b677 Privacy Policy

Section 1

Information We Collect

b677 collects personal data from players through several channels: directly when you register an account or contact support, automatically through your use of the platform, and from third-party partners involved in payment processing and identity verification. The categories of data we collect are described below.

1.1 Registration & Identity Data

When you create a b677 account, we collect the information you provide during the registration process. This typically includes:

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — b677 is strictly 18+ only)
• Email address (used as primary account identifier and for communications)
• Mobile phone number (for account security and transaction notifications)
• Residential address (for KYC verification and AML compliance)
• Username and encrypted password chosen during registration
• National ID number, passport number, or other government-issued identifier (collected during KYC verification)

1.2 Financial & Transaction Data

To facilitate deposits and withdrawals in Bangladeshi Taka (৳), b677 collects and retains transaction records including:

• Deposit and withdrawal amounts, dates, and times
• Mobile financial service identifiers (e.g., bKash account number, Nagad account number, Rocket account number)
• Bank account details where a bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.)
• Transaction reference numbers issued by payment providers
• Account balance history and bonus credit/debit records

1.3 Gaming & Activity Data

b677 logs all activity on the platform for security, fairness, and regulatory purposes. This includes:

• Game rounds played, wagers placed, and outcomes recorded
• Sports betting selections, stake amounts, and settlement results
• Bonus claims, wagering progress, and promotional participation
• Session start and end times, duration of play, and frequency of visits
• VIP tier status, points accumulated, and reward redemptions

1.4 Technical & Device Data

When you access b677 — whether via a desktop browser or mobile device — our systems automatically collect certain technical data:

• IP address (used for geolocation and fraud detection)
• Browser type and version, operating system, and device type
• Referring URL and on-site navigation path
• Time zone setting (b677 displays times in BST, UTC+6)
• Cookie identifiers and session tokens (see Section 5 — Cookies)

1.5 Communications Data

When you contact b677 support via email, live chat, or any other channel, we retain records of those communications, including your enquiry, our response, and any attachments you provide. This data is used to resolve disputes, improve service quality, and maintain a contact history for your account.

Section 2

How We Use Your Data

b677 uses the personal data it collects solely for purposes that are compatible with the legitimate operation of an online gaming platform. The primary purposes for which we process your personal data are set out in the table below.

Marketing Communications

b677 may send you promotional emails, SMS notifications, or in-platform messages about new games, bonuses, seasonal promotions (such as Eid specials, Pohela Boishakh offers, or IPL cricket betting promotions), and VIP programme updates. You will only receive marketing communications if you have opted in during registration or subsequently updated your communication preferences.

You may withdraw your consent to receive marketing communications at any time by updating your account preferences or by contacting support at [email protected]. Withdrawing consent to marketing will not affect the lawfulness of processing based on prior consent, nor will it affect your ability to use the b677 platform.

Section 3

Legal Basis for Processing

b677 processes personal data on the basis of one or more of the following lawful grounds, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to perform the contract between b677 and the Player — including account creation, payment processing, game delivery, and customer support — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legal obligation: b677 is required by applicable anti-money-laundering regulations, financial crime prevention obligations, and other legal requirements to collect and retain certain categories of personal data, including KYC documentation and transaction records. This processing is mandatory and cannot be opted out of.
• Legitimate interests: b677 processes certain data — such as IP address logging, device fingerprinting, and behavioral analytics — on the basis of our legitimate interests in maintaining platform security, preventing fraud, and improving our services, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where b677 sends marketing communications or places non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time.

Section 4

Data Sharing & Third Parties

b677 does not sell your personal data. We share data only where it is necessary for the operation of the platform, required by law, or where you have given explicit consent. The categories of third parties with whom b677 may share your data are described below.

4.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka, b677 shares relevant transaction data and account identifiers with payment service providers including bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank). These providers act as independent data controllers for the portions of the transaction that occur within their own systems and are subject to their own privacy policies.

4.2 Game Providers

When you play a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a player session token is shared with that provider to authenticate your game session and record the game outcome. Game providers do not receive your full registration profile; they receive only the session credentials necessary to deliver the game and record the result.

