fd77 Privacy Policy

1. Introduction

fd77 ("the Platform", "we", "us", "our") operates the online casino and sports betting service available at https://fd77.bar and any associated mobile-optimised interfaces or sub-domains. We recognise that the privacy and security of your personal information is of paramount importance, and we are firmly committed to handling all personal data entrusted to us in a responsible, transparent, and secure manner.

This Privacy Policy sets out in formal, plain English precisely what categories of personal data fd77 collects from users ("you", "the Player", "the User"), the legal basis on which that data is processed, the purposes for which it is used, how long it is retained, the circumstances in which it may be shared with third parties, and the rights available to you in respect of your own data.

fd77 operates as an offshore platform accessible from Bangladesh and other jurisdictions. Where the laws of a user's jurisdiction of residence impose additional privacy rights or obligations, fd77 will endeavour to honour those rights to the extent reasonably practicable for an offshore operator. Players are solely responsible for verifying the legality of their use of fd77 under the laws of their own jurisdiction.

This policy applies to all personal data collected through the fd77 website, mobile-optimised site, customer support interactions (including email, live chat, and any future app interface), and any promotional or marketing communications sent by fd77. It does not apply to any third-party websites or services that may be linked from the fd77 platform.

2. Data Controller

For the purposes of this Privacy Policy, fd77 acts as the data controller in respect of all personal data collected through the platform. As data controller, fd77 determines the purposes for which personal data is collected and the means by which it is processed.

All enquiries, requests, and complaints relating to the use of your personal data by fd77 should be directed to the fd77 Data Privacy contact:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Request — [Your Username]"
• Response time: Within 14 calendar days of receipt

3. Categories of Personal Data We Collect

fd77 collects the following categories of personal data, grouped by purpose:

3.1 Registration & Identity Data

When you create a fd77 account, we collect: full legal name, date of birth, gender (optional), nationality, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other Bangladeshi cities), email address, and mobile phone number.

3.2 Identity Verification (KYC) Data

To fulfil our Know Your Customer obligations, we may collect: scanned copies or photographs of government-issued identity documents (such as Bangladesh National Identity Card, passport, or driving licence), proof-of-address documents (such as utility bills or bank statements), and selfie or facial-image verification data where required by our verification partner.

3.3 Financial & Transaction Data

We collect data relating to deposits and withdrawals including: payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), mobile wallet account numbers (stored in masked/tokenised form), transaction amounts, transaction timestamps, and transaction reference numbers. fd77 does not store full card numbers, CVV codes, or mobile banking PINs — these are handled exclusively by our PCI-DSS-compliant payment processing partners.

3.4 Account & Gameplay Data

We collect data generated by your use of the platform including: account login history (timestamps and IP addresses), game session records (game titles, stakes, outcomes, session duration), sports betting history (markets selected, odds, stake amounts, outcomes), bonus and promotion participation records, and account balance history.

3.5 Technical & Device Data

We automatically collect certain technical information when you access fd77, including: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited and time spent on each page, and session identifiers. This data is collected through server logs and analytical cookies.

3.6 Communications Data

We retain records of communications between you and the fd77 support team, including live chat transcripts, email correspondence, and any written complaints or formal dispute submissions. This data is retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Marketing Preference Data

We record your marketing communication preferences — specifically whether you have opted in to or out of receiving promotional emails, SMS notifications, or on-platform promotional messages from fd77.

4. How We Collect Your Data

fd77 collects personal data through the following channels:

• Directly from you: Data you actively provide during account registration, KYC verification submissions, deposit and withdrawal requests, support interactions, and completion of any surveys or feedback forms.
• Automatically through your use of the platform: Technical and device data collected via server logs, session cookies, and analytical tools as you browse and use the fd77 website.
• From third-party service providers: Identity verification results from our KYC partner, fraud screening signals from our fraud prevention provider, and payment confirmation data from payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors).

5. Legal Basis for Processing

fd77 processes your personal data on the following legal bases:

Processing Activity	Legal Basis
Account registration and management	Performance of contract (providing the fd77 service to you)
KYC identity verification	Legal obligation (anti-money laundering compliance) and legitimate interests (fraud prevention)
Processing deposits and withdrawals	Performance of contract
Responsible gaming monitoring	Legitimate interests (player protection) and legal obligation
Fraud detection and security monitoring	Legitimate interests (protecting the platform and other users)
Analytical cookies and platform analytics	Legitimate interests (improving platform performance)
Marketing communications (opted-in users only)	Consent (freely given, specific, and revocable at any time)
Responding to support enquiries and complaints	Performance of contract and legitimate interests
Retaining transaction records for audit purposes	Legal obligation

