Privacy Policy — How 2fb77 Collects, Uses, and Protects Your Data

1 Introduction & Scope

2fb77 is committed to protecting the privacy and personal data of every individual who registers, browses, or otherwise interacts with the 2fb77 Platform. This Privacy Policy sets out, in formal and transparent terms, the categories of personal data we collect, the purposes for which that data is used, the legal grounds on which processing is carried out, and the rights available to you as a data subject.

This Policy applies to all personal data processed in connection with:

• The creation and management of player accounts on 2fb77.ws.
• All financial transactions conducted via the Platform, including deposits and withdrawals in Bangladeshi Taka (BDT) through bKash, Nagad, Rocket, Upay, and partner banking channels.
• Sports betting activity, including cricket (BPL, T20 World Cup, IPL), football, kabaddi, and other markets offered on the Platform.
• Casino game activity, including live dealer games, slots, fishing games, and any other game formats available on the Platform.
• All communications between you and the 2fb77 support team, including email, live chat, and any other supported channel.
• Any use of the Platform's website or mobile-optimised interface from any device or location.

This Policy does not apply to third-party websites or services that may be referenced on the Platform, including game provider platforms operated by Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, or any other studio. Those providers operate under their own independent privacy practices.

2 Data We Collect

2fb77 collects personal data across the following categories. We collect only what is necessary for the stated operational, legal, and security purposes of the Platform.

3 How We Collect Data

Personal data is collected through the following channels and mechanisms:

• Directly from you: When you complete the registration form, submit KYC verification documents, initiate a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically via the Platform: Technical data including IP address, device identifiers, session duration, and navigation behaviour is collected automatically when you visit 2fb77.ws, using server logs and browser-level cookies (see Section 9).
• From payment service providers: When a payment transaction is initiated via bKash, Nagad, Rocket, Upay, or a partner bank, the relevant provider may share transaction confirmation data (reference ID, amount, timestamp, payer account name) with 2fb77 for reconciliation purposes.
• From identity verification services: Where identity documents are submitted for KYC purposes, document verification may involve secure processing by a third-party verification partner. In all cases, raw document images are encrypted and access is strictly limited to authorised compliance staff.
• From anti-fraud and AML systems: Automated systems may flag accounts or transactions based on behavioural patterns. These systems process account activity data internally and do not share data externally except where required by law.

4 Purposes of Processing

2fb77 processes personal data for the following clearly defined purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account preferences and settings.
• Transaction processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking channels; to reconcile payment records; and to handle refunds or disputed transactions.
• Platform delivery: To provide access to casino games, live dealer tables, sports betting markets, fishing games, and all other services available on 2fb77.
• Customer support: To respond to enquiries, resolve account disputes, process complaints, and provide assistance through all available support channels.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, including identity verification and transaction monitoring.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, and other security threats to the Platform and its players.
• Responsible gaming: To monitor play patterns for signs of problem gambling, enforce self-exclusion and deposit limit settings, and contact players where responsible gaming concerns arise.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, performance, and user experience of 2fb77.ws.
• Marketing communications (opt-in only): To send promotional emails, bonus notifications, and seasonal offers (such as Eid, Pohela Boishakh, and BPL season promotions) to players who have opted in to receiving marketing communications. You may opt out at any time by contacting [email protected].

5 Legal Basis for Processing

Every data processing activity carried out by 2fb77 is grounded in one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil the player agreement established when you register an account — including account operation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including AML, KYC, and data retention obligations. 2fb77 may be required to disclose player data to competent authorities where legally compelled to do so.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

2fb77 does not sell, rent, or trade personal data to third parties. Data may be shared in the following limited and controlled circumstances:

• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard solely for the purpose of processing authorised payments.
• Game providers: Certain technical session data (session token, account tier, currency) may be shared with game providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi to enable game delivery. These providers do not receive identity or financial data.
• Identity verification partners: KYC document data may be processed by a secure identity verification partner for document authentication. All such partners are bound by strict data processing agreements.
• Fraud and AML systems: Anonymised or pseudonymised risk signals may be shared with fraud detection and anti-money laundering screening services. Full personal data is not shared with these services unless required by law.
• Legal and regulatory authorities: Where 2fb77 receives a lawful request from a competent government body, law enforcement agency, or court of jurisdiction, we may be required to disclose specific player data. We will notify affected players of any such disclosure where we are legally permitted to do so.
• Corporate transfers: In the event of a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

All third parties who receive personal data from 2fb77 are required by contract to implement appropriate technical and organisational security measures and to process data only for the specified, permitted purposes.

