bn777 Privacy Policy — How We Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") sets out the basis on which bn777 ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "the Player") who access or use the bn777 online gaming platform at bn777.io and any associated mobile-optimised interfaces (collectively, "the Platform").

bn777 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We recognise that players across Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and bn777. In the event of any conflict between this Policy and the Terms & Conditions regarding data protection matters, this Policy shall prevail.

This Policy is effective as of 1 January 2026 and supersedes all prior versions. The most recent update date is reflected at the top of this document.

Data Controller

For the purposes of this Policy, bn777 acts as the data controller in respect of the personal data it collects directly from players through the Platform. As data controller, bn777 determines the purposes for which personal data is processed and the means by which such processing is carried out.

Where bn777 engages third-party service providers (such as payment processors, KYC verification services, or game content providers) who process personal data on our behalf, those providers act as data processors under written agreements that bind them to process data only in accordance with our instructions and in compliance with applicable data protection standards.

All data protection enquiries, access requests, and complaints should be directed in writing to: [email protected]

Data We Collect

bn777 collects the following categories of personal data from players on the Platform:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Gender (optional, where provided)
• Username chosen at registration
• Government-issued identification document details (National ID number, passport number, or driving licence number) — collected as part of KYC verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (street, city, district, postal code, country)

3.3 Financial and Transaction Data

• Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, or Upay registered mobile numbers)
• Bank account details where bank transfer methods are used (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.)
• Card details (Visa or Mastercard number — partially masked; full card data is handled exclusively by our PCI-DSS-compliant payment processor and is never stored on bn777 servers)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
• Bonus and promotional credit history

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, session duration, and login history
• Pages visited, game titles played, bet amounts, and game session data
• Referral source (e.g., search engine, affiliate partner) where applicable
• Cookies and similar tracking technologies (see Section 11)

3.5 Communications Data

• Records of all communications between you and the bn777 support team, including live chat transcripts, emails, and any support tickets raised
• Feedback, surveys, and complaints submitted through the Platform or via email

3.6 Responsible Gaming Data

• Deposit limit configurations set by the player
• Self-exclusion requests and their status
• Session time-limit settings
• Reality check preferences
• Any responsible gaming assessments or interventions applied to the account

How We Collect Data

4.1 Data Provided Directly by You

The majority of personal data we hold is provided directly by you during the following interactions:

• Account Registration: When you create a bn777 account, you provide your name, date of birth, contact details, and chosen credentials.
• KYC Verification: When you submit identity documents to verify your account, including National ID, passport, or proof of address.
• Deposits and Withdrawals: When you initiate financial transactions, you provide payment method details.
• Customer Support Interactions: When you contact our support team via email or live chat.
• Responsible Gaming Requests: When you set deposit limits, request self-exclusion, or interact with any responsible gaming tool.
• Promotional Participation: When you opt into bonus offers, free bet promotions, or seasonal competitions.

4.2 Data Collected Automatically

When you access and use the Platform, certain technical data is collected automatically through standard web and mobile technologies:

• Server log files capturing your IP address, browser type, request timestamp, and pages accessed
• Cookies and similar technologies (detailed in Section 11)
• Session analytics capturing game activity, navigation paths, and Platform performance metrics

4.3 Data Received from Third Parties

In limited circumstances, bn777 may receive personal data about you from authorised third-party sources, including:

• KYC and Identity Verification Providers: Third-party verification services that cross-reference the identity documents you submit against official databases to confirm authenticity.
• Fraud Prevention Services: Industry-standard fraud screening databases that help us identify accounts associated with fraudulent activity.
• Payment Processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other payment partners upon completion of a deposit or withdrawal.
• Affiliate Partners: Where you access bn777 through an authorised affiliate referral link, we may receive basic referral attribution data (no personal data beyond what you provide at registration).

How We Use Your Data

bn777 uses the personal data we collect for the following purposes:

Legal Bases for Processing

bn777 processes your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are as follows:

6.1 Contract Performance

The majority of our data processing is necessary to perform the contract we have with you — namely, to operate your player account, provide gaming services, and process your financial transactions. Without this processing, we would be unable to deliver the services you have requested.

6.2 Legal Obligation

Certain processing activities are required by law, including our obligations under applicable anti-money laundering legislation, gaming licence conditions, and tax reporting requirements. This includes our KYC verification procedures, transaction monitoring, and data retention obligations.

6.3 Legitimate Interests

Where processing is not strictly required for contract performance or legal compliance, bn777 may process your data on the basis of our legitimate interests, provided those interests are not overridden by your rights and interests. Our legitimate interests include: maintaining Platform security, preventing fraud and abuse, improving the quality of our services, and conducting internal analytics.

6.4 Consent

For certain non-essential processing activities — particularly direct marketing communications and the use of non-essential cookies — bn777 relies on your freely given, specific, informed consent. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

bn777 does not sell or rent your personal data to third parties. We share personal data only in the limited circumstances described below:

7.1 Payment Processors and Financial Partners

To process your deposits and withdrawals, we share necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network processors (Visa, Mastercard). These partners receive only the data required to execute the specific transaction and are bound by their own regulatory obligations regarding data protection.