6. How We Use Your Personal Data

The personal data collected by fd77 is used exclusively for the following purposes:

• To create, verify, maintain, and manage your fd77 account
• To process deposit and withdrawal transactions via your selected payment method
• To conduct mandatory KYC identity and age verification checks (confirming that users are 21 years of age or older)
• To deliver the core platform services — including casino games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other partner studios — and sports betting markets
• To personalise your platform experience, including game recommendations and relevant promotional offers (where you have opted in)
• To detect, investigate, and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the fd77 Terms & Conditions
• To monitor gameplay patterns for responsible gaming purposes and to apply responsible gaming tools (deposit limits, self-exclusion, cooling-off periods) as requested or as required
• To respond to support enquiries, complaints, and formal dispute submissions
• To send transactional communications (account confirmations, deposit/withdrawal receipts, security alerts) — these are not marketing communications and cannot be opted out of while your account is active
• To send promotional and marketing communications, but only to users who have explicitly opted in to receiving them
• To analyse platform usage patterns in aggregate (anonymised) form to improve fd77's services, user experience, and technical performance
• To fulfil any legal, regulatory, or law enforcement obligations that may apply

7. Cookies & Tracking Technologies

fd77 uses a limited set of cookies and similar tracking technologies to operate and improve the platform. We do not use advertising cookies, third-party retargeting pixels, or cross-site tracking scripts.

7.1 Essential Cookies

These cookies are strictly necessary for the fd77 platform to function. They manage your login session, maintain your account authentication state, remember your language and display preferences, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without breaking core platform functionality.

7.2 Analytical Cookies

fd77 uses first-party analytical cookies to collect anonymised data about how users interact with the platform — including pages visited, session duration, and navigation paths. This data is used exclusively to improve platform performance and user experience. No analytical data is shared with third-party advertising networks.

7.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that blocking essential cookies will prevent you from logging in to your fd77 account and using core platform features. Instructions for managing cookies in the most common browsers are available from the browser's own help documentation (Chrome, Firefox, Safari, Edge).

8. Sharing Your Personal Data

fd77 does not sell, rent, trade, or otherwise transfer your personal data to unaffiliated third parties for commercial or marketing purposes. Personal data may be shared in the following strictly limited circumstances:

8.1 Service Providers & Data Processors

fd77 engages a small number of trusted third-party service providers who process personal data on fd77's behalf as data processors. These include: KYC and identity verification providers; payment processing partners (bKash, Nagad, Rocket, Upay, Visa and Mastercard network processors); fraud detection and risk management providers; cloud hosting and infrastructure providers; and customer support platform providers. All data processors are contractually bound to process personal data only on fd77's documented instructions, to implement appropriate technical and organisational security measures, and not to sub-process data without fd77's prior written authorisation.

8.2 Game Studio Partners

Game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) receive a session token and player pseudonym to deliver game content. They do not receive your full name, contact details, or financial data unless separately required for their own regulatory compliance obligations, in which case a separate data-sharing agreement governs that exchange.

8.3 Legal & Regulatory Disclosures

fd77 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other regulatory authorities if required to do so by applicable law, by a valid court order, or by a legitimate legal process. fd77 will, where legally permitted, notify the affected user of such a disclosure request.

8.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of fd77's business operations, personal data held by fd77 may be transferred to the acquiring or successor entity as part of the transaction. Affected users will be notified of any such transfer and of any material change to the data controller relationship.

9. Data Retention

fd77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable legal or compliance obligations. The following retention schedule applies:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Anti-money laundering compliance; dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	Regulatory obligation; fraud prevention
Transaction records	7 years from transaction date	Financial record-keeping; AML compliance
Gameplay session logs	3 years from session date	Dispute resolution; responsible gaming monitoring
Support communications	3 years from last interaction	Quality assurance; dispute evidence
Technical / server logs	12 months from creation	Security monitoring; fraud detection
Marketing preference records	Until opt-out + 3 years	Demonstrating consent compliance

When the applicable retention period expires, fd77 securely deletes or anonymises the relevant personal data so that it can no longer be attributed to an identifiable individual.

10. Data Security

fd77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and the fd77 platform is protected by 256-bit TLS (Transport Layer Security) encryption. The fd77 website enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Encryption at rest: Personal data and financial records stored in fd77's databases are encrypted at rest using AES-256 encryption.
• Access controls: Access to systems containing personal data is restricted to authorised fd77 personnel on a strictly need-to-know basis, governed by role-based access control (RBAC) policies. All access is logged and periodically audited.
• Password security: User account passwords are stored exclusively as salted cryptographic hashes. fd77 does not store plaintext passwords at any point.
• Two-factor authentication: fd77 supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access.
• Penetration testing: fd77's technical infrastructure undergoes regular security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident response: fd77 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to affected users, we will notify impacted users promptly and without undue delay.

