779bd Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the 779bd platform at https://779bd.app is 779bd ("779bd", "we", "us", "our"). As the data controller, 779bd determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected from players and visitors in Bangladesh and any other jurisdiction where 779bd operates. It governs data collected via the 779bd website, mobile browser experience, and any associated communication channels including our customer support system.

If you have any questions about how 779bd handles your personal data, or if you wish to exercise any of your data rights described in this Policy, please contact our dedicated data privacy team using the details provided in the Contact Our Data Team section at the end of this document.

779bd collects personal data in three principal ways: information you provide directly, information collected automatically through your use of the platform, and information received from third-party service providers. The categories of personal data we may hold about you are set out below.

Information You Provide Directly

• Registration data: Full legal name, date of birth, mobile phone number, email address, and preferred username when you create a 779bd account.
• Identity verification (KYC) documents: Scanned copies or photographs of your National Identity Card (NID), passport, driving licence, or other government-issued photo ID; proof of address documents; and selfie photographs where requested.
• Payment information: Your bKash, Nagad, Rocket, or Upay mobile number; the last four digits of any Visa or Mastercard used; and transaction reference numbers associated with deposits or withdrawals.
• Communication records: The content of any messages, emails, or live chat conversations you initiate with the 779bd support team, including the subject matter, timestamps, and resolution notes.
• Responsible gaming preferences: Deposit limits, loss limits, time-out requests, self-exclusion elections, and reality-check settings you configure in your account dashboard.

Information Collected Automatically

• Device and browser data: Device type, operating system, browser type and version, screen resolution, and device language settings.
• Network and location data: IP address, approximate geographic location derived from IP (city/region level — not precise GPS location), internet service provider (ISP) name, and mobile network operator.
• Session and usage data: Pages visited, games played, bets placed, session start and end times, in-app navigation paths, click patterns, and feature interactions.
• Cookie and local storage data: Session identifiers, authentication tokens, and preference flags stored in your browser's local storage or via cookies. See the Cookies section for full details.
• Fraud and security signals: Device fingerprint data, failed login attempts, unusual transaction patterns, and other signals used by our automated fraud detection systems.

Information Received from Third Parties

• Payment processors: Transaction status, confirmation codes, and payer identity data returned by bKash, Nagad, Rocket, Upay, and card scheme processors following deposit or withdrawal processing.
• Identity verification partners: Results of automated document authenticity checks and database cross-reference results from KYC service providers.
• Responsible gaming databases: Self-exclusion status notifications received from recognised responsible gaming organisations or registers where 779bd is a participating operator.
• Fraud prevention networks: Risk scores and flagged-identity alerts from shared fraud prevention databases subscribed to by 779bd.

779bd uses the personal data we collect for a defined set of purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we process your personal data are as follows:

Where 779bd wishes to use your data for a purpose not listed above — for example, to send you promotional communications about new products — we will either seek your explicit consent beforehand or confirm that a legitimate interest assessment justifies the use. You may withdraw consent for marketing communications at any time by contacting [email protected].

Every instance of personal data processing at 779bd rests on one of the following legal bases. We are transparent about which basis applies to each category of processing so that you understand your rights in each context.

• Contractual Necessity: Processing that is necessary to perform the contract between you and 779bd — i.e., the Terms & Conditions you accepted at registration. This covers account creation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for 779bd's legitimate business interests, provided those interests are not overridden by your rights. This includes fraud prevention, platform security, aggregated analytics, and responsible gaming monitoring. We carry out a balancing test before relying on this basis.
• Consent: Processing based on your freely given, specific, informed, and unambiguous agreement — primarily applicable to optional marketing communications and the use of non-essential cookies (where applicable). Consent can be withdrawn at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances where processing is necessary to protect the life of you or another person — relevant in the context of severe responsible gaming interventions.

779bd does not sell or rent your personal data to any third party. However, we do share certain personal data with trusted third-party service providers and, where required, with competent authorities. All third parties who receive personal data from 779bd are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

The categories of third parties with whom 779bd may share your data are set out below:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card scheme processors (Visa, Mastercard) receive the minimum personal data necessary to process your deposit or withdrawal transaction. Payment processors are independent data controllers for the data they hold about you in their own systems.
• Identity Verification (KYC) Providers: Specialist third-party services that verify the authenticity of identity documents and cross-reference submitted data against watchlists and databases. These providers process your KYC documents solely for the purpose of completing your verification on behalf of 779bd.
• Game Content Providers: Third-party game studios and live casino operators — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — may receive a session token and anonymised player identifier to authenticate your game session. These providers do not receive your full name, NID, or payment details.
• Cloud Infrastructure and Hosting Providers: 779bd uses reputable cloud infrastructure providers for platform hosting and data storage. These providers act as data processors under contract and do not access or use your data for their own purposes.
• Fraud Prevention Networks: Anonymised or pseudonymised fraud signals may be shared with industry fraud prevention networks to protect the platform and other players from known bad actors.
• Responsible Gaming Organisations: Where a self-exclusion is activated, 779bd may notify relevant responsible gaming registers to ensure the exclusion is honoured across participating operators where technically feasible.
• Regulatory and Law Enforcement Authorities: 779bd will disclose personal data to competent authorities where required to do so by law, court order, or regulatory instruction. We will notify you of such disclosure where we are legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and accountants who provide professional services to 779bd may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

Cookies are small text files placed on your device by a website to store information about your session or preferences. 779bd uses a minimal set of cookies strictly necessary to operate the platform securely and efficiently. We do not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts on the 779bd platform.