4.3 Identity Verification & KYC Partners

To comply with age verification and anti-money-laundering obligations, b677 may share identity documents and personal details with third-party KYC and identity verification service providers. These providers process data strictly on b677's instructions and under binding data processing agreements.

4.4 Fraud Prevention & Security Providers

b677 uses third-party fraud detection and cybersecurity services. These providers may receive technical data (IP addresses, device identifiers, behavioral signals) to assess risk and detect suspicious activity. No full account profile is shared for these purposes.

4.5 Legal & Regulatory Authorities

b677 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by law, court order, or regulatory directive. b677 will, where legally permitted, notify the affected player of such a disclosure.

4.6 Business Transfers

In the event that b677 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. b677 will notify affected players in advance of any such transfer and give them a reasonable opportunity to close their accounts if they do not wish their data to be transferred.

Section 5

Cookies & Tracking Technologies

The b677 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep you securely logged in, and — where you have consented — to deliver relevant promotional content. A "cookie" is a small text file stored on your device by your browser when you visit a website.

Managing Cookies

You may manage your cookie preferences through the settings in your web browser. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that blocking strictly necessary cookies may impair the functionality of the b677 platform, including your ability to log in and play games.

b677 does not currently use third-party advertising networks that place cross-site tracking cookies for the purpose of serving advertisements on external websites. Any analytics tools used by b677 are configured to anonymise IP addresses and are used solely to improve platform performance.

Section 6

Data Retention

b677 retains personal data for as long as is necessary for the purposes described in this Policy, including for the duration of the Player's active account and for a defined period after account closure, as required by applicable legal and compliance obligations.

When the applicable retention period expires, b677 will securely delete or anonymise the relevant personal data so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data (from which all personal identifiers have been removed) may be retained indefinitely for statistical and analytical purposes.

Section 7

Your Privacy Rights

As a player on the b677 platform, you have a number of rights in relation to your personal data. b677 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact the b677 data team at [email protected] with the subject line "Privacy Rights Request" and your registered account username.

b677 will acknowledge all privacy rights requests within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case b677 will notify you of the extension and its reason.

Please note that certain rights — particularly the right to erasure and the right to restriction — may be limited where b677 is required by law to retain specific data (for example, KYC documents and transaction records required under anti-money-laundering regulations). In such cases, b677 will explain precisely which data cannot be deleted and why.

Section 8

Data Security

b677 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Transport layer security (TLS 1.2 and above) for all data transmitted between players and the b677 platform
• Encryption at rest for sensitive data categories stored on b677 servers, including identity documents and financial records
• Role-based access controls ensuring that b677 staff can only access personal data relevant to their specific function
• Multi-factor authentication for b677 administrative systems and internal data access tools
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security firms
• Audit logging of all access to personal data stores, with anomaly detection alerts for unusual access patterns
• Employee data protection training and confidentiality obligations binding all b677 staff
• Incident response procedures enabling rapid containment and notification in the event of a data breach

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, b677 will notify affected players without undue delay and within a reasonable timeframe after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures b677 has taken or proposes to take to address and mitigate the breach.

If you suspect that your b677 account has been compromised or that your personal data has been accessed without authorisation, please contact b677 support immediately at [email protected] so that we can investigate and take appropriate action to secure your account.

Section 9

Children & Minors

The b677 platform is strictly intended for adults aged 18 and above. b677 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory part of the b677 account registration and KYC process, and any account found to belong to a person under 18 will be immediately suspended and all funds returned in accordance with our Terms & Conditions.

b677 strongly encourages parents and guardians to make use of internet filtering tools and parental control software to prevent underage individuals from accessing online gambling platforms. The b677 Responsible Gaming page contains additional guidance on protective tools and resources for those concerned about underage gambling.

Section 10

Changes to This Policy

b677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made, b677 will notify registered players by email to the address on file and/or by displaying a prominent notice on the b677 platform for a reasonable period before the changes take effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how b677 protects your personal data. Your continued use of the b677 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you disagree with any changes to this Privacy Policy and do not wish your data to be processed in accordance with the revised terms, you may close your b677 account by contacting support at [email protected]. Account closure will be subject to the data retention obligations described in Section 6 above, which continue to apply after account closure.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or b677's handling of your personal data, please contact our team using the details below. All privacy-related correspondence will be handled by our designated data protection contact.