bu77 Privacy Policy — How We Handle Your Data

1. Information We Collect

bu77 collects personal information from players and site visitors in the course of providing its services. The categories of data we collect, and the circumstances in which each category is collected, are set out below.

1.1 Registration Data

When you create a bu77 account, we collect the following information, which is provided directly by you:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — used to verify that you meet the minimum age requirement of 18 years.
• Residential address in Bangladesh — including division, district, and postal address.
• Mobile number — the primary contact number registered to your preferred mobile financial service (bKash, Nagad, Rocket, or Upay).
• Email address — used for account communications and, where applicable, marketing messages (subject to your preferences ).
• Username and password — your chosen account credentials. Passwords are stored in hashed form only and are never accessible in plain text by bu77 staff.

1.2 Identity Verification (KYC) Data

As part of the Know Your Customer (KYC) process — required before processing your first withdrawal and at other points during the account lifecycle — bu77 may collect copies of:

• Your National ID card (NID) issued by the Bangladesh Election Commission, or a valid passport.
• A recent utility bill, bank statement, or other official document confirming your residential address in Bangladesh.
• Evidence that the bKash, Nagad, Rocket, Upay, or bank account used for deposits is registered in your name.

KYC documents are retained in encrypted storage and are only accessible to authorised bu77 compliance personnel. They are not shared with third parties except where required for fraud prevention or regulatory compliance.

1.3 Transaction Data

bu77 records all financial transactions associated with your account, including deposit amounts and dates, the payment method used (mobile number associated with bKash, Nagad, Rocket, or Upay, or the bank account used), withdrawal requests and outcomes, bonus credits and wagering activity, and any chargebacks or disputed transactions. This data is necessary for accurate account management, payment reconciliation, and regulatory reporting.

1.4 Gameplay and Betting Data

bu77 logs all game rounds played and sports bets placed through the platform. This includes game titles, bet amounts, outcomes, timestamps, and session durations. This data is used for account statement generation, dispute resolution, responsible gaming monitoring, and product improvement.

1.5 Technical and Device Data

When you access the bu77 platform, our servers and analytics tools automatically collect certain technical information about your device and session, including:

• IP address and approximate geographic location derived from IP.
• Browser type, version, and operating system.
• Device type (desktop, mobile, tablet) and screen resolution.
• Pages visited on the bu77 platform, referral URL, and session duration.
• Cookie identifiers and session tokens (see Section 4 for full cookie details).

Technical and device data is used for platform security, fraud detection, performance monitoring, and aggregate analytics. It is not used to build individual behavioural profiles for sale to third parties.

1.6 Communications Data

If you contact the bu77 support team via email at [email protected] or through any in-platform messaging feature, bu77 retains a record of that correspondence. This includes the content of your messages, timestamps, and any attachments submitted. Communications records are used for support case management, quality assurance, and dispute resolution.

2. How We Use Your Information

bu77 uses the personal data collected from players and visitors for the following purposes. Each purpose is accompanied by the lawful basis on which bu77 relies to process your data for that purpose.

Purpose	Data Used	Lawful Basis
Account registration and management	Registration data, device data	Contract performance
Age and identity verification (KYC)	Registration data, KYC documents	Legal obligation
Processing deposits and withdrawals	Transaction data, payment method data	Contract performance
Fraud detection and anti-money laundering	Transaction data, KYC data, device data, IP	Legal obligation / Legitimate interest
Responsible gaming monitoring	Gameplay data, transaction data	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / Legitimate interest
Platform security and access control	Device data, IP address, session tokens	Legitimate interest
Promotional communications (where opted in)	Email address, gameplay preferences	Consent
Platform analytics and improvement	Technical data, gameplay data (aggregated)	Legitimate interest

bu77 does not use automated decision-making (including profiling) in ways that produce legal or similarly significant effects on players without providing an opportunity for human review. Where automated tools are used to flag accounts for responsible gaming intervention or fraud investigation, such flags trigger a manual review by a qualified bu77 team member before any account action is taken.

3. Data Sharing and Disclosure

bu77 does not sell, rent, or otherwise commercialise your personal data to third parties. Data is shared only in the circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process deposits and withdrawals, bu77 shares the minimum necessary transaction data with the relevant payment service provider — being bKash, Nagad, Rocket, Upay, or the player's nominated Bangladeshi bank (including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank). bu77 does not share full KYC documents with payment providers; only the transaction reference and account-linked mobile number or bank account number are communicated as required to complete the transaction.

3.2 Identity Verification and Fraud Prevention

bu77 may use third-party identity verification and fraud screening services to assist with KYC compliance and anti-money laundering obligations. These providers process KYC document data on bu77's behalf under data processing agreements that require them to apply equivalent data security standards and prohibit them from using player data for any other purpose.

3.3 Game and Technology Providers

The games available on the bu77 platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive game session data (such as player ID, bet amounts, and game outcomes) as required to operate the games correctly and to enable dispute resolution in respect of game rounds. No full KYC data is shared with game providers.

3.4 Legal and Regulatory Disclosure

bu77 may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities in response to a lawful request, court order, or statutory obligation. bu77 will notify the affected player of such a request where it is legally permitted to do so.

3.5 Business Transfers

In the event that bu77's business or a substantial part of its assets is acquired by or merged with another entity, player data held by bu77 at the time of the transaction may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via a notice posted on the bu77 platform and, where applicable, by email, prior to the transfer taking effect.

4. Cookies and Tracking Technologies

bu77 uses cookies and similar tracking technologies on its platform to enable core functionality, enhance the user experience, maintain session security, and gather aggregate analytics data. A cookie is a small text file placed on your device by the bu77 server when you visit the platform. Cookies do not contain executable code and cannot access other files on your device.

