Your Privacy Matters
at cd77

cd77 ("we", "us", "our") is the operator of the online betting and casino platform available at cd77.io. We are committed to protecting the personal data of every player who interacts with our platform, and to being fully transparent about how that data is collected, processed, and safeguarded.

This Privacy Policy sets out, in clear and accessible English, the types of personal information we collect from users based primarily in Bangladesh, the lawful grounds on which we process that information, the purposes for which it is used, and the rights that you — as a data subject — hold over your own personal information.

This Policy applies to all personal data collected through the cd77 website, mobile-optimised site, customer support channels (email and live chat), and any other direct interaction between cd77 and its players. It applies regardless of the device or network you use to access the Platform.

We regularly review this Policy to ensure it remains accurate and up to date. The version currently in force is the one dated at the top of this page. We encourage you to revisit this page periodically, particularly following any account activity or notification of changes from cd77.

cd77 collects several categories of personal data depending on your level of interaction with the Platform. The categories are described below.

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Gender (optional, for personalisation purposes)
• Email address
• Mobile phone number
• Residential address (including city, district, and postcode within Bangladesh)
• Username and encrypted password

• Copies of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address documents (utility bill, bank statement, or official correspondence)
• Selfie photographs submitted during identity verification
• Proof of payment method ownership (e.g., screenshot of your bKash or Nagad account)

• Deposit and withdrawal amounts and dates
• Payment method identifiers (mobile wallet numbers — bKash, Nagad, Rocket, Upay; masked card numbers for Visa/Mastercard)
• Transaction reference numbers
• Account balance history
• Bonus and promotional credit history

• Bets placed, markets selected, stakes, and outcomes
• Casino game sessions, game titles played, wager amounts, and results
• Session duration and frequency of play
• Responsible gaming settings you have applied (deposit limits, time-out status)

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Pages visited on cd77.io, time spent, and navigation paths
• Referring URL (how you arrived at cd77.io)
• Cookie identifiers and session tokens (see Section 7)

• Records of emails, live chat transcripts, and support tickets exchanged with cd77
• Feedback, survey responses, and complaints
• Marketing preference settings (opt-in/opt-out status for promotional emails and SMS)

cd77 collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey, you provide personal data directly to us.
• Automated collection: When you browse or use the cd77 website, our servers and analytics tools automatically collect technical and usage data including your IP address, device information, and browsing behaviour via cookies and similar technologies.
• Payment providers: When you make a deposit or withdrawal, our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) pass transaction confirmation data to cd77, including partial payment identifiers and transaction reference numbers. cd77 does not receive or store your full payment credentials.
• Identity verification partners: cd77 may use third-party KYC and identity verification service providers to assist with the verification of documents submitted by players. These partners process the data on cd77's behalf and under strict data processing agreements.
• Game providers: When you play games supplied by third-party providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, or Ezugi, game session data is generated within those providers' systems and shared back with cd77 for account crediting and regulatory purposes.

cd77 processes your personal data on the following legal grounds:

Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

cd77 uses the personal data we collect for the following specific purposes:

• Account management: To create, maintain, and secure your cd77 player account, including password recovery and session management;
• Identity verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with our KYC obligations;
• Payment processing: To facilitate deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, Visa, or Mastercard accounts in Bangladeshi Taka;
• Service delivery: To provide access to sports betting markets (including BPL, IPL, T20 World Cup, and basketball), live casino games, slots, and Teen Patti;
• Customer support: To respond to your enquiries, resolve disputes, and investigate complaints submitted via email or live chat;
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Responsible gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide proactive support where required;
• Legal compliance: To retain records as required by applicable law, respond to regulatory enquiries, and cooperate with law enforcement where legally obligated;
• Marketing communications: Where you have opted in, to send you information about promotions, bonuses, new game launches, and seasonal offers relevant to the Bangladesh market — such as BPL betting promotions, Eid bonus offers, and IPL special markets;
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the design, performance, and content of the cd77 Platform.

cd77 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and international card scheme processors (Visa, Mastercard) receive transaction data necessary to process your deposits and withdrawals. These providers are independent data controllers for their own services and are governed by their own privacy policies.
• KYC and identity verification partners: Third-party identity verification services receive the documents and data you submit during KYC verification. These partners act as data processors on our behalf under strict contractual agreements that prohibit them from using your data for any other purpose.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive the minimum data necessary to run game sessions and return results to cd77. Your full personal profile is not shared with game providers.
• Analytics and technology providers: We use third-party analytics and infrastructure services to operate and improve the Platform. These providers process technical and usage data on our behalf and are bound by data processing agreements.
• Legal and regulatory authorities: cd77 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent regulatory bodies where required to do so by law, court order, or as part of an active investigation into financial crime or fraud.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of cd77's business assets, your personal data may be transferred to the successor entity, subject to that entity maintaining at least the same standard of data protection as set out in this Policy.