While fd77 applies rigorous security standards, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own login credentials, device, and network connection when accessing fd77.

11. International Data Transfers

fd77 operates as an offshore platform and its infrastructure and service providers may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may not provide the same level of data protection as your home jurisdiction.

Where personal data is transferred to a third country, fd77 takes appropriate safeguards to ensure that your data continues to be protected to a standard consistent with this Privacy Policy. These safeguards include: contractual data processing agreements with all third-party processors that include standard data protection clauses; selecting service providers who themselves comply with recognised international data security standards (such as ISO 27001 and SOC 2 Type II); and implementing the encryption and access control measures described in Section 10.

By using fd77 and accepting this Privacy Policy, you explicitly consent to the transfer of your personal data as described in this section.

12. Your Data Rights

Subject to applicable law and to fd77's legitimate compliance and fraud prevention obligations, you have the following rights in respect of the personal data that fd77 holds about you:

12.1 Right of Access

You have the right to request a copy of the personal data fd77 holds about you (commonly known as a "Subject Access Request" or SAR). fd77 will provide this information in a structured, commonly used, machine-readable format within 14 calendar days of receiving a valid request.

12.2 Right to Rectification

If any personal data fd77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain data (such as your email address or phone number) directly through your account settings. For corrections to identity or KYC data, please contact [email protected].

12.3 Right to Erasure

You may request that fd77 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where you believe the data is being processed unlawfully. Please note that fd77 may be legally required to retain certain data (particularly transaction records and KYC documents) beyond the point of account closure, as set out in Section 9.

12.4 Right to Restriction of Processing

You have the right to request that fd77 restrict (i.e., pause but not delete) the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you dispute the legal basis for processing.

12.5 Right to Data Portability

Where fd77 processes your data on the basis of your consent or for the performance of a contract, and that processing is carried out by automated means, you have the right to receive your personal data in a portable, structured, machine-readable format suitable for transfer to another service provider.

12.6 Right to Object

You have the right to object to fd77's processing of your personal data where that processing is based on fd77's legitimate interests. fd77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is necessary for the establishment, exercise, or defence of legal claims.

12.7 Right to Withdraw Consent

Where fd77 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, update your preferences in account settings or contact [email protected].

13. Children & Minors

fd77 strictly prohibits the use of its platform by any individual under the age of 21. fd77 does not knowingly collect personal data from individuals under 21 years of age. If fd77 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all associated data will be deleted (subject to any retention obligations for compliance purposes), and any funds on account will be returned via the original payment method after applicable verification.

If you are a parent or guardian and believe that your child under 21 has registered on fd77, please contact [email protected] immediately with details of the account. We will investigate and take appropriate action promptly.

For information about responsible gaming tools and controls, including parental control software recommendations, please visit the fd77 Responsible Gaming page.

14. Third-Party Links & Services

The fd77 platform may contain references to or integrations with third-party services — most notably game content delivered by partner studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While fd77 exercises care in selecting reputable partners, we are not responsible for the privacy practices or content of any third-party service.

When you launch a game provided by a third-party studio within the fd77 interface, that studio may collect certain technical data (such as session identifiers and game outcome logs) under its own privacy policy. fd77 encourages users to review the privacy notices of any third-party service they interact with. fd77 accepts no liability for the data handling practices of third-party studios or payment providers.

15. Updates to This Privacy Policy

fd77 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, fd77 will notify registered users via email or a prominent notice displayed on the platform at least 7 days before the revised policy takes effect. The "last updated" date at the top of this page will be revised accordingly.

Your continued use of the fd77 platform after the effective date of any revision to this Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the revised policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how fd77 protects your personal data.

16. Contact Us

For all privacy-related enquiries, data subject rights requests, or complaints regarding fd77's handling of your personal data, please contact us using the details below. All communications regarding privacy matters must be submitted in writing to allow for accurate record-keeping.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Request — [Your Username]"
• Response time: Acknowledgement within 3 business days; substantive response within 14 calendar days
• Support availability: 24/7 — Bangladesh Standard Time (BST, UTC+6)

fd77 is committed to resolving all privacy concerns fairly, promptly, and transparently. If you are dissatisfied with our response to a privacy complaint, you may have the right to escalate your complaint to a relevant supervisory or data protection authority in your jurisdiction of residence.