Your Privacy Matters at bd577

1 Introduction

This Privacy Policy ("Policy") describes how bd577 ("the Platform", "we", "us", "our") collects, processes, stores, and shares personal data when you use any part of the bd577 platform , including the website at bd577.io, mobile-optimised pages, and any related services accessible through the Platform. By registering an account, accessing any part of the Platform, or placing a bet, you acknowledge that you have read, understood, and agreed to this Policy.

bd577 is operated as an online betting and casino platform serving the Bangladesh market. The Platform accepts deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, and Upay, as well as card payments via Visa and Mastercard. Because financial transactions and identity verification are core to the Platform's operation, the collection of personal data is a necessary and unavoidable part of providing the service.

This Policy should be read alongside the bd577 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. Where any conflict exists between this Policy and those documents, the Terms & Conditions shall take precedence on matters of account management, and this Policy shall take precedence on all matters relating to data protection and privacy.

This Policy is written in English and applies to all players accessing bd577 from Bangladesh and any other jurisdiction in which the Platform is available. It is effective as of January 2026 and supersedes all prior privacy notices published by bd577.

2 Data Controller

For the purposes of this Privacy Policy, bd577 acts as the data controller in respect of the personal data it collects from players and visitors to the Platform. As data controller, bd577 determines the purposes and means by which personal data is processed.

All data-related enquiries, subject access requests, rectification requests, deletion requests, and complaints may be directed to the bd577 data protection contact at the following address:

Where bd577 engages third-party data processors — such as payment processors, KYC verification providers, or game content providers — those parties act as data processors under instruction from bd577. bd577 remains responsible for ensuring that any third-party processors it engages maintain adequate data protection standards consistent with this Policy.

3 Information We Collect

bd577 collects personal data through several channels: directly from you during registration and account use, automatically through technical systems as you interact with the Platform, and from third parties such as payment providers and KYC verification services. The categories of data collected are set out below.

3.1 Registration Data

When you create a bd577 account, we collect the following information:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are 21 years of age or older).
• Residential address, including city, district, and postal code (Bangladesh-based addresses or otherwise).
• Mobile phone number registered in your name.
• Email address (if provided as an alternative contact method).
• Username and hashed password (passwords are never stored in plain text).
• Preferred currency (BDT or INR).

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of the following documents:

• National Identity Card (NID) — both sides.
• Passport (photo page and data page).
• Driving licence issued by the Bangladesh Road Transport Authority (BRTA).
• Proof of address document dated within three months (utility bill, bank statement, or official government correspondence).
• Proof of payment method (e.g., screenshot of bKash wallet showing your registered name and number).
• Source-of-funds documentation for withdrawals exceeding ৳50,000.

3.3 Transaction and Financial Data

• Deposit amounts, timestamps, and payment method identifiers (e.g., bKash transaction reference numbers).
• Withdrawal requests, amounts, and processing status.
• Bonus credits applied, wagering activity, and bonus completion records.
• Account balance history.

3.4 Betting and Gaming Activity Data

• All bets placed, including market, stake, odds, and outcome.
• Casino and slot game sessions: game title, session start/end times, bet amounts, wins, and losses.
• Live casino table participation records.
• In-play betting patterns and in-session activity logs.

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Device fingerprint (a hash derived from multiple technical attributes of your device).
• Session duration and page interaction logs.
• Referral URL (the address from which you arrived at bd577).
• Cookie identifiers (see Section 7 for full cookie policy).

3.6 Communication Data

• Records of all support interactions — including live chat transcripts, email correspondence, and any voice call recordings (where applicable).
• Responsible gaming communications, including self-exclusion requests and cooling-off period confirmations.
• Any documents or messages you voluntarily submit to bd577 support.

4 How We Use Your Data

bd577 uses the personal data it collects for specific, defined purposes. The table below maps each data category to the purpose for which it is processed:

In addition to the primary purposes listed above, bd577 may use aggregated and anonymised data — from which no individual player can be identified — to analyse platform performance, improve game offerings, and understand general betting trends in the Bangladesh market. This aggregated data does not constitute personal data processing.

bd577 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except in the context of real-time fraud detection where automated systems may temporarily flag an account for manual review. In every such case, a human member of the bd577 compliance team will review and make any final decision regarding account action.

