Privacy Policy — How 2277bd Collects, Uses, and Protects Your Personal Data

2277bd operates https://2277bd.app, an online casino and sports betting platform serving players in Bangladesh. In the course of providing our services, we necessarily collect and process certain personal information about the people who use our platform. This Privacy Policy sets out, in clear and accessible English, the full scope of that data processing activity.

This policy covers personal data collected through the 2277bd website, the account registration and verification process, game activity and transaction records, customer support interactions, and any marketing communications you have opted into. It does not cover data processing carried out by third-party websites, payment providers, or game studios operating their own platforms — those parties operate under their own privacy policies, which we encourage you to review.

By using the 2277bd platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 2277bd processes personal data, you should not use the platform or, if you are already a registered account holder, you should contact support to request account closure.

This Privacy Policy should be read alongside the 2277bd Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and are available from the footer links on every page of this site.

2277bd collects personal data through several distinct channels. The categories of data we collect, and the context in which each is collected, are set out below.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health data as part of the standard account registration or gaming process. Where responsible gaming monitoring generates information that could be considered health-adjacent (for example, indicators of problem gambling behaviour), that information is handled with heightened internal access controls and used solely for the welfare purposes described in Section 3.

We do not collect full payment card numbers. Any card-adjacent data captured during payment processing is tokenised by the relevant payment provider and is never stored on 2277bd's own systems in unencrypted form.

2277bd processes personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: (a) contractual necessity — processing required to deliver the services you have registered for; (b) legitimate interests — processing that serves a genuine operational or safety purpose that is not overridden by your privacy rights; and (c) consent — processing for marketing communications, which you may withdraw at any time.

The specific purposes for which we use each category of personal data are as follows:

• Account creation and authentication: Identity and contact data are used to create and maintain your 2277bd account, verify your identity at login, and ensure only the authorised account holder accesses the account.
• Age and identity verification (KYC): Identity document data is used to confirm that you are aged 18 or above and that your identity matches the information provided at registration. This is a mandatory compliance obligation for all 2277bd account holders.
• Payment processing: Financial data is used to process deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and supported bank channels, to reconcile accounts, and to investigate any disputed transactions.
• Game delivery and account management: Gaming activity data is used to deliver game outcomes, maintain your balance, apply bonuses, settle sports bets, and generate your transaction and activity history within the platform.
• Fraud prevention and security: Technical data, identity data, and financial data are used to detect and prevent fraudulent account activity, money laundering, multi-accounting, bonus abuse, and unauthorised access. This processing is a legitimate interest of 2277bd and is necessary to protect all platform users.
• Responsible gaming monitoring: Gaming activity data and usage data are analysed to identify behavioural patterns associated with problem gambling. Where such patterns are detected, 2277bd may proactively contact the account holder with welfare information. This processing is a legitimate interest underpinned by a duty of care.
• Customer support: Communications data is used to resolve support queries, investigate complaints, and improve the quality of our support service.
• Platform improvement and analytics: Usage data and technical data are used in aggregated, anonymised form to analyse platform performance, understand user behaviour, and inform product development decisions. This does not involve making decisions about individual users.
• Marketing communications: Where you have opted in, contact data and marketing preference data are used to send you promotional emails or SMS messages about 2277bd offers, new games, and seasonal promotions relevant to players in Bangladesh (including BPL, Eid, and Pohela Boishakh promotions). You may opt out at any time by contacting [email protected] or updating your account preferences.
• Legal compliance: Where required by applicable law or a lawful authority request, 2277bd may process and disclose personal data to meet its legal obligations. 2277bd will notify affected account holders of any such disclosure where legally permissible to do so.

2277bd does not use personal data for automated decision-making that produces significant legal effects on account holders, except where automated systems are used as part of fraud and money-laundering detection, in which case any adverse decision (such as account suspension) is subject to human review upon request.

2277bd uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the platform. The categories of cookies used on the 2277bd platform are described below.

2277bd does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites. Our analytics tools operate on aggregated, anonymised data and are configured to avoid collecting full IP addresses where technically feasible.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using the 2277bd platform. Disabling functional cookies may affect your experience (for example, your display preferences may not be remembered between sessions). Disabling analytics cookies does not affect platform functionality.

2277bd may share your personal data with the following categories of third parties, under strict contractual data-protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive the minimum transaction data necessary to process deposits and withdrawals on your behalf. Each payment provider operates under its own data protection policy.
• Game content providers: Where live casino games are delivered by Evolution Gaming or Ezugi, or where slot games are delivered by Pragmatic Play, NetEnt, Microgaming, or Spribe through a live game interface, those providers may receive a session token and anonymised player identifier for game delivery purposes. They do not receive your full name, payment details, or identity document data.
• Identity verification services: Where automated KYC or document verification services are used to support the identity verification process, relevant identity data is shared with those services under a data processing agreement. Verification results are returned to 2277bd and the raw document data is not retained by the verification service beyond the period required to complete the check.
• Customer support platform: Live chat and email support interactions may be processed through a third-party customer support software platform. Support agents access communications data on a need-to-know basis.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent Bangladeshi authority, 2277bd may disclose personal data. 2277bd will challenge any request that it considers disproportionate or unlawful, and will notify affected account holders where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 2277bd business, personal data held by 2277bd may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being imposed on the recipient.

