Privacy Policy — di77 Betting Platform

1. Introduction

di77 ("we", "us", "the Platform") is committed to protecting and respecting the privacy of every user who registers and uses the di77 online casino and sports betting platform at di77.bet. This Privacy Policy ("Policy") describes how we collect, process, store, and share personal data in connection with your use of the Platform, and sets out the rights available to you in relation to your personal data.

By registering an account on di77 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform. This Policy should be read alongside our Terms & Conditions, which govern your use of di77 more broadly.

2. Your Privacy at a Glance

The following six points summarise the most important aspects of how di77 handles your personal data. Full details for each topic follow in the dedicated sections below.

3. Information We Collect

di77 collects personal data in two principal ways: information you provide to us directly when you use the Platform, and information collected automatically as you interact with di77. The categories of data we collect are described below.

• Identity data: your full legal name, date of birth, and national identity document information provided during registration and KYC verification.
• Contact data: your Bangladesh mobile phone number and email address, used for account communication, OTP verification, and support correspondence.
• Financial data: deposit and withdrawal transaction records, payment method references (e.g. bKash or Nagad mobile wallet numbers), and account balance history. Full payment credentials such as bKash PINs are never stored by di77.
• Gaming and betting data: your bet history, game session records, wagering patterns, deposit frequency, stake sizes, win/loss records, and any responsible gaming limits or restrictions you have applied to your account.
• Technical data: your IP address, device type and model, operating system, browser type and version, session timestamps, and approximate geolocation derived from your IP address.
• Communications data: the content of any messages you send to di77 support via live chat, email, or any other communication channel, including the date and time of each communication.

di77 does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is inadvertently provided, it will not be stored or processed by di77 and will be promptly deleted.

4. How We Use Your Information

di77 uses the personal data we collect solely for legitimate purposes connected to the operation of the Platform and our relationship with you as a registered player. We do not use your personal data for purposes beyond those described in this Policy without first obtaining your explicit consent.

• Account management and authentication: to create and maintain your di77 account, verify your identity, process login requests, and manage account security including OTP authentication.
• Transaction processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and to maintain accurate financial records associated with your account.
• Regulatory compliance and fraud prevention: to conduct KYC identity checks, comply with anti-money laundering obligations, detect and investigate suspicious activity, and report to relevant authorities where required by law.
• Platform operation and improvement: to provide, maintain, and improve the di77 platform, diagnose technical issues, analyse usage patterns to improve game selection and platform performance, and develop new features.
• Responsible gaming: to monitor account activity for patterns that may indicate problem gambling, to apply responsible gaming restrictions you have requested (deposit limits, session limits, self-exclusion), and to proactively contact players where concerning patterns are detected.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time by contacting support or adjusting your account notification settings.

5. Legal Basis for Processing

di77 processes your personal data under one or more of the following legal bases, depending on the specific purpose for which the data is being processed.

• Contract performance: processing that is necessary to provide the Platform to you, including account management, transaction processing, and customer support — without this processing, di77 cannot operate your account.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering requirements, KYC identity verification obligations, and any mandatory reporting to regulatory or law enforcement authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and analytical improvement of the Platform — where such processing does not override your fundamental privacy rights.
• Consent: processing for marketing communications, optional personalisation features, and any additional processing purposes not covered by the bases above — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

6. Sharing Your Information

di77 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the limited circumstances described below, and always only to the extent necessary for the stated purpose.

• Payment processors and financial service providers: di77 shares the minimum necessary transaction data with payment processors such as bKash, Nagad, Rocket, and Upay, and with banking partners including Dutch-Bangla Bank, BRAC Bank, and City Bank, solely to process your deposit and withdrawal requests.
• Identity verification and KYC service providers: di77 may share identity document data with third-party KYC verification providers to fulfil its regulatory obligations. These providers are contractually bound to process your data only for verification purposes and may not use it for any other purpose.
• Legal and regulatory authorities: di77 may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or where di77 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Technology and platform service providers: di77 may share limited technical data with trusted third-party infrastructure providers (such as cloud hosting, analytics, and security monitoring services) who process data on our behalf under strict data processing agreements that prohibit any independent use of your data.

7. Payment Data and Financial Information

di77 takes particular care with financial data given its sensitivity. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank transfer, di77 records the transaction reference, amount, timestamp, and the last four digits or partial identifier of the payment method used. di77 does not store full mobile banking PINs, full bank account numbers, or complete card numbers at any point in the transaction flow. Payment authentication is handled directly between you and the relevant payment provider.