5 Legal Basis for Processing

bd577 processes personal data only where a valid legal basis exists for doing so. The legal bases on which bd577 relies are as follows:

• Contractual necessity: The majority of personal data processing on bd577 is necessary to perform the contract between bd577 and the player — specifically, to operate a player account, process bets, and handle financial transactions. Without this processing, bd577 cannot provide its service.
• Legal obligation: KYC verification, AML screening, and transaction record-keeping are required by applicable anti-money laundering and financial compliance regulations. bd577 is legally obligated to perform this processing regardless of consent.
• Legitimate interests: bd577 processes technical and device data for fraud prevention and platform security purposes based on its legitimate interest in protecting the integrity of the Platform and the safety of all players. This processing does not override the rights and interests of individual players.
• Consent: Where bd577 sends direct marketing communications or uses non-essential cookies, this processing is based on your explicit consent, which you may withdraw at any time. Withdrawal of consent for marketing does not affect your ability to use the Platform.

6 Data Sharing

bd577 does not sell personal data to third parties. We do not share personal data with advertisers, data brokers, or any commercial third party for their own marketing purposes. Personal data is shared only in the following defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to process deposits and withdrawals. Each provider operates under its own privacy policy and is responsible for its own data handling. bd577 shares only the minimum data required to execute a transaction.
• KYC and identity verification providers: bd577 may engage third-party identity verification services to assist with document checking and age verification. These providers act as data processors under contractual obligation to bd577 and may not use the data for any purpose beyond verification.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session data (such as a session token and stake amounts) necessary to operate their games on the Platform. These providers do not receive your full personal profile.
• Fraud prevention and security services: bd577 may share device fingerprint data and IP address information with third-party security services for the purpose of detecting and preventing fraud, account takeover, and multi-accounting. These services are bound by strict data processing agreements.
• Legal and regulatory authorities: bd577 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, or where disclosure is necessary to protect the rights, safety, or property of bd577 or third parties.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bd577's business, personal data held by bd577 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer that affects the terms under which their data is processed.

7 Cookies and Tracking Technologies

bd577 uses cookies and similar tracking technologies to operate the Platform, maintain session state, detect fraud, and understand how players interact with the site. The following categories of cookies are in use:

Cookies are stored locally on your device and are not transmitted to any third party except where a cookie is set by or shared with an approved third-party service listed in Section 6. You may manage non-essential cookies through your browser settings. Please note that disabling strictly necessary or security cookies may prevent you from accessing your account or using core platform features.

bd577 does not use cross-site tracking cookies, advertising networks, or retargeting pixels that follow your activity outside of the bd577.io domain.

8 Data Retention

bd577 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of the player's account being open and active.
• KYC documents and identity verification records: Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulations.
• Betting and gaming activity logs: Retained for a minimum of three (3) years from the date of activity, for dispute resolution and fraud investigation purposes.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication forms part of a formal complaint or legal proceeding, in which case it will be retained for the duration of that proceeding plus two (2) years.
• Technical and device logs: Retained for twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Self-exclusion records: Retained for the duration of the exclusion period plus five (5) years, to prevent re-registration by excluded players.

9 Data Security

bd577 takes the security of personal data seriously and implements a range of technical and organisational measures to protect player data against unauthorised access, loss, alteration, or disclosure. These measures include:

• All data transmitted between your device and the bd577 platform is encrypted using 256-bit SSL/TLS protocols. A valid SSL certificate is maintained at all times on bd577.io.
• Player passwords are stored using one-way cryptographic hashing algorithms with individual salting. bd577 staff members cannot read your password and will never ask you to provide it.
• KYC documents and identity verification files are stored in isolated, access-controlled storage environments with strict role-based access permissions. Only authorised compliance team members may access these files.
• Two-factor SMS authentication (2FA) is available for all player accounts and is strongly recommended. When enabled, a one-time passcode is required at login in addition to your password.
• All internal systems used by bd577 staff are protected by multi-factor authentication, encrypted storage, and access logging. Privileged access is subject to regular review.
• bd577 conducts periodic security assessments to identify and remediate vulnerabilities in its platform infrastructure.
• In the event of a data security incident that materially affects player data, bd577 will notify affected players and relevant authorities within the timeframes required by applicable law.

10 Your Rights

As a player on bd577, you hold the following rights in respect of your personal data. bd577 is committed to honouring these rights promptly and without unnecessary obstruction.

