2pb77 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal data by 2pb77 ("we", "us", "the Company") in connection with the operation of the website at https://2pb77.net and all associated services, including casino games, sports betting, crash games, and customer support (collectively, "the Platform"). This Policy applies to all registered players and visitors who access the Platform from Bangladesh or any other location.

By registering an account on the Platform, making a deposit, or otherwise using any of our services, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not create an account or use the Platform. We encourage you to review this Policy periodically, as we may update it from time to time to reflect changes in our practices or applicable law.

We collect personal data from you at various stages of your interaction with the Platform. The categories of information we collect include, but are not limited to, the following:

• Registration data: full name, date of birth, gender, Bangladeshi mobile number, and a chosen password when you create your account. This information is necessary to establish your identity and verify that you meet the minimum age requirement of 21 years.
• Identity verification documents (KYC): a copy of your National ID Card (NID), passport, or other government-issued photo identification. A selfie or live photo may also be required as part of the KYC process.
• Financial and payment data: your bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details, used for processing deposits and withdrawals. We do not store your full wallet PIN or bank login credentials.
• Transaction history: a full record of all deposits, withdrawals, bets placed, games played, bonuses claimed, and adjustments made to your account balance over the lifetime of your account.
• Technical and device data: IP address, device type and model, operating system version, browser type, screen resolution, time zone (Bangladesh Standard Time, UTC+6 where applicable), and session duration logs collected automatically when you access the Platform.
• Customer support communications: the content of any messages, emails, live-chat transcripts, or support tickets you send to our team, including any documents or screenshots you attach as part of a support request.

Where you provide us with personal data relating to another individual (for example, a nominated next of kin for account closure purposes), you confirm that you have their consent to share that data with us and that they have been informed of this Policy.

2pb77 uses the personal data we collect solely for the purposes described in this Policy. We do not sell, rent, or trade your personal data to third parties for their own commercial purposes. The specific purposes for which we process your data are as follows:

• Account management: to create, maintain, verify, and where necessary suspend or close your 2pb77 account, and to communicate essential account-related information such as password reset confirmations, deposit receipts, withdrawal notifications, and KYC status updates.
• Identity verification and fraud prevention: to fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, verify your age and identity, detect and prevent fraudulent activity, and share data with payment processors and law enforcement where required by law.
• Payment processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer and to maintain accurate financial records of all transactions on your account as required by applicable financial regulations.
• Personalisation and responsible gaming: to tailor the Platform experience to your preferences, track your gaming behaviour to identify potential problem-gambling patterns, and deliver responsible gaming interventions such as session reminders, deposit limit alerts, and self-exclusion tools.
• Marketing communications: to send you promotional offers, bonus notifications, tournament announcements, and seasonal campaigns (such as BPL, Eid, or Pohela Boishakh promotions) via SMS to your registered mobile number. You may opt out of marketing communications at any time by contacting our support team.
• Platform security and integrity: to monitor activity on the Platform for suspicious behaviour, unauthorised access attempts, potential collusion between players, bonus abuse, and any other activity that may compromise the integrity of the Platform or the safety of other players.

We process your personal data on the following legal bases, which may apply separately or in combination depending on the specific purpose of processing:

• Contractual necessity: processing that is required to fulfil the agreement between you and 2pb77, including account creation, transaction processing, and KYC verification. Without this processing, we cannot provide the Platform services to you.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, financial record-keeping duties, and responses to lawful requests from competent authorities.
• Legitimate interests: processing carried out to pursue the legitimate business interests of 2pb77, including fraud detection, platform security monitoring, responsible gaming interventions, and internal analytics — provided these interests are not overridden by your own privacy rights.
• Consent: where we process your data for direct marketing purposes (e.g. sending you SMS promotions), we rely on your consent at the time of registration. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

As part of our commitment to maintaining a secure and compliant Platform, 2pb77 requires all players to complete an identity verification (KYC) process before their first withdrawal. During KYC, we collect a copy of a government-issued photo identification document (National ID Card or passport), and may request a current address confirmation document. All KYC documents are processed and stored securely using industry-standard encryption.

KYC data is retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later, to meet our obligations under applicable financial and anti-money laundering regulations. KYC documentation is not shared with any third party except where legally required or where necessary to verify your identity through a licensed identity verification partner operating under equivalent data protection standards.

When you make a deposit or request a withdrawal on 2pb77, we collect the mobile wallet number or bank account details you provide for the purpose of processing that specific transaction. For mobile wallet payments (bKash, Nagad, Rocket, Upay), we record the wallet number and the transaction reference number issued by the payment provider. We do not store your mobile banking PIN, OTP codes, or internet banking passwords at any time.

All financial transaction records are maintained for a minimum of 7 years following the date of each transaction. This retention period is required by applicable financial record-keeping regulations. Transaction records may be disclosed to financial regulators, tax authorities, or law enforcement agencies where required by applicable law, without prior notice to you in circumstances where such advance notice would compromise an investigation.