4.1 Categories of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the bu77 platform to function. They enable session authentication, maintain your logged-in state, remember items in your gaming session, and ensure secure access to your account. These cookies cannot be disabled without preventing access to core platform features.
• Performance and Analytics Cookies: bu77 uses anonymised analytics cookies to understand how players interact with the platform — such as which pages are most visited, how long sessions last, and where users drop off. This data is collected in aggregate form and is not linked to individual player identities. These cookies help bu77 improve the platform experience over time.
• Functional Cookies: Functional cookies remember your preferences — such as your chosen language setting (English), display preferences, and last-used payment method — so that you do not need to re-enter them on each visit.
• Session Tokens: Short-lived session tokens are placed in your browser on login to authenticate your session with bu77 servers. These expire automatically when you log out or after a defined period of inactivity.

4.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the browser's privacy or settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in or using the bu77 platform. Disabling analytics or functional cookies will not affect your ability to play games or make transactions, but may result in a reduced personalisation experience.

bu77 does not use cookies to serve third-party advertising or to track your activity across other websites. Cookies placed by bu77 are scoped to the bu77.org domain only.

5. Data Retention

bu77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of the account and for a minimum of 5 years following account closure, in order to meet anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or for a longer period where required by applicable law or where a dispute, investigation, or legal proceeding is ongoing.
• Transaction records: Retained for a minimum of 5 years following the transaction date, consistent with financial record-keeping obligations.
• Gameplay and betting logs: Retained for a minimum of 2 years from the date of the game round or bet, for dispute resolution and responsible gaming monitoring purposes.
• Communications records: Retained for 2 years from the date of the communication, or longer if the communication is relevant to an open dispute or legal proceeding.
• Technical and device data: Retained in anonymised or aggregated form for up to 12 months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation rather than deletion is applied, the resulting data no longer constitutes personal data and is no longer subject to this Privacy Policy.

6. Data Security Measures

bu77 applies a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect the personal data of our players. The key security measures currently in place include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or device and the bu77 platform is encrypted using SSL/TLS protocols, preventing interception by third parties during transmission.
• Encryption at Rest: Sensitive data — including KYC documents, payment details, and hashed credentials — is stored in encrypted form on bu77's servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Only authorised bu77 personnel whose role requires access to specific categories of player data are granted that access. Access privileges are reviewed periodically.
• Password Hashing: Player passwords are never stored in plain text. bu77 uses industry-standard cryptographic hashing algorithms. Bu77 staff cannot retrieve your password; a reset link is the only recovery option.
• Two-Factor Authentication: bu77 strongly encourages all players to enable two-factor authentication (2FA) on their accounts. 2FA is available to all registered players and provides a material additional layer of protection against unauthorised account access.
• Monitoring and Incident Response: bu77 maintains monitoring systems designed to detect anomalous access patterns and potential security incidents. In the event of a data security incident that poses a material risk to player data, bu77 will notify affected players without undue delay and will take immediate steps to contain and remediate the incident.

While bu77 takes all reasonable technical and organisational measures to protect your personal data, no system is entirely immune to risk. You are also responsible for the security of your own account — in particular, for keeping your login credentials confidential and for logging out from shared or public devices after use.

7. Your Rights Over Your Data

Registered bu77 players have the following rights with respect to the personal data held about them. To exercise any of these rights, please contact the bu77 support team in writing at [email protected], including your full name, registered mobile number, and a description of the right you wish to exercise. bu77 will respond to all data rights requests within 10 business days.

7.1 Right of Access

You have the right to request a copy of the personal data that bu77 holds about you. bu77 will provide this information in a structured, readable format. Where the volume of data is large, bu77 may ask you to specify the categories or time periods of interest to make the response more practical.

7.2 Right to Correction

If any personal data held by bu77 is inaccurate or incomplete, you have the right to request that it be corrected or updated. For certain data fields (such as your registered name and date of birth), correction requests may require supporting documentation to confirm the accurate information.

7.3 Right to Deletion

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent (where consent is the lawful basis). bu77 will fulfil deletion requests to the extent permitted by its legal retention obligations. Where bu77 is required by law to retain certain categories of data (such as KYC records and transaction records for anti-money laundering purposes), deletion of that data will be deferred until the applicable retention period expires.

7.4 Right to Object to Marketing

You may object to the use of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, bu77 will cease sending promotional communications to you within 5 business days. Objecting to marketing does not affect your ability to continue using the bu77 platform or to receive transactional account communications.

7.5 Right to Data Portability

Where bu77 processes your personal data by automated means on the basis of your consent or in performance of a contract with you, you may request a copy of that data in a structured, commonly used, machine-readable format for transfer to another service provider, where this is technically feasible.

8. Policy Updates and Contact

bu77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new service features, or amendments to applicable legal requirements. When material changes are made to this policy, bu77 will post a notice on the bu77 platform and, where the change materially affects how we use your personal data, will notify registered players via email to the address on their account.

The version of the Privacy Policy currently published at bu77.org/privacy-policy is the operative version. The effective date at the top of this policy indicates when the current version came into force. We encourage you to review this policy periodically so that you remain informed of how bu77 handles your data.

8.1 Contact for Privacy Queries

If you have any questions, concerns, or complaints regarding this Privacy Policy or bu77's data handling practices, please contact the bu77 privacy team at: [email protected]. Please include "Privacy Query" in the subject line of your email, along with your full name and registered account mobile number. bu77 aims to respond to all privacy-related correspondence within 5 business days.