b177 Privacy
Policy

This Privacy Policy ("Policy") describes how b177 ("b177", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the b177 online betting and casino platform available at b177.io ("the Platform").

b177 is committed to protecting the privacy of all players, including those accessing the Platform from Bangladesh and other jurisdictions. We process personal data in accordance with applicable data protection principles, including the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering an account, depositing funds, placing bets, or otherwise using any feature of the b177 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

b177 collects the following categories of personal data depending on the nature of your interaction with the Platform:

b177 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for identity verification and only with your explicit consent.

b177 collects personal data through the following methods:

• Direct Submissions: Data you provide voluntarily when registering an account, completing your profile, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you visit b177.io, including your IP address, device identifiers, browser information, and navigation behaviour. This data is collected using server logs, cookies, and similar tracking technologies. See Section 7 (Cookies and Tracking) for further detail.
• Payment Service Providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment service provider may share transaction confirmation data with b177 to facilitate the deposit or withdrawal process.
• Identity Verification Services: b177 may use third-party KYC and identity verification partners to cross-reference the information you provide against authoritative data sources during the account verification process.
• Fraud Prevention and Security Tools: b177 may receive data from third-party security and fraud prevention services that help us identify suspicious account activity, detect multi-accounting, or prevent money laundering.

b177 uses the personal data we collect for the following specific purposes:

• Account Management: To create, manage, and maintain your b177 account, verify your identity, and authenticate your login sessions.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to make betting markets, casino games, live dealer titles, and slots available to your account; and to record your gaming activity accurately.
• Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years and that you are the legitimate owner of the payment methods associated with your account.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money-laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce deposit limits, loss limits, and self-exclusion arrangements you have activated, and to proactively reach out to players showing signs of harmful gambling behaviour.
• Customer Support: To respond to your enquiries, complaints, and dispute submissions via [email protected] and to maintain records of support interactions for quality assurance purposes.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the Platform.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, features, and user experience of b177.io.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates about b177 services — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time by contacting support.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute between you and b177.

b177 processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the agreement between b177 and you as a registered player — specifically, to provide access to the Platform, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including AML/KYC requirements, age verification obligations, and responses to lawful data requests from competent authorities.
• Legitimate Interests: Processing is necessary for b177's legitimate business interests, including fraud detection, platform security, abuse prevention, business analytics, and responsible gaming monitoring — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Where b177 relies on your consent as the legal basis for processing — particularly for marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

b177 does not sell your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Service Providers: We share relevant transaction data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal requests. These providers are bound by their own data protection obligations and process your data only as necessary to complete the transaction.
• Identity and KYC Verification Partners: We may share identity documents and personal details with third-party verification service providers to complete KYC checks required under our legal obligations. These partners are contractually bound to process data only for verification purposes.
• Technology and Hosting Providers: b177 uses third-party cloud hosting, database, and security infrastructure providers to operate the Platform. These providers process data on behalf of b177 under strict data processing agreements that prohibit independent use of your data.
• Game Content Providers: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain session data (such as game ID and bet amounts) may be processed by the relevant studio's servers as part of game delivery. These studios do not receive your personal identity data.
• Fraud Prevention and Security Services: We may share technical and transactional data with third-party fraud prevention partners to identify and prevent suspicious activity on the Platform.
• Legal and Regulatory Authorities: b177 may disclose your personal data to competent law enforcement agencies, regulatory bodies, or courts where required by law or where we believe disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of b177's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

b177.io uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. Cookies are small text files placed on your device when you visit a website. They allow b177 to recognise your browser on subsequent visits, maintain your session, remember your preferences, and analyse site usage.

b177 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are required for the Platform to function correctly. They enable session management, login authentication, and security features. These cookies cannot be disabled without impairing core Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use b177.io, such as which pages are visited most frequently and whether error messages are encountered. This data helps b177 improve the Platform experience over time.
• Functional Cookies: These cookies remember your preferences, such as your preferred language settings and display options, so you do not need to re-enter them on subsequent visits.
• Targeting and Marketing Cookies: Where you have provided consent, these cookies may be used to present you with relevant promotional content within the Platform based on your browsing and gaming history. You may withdraw consent for these cookies at any time.