7 International Data Transfers

The 2fb77 Platform primarily serves players based in Bangladesh. Certain technical service providers and game providers involved in delivering the Platform may be located outside Bangladesh. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, 2fb77 will ensure that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses.
• Data minimisation — transferring only the minimum data necessary for the specific service function.
• Encryption of data in transit using TLS 1.2 or higher protocols.

By registering on the Platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh, subject to the safeguards described above.

8 Data Retention

2fb77 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum and maximum retention standards:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with AML and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity logs: Retained for 2 years from the date of each session, unless required for longer in connection with a dispute or investigation.
• Support correspondence: Retained for 3 years from the date of the final message in each support thread.
• Technical / server log data: Retained for up to 12 months, after which it is deleted or anonymised.
• Marketing consent records: Retained for the duration of your opt-in consent period, plus 1 year following any opt-out, to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data held for legal or regulatory reasons is retained until the relevant obligation is fully discharged.

9 Cookies & Tracking Technologies

2fb77.ws uses cookies and similar browser-based technologies to operate and improve the Platform. The following categories of cookies may be set when you visit the site:

• Strictly necessary cookies: Required for core Platform functions such as maintaining your logged-in session, storing your currency preference (BDT), and enabling secure payment flows. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences (such as game display settings, notification preferences, and responsible gaming limit configurations) between sessions.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data informs Platform improvement decisions and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeovers, and bot activity. These cookies help protect both the Platform and individual player accounts.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the Platform. Blocking analytics or functional cookies will not prevent access but may reduce the quality of your experience.

10 Children's Privacy

The 2fb77 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that an account has been registered by or on behalf of an underage individual, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the original payment source.

If you have reason to believe that a minor has registered on the Platform or has accessed an account associated with your payment details, please contact us immediately at [email protected]. We take the protection of minors from gambling-related harm with the highest degree of seriousness and will act promptly on all such reports.

11 Security Measures

2fb77 applies a multi-layered security framework to protect all personal data held on the Platform. Our technical and organisational security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and 2fb77.ws is encrypted using TLS 1.2 or higher, preventing interception in transit.
• At-rest encryption: Sensitive personal and financial data stored on 2fb77 servers is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data is restricted to authorised 2fb77 staff on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Intrusion detection: Automated systems monitor the Platform continuously for unusual access patterns, brute-force login attempts, and other security anomalies. Detected threats trigger immediate review by the security team.
• Payment tokenisation: Financial transaction data processed through bKash, Nagad, Rocket, and partner banking channels is tokenised, meaning full payment credentials are never stored on 2fb77 infrastructure.
• Regular security audits: The Platform undergoes periodic security reviews and vulnerability assessments by qualified internal and external security professionals.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to player rights or freedoms, 2fb77 will notify affected players promptly and take all reasonable remediation steps.

12 Your Data Rights

As a registered player on the 2fb77 Platform, you hold the following rights in respect of your personal data. All requests are free of charge and will be acknowledged within 5 business days:

To exercise any of the above rights, submit a written request to [email protected] including your registered username and the specific right you wish to invoke. We may ask you to verify your identity before processing the request.

13 Third-Party Services

The 2fb77 Platform integrates with a range of third-party service providers to deliver its full feature set. Each of these providers operates under its own independent privacy policy and data processing practices. 2fb77 is not responsible for the privacy practices of third-party providers, and players are encouraged to review their respective policies.

Third-party services integrated into the 2fb77 Platform may include:

• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios. These providers deliver game content via secure API connections and may process limited technical session data.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each processes payment data according to its own regulated privacy and security framework.
• Analytics services: Anonymised, aggregated usage data may be processed by a third-party analytics provider to support Platform improvement. Individual player data is not shared with analytics providers.

The 2fb77 Platform does not embed third-party social media plugins, advertising trackers, or retargeting pixels. No player data is shared with social media platforms for advertising purposes.

14 Changes to This Privacy Policy

2fb77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The revised Policy will be published on this page with an updated effective date. Where changes are material, we will provide notice via the Platform homepage or by email to your registered address.

Continued use of the Platform following publication of an amended Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any amendment, you should cease using the Platform and request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to remain informed about how 2fb77 protects your personal data. The version published on 2fb77.ws on the date of your visit is always the operative version.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 2fb77 processes your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, including national holidays and Bangladesh Standard Time (BST, UTC+6) overnight hours.
• Response Commitment: Data rights requests are acknowledged within 5 business days. General privacy enquiries are typically answered within 2–4 hours.
• Request Format: When submitting a data rights request, please include your registered username, the nature of your request, and a brief description of the data or processing activity concerned.