Privacy Policy
77abf Data Protection Statement
At 77abf, your privacy is taken seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, how that data is used, who it may be shared with, and the rights you hold over your own information. We encourage all players to read this document in full before creating an account.
Data Controller Information
77abf operates as the data controller for all personal information collected through the 77abf platform at https://77abf.net. As the data controller, 77abf is responsible for determining the purposes for which your personal data is processed and the means by which that processing takes place. If you have any questions, concerns, or requests regarding your personal data, you can contact our dedicated data protection team at any time using the details below.
77abf is an online gaming and sports betting platform serving the Bangladesh market. Our platform is operated under the brand name "77abf" and all references to "we", "us", "our", or "the platform" in this Privacy Policy refer to 77abf in its capacity as operator of the website located at https://77abf.net and all subdomains and services associated with it.
All data protection enquiries, subject access requests, erasure requests, and complaints should be directed to our support team via live chat on the platform or by email at the address below. We aim to acknowledge all data-related enquiries within 72 hours and to resolve them within 30 calendar days from the date of receipt.
Personal Data We Collect
When you register an account, use the 77abf platform, or contact our support team, we collect a range of personal data. The categories of data we collect, the sources from which we collect them, and the legal basis for that collection are set out below. We collect only the minimum data necessary to deliver our services safely and in compliance with our obligations.
Identity Data
Full legal name, date of birth, gender, nationality, and government-issued identification numbers (National ID, passport number, or driving licence number) collected during registration and KYC verification to confirm your identity and age eligibility.
Contact Data
Email address, mobile phone number, and residential address including city, district, and division (e.g., Dhaka, Chittagong, Sylhet, Khulna). This data is used to communicate with you about your account, transactions, and support queries.
Financial Data
Payment method identifiers (e.g., bKash account numbers, Nagad account numbers, Rocket numbers, bank account details, card numbers masked to last 4 digits), transaction histories, deposit and withdrawal amounts, and account balances.
Gaming Activity Data
Records of all bets placed, games played, sports markets accessed, bonus claims, wagering activity, win/loss history, session durations, and game preferences. This data is retained for regulatory compliance, dispute resolution, and responsible gaming purposes.
Technical Data
IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), referral URL, page visit history within the platform, session tokens, and cookies. Collected automatically when you access the platform.
Communications Data
Records of your interactions with our support team via live chat or email, including the content of messages, timestamps, and resolution outcomes. We retain these records to improve service quality and to evidence the support provided to you.
We do not collect special category data (for example, health data, religious beliefs, or political opinions) and we do not seek to infer such information from the data we do hold. Where you provide us with data about third parties — for example, when identifying a payment account registered in a family member's name — you confirm that you have the right to share that data with us and that the third party has been informed of this Privacy Policy.
How We Use Your Data
77abf processes your personal data only for specific, documented purposes and on a recognised legal basis. The table below sets out the primary purposes for which we use your data, together with the corresponding legal basis for each processing activity. We do not use your personal data for purposes that are incompatible with those listed here without first notifying you and, where required, obtaining your consent.
| Purpose of Processing | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Performance of contract |
| Age and identity verification (KYC) | Identity, Financial | Legal obligation |
| Processing deposits and withdrawals | Financial, Identity | Performance of contract |
| Delivering games and betting markets | Gaming Activity, Technical | Performance of contract |
| Fraud prevention and anti-money laundering | Identity, Financial, Technical | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Gaming Activity, Identity | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications, Identity, Gaming Activity | Performance of contract / Legitimate interest |
| Platform analytics and improvement | Technical, Gaming Activity | Legitimate interest |
| Personalised promotional communications | Identity, Contact, Gaming Activity | Consent (opt-in) |
| Security and IT infrastructure protection | Technical, Identity | Legitimate interest |
Where we rely on your consent as the legal basis for processing — for example, to send you personalised bonus offers and promotional emails — you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of consent will not affect the lawfulness of any processing that took place before the withdrawal.
We may use anonymised, aggregated data derived from your gaming activity for statistical analysis, market research, and product development purposes. Aggregated data cannot be used to identify you individually and is not subject to the same restrictions as personal data under this Privacy Policy.
Data Sharing and Disclosure
77abf does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your personal data only with carefully selected third parties where it is necessary to deliver our services, meet our legal obligations, or protect the legitimate interests of the platform and its players. Every third party with whom we share data is subject to contractual obligations requiring them to maintain appropriate data security standards and to use the data only for the specified purposes.
The categories of third parties with whom we may share your data are as follows:
- Payment Processing Partners: We share the minimum necessary financial and identity data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to facilitate your deposit and withdrawal transactions. These providers are bound by their own applicable data protection obligations and are independently regulated.
- Game Studio Providers: Third-party game studios (including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming) receive limited session and account data necessary to serve game content to your device, resolve technical disputes, and maintain game integrity. They do not receive your full identity profile.
- Identity Verification Services: Where KYC verification requires document checks or biometric verification, we may share identity documents with certified third-party verification service providers operating under strict data processing agreements.
