277db Privacy Policy

When you register and use the 277db platform, we collect various categories of personal data in order to provide you with a safe, compliant, and personalised experience. This section details what data is collected and through which means it is gathered.

Data You Provide Directly

The following information is collected directly from you during registration, identity verification, or when you contact our support team:

• Identity data: Full legal name, date of birth, gender, and a copy of a government-issued identity document (National Identity Card, passport, or driving licence) when KYC verification is required.
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Account credentials: Username and hashed password. We do not store passwords in plain text at any point.
• Financial data: Payment method details including bKash mobile number, Nagad account number, Rocket account number, bank account details, or card numbers (stored in truncated form only — we do not retain full card numbers).
• Communication data: The content of live chat conversations, support emails, and any feedback or dispute submissions you submit to 277db.

Data Collected Automatically

When you access and interact with the 277db platform, the following data is collected automatically by our systems:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, bet amounts and types, session start and end times, click patterns, and navigation paths within the platform.
• Location data: Approximate geolocation derived from your IP address. We use this data solely for access control, fraud prevention, and responsible gaming purposes — not for targeted advertising.
• Transaction data: A complete record of all deposits, withdrawals, bets placed, games played, bonus credits applied, and winnings received on your 277db account.

Data From Third Parties

In limited circumstances, 277db may receive personal data about you from third-party sources. This includes identity verification results from KYC service providers, fraud-risk scores from payment processing partners, and publicly available information used to satisfy anti-money-laundering screening obligations. Any data received from third parties is handled with the same level of care and security as data you provide directly.

277db processes your personal data only for specific, lawful purposes. The table below summarises the main processing activities, the category of data involved, and the legal basis on which each activity relies.

Marketing Communications

277db may send you promotional emails or SMS messages about new games, bonus offers, and platform updates if you have given your consent to receive such communications during registration or through your account settings. You may withdraw this consent at any time without affecting your ability to continue using the platform. To unsubscribe from marketing communications, update your notification preferences in the account settings panel or contact support at [email protected].

Automated Decision-Making

277db uses automated systems to detect fraud, identify potentially problem gambling behaviour, and assess the risk profile of transactions. These automated processes may result in the temporary restriction of your account pending human review. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision by contacting our support team.

277db does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Service Providers and Technology Partners

We share personal data with carefully selected third-party service providers who assist us in operating the 277db platform. These providers are contractually required to process data only on our instructions and to maintain security standards consistent with this Privacy Policy. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners require account-level transaction data to facilitate deposits and withdrawals.
• KYC and identity verification providers: Third-party document verification services receive copies of identity documents for the sole purpose of age and identity confirmation.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their game software. They do not receive your full name, contact details, or financial data.
• Cloud infrastructure providers: Hosting and data storage partners hold encrypted player data on secure servers. They have no independent right to access or process this data.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics partners to help us understand platform performance. No personally identifiable information is included in these analytics transfers.

Legal and Regulatory Disclosures

277db may disclose personal data to law enforcement agencies, regulatory authorities, or courts where we are legally required to do so — for example, in response to a court order, a statutory investigation, or a request from a financial intelligence authority relating to suspected money laundering or fraud. We will notify you of such disclosures where we are legally permitted to do so.

Business Transfers

In the event that 277db undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will take reasonable steps to ensure that the acquiring party agrees to process your data in a manner consistent with this Privacy Policy, and we will notify you of any material change to data controller identity before it takes effect.

The 277db platform uses cookies and similar tracking technologies to ensure core platform functionality, maintain session security, and gather anonymised analytics that help us improve the user experience. This section explains what cookies we use and how you can manage them.

Types of Cookies We Use

Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menu. Please note that disabling essential cookies will prevent you from logging in and using the 277db platform. Disabling functional cookies will mean that your preferences are not saved between sessions. Disabling analytics cookies will not affect your ability to play games or place bets.

277db does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be tracked across other websites as a result of visiting 277db.

277db retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

• Account and identity data: Retained for the duration of your account's active status, plus a minimum of five years following permanent account closure to satisfy anti-money-laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements.
• KYC document copies: Retained for five years following the date of verification or account closure, whichever is later. Copies are stored in encrypted form with restricted access.
• Support communications: Retained for three years from the date of the last communication in each support case, or until the matter is fully resolved, whichever is later.
• Analytics data: Retained in anonymised, aggregated form indefinitely. No personally identifiable information is included in retained analytics datasets.
• Marketing consent records: Retained for the duration of your consent and for three years following withdrawal of consent, to maintain an auditable record of consent management.