Transaction records are retained for a minimum of five years following the date of the transaction in order to comply with financial record-keeping requirements. These records are accessible to di77's compliance team and may be shared with regulatory or law enforcement authorities as described in Section 6 above.

8. Cookies and Tracking Technologies

di77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how players interact with di77. A cookie is a small text file placed on your device by the di77 website. The types of cookies used by di77 are described below.

• Strictly necessary cookies: these cookies are essential for the Platform to function. They enable core features such as account login sessions, session security tokens, and shopping cart or bet-slip functionality. These cookies cannot be disabled without breaking the Platform.
• Functional cookies: these cookies remember your preferences such as language settings, display preferences, and previously used payment methods, to provide a more personalised experience on di77.
• Analytics cookies: these cookies collect anonymised data about how you and other players use di77 — including pages visited, time spent, and features used — which helps di77 identify areas for improvement and optimise the platform experience.
• Security and fraud detection cookies: these cookies help di77 identify suspicious device behaviour, detect automated bot activity, and protect your account from unauthorised access attempts.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of di77 and may prevent you from accessing certain features of the Platform.

9. Data Retention

di77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The principal retention periods applied by di77 are as follows: account data and KYC records are retained for a minimum of five years following the closure of your account; financial transaction records are retained for a minimum of five years from the date of the transaction; communications records are retained for two years from the date of the communication; and technical log data is retained for a maximum of 12 months.

When personal data is no longer required for any legitimate purpose and no legal retention obligation applies, di77 will securely delete or anonymise that data. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical and analytical purposes.

10. Your Rights

As a user of di77, you have the following rights in relation to your personal data. To exercise any of these rights, please contact di77 support at [email protected]. We will respond to all verifiable requests within 30 days. We may need to verify your identity before processing a rights request to protect your data from unauthorised access.

• Right of access: you have the right to request a copy of the personal data di77 holds about you, together with information about how it is processed and with whom it is shared.
• Right to rectification: you have the right to request that di77 corrects any inaccurate personal data it holds about you, or completes any incomplete data, without undue delay.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing was based, or where the data has been unlawfully processed — subject to legal retention obligations that override this right.
• Right to restriction: you have the right to request that di77 restricts the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while a complaint about processing is under review.
• Right to data portability: where processing is carried out by automated means and based on your consent or on a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to object: you have the right to object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing based on legitimate interests, though di77 may continue processing where it can demonstrate compelling legitimate grounds that override your interests.

11. Data Security

di77 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data in transit between your device and di77's servers, encrypted storage of sensitive personal data at rest, access controls that restrict internal access to personal data to only those staff members who require it to perform their duties, regular security assessments and penetration testing of di77's systems, and real-time monitoring for suspicious access attempts and anomalous account behaviour.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, di77 will notify affected users promptly and take all reasonable steps to contain the breach, assess its scope, and prevent recurrence. No data security system is entirely infallible, and di77 cannot guarantee the absolute security of your personal data. Users are strongly encouraged to use strong, unique passwords for their di77 account and to enable OTP authentication as an additional layer of account protection.

12. Children's Privacy

di77 is strictly an adult platform. No person under the age of 21 is permitted to register or use di77 under any circumstances. di77 does not knowingly collect personal data from individuals under the age of 21. If di77 becomes aware that it has inadvertently collected personal data from a person under 21, that data will be deleted immediately and the relevant account suspended. If you are a parent or guardian and believe your child has accessed di77 or provided personal data to di77 without your knowledge, please contact us immediately at [email protected].

13. International Data Transfers

di77 operates primarily to serve users in Bangladesh. Some of di77's third-party service providers — including cloud infrastructure and analytics providers — may process data outside of Bangladesh. Where personal data is transferred outside Bangladesh, di77 ensures that appropriate safeguards are in place, including contractual data protection clauses with each service provider that require them to apply a standard of data protection equivalent to that applied by di77 itself. By using di77, you acknowledge and consent to such transfers where they are necessary to operate the Platform.

14. Changes to This Privacy Policy

di77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this document and, where the changes significantly affect your rights, we will endeavour to notify you via the Platform or by email. We encourage you to review this Policy periodically. Your continued use of di77 following any update to this Policy constitutes your acceptance of the revised terms.

15. Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way di77 handles your personal data, please contact our support team. All privacy-related enquiries are handled within 72 hours during normal operating hours. When contacting us about a data rights request, please include your registered account mobile number and a brief description of your request so we can process it efficiently.

You may contact di77 support by email at [email protected]