You can control cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies (such as session cookies and CSRF tokens) will prevent you from logging in or using certain features of the 779bd platform.

779bd does not use Google Analytics, Facebook Pixel, or any other third-party analytics or advertising tracking tool on the platform. All first-party analytics are processed on infrastructure controlled by 779bd and are not shared with advertising networks.

779bd retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The retention periods below represent the standard maximum periods applied to each data category. Data is securely deleted or anonymised once the applicable retention period expires.

Where an account is subject to an active fraud investigation, regulatory inquiry, or legal proceedings, the relevant data will be retained until those proceedings are fully concluded, even if this extends beyond the standard retention period stated above.

After the applicable retention period, data is either permanently deleted from all 779bd systems or irreversibly anonymised so that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical analysis and platform improvement purposes.

779bd takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit TLS/SSL Encryption: All data transmitted between your device and the 779bd platform is encrypted in transit using industry-standard TLS protocols. Our SSL certificate is maintained and renewed regularly.
• Encrypted Data Storage: Sensitive personal data fields — including identity document scans, payment method identifiers, and authentication credentials — are stored in encrypted form at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a modern, salted hashing algorithm before storage. 779bd staff cannot retrieve your actual password — only you know it.
• Two-Factor Authentication (2FA): 779bd supports two-factor authentication for player accounts. We strongly recommend enabling 2FA via your account security settings to provide an additional layer of protection beyond your password.
• Role-Based Access Controls: Internal access to player data is restricted on a strict need-to-know basis. 779bd staff are granted only the minimum level of data access required to perform their specific role. Access logs are maintained for all internal data access events.
• Continuous Security Monitoring: 779bd operates continuous automated monitoring of its platform and infrastructure for signs of intrusion, anomalous access patterns, and data exfiltration attempts.
• Regular Security Reviews: 779bd conducts periodic security assessments and vulnerability reviews of its platform infrastructure to identify and remediate potential weaknesses before they can be exploited.
• Data Breach Response: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 779bd will notify affected players and relevant authorities without undue delay in accordance with applicable data breach notification standards.

As a player whose personal data is processed by 779bd, you have a number of rights in relation to that data. These rights are summarised below. To exercise any of these rights, please contact our data privacy team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of all personal data that 779bd holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your name, email address, or registered mobile number, you can also update many fields directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request that 779bd delete all personal data it holds about you. This right is not absolute — where we are required by law to retain your data (e.g., for AML compliance), we cannot fulfil an erasure request for those specific data categories during the mandatory retention period.
• Right to Restrict Processing: You may request that 779bd restrict the processing of your personal data in certain situations — for example, while the accuracy of data is being contested, or where you have objected to processing and the legal basis is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to 779bd processing your personal data on the basis of legitimate interests, including profiling for responsible gaming monitoring. 779bd will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right Not to Be Subject to Automated Decision-Making: Where 779bd makes decisions about your account using solely automated processing (e.g., automated fraud flags that result in account restriction), you have the right to request human review of that decision, to express your point of view, and to contest the outcome.

779bd will not charge a fee for handling standard data rights requests. If a request is manifestly unfounded or excessive (e.g., repetitive requests for the same data within a short period), we reserve the right to charge a reasonable administrative fee or decline to act, with written explanation.

The 779bd platform is strictly intended for adults aged 18 and above. 779bd does not knowingly collect, store, or process personal data from any person under the age of 18. Age verification is a mandatory step in the 779bd registration and KYC process, and we take active steps to prevent minors from accessing the platform.

If 779bd becomes aware that personal data has been collected from a person under the age of 18 — whether through a registration misrepresentation, a parental report, or any other means — the relevant account will be immediately suspended, all personal data associated with that account will be securely deleted as quickly as possible, and any deposits made will be returned to the original payment method used (less any withdrawals already processed).

779bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory obligations, platform feature updates, or improvements in how we communicate our privacy commitments to players. We are committed to being transparent about any such changes.

When a material change is made to this Privacy Policy — meaning a change that significantly affects how we collect, use, or share your personal data — 779bd will take reasonable steps to notify affected players. Notification methods may include a prominent notice displayed on the 779bd platform upon your next login, an email sent to the address registered on your account, or both, depending on the nature of the change.

For minor or administrative changes (such as corrections of typographical errors, clarifications that do not alter the substance of the policy, or updates to contact details), 779bd may update this page without direct notification. The "Last Updated" date displayed at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the 779bd platform after a Privacy Policy update has been communicated to you constitutes your acknowledgement of the revised Policy. If you do not agree with any change to this Policy, you should stop using the 779bd platform and may request account closure by contacting [email protected]. We recommend bookmarking this page and reviewing it periodically, particularly when you notice the "Last Updated" date has changed.

Previous versions of this Privacy Policy are available on request by contacting our data privacy team. We retain archived versions of all prior policies for a minimum of five years from the date each version was superseded.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 779bd holds about you, please contact our dedicated data privacy team using the details below. We aim to acknowledge all privacy-related inquiries within 2 business days and to provide a substantive response within 30 calendar days.

When submitting a data rights request, please include your registered 779bd username, the email address associated with your account, and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request to ensure we do not disclose personal data to an unauthorised third party.