bm77 Privacy Policy

1 Who We Are

bm77 operates the online casino and sports betting platform accessible at bm77.io (the "Platform"). For the purposes of this Privacy Policy, bm77 is the data controller responsible for the personal information you provide when you register, deposit, play, or otherwise interact with the Platform.

If you have any questions about how bm77 handles your personal data, or if you wish to exercise any of the rights described in Section 9 of this Policy, please contact our Data Support team at [email protected]. We are committed to responding to all privacy-related enquiries within five (5) business days Bangladesh Standard Time (BST, UTC+6).

2 Data We Collect

bm77 collects personal data in several ways — directly from you during registration and account activity, automatically through your use of the Platform, and in limited circumstances from third-party verification providers. The categories of data we collect are described below.

2.1 Registration and Identity Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Email address
• Residential address (city, district, division)
• Mobile number
• Preferred language and currency (BDT)

2.2 Identity Verification (KYC) Data

To comply with responsible gaming obligations and to process withdrawals, bm77 may request:

• Copies of a government-issued photo identification document (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar document dated within three months)
• Proof of ownership of payment method (e.g., screenshot of bKash or Nagad registered under your name)
• Source of funds documentation where required by internal risk assessment procedures

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts (in BDT), timestamps, and payment method references
• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay) — account numbers only, never PINs or full credentials
• Bank account details where bank transfer is used
• Bonus and promotional credit records

2.4 Gaming and Behavioural Data

• Bet history, game sessions, win/loss records, and wagering activity across all products (casino, sportsbook, crash games)
• Game preferences, session durations, and frequency of play
• Responsible gaming settings you apply (deposit limits, session reminders, self-exclusion periods)

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session logs, page views, and clickstream data
• Cookie identifiers and similar tracking technologies (see Section 5)

2.6 Communications Data

• Records of support interactions via email or live chat
• Feedback, complaints, and dispute correspondence
• Marketing preference settings and email engagement data (open/click rates) where you have opted in to communications

3 How We Use Your Data

bm77 uses the personal data we collect for the following defined purposes:

4 Lawful Basis for Processing

bm77 processes personal data only where a valid lawful basis exists. The primary lawful bases we rely on are as follows:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including age verification, anti-money laundering (AML) requirements, and financial record-keeping obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming analysis, and platform improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and any other purpose where consent is the most appropriate basis. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

5 Cookies & Tracking Technologies

5.1 What Cookies We Use

bm77 uses cookies and similar technologies (local storage, session tokens) to operate the Platform effectively. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for platform functionality — including authentication session cookies that keep you logged in, CSRF protection tokens, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences, such as your chosen game category, responsible gaming settings, and display preferences.
• Analytics cookies: Used in aggregated, anonymised form to understand how players navigate the Platform so we can improve game discovery, page load performance, and support workflows.
• Marketing cookies: Used only with your explicit consent to measure the effectiveness of promotional campaigns. You may opt out of marketing cookies at any time via your account settings.

5.2 Managing Cookies

You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.

6 Data Sharing & Disclosure

bm77 does not sell your personal data. We share personal information only in the following limited circumstances, and always subject to appropriate confidentiality protections:

6.1 Payment Service Providers

We share the minimum necessary transaction data with payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard — solely to facilitate your deposit and withdrawal requests. These providers operate under their own privacy policies and security standards.

6.2 Game Technology Providers

Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session identifiers to authenticate your game sessions. These providers do not receive your full name, contact details, or financial information.

6.3 Identity Verification Services

Where required for KYC compliance, bm77 may engage specialist identity verification providers to cross-check the documents you submit. These providers are bound by strict data processing agreements and may not use your data for any purpose other than verification.

6.4 Legal and Regulatory Disclosure

bm77 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect the safety of users, or comply with a legal obligation.

6.5 Business Transfers

In the event that bm77 undergoes a merger, acquisition, or sale of all or a substantial portion of its business assets, player data may form part of the transferred assets. You will be notified via your registered email address in advance of any such transfer, and your rights under this Policy will be preserved.

7 International Data Transfers

bm77 primarily operates infrastructure serving the Bangladesh market. In some cases, data may be processed by service providers whose systems are located outside Bangladesh — for example, cloud hosting providers or game technology partners. Where such transfers occur, bm77 ensures that appropriate safeguards are in place, including contractual data protection clauses that require overseas recipients to handle your data to a standard equivalent to the protections described in this Policy.

If you have concerns about the international transfer of your personal data, you may contact us at [email protected] for further information about the specific safeguards applied.

8 Data Retention

bm77 retains personal data for the following periods, unless a longer retention period is required or permitted by law:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis.

9 Your Rights

As a bm77 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within two (2) business days and provide a substantive response within thirty (30) days BST.

• Right of access: You may request a copy of the personal data bm77 holds about you, along with information about how it is being used and shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent — you may request deletion of your personal data. This right is subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit the way we use your data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests, including profiling for marketing purposes. Where you object to direct marketing specifically, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Children's Privacy

The bm77 Platform is strictly intended for individuals aged 21 and above. bm77 does not knowingly collect or process personal data from anyone under the age of 21. If we become aware that an account has been registered by an underage individual, we will immediately suspend the account, delete the associated personal data to the extent permitted by law, and forfeit any balance in accordance with our Terms and Conditions.

If you believe that a minor has created a bm77 account, please notify us immediately at [email protected] so that we may take prompt corrective action.

11 Security Measures

bm77 takes the security of your personal data seriously and implements a layered set of technical and organisational controls designed to protect your information against unauthorised access, disclosure, alteration, and destruction. Our current security measures include:

• SSL/TLS encryption: All data in transit between your device and bm77 servers is encrypted using current-generation TLS protocols.
• Encrypted data storage: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 standard encryption.
• Access controls: Access to personal data systems is restricted to authorised personnel only, governed by role-based access policies and multi-factor authentication requirements.
• Regular security reviews: bm77 conducts periodic internal security audits and vulnerability assessments to identify and remediate potential weaknesses in our infrastructure.
• Incident response: In the event of a data security incident that affects your personal data, bm77 will notify affected players without undue delay, including information about the nature of the incident, the data affected, and the steps we are taking to address it.

While bm77 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You can contribute to your own account security by using a strong, unique password and never sharing your login credentials with any other person.

12 Third-Party Services

The bm77 Platform integrates with third-party services — including game providers, payment processors, and analytics tools — that operate under their own privacy policies. While bm77 selects service partners who meet our data protection standards and requires them to process player data only as instructed, we are not responsible for the independent privacy practices of those third parties.

bm77.io does not contain links to unaffiliated external websites. All navigation, games, and content remain within the bm77 Platform. However, if you independently visit the websites of payment partners such as bKash or Nagad, their privacy policies will govern the handling of any data you provide directly to those services.

13 Policy Updates

bm77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform services. When we make material changes to this Policy, we will notify you by sending a notice to your registered email address and by posting a prominent update notice on the Platform at least seven (7) days before the revised Policy takes effect.

Your continued use of the bm77 Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the Platform and may request account closure. The "Last Updated" date at the top of this document will always reflect the most recent revision.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bm77 handles your personal data, please contact our Data Support team using the details below. All privacy enquiries are handled by a dedicated team member and treated with strict confidentiality.

• Email: [email protected] (plain text only — not a clickable link)
• Platform: bm77.io
• Support Hours: 24 hours a day, 7 days a week
• Response Target: Privacy requests acknowledged within 2 business days BST; substantive response within 30 days BST