You can control and manage cookie settings through your browser preferences. Most modern browsers allow you to block or delete cookies. However, disabling strictly necessary cookies may prevent you from accessing certain features of the b177 Platform, including account login and transaction processing.

b177 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and b177's servers is encrypted using SSL/TLS protocols. This applies to login sessions, financial transactions, and all other interactions with the Platform.
• Access Controls: Access to personal data within b177's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions.
• Secure Data Storage: Personal data is stored in encrypted databases hosted on secure, access-controlled server infrastructure. b177 conducts regular security audits of its data storage systems.
• Account Security Features: Players are required to set a strong password during registration. b177 encourages the use of unique passwords and provides session timeout features to protect accounts on shared devices.
• Fraud Monitoring: b177 operates automated and manual monitoring systems to detect unusual account activity, including suspicious login patterns, transaction anomalies, and potential account takeover attempts.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying b177 immediately at [email protected] if you suspect any unauthorised access to your account.

b177 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active Account Data: Personal data associated with an active b177 account is retained for the duration of the account's active status and for a period of five years after the account is permanently closed, to comply with AML and financial record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years from the date of the transaction in accordance with anti-money-laundering regulatory requirements.
• KYC and Identity Documents: Copies of identity documents submitted for KYC verification are retained for five years after account closure, or longer if required by a specific legal obligation or ongoing investigation.
• Support Communications: Records of customer support interactions are retained for two years from the date of the interaction, unless the interaction relates to a dispute or legal claim, in which case it is retained until that matter is fully resolved.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account and for two years after consent is withdrawn, for compliance evidence purposes.
• Technical and Usage Data: Anonymised technical and usage data collected via cookies and server logs is retained for up to 24 months and then deleted or permanently anonymised.

When personal data is no longer required and its retention period has expired, b177 will securely delete or anonymise that data using industry-standard data destruction methods.

Subject to applicable law, you have the following rights in relation to the personal data that b177 holds about you:

• Right of Access: You have the right to request a copy of the personal data that b177 holds about you, along with information about how it is used and with whom it is shared. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: You have the right to request that b177 correct any inaccurate or incomplete personal data held about you. You may also update certain information directly within your b177 account profile.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the processing has no legitimate legal basis. This right is subject to b177's legal obligations to retain certain data, such as AML records.
• Right to Restrict Processing: You have the right to request that b177 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of b177's legitimate interests. You also have the right to object at any time to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where b177 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact b177 at [email protected] with the subject line "Data Rights Request" and a clear description of your request. b177 will respond to all verified requests within 30 days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly.

The b177 Platform is strictly intended for adults aged 21 and above. b177 does not knowingly collect personal data from any person under the age of 21. If b177 becomes aware that an account has been registered by a person under 21, or that personal data of a minor has been submitted to the Platform, b177 will immediately suspend the relevant account, delete the minor's personal data, and take appropriate action in accordance with its underage gambling policy.

Parents and guardians who believe their child has created a b177 account or submitted personal data to the Platform are strongly encouraged to contact b177 immediately at [email protected] so that the matter can be resolved promptly.

The b177 Platform may contain references to or integration with third-party services, including game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment service providers including bKash, Nagad, Rocket, and Upay. While b177 takes care to work with reputable partners, b177 is not responsible for the privacy practices of these third-party services.

When you interact with a third-party service provider — for example, by initiating a bKash transaction or launching a game powered by a third-party studio — your interaction with that provider is governed by that provider's own privacy policy and terms of service. b177 encourages you to review the privacy policies of any third-party service providers you interact with through the Platform.

In the course of providing its services, b177 may transfer your personal data to servers or service providers located outside of Bangladesh. Where such international transfers occur, b177 takes steps to ensure that your data receives an equivalent level of protection to that described in this Policy.

These steps may include entering into standard contractual data processing agreements with the receiving party, ensuring that the receiving country is recognised as providing an adequate level of data protection, or obtaining your explicit consent to the transfer where required. b177 will not transfer your personal data internationally in a manner that undermines the protections described in this Policy.

b177 reserves the right to update or amend this Privacy Policy at any time. The most current version of this Policy will always be available at b177.io/privacy-policy. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Where amendments are material — meaning they substantially change how b177 collects, uses, or shares your personal data — b177 will notify registered players via the email address on file at least seven days before the changes take effect. For minor clarifications or non-material updates, the Policy may be updated without direct notification, and your continued use of the Platform constitutes acceptance of the revised Policy.

If you do not agree with any changes to this Privacy Policy, you should cease using the Platform and may request account closure by contacting b177 support. All data rights requests arising from a Policy update will be handled in accordance with the provisions of Section 10 of this Policy.

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a potential data protection concern, please contact b177 using the following details:

b177 aims to respond to all privacy-related enquiries within 5 business days. For formal data rights requests under applicable law, b177 will respond within 30 days of receipt of a verified request, as outlined in Section 10 of this Policy.

b177 takes all privacy concerns seriously. If you believe that b177 has not handled your personal data in accordance with this Policy, you are encouraged to contact us directly in the first instance so that we may investigate and resolve your concern promptly and fairly.