- Fraud Prevention and AML Services: We may share transaction data and identity information with anti-fraud and anti-money laundering screening services to discharge our compliance obligations and to protect the platform against financial crime.
- Regulatory and Law Enforcement Authorities: We will disclose your personal data to competent authorities, courts, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
- Technology and Infrastructure Providers: Our cloud hosting, content delivery, and cybersecurity service providers may process technical data as part of their services. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.
We do not transfer your personal data outside the systems and providers described above. We do not share your data with advertisers, data brokers, social media platforms, or unaffiliated marketing companies.
Cookies and Tracking Technologies
The 77abf platform uses cookies and similar tracking technologies — including local storage, session storage, and pixel tags — to operate core platform functionality, analyse usage patterns, and improve your experience. This section explains what types of cookies we use, what purpose each serves, and how you can manage your cookie preferences.
A cookie is a small text file placed on your device by a web server when you visit a website. Cookies are widely used to make websites function correctly, to remember your preferences, and to provide website operators with information about how their platforms are used. The 77abf platform uses the following categories of cookies:
| Cookie Category | Purpose | Retention | Consent Required |
|---|---|---|---|
| Session management, login state, security tokens, fraud prevention signals, load balancing. These cookies are strictly necessary for the platform to function and cannot be disabled without breaking core functionality. | Session / up to 24 hours | No — strictly necessary | |
| Anonymised usage data including page visit frequency, session duration, navigation paths, device types, and error rates. Used to diagnose performance issues and guide platform improvements. No personally identifiable data is collected via analytics cookies. | Up to 13 months | Yes — opt-in | |
| Tracking of promotional campaign performance, referral source attribution, and personalisation of bonus offers displayed within the platform. These cookies help us understand which promotions are most relevant to you based on your activity history. | Up to 90 days | Yes — opt-in | |
| Remembering your platform preferences such as language settings, display preferences, and last-used payment method. These cookies improve convenience but are not strictly necessary for basic platform operation. | Up to 12 months | Yes — opt-in |
You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling essential cookies will prevent you from logging in to your account and using the core features of the 77abf platform. Disabling analytics or marketing cookies will not affect your ability to place bets or access games.
We do not use third-party advertising networks or social media tracking pixels on the 77abf platform. All analytics and marketing tracking described above is conducted using first-party or carefully vetted third-party tools under data processing agreements that prohibit the use of your data for purposes outside the scope of our services.
Data Retention Periods
77abf retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The specific retention periods we apply to different categories of personal data are set out below.
Where your account is active, we retain your full personal data profile for the duration of the account relationship plus a further period following account closure to meet our legal and regulatory obligations. These post-closure retention periods exist because online gaming operators are required to maintain verifiable records of player activity, financial transactions, and identity verification outcomes for a minimum period following the end of the account relationship.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML compliance, regulatory record-keeping, dispute resolution |
| KYC verification documents | Duration of account + 5 years post-closure | Regulatory obligation, fraud prevention audit trail |
| Financial transaction records | Duration of account + 7 years post-closure | Financial record-keeping obligations, AML audit requirements |
| Gaming activity and bet records | Duration of account + 5 years post-closure | Dispute resolution, responsible gaming review, regulatory compliance |
| Support communications | 3 years from date of communication | Quality assurance, dispute evidence, complaint resolution |
| Technical / log data | Up to 13 months | Security monitoring, fraud investigation, platform diagnostics |
| Marketing consent records | Duration of consent + 3 years | Evidence of lawful basis for marketing communications |
| Analytics cookie data (anonymised) | Up to 13 months | Platform performance analysis and improvement |
Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Anonymised data that can no longer be linked to any individual may be retained indefinitely for statistical and analytical purposes.
If you request the erasure of your personal data before the end of the applicable retention period, we will assess your request and erase the data to the extent we are not required to retain it for legal, regulatory, or dispute resolution purposes. We will inform you of the outcome of any erasure request within 30 calendar days.
Your Privacy Rights
As a user of the 77abf platform, you have a number of rights in relation to the personal data we hold about you. These rights are summarised below. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 calendar days. In some cases, we may need to verify your identity before acting on a request.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is used and with whom it has been shared. This is commonly called a Subject Access Request (SAR). We will provide this information free of charge in a structured, machine-readable format.
Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. You can update basic account details (such as your email or phone number) directly through your account settings at any time.
Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where we have processed it unlawfully. Erasure requests are subject to our legal and regulatory retention obligations.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested or while an objection to processing is being assessed. During a restriction, we may store but not actively use your data.
Right to Data Portability
Where we process your data on the basis of your consent or to perform a contract with you, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format and to request that it be transferred to another provider where technically feasible.
Right to Object
You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately upon receipt of your objection.
Data Security Measures
77abf implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme is reviewed and updated regularly to address evolving threats and to align with recognised industry standards for online gaming platform security.