All third parties with whom 2277bd shares personal data are required to implement appropriate technical and organisational security measures to protect the data they receive, and to use it only for the specific purpose for which it was shared. 2277bd does not permit third parties to use personal data for their own independent marketing or product development purposes.

2277bd retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to meet legal, regulatory, fraud-prevention, or dispute-resolution obligations. The general retention periods applied to each data category are as follows:

• Account and identity data: Retained for the duration of the account relationship, plus a minimum of 5 years following account closure. This extended retention period reflects financial record-keeping obligations and the possibility of regulatory enquiries arising after closure.
• Identity document data (KYC): Retained for the duration of the account relationship, plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping standards.
• Financial transaction data: Retained for a minimum of 7 years following the date of the transaction, in accordance with financial record-keeping requirements applicable to online payment processing.
• Gaming activity data: Retained for the duration of the account relationship, plus 3 years following account closure. Gaming activity records may be retained longer where they form part of a fraud investigation or regulatory enquiry.
• Customer support communications: Retained for 2 years following the resolution of the relevant support query, except where the communication relates to a dispute, complaint, or legal matter, in which case it is retained until that matter is fully resolved and for 1 year thereafter.
• Analytics and usage data: Retained in aggregated, anonymised form indefinitely. Individual-level usage data is anonymised after 24 months.
• Marketing preference data: Retained for the duration of the account relationship. If you opt out of marketing communications, your opt-out preference is retained indefinitely to ensure you are not contacted in future.

When personal data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised. Deletion is carried out through secure data-erasure processes. Anonymised or aggregated data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

2277bd implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your browser and the 2277bd platform is encrypted using TLS (Transport Layer Security). The 2277bd platform does not accept unencrypted HTTP connections.
• Encryption at rest: Personal data stored in 2277bd's databases — particularly identity data, identity document data, and financial data — is encrypted at rest using industry-standard encryption algorithms.
• Access control: Internal access to personal data is restricted to authorised personnel whose job functions require that access. Access rights are reviewed regularly and revoked promptly when no longer required.
• Authentication controls: Internal systems holding personal data are protected by multi-factor authentication. Account holder login is protected by brute-force detection and session management controls.
• Intrusion detection: 2277bd maintains network and application-level monitoring to detect and respond to potential security incidents in a timely manner.
• Vendor security assessments: Third-party service providers who process personal data on behalf of 2277bd are subject to security assessments before onboarding and ongoing contractual security obligations.

No security system is entirely impenetrable. In the event of a data breach that poses a significant risk to the rights and freedoms of affected individuals, 2277bd will notify affected account holders without undue delay, providing information about the nature of the breach, the data involved, and the steps 2277bd is taking to address it. Notifications will be sent to the email address registered on the affected account.

If you believe your 2277bd account has been accessed without your authorisation, you must notify the 2277bd support team immediately via live chat on the platform or at [email protected] so that appropriate protective action can be taken without delay.

As a 2277bd account holder, you hold the following rights over your personal data. To exercise any of these rights, contact the 2277bd support team via live chat or at [email protected]. Requests are processed within 30 days of receipt. Complex requests may require an extension of up to 60 days, in which case we will notify you within the first 30 days.

2277bd will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We will ask you to verify your identity before processing any request that involves disclosing or modifying personal data, in order to protect against fraudulent access to your information.

2277bd takes its age-restriction obligations seriously. During account registration, all applicants are required to confirm their date of birth, and the identity verification process includes checks against identity documents to confirm that the account holder is aged 18 or above at the time of registration.

If 2277bd becomes aware that personal data has been collected from a person under the age of 18, all data associated with that account will be permanently deleted without delay, the account will be closed, and any deposits made will be returned to the payment method used. 2277bd may retain a minimal record of the incident for fraud-prevention purposes only.

Parents and guardians who believe that a minor in their care may have registered for a 2277bd account are encouraged to contact the support team immediately at [email protected]. 2277bd will investigate and act promptly on any such report. 2277bd also recommends the use of parental control software to restrict access to online gambling platforms for minors.

2277bd reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, changes to applicable law, or improvements to the clarity of our explanations. Where a material change is made — for example, a new category of data is collected or a new type of third-party disclosure is introduced — registered account holders will be notified by email to the registered address before the change takes effect.

Non-material updates (such as clarifications of existing practices or corrections of typographical errors) may be made without prior notice. The effective date and last revised date at the top of this policy will always reflect the version currently in force. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy, wish to exercise any of the data rights described in Section 8, or wish to raise a concern about how 2277bd handles your personal data, please contact the 2277bd support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the platform
• WhatsApp: +880 1700-277200 (plain text — not a clickable link)

The 2277bd support team will acknowledge your privacy-related enquiry within 2 business days and will provide a substantive response within 30 calendar days. For complex requests — particularly data access requests involving large volumes of data — we may require up to 60 days, and will notify you within the first 30 days if an extension is needed.