Privacy Policy – How bit177 Protects Your Personal Data

bit177 collects and processes personal data only for defined, legitimate purposes. We do not collect data speculatively or in excess of what is required to fulfil those purposes. The primary purposes for which we process your data are as follows:

• Account creation and management: To register your Account, verify your identity and age (21+ requirement), and maintain your Account in good standing throughout your relationship with bit177.
• Service delivery: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and other approved payment partners; to credit winnings; and to resolve payment disputes.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised Account access, and other unlawful activity on the bit177 platform.
• Responsible gaming: To monitor gaming behaviour and apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where patterns suggest that a Player may need protection.
• Legal and regulatory compliance: To fulfil obligations under applicable laws, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and any lawful requests from competent authorities.
• Service improvement: To analyse aggregated usage data, improve platform performance, personalise the gaming experience, and develop new features relevant to Bangladeshi players.
• Marketing communications: To send promotional offers, bonus notifications, and news about bit177 — but only where you have provided your consent or where we have a legitimate interest and you have not opted out.

bit177 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: We share financial data with approved payment partners (bKash, Nagad, Rocket, Upay, and affiliated banking institutions) strictly to the extent required to process your transactions.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and NetEnt may receive session identifiers and minimal technical data necessary to deliver game content. These providers are contractually bound to use such data only to provide their services and not for any independent purpose.
• Identity verification services: Third-party KYC and age-verification services may receive identity and document data solely to confirm that you meet our eligibility requirements.
• Fraud and security services: We may share IP addresses, device fingerprints, and behavioural data with specialised fraud prevention partners to protect the Platform and its players from unlawful activity.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law or a valid legal process.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bit177's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom bit177 shares personal data are subject to appropriate data processing agreements and are required to maintain confidentiality and implement appropriate security measures.

bit177 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account data: Retained for the duration of your Account's active status plus a minimum of five (5) years following Account closure, to meet AML and KYC record-keeping obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Records of customer support interactions are retained for three (3) years from the date of the interaction.
• Marketing consent records: Records of your marketing consent preferences are retained for as long as we conduct marketing communications with you and for one (1) year thereafter as evidence of consent.
• Technical logs: Server logs and device data are retained for up to twelve (12) months, unless a specific security investigation requires extended retention.

When data is no longer required and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

The bit177 platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the Platform to function. They manage your login session, maintain Account security, and enable core Platform features. These cookies cannot be disabled without impacting Platform functionality.
• Performance and analytics cookies: These collect aggregated, anonymised information about how players interact with the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve Platform performance and usability.
• Functional cookies: These remember your preferences (such as language, currency display as BDT, and responsible gaming settings) so that you do not need to re-enter them on each visit.
• Marketing cookies: Where you have provided consent, these cookies help us understand which promotional content is most relevant to you and track the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bit177 Platform. Continued use of the Platform after being presented with our cookie notice constitutes acceptance of our use of strictly necessary cookies.

As a registered player on the bit177 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]:

• Right of access: You may request a copy of the personal data that bit177 holds about you at any time.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal retention obligations.
• Right to restriction of processing: You may request that we limit the processing of your personal data in certain circumstances, for example where you contest its accuracy or object to our processing on legitimate interest grounds.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing: You may opt out of receiving promotional communications from bit177 at any time, either through the unsubscribe mechanism in each communication or by contacting our support team directly.

bit177 will respond to all verifiable data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notice provided to you.

bit177 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption on all data transmitted between your device and the bit177 servers.
• Encrypted storage of sensitive personal data, including financial records and identity documents, on access-controlled servers.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a demonstrated need to process it.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security specialists.
• Automated monitoring systems that detect and alert on unusual Account activity, including login attempts from unrecognised devices or locations.
• Two-step verification (OTP) available to all registered players as an additional layer of Account protection.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bit177 will take prompt remedial action and notify affected individuals in accordance with applicable legal requirements.

Some of the third-party service providers with whom bit177 shares personal data — including game content providers and technical infrastructure partners — may process data in jurisdictions outside Bangladesh. Where such international transfers occur, bit177 takes appropriate steps to ensure that your personal data receives a level of protection consistent with this Privacy Policy, including through the use of contractual safeguards with the receiving party.

By using the bit177 Platform, you consent to the transfer of your personal data to service providers operating in other jurisdictions where it is necessary to provide you with the Services, subject to the protections described in this Policy.

bit177 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform Services. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players by email or through a prominent notice on the Platform.

Your continued use of the bit177 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how bit177 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit177 handles your personal data, please contact our dedicated support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 inside your logged-in bit177 Account
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 14 calendar days.
• Support language: English and Bengali, 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

Where your request relates to the exercise of a specific data right (such as access, rectification, or erasure), please include your registered Account username and a description of your request so that we can process it promptly and accurately.