When personal data reaches the end of its applicable retention period, it is securely deleted or irreversibly anonymised. Anonymised data — from which no individual can reasonably be identified — may be retained indefinitely for statistical and research purposes.

As a player on the 277db platform, you hold a number of rights over the personal data we process about you. These rights are described below. To exercise any of these rights, please contact our Data Privacy team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond in full within 30 days of receipt, measured in Bangladesh Standard Time (UTC+6).

Right of Access

You have the right to request a copy of the personal data 277db holds about you, along with information about how it is processed, the legal basis for processing, and the categories of third parties with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR). We will provide this information free of charge in a structured, machine-readable format where technically feasible.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For basic account details such as your email address or phone number, corrections can be made directly through the account settings panel. For identity document corrections, please contact support with the relevant supporting documentation.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that the right to erasure does not apply where retention is required by law, such as the five-year financial record retention obligation described in Section 5.

Right to Restrict Processing

You have the right to request that 277db temporarily suspends the processing of your personal data — for example, while you contest its accuracy or while a complaint is being investigated. During a restriction period, we will store your data but not process it further, except for the purpose of handling the underlying dispute.

Right to Object

Where 277db processes your data on the basis of legitimate interest — such as platform analytics or fraud prevention — you have the right to object to that processing. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of a legal claim.

Right to Withdraw Marketing Consent

Where you have given consent for 277db to send you marketing communications, you may withdraw that consent at any time by updating your notification preferences in the account settings panel or by emailing [email protected]. Withdrawal of marketing consent will not affect the lawfulness of processing carried out prior to withdrawal, and will not restrict your continued use of the platform.

277db takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Below is a summary of the key security controls in place:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and the 277db platform is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained at all times and monitored for expiry.
• Password hashing: Player passwords are stored as salted cryptographic hashes. Plain-text passwords are never written to any database or log file.
• Access controls: Access to player data within 277db's internal systems is restricted on a strict need-to-know basis. All staff access is logged and subject to regular audit.
• Payment data security: Card data is handled in accordance with PCI-DSS requirements. 277db does not store full card numbers. Payment tokenisation is used wherever supported by the payment provider.
• Fraud monitoring: Our automated fraud detection systems monitor transactions and login activity in real time and flag unusual patterns for manual review.
• Penetration testing: The 277db platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

Data Breach Response

Despite these measures, no online platform can guarantee absolute security. In the event that 277db becomes aware of a personal data breach that poses a risk to player rights, we will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. Notifications will be sent to the email address registered on the affected account, detailing the nature of the breach, the data involved, and the steps taken in response.

If you have any questions about this Privacy Policy, wish to exercise any of the rights described in Section 6, or have a concern about how 277db has handled your personal data, please contact our Data Privacy team using the details below. We aim to resolve all privacy-related enquiries fairly and promptly.

How to Contact Us

You may reach the 277db Data Privacy team by sending an email to [email protected] with the subject line "Privacy Enquiry" or "Privacy Rights Request" as appropriate. Our support team is available 24 hours a day, seven days a week, and all privacy-specific enquiries are escalated to a dedicated team member. Response times are measured in Bangladesh Standard Time (UTC+6).

When submitting a privacy request, please include your registered username and the email address associated with your 277db account so that we can locate your records accurately. We may ask for additional verification if we are unable to confirm your identity from the information provided.

Complaints Process

If you are not satisfied with the way 277db has responded to a privacy concern, you are entitled to escalate your complaint to our senior compliance team. Please email [email protected] with the subject line "Formal Privacy Complaint" and include a summary of the original concern, the response you received, and the reason you consider that response to be inadequate. We will conduct a fresh review and provide a final written response within 14 business days.

Updates to This Privacy Policy

277db may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When a material change is made, the "Effective Date" at the top of this page will be updated accordingly. For significant changes that affect your rights or the way your data is used, we will send a notification to your registered email address at least 14 days before the change takes effect. Continued use of the 277db platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.