
• Analytics Cookies: Used to collect anonymised data about how players interact with the Platform — which pages are visited most frequently, where users navigate after viewing a particular game, and how long sessions typically last. This data helps gb77 improve the platform experience.
• Security & Fraud-Prevention Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised account access attempts.

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using the Platform. gb77 does not use third-party advertising or retargeting cookies.

gb77 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the gb77 platform is encrypted in transit using industry-standard TLS (Transport Layer Security) protocols. Look for the padlock symbol in your browser's address bar when visiting gb77.io.
• Password Hashing: Player passwords are never stored in plain text. gb77 uses a one-way cryptographic hashing algorithm to store password credentials, meaning that even in the event of a data breach, your raw password cannot be recovered from our systems.
• Access Controls: Access to personal data within gb77's systems is restricted to authorised personnel who have a legitimate need to access it as part of their job function. All internal access is logged and audited.
• Payment Data Security: gb77 does not store full bank card numbers or mobile banking PINs on its servers. Payment transactions are processed directly by the relevant payment providers using their own secure infrastructure.
• Regular Security Reviews: gb77 conducts periodic reviews of its security practices, infrastructure configurations, and data handling procedures to identify and address potential vulnerabilities.

While gb77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, gb77 will notify affected players promptly and take all appropriate remedial action.

You also have a responsibility to keep your account credentials secure. Never share your username or password with anyone, and contact gb77 support immediately at [email protected] if you suspect your account has been compromised.

gb77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a period of at least 5 years following account closure, to satisfy anti-money laundering record-keeping obligations and to resolve any disputes that may arise after closure.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC documents: Retained for the duration of your active account and for a minimum of 5 years post-closure. Original document images are deleted as soon as the verification outcome has been confirmed, where technically feasible.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an open dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Technical and usage data (logs): Retained for up to 12 months in identifiable form, after which they are either deleted or aggregated into anonymised statistical records that can no longer be linked to an individual player.
• Marketing consent records: Retained for as long as you remain opted in to marketing communications, plus a further 2 years as evidence of your consent, in accordance with standard consent record-keeping practice.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Requests for early deletion will be accommodated where there is no overriding legal obligation to retain the data — see Section 9 for details of how to submit a deletion request.

As a player on the gb77 platform, you have the following rights in respect of your personal data. gb77 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers:

• Right of Access: You may request a copy of all personal data that gb77 holds about you. gb77 will provide this information within 30 days of receiving a valid request.
• Right to Rectification: If any personal data held by gb77 is inaccurate or incomplete, you may request that it be corrected. You can update most account information directly from within your account settings. For changes to identity or KYC data, please contact support.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (and there is no other legal basis for processing), or where processing is unlawful. Note that gb77 may be required to retain certain data for legal compliance purposes notwithstanding a deletion request.
• Right to Restriction: You may request that gb77 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and gb77 is considering whether its legitimate interests override your rights.
• Right to Object: You may object at any time to the processing of your personal data where that processing is based on gb77's legitimate interests. gb77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support or updating your notification preferences within your account.

To exercise any of the above rights, please contact gb77 by email to [email protected] with the subject line "Privacy Rights Request", or via live chat. gb77 will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case gb77 will notify you of the extension and the reason for it.

gb77 will not charge a fee for handling privacy rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

The gb77 platform is strictly for adults aged 21 years and older. gb77 does not knowingly collect personal data from any individual under the age of 21. Registration on the Platform requires confirmation of age at the point of sign-up, and gb77 reserves the right to request documentary proof of age from any player at any time.

If gb77 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be closed immediately, all associated funds will be handled in accordance with the gb77 Terms and Conditions, and the personal data of the underage individual will be deleted from our systems as soon as reasonably practicable.

If you have reason to believe that a person under the age of 21 has registered on the gb77 platform, please contact us immediately at [email protected]. gb77 takes underage gambling prevention extremely seriously and acts on all credible reports without delay.

gb77 operates a platform that uses technology infrastructure and third-party service providers located in various jurisdictions. As a result, personal data collected from players in Bangladesh may be transferred to, stored in, or processed in countries other than Bangladesh. These transfers occur in connection with the provision of services by game technology providers, cloud hosting partners, and KYC verification services.

Where personal data is transferred outside Bangladesh, gb77 takes steps to ensure that adequate protections are in place. These protections may include contractual clauses that require the recipient to apply data protection standards equivalent to those applied by gb77, or reliance on the recipient's participation in a recognised data protection framework.

By using the gb77 platform and submitting your personal data, you acknowledge and consent to the transfer of your data to other jurisdictions as described in this section, subject to the protections described above.

gb77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — gb77 will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address or mobile number associated with your account prior to the changes taking effect.

For minor or administrative changes (such as updated contact details or clarified wording that does not affect the substance of the Policy), gb77 will update this document without individual notification. We recommend reviewing this Privacy Policy periodically to remain informed of how gb77 protects your data. Continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gb77 handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected] — for privacy rights requests, data correction queries, and formal data protection complaints. Please use the subject line "Privacy Rights Request" for data-related queries so your message reaches the appropriate team member.
• Live Chat: Available 24/7 within the Platform — suitable for general privacy questions and immediate assistance. For formal requests, we recommend following up with an email to create a written record.

gb77 aims to acknowledge all privacy-related queries within 2 business days and to provide a substantive response within 30 calendar days. We take privacy concerns seriously and will investigate all complaints thoroughly and impartially.