All third parties with whom cd77 shares personal data are required to implement appropriate technical and organisational security measures to protect that data, and are prohibited from using it for any purpose beyond those specified in their agreement with cd77.

cd77 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform, personalise your experience, and gather analytical insights. The main categories of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your responsible gaming settings.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the cd77 website — which pages are visited most, how long users spend on each page, and where they navigate from. This data helps us continuously improve the Platform. These cookies do not identify you personally.
• Functionality Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and recently played games — to provide a more personalised experience on return visits.
• Marketing Cookies: Where you have consented, these cookies track your browsing behaviour to allow cd77 to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies may be set by cd77 or by trusted third-party advertising partners.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from logging in or placing bets. Detailed instructions for managing cookies are available in the help section of all major browsers.

cd77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our key security practices include:

• Encryption in transit: All data transmitted between your device and cd77 servers is encrypted using 256-bit SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your connection is secure.
• Encryption at rest: Sensitive personal data stored in cd77 databases — including identity documents, financial records, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within cd77's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role. All internal access is logged and audited.
• Password security: Player passwords are stored only as salted cryptographic hashes. cd77 staff cannot view your password in plain text. If you forget your password, a reset link will be sent to your registered email address — your original password cannot be recovered because it is never stored in readable form.
• Regular security testing: cd77 conducts regular vulnerability assessments and penetration testing of its Platform to identify and remediate potential security weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data security incident affecting your personal information, cd77 will notify affected players without undue delay and will take all necessary steps to contain the breach, assess the impact, and prevent recurrence.

While cd77 takes all reasonable precautions to protect your data, no system or transmission over the internet can be guaranteed to be 100% secure. You also play an important role in keeping your account secure: use a strong, unique password, do not share your credentials with anyone, and contact us immediately if you suspect unauthorised access to your account.

cd77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

As a player on the cd77 Platform, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting us at [email protected].

cd77 will respond to all verified data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 60 days, in which case we will inform you of the extension and the reason for it. There is no charge for exercising your rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

To protect your privacy and security, cd77 will take reasonable steps to verify your identity before actioning any data rights request. You may be asked to confirm your registered email address, provide a form of identification, or answer security questions before your request is processed.

The cd77 Platform is strictly intended for adults aged 21 years and above. cd77 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process, and cd77 uses identity verification tools to confirm that players meet the minimum age requirement before they are permitted to deposit funds or place bets.

If cd77 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the payment source used, subject to verification.

The cd77 Platform may, from time to time, contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay), game studios, or sports data providers. Where links to third-party websites or services are present, please be aware that those third parties operate their own privacy policies, which are entirely independent of cd77's Privacy Policy.

cd77 has no control over the content, privacy practices, or data handling of third-party websites, and accepts no responsibility or liability for the privacy practices of any such third party. We strongly encourage you to read the privacy policy of any third-party service you access through or in connection with the cd77 Platform.

The inclusion of a reference to a third-party payment method or game provider on the cd77 Platform does not constitute an endorsement of that third party's data handling practices.

cd77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Platform. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

Minor changes — such as typographical corrections, clarifications of existing language, or updates to reflect new features — may be made without advance notice. The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision.

Your continued use of the cd77 Platform after any revised Privacy Policy has taken effect constitutes your acknowledgement of the updated Policy. If you do not agree with the revised Policy, you may close your account and withdraw any available balance before the changes take effect by contacting us at [email protected].

cd77 recommends that all players bookmark this page and review the Privacy Policy at least once every three months to remain informed of how their personal data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way cd77 handles your personal data, our Data Privacy team is available to assist you.

You may contact us by email at: [email protected]

Please include your registered account username, the nature of your query or request, and any relevant reference numbers in your correspondence. Our team aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days, in accordance with your data rights as described in Section 10.

For urgent matters relating to a suspected data breach, unauthorised account access, or an underage user report, please mark your email subject line with "URGENT — Privacy" to ensure it receives immediate attention from our security team.