The 2pb77 Platform uses cookies and similar tracking technologies to improve your experience, maintain your session, and collect usage analytics. The types of cookies we use include:

• Essential cookies: strictly necessary for the Platform to function correctly, including session authentication cookies that keep you logged in during an active session. These cannot be disabled without preventing you from using the Platform.
• Analytics cookies: used to collect anonymised data about how visitors navigate the Platform, which pages are most visited, session duration, and referral sources. This data helps us improve Platform performance and user experience.
• Fraud prevention cookies: used by our security systems to identify unusual or suspicious browsing patterns, detect bot traffic, and flag potential account takeover attempts for review by our security team.

You may manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in or using core Platform features. We do not use cookies to track your activity outside the 2pb77 Platform on third-party websites.

We do not sell, rent, or trade your personal data. We may share your data only in the following limited and specific circumstances:

• Payment service providers: we share your mobile wallet number or bank account details with bKash, Nagad, Rocket, Upay, or our banking partners solely for the purpose of processing your specific deposit or withdrawal transaction. These partners are contractually bound to process your data only for that purpose and to apply equivalent data security standards.
• Identity verification partners: we may share your KYC documents and personal identifiers with a licensed third-party identity verification service provider for the sole purpose of verifying your identity. Any such partner is bound by contractual data processing agreements requiring them to maintain your data with the same level of security we apply.
• Legal and regulatory authorities: we may disclose your personal data to law enforcement agencies, financial regulators, tax authorities, or courts where we are required to do so by applicable law, by a valid court order, or where we believe in good faith that disclosure is necessary to prevent fraud, money laundering, or a serious threat to public safety.
• Business transfers: in the event that 2pb77 undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will take reasonable steps to ensure that your data continues to be handled in accordance with this Policy, and we will notify affected players via their registered mobile number prior to any such transfer.

In all cases of data sharing with third parties, we apply contractual safeguards requiring those parties to use your data only for the specified purpose, to maintain appropriate technical and organisational security measures, and to delete or return your data when the processing purpose has been fulfilled.

We retain your personal data for as long as your account remains active and for such additional period as is required by applicable law or necessary for the purposes described in this Policy. Specifically: account registration data and gaming history are retained for the lifetime of your account plus 5 years following account closure; KYC documents are retained for a minimum of 5 years after account closure or last transaction date; financial transaction records are retained for a minimum of 7 years; customer support communications are retained for 3 years from the date of each interaction.

When your personal data is no longer required for any lawful purpose, we will securely delete or anonymise it so that it can no longer be linked back to you as an individual. Anonymised aggregated data (for example, statistical reports on Platform usage trends) may be retained indefinitely as it no longer constitutes personal data.

2pb77 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive personal and financial data on secure servers, role-based access controls that restrict staff access to personal data on a strict need-to-know basis, and regular security audits conducted by qualified internal and external security personnel.

While we take all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. If you have reason to believe that your account credentials have been compromised, you must contact our support team immediately at [email protected] so that we can take appropriate protective action on your account.

Subject to applicable law, you have the following rights in relation to your personal data held by 2pb77. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request and sufficient information to verify your identity:

• Right of access: you may request a copy of all personal data we hold about you. We will provide this within 30 days of receiving a verified request. The first copy is provided free of charge; subsequent requests within the same 12-month period may attract a reasonable administrative fee.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will act on verified correction requests within 14 days.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data we are required by law to keep.
• Right to restrict processing: you may request that we limit the way we use your personal data in certain circumstances, such as while a rectification request is being investigated or where you contest the lawfulness of our processing.
• Right to withdraw consent: where we process your data on the basis of your consent (for example, for marketing SMS), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal date.

We will respond to all data rights requests within 30 days. Where a request is complex or we receive a large number of simultaneous requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for the delay within the initial 30-day window.

The 2pb77 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we discover that a player has provided false information about their age during registration and is in fact under 21, we will immediately close their account, delete all associated personal data to the extent permitted by applicable law, and return any eligible balance to the payment method used at the time of deposit.

The 2pb77 Platform does not contain links to third-party websites. If you encounter any link appearing to redirect you to an external website while using the Platform, please report it to our support team immediately, as it may indicate a phishing attempt or an unauthorised modification of the Platform. 2pb77 accepts no responsibility for the privacy practices or content of any third-party websites that may be accessed independently by users outside of the Platform.

2pb77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When we make material changes to this Policy, we will update the Last Updated date shown at the top of this page. Where practicable, we will notify registered players of significant changes via SMS to their registered mobile number.

Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should stop using the Platform and contact our support team to request account closure. We encourage you to bookmark this page and check it periodically for updates.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact the 2pb77 Data Protection team. Our support team is available 24 hours a day, 7 days a week, including during BPL and major international tournament periods. We aim to acknowledge all privacy-related enquiries within 24 hours of receipt.

Contact email: [email protected] — displayed as plain text only, not a clickable link. For data access or erasure requests, please include your registered mobile number and a brief description of your request so our team can verify your identity and process your request efficiently.