• Right of Access: You may request a copy of all personal data bd577 holds about you. bd577 will provide this in a structured, readable format within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data held by bd577 is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly through the platform's account settings, or contact support for changes to verified KYC information.
• Right to Erasure: You may request that bd577 delete your personal data. bd577 will honour this request where no legal retention obligation prevents deletion. Note that transaction records and KYC documents are subject to mandatory retention periods (see Section 8) and cannot be deleted before those periods expire.
• Right to Restriction: You may request that bd577 restrict the processing of your data — for example, where you contest the accuracy of the data or where you have objected to processing pending a resolution.
• Right to Data Portability: You may request that bd577 provide your personal data in a machine-readable format (such as JSON or CSV) suitable for transfer to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interests — including profiling for fraud prevention purposes. bd577 will assess whether its legitimate interests override your right to object on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications or optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact bd577 at [email protected] with the subject line "Data Rights Request". Please include your registered username and a clear description of the right you wish to exercise. bd577 will acknowledge your request within seventy-two (72) hours and provide a substantive response within thirty (30) days.

11 Children's Privacy

bd577 is strictly an adult platform. The minimum age to register and use the Platform is 21 years. bd577 does not knowingly collect personal data from any person under the age of 21. The Platform's registration process requires entrants to confirm their date of birth and agree to the 21+ age requirement as part of account creation.

If bd577 discovers or has reason to believe that an account belongs to a person under the age of 21, the account will be suspended immediately. All personal data associated with that account will be handled in accordance with applicable data protection obligations and, where legally permissible, deleted following the suspension review process.

If a parent or guardian believes that their child under the age of 21 has registered an account on bd577 or submitted personal data to the Platform, they should contact bd577 immediately at [email protected] with the subject line "Underage Account Report". bd577 will investigate and take prompt action, including deletion of the minor's data to the extent permitted by law.

bd577 also supports the use of parental control software to restrict access to gambling websites from devices used by minors. We encourage parents and guardians in Bangladesh to explore options such as net filtering tools available through local internet service providers to prevent underage access to betting platforms.

12 Third-Party Services

The bd577 platform integrates with a number of third-party services to deliver its full feature set. Each of these third-party services operates under its own privacy policy, and bd577 is not responsible for the data handling practices of third-party providers beyond the contractual obligations imposed on them as data processors. The primary third-party integrations are as follows:

• Payment Providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard): These providers process payment data independently. When you initiate a deposit or withdrawal, you may be redirected to or interact with the payment provider's own interface. Your use of those interfaces is subject to the provider's own terms and privacy policy.
• Game Providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Game content is delivered via licensed provider platforms. Session tokens and minimum necessary game-state data are shared with providers to operate their games. No personally identifying data beyond a session reference is typically transmitted.
• KYC Verification Services: bd577 may use automated document verification technology provided by specialist third-party KYC vendors. These vendors receive identity documents submitted during verification and return a pass/fail result. Documents are processed under strict data processing agreements and are not retained by the vendor beyond the verification process unless required by their own legal obligations.
• Analytics and Security: Anonymised or pseudonymised technical data may be processed by third-party analytics and fraud prevention tools. These tools do not receive data that directly identifies you by name or NID number.

bd577 does not embed third-party social media plugins, advertising widgets, or retargeting pixels on any page of the Platform. Links to third-party websites are not present on the Platform's main pages. If you choose to navigate away from bd577.io to a third-party website, that site's own privacy policy governs the collection and use of your data on that site.

13 International Data Transfers

bd577 primarily serves the Bangladesh market, and the majority of its data processing operations are designed with Bangladeshi players in mind. However, certain third-party service providers engaged by bd577 — including game content providers, security services, and KYC verification platforms — may process data on servers located outside Bangladesh.

Where personal data is transferred to a third party operating in another country, bd577 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual clauses requiring the third party to maintain data protection standards consistent with those described in this Policy, or reliance on the third party's participation in a recognised data protection framework.

By using the bd577 Platform, you acknowledge and consent to the transfer of your personal data to third-party processors in other countries as described in this Section, subject to the safeguards described above. If you have concerns about any specific cross-border data transfer, please contact bd577 at [email protected].

14 Policy Updates

bd577 reserves the right to update this Privacy Policy at any time to reflect changes in platform functionality, applicable law, or data processing practices. When material changes are made — such as changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — bd577 will notify active players by posting a prominent notice on the Platform and, where an email address is registered, by sending a notification to that address.

The effective date at the top of this Policy will be updated each time a revision is published. Previous versions of this Policy are available on request by contacting [email protected]. Your continued use of the Platform after a revised Privacy Policy has been posted constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should discontinue use of the Platform and may request closure of your account by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd577 handles your personal data, please reach out to the bd577 data protection team using the contact details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

If you are not satisfied with bd577's response to a privacy concern, you retain the right to escalate your complaint to a relevant data protection authority or regulatory body in your jurisdiction. bd577 will cooperate fully with any such authority in the investigation of a complaint.