The core security measures we apply to protect your data include the following:
- SSL/TLS Encryption: All data transmitted between your device and the 77abf platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by checking for the padlock icon and "https://" prefix in your browser's address bar whenever you access https://77abf.net.
- Encryption at Rest: Sensitive personal data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted at rest using strong encryption standards. Passwords are never stored in plain text; they are hashed using a secure one-way hashing algorithm.
- Access Controls: Access to personal data within 77abf's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job functions. All access is logged and regularly audited.
- Two-Factor Authentication: We offer and encourage the use of two-factor authentication (2FA) on all 77abf accounts to protect against unauthorised login attempts, even where your password may have been compromised.
- Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring. We conduct regular penetration testing and vulnerability assessments to identify and remediate security weaknesses.
- Staff Training: All 77abf staff members who handle personal data receive regular data protection and security awareness training. Our data protection policies are reviewed annually and updated to reflect current best practice.
- Incident Response: In the event of a personal data breach that poses a risk to your rights and interests, 77abf will notify affected players and, where required, the relevant authorities, within the timeframes prescribed by applicable obligations. We will provide clear information about the nature of the breach, the data affected, and the steps we are taking to address it.
While we apply rigorous security measures, no internet-based system can be guaranteed to be 100% secure. You also have a responsibility to keep your account credentials safe. Do not share your password with anyone, use a strong and unique password for your 77abf account, and contact our support team immediately if you suspect any unauthorised activity on your account.
Third-Party Services
The 77abf platform integrates with a number of certified third-party service providers to deliver the full range of gaming, payment, and support services available to players in Bangladesh. Each of these integrations involves some degree of data exchange, and this section explains the nature of those exchanges and how each provider handles your information.
All third-party providers used by 77abf are assessed for data security and privacy compliance before integration, and are required to sign data processing agreements that bind them to handle your data only for the purposes we specify. We do not permit any third-party provider to use data shared with them for their own independent commercial purposes.
The principal categories of third-party service providers we work with are:
- Mobile Financial Services: bKash, Nagad, Rocket, and Upay process payment transactions on your behalf. When you initiate a deposit or withdrawal, we share the minimum necessary transaction data with your chosen payment provider. These providers operate under their own applicable privacy and data protection frameworks and are independently regulated financial institutions operating in Bangladesh.
- Game Content Providers: Studios including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming deliver game content directly to your browser or device via secure APIs. These providers receive session identifiers and limited account data to authenticate your game session and record outcomes. They do not receive your full identity profile or payment details.
- Cloud Infrastructure Providers: Our platform is hosted on enterprise-grade cloud infrastructure. Our infrastructure provider processes technical data (including IP addresses and session logs) as a data processor under our instruction. All data is stored in secure data centres with physical and logical access controls.
- Identity Verification Providers: Where enhanced KYC verification is required, we use certified identity verification services to perform document authentication and, where applicable, biometric checks. These providers are contractually prohibited from retaining your documents beyond the period required to complete the verification check.
- Live Chat and Support Tools: Our customer support infrastructure uses third-party live chat software to facilitate real-time communication between players and our support team. Support conversations are stored on secure servers and are accessible only to authorised support staff.
The 77abf platform does not embed third-party social media widgets, advertising networks, or external analytics trackers that would allow those third parties to collect data about your visit independently. Any analytics performed on platform usage is conducted using first-party data or contracted processors bound by our data processing agreements.
Links to external websites may appear in support documentation or informational content on the platform. Once you navigate away from https://77abf.net, your data is subject to the privacy policy of the destination website, not this Privacy Policy. We recommend reviewing the privacy practices of any third-party websites you visit.
Updates to This Policy
77abf reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, changes in the services we offer, or improvements in the way we explain our practices to you. The most current version of this Privacy Policy will always be available at https://77abf.net/privacy-policy and the effective date at the top of this document will be updated accordingly.
Where we make material changes to this Privacy Policy — that is, changes that significantly affect the way we use your personal data or the rights available to you — we will notify you in advance by email to the address registered on your account or by a prominent notice displayed within the platform when you next log in. We will provide reasonable notice of material changes before they take effect, and where required by applicable law, we will seek your consent before implementing any changes that would otherwise require it.
Minor changes — such as corrections of typographical errors, clarifications of existing practices that do not affect the substance of the policy, or updates to contact information — may be made without prior notice. We encourage you to review this Privacy Policy periodically to stay informed about how 77abf protects your personal data.
Your continued use of the 77abf platform after an updated Privacy Policy has been published (and, for material changes, after the applicable notice period has passed) constitutes your acknowledgement that you have read and understood the updated terms. If you do not agree with any changes to this Privacy Policy, you should cease using the platform and may request closure of your account by contacting our support team.
All previous versions of this Privacy Policy are retained in our internal records. If you need a copy of a prior version for any purpose, please contact us at [email protected] and we will provide it upon request subject to our data retention policies.
Ready to Play Responsibly at 77abf?
Now that you understand how 77abf handles your personal data, explore our full range of cricket betting, live casino games, and slots — all on a platform built with your security and privacy in mind.