7.2 Identity Verification and KYC Providers

bn777 uses accredited third-party KYC verification services to authenticate the identity documents submitted by players. These providers process your identity data under strict data processing agreements and are permitted to use it solely for the purpose of identity verification on our behalf.

7.3 Game Content Providers

Games on the bn777 Platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Depending on the game type, limited session data (such as an anonymised player identifier and bet/win data) may be transmitted to the game provider's servers to facilitate gameplay. These providers do not receive your personal identity or contact data.

7.4 Fraud Prevention and Security Services

bn777 participates in industry-standard fraud prevention networks. We may share relevant data (such as IP addresses, device fingerprints, and transaction patterns) with fraud prevention service providers to identify and block fraudulent activity. Data shared for fraud prevention purposes is handled under strict data processing agreements.

7.5 Legal and Regulatory Authorities

bn777 may be required to disclose personal data to competent legal, regulatory, or law enforcement authorities in response to a valid legal request, court order, or regulatory requirement. We will, where legally permissible, notify you of any such disclosure. bn777 will always seek to limit any disclosure to the minimum data strictly required to comply with the relevant obligation.

7.6 Business Transfers

In the event that bn777 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by bn777 may be transferred to the relevant successor entity as part of that transaction. In such circumstances, bn777 will provide reasonable advance notice to registered players and ensure that adequate data protection safeguards are in place.

International Data Transfers

bn777 operates an international online gaming platform, and as such, your personal data may be processed in jurisdictions outside Bangladesh. Where personal data is transferred internationally, bn777 ensures that appropriate safeguards are in place to protect the data, including contractual arrangements that impose data protection standards equivalent to those applied within our primary operating jurisdiction.

Game providers such as Pragmatic Play, Evolution Gaming, and others may process session data on servers located in jurisdictions including Malta, Gibraltar, or other gaming-regulated territories. All such processing is governed by data processing agreements that reflect applicable data protection standards.

If you wish to obtain further information about the international transfer safeguards applicable to your personal data, please contact us at [email protected].

Data Retention

bn777 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

Security Measures

bn777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bn777 servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon visible in your browser address bar confirms that your connection to the Platform is encrypted.
• Secure Server Infrastructure: Player data is stored on hardened servers protected by firewalls, intrusion detection systems, and access-control mechanisms. Physical server access is restricted to authorised data centre personnel.
• Access Controls: Internal access to personal data is restricted to bn777 personnel who require it in order to perform their job functions. All access is logged and subject to periodic access review.
• Password Security: Player passwords are stored in hashed form using industry-standard cryptographic algorithms. bn777 personnel cannot view your password in plain text.
• Incident Response: bn777 maintains a documented data breach response plan. In the event of a confirmed data security incident that poses a risk to your personal data, we will notify affected players without undue delay and take immediate remediation steps.
• Regular Security Assessments: Our Platform and infrastructure undergo periodic security assessments and penetration testing to identify and address potential vulnerabilities proactively.

Cookies and Tracking Technologies

bn777 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve your user experience, and — where you have consented — to deliver relevant promotional content. This section explains what cookies we use and how you can manage your preferences.

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember certain information about your session or preferences. Cookies cannot execute programmes or deliver viruses to your device.

11.2 Categories of Cookies Used by bn777

11.3 Managing Your Cookie Preferences

You can manage non-essential cookie preferences at any time through your browser settings or by contacting our support team. Please note that disabling certain cookies may affect the functionality of the Platform. The following links provide guidance on managing cookies in commonly used browsers:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and Site Permissions
• Safari (iOS/macOS): Settings → Safari → Privacy & Security

Withdrawing consent for non-essential cookies does not affect the lawfulness of any processing carried out prior to withdrawal, and does not affect strictly necessary cookies, which remain active as they are essential for the Platform to operate.

Your Data Rights

As a player on the bn777 Platform, you hold the following rights in respect of your personal data. All requests should be submitted in writing to [email protected]. We will acknowledge your request within 5 business days and aim to fulfil all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and we will notify you accordingly.

Children and Minors

The bn777 Platform is strictly intended for adults aged 21 years and above. bn777 does not knowingly collect personal data from individuals under the age of 21. All players are required to confirm their age at registration, and we conduct KYC identity verification to validate age claims.

If bn777 becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data, close the associated account, and refund any deposits made, subject to our Terms & Conditions and applicable legal obligations.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Parents and guardians concerned about underage access to online gambling platforms are encouraged to use parental control software and to review our Responsible Gaming page for further guidance and resources.

Third-Party Links

The bn777 Platform may from time to time contain references to third-party services, such as game providers or payment partners. While we take reasonable care to ensure that any third parties we work with maintain appropriate data protection standards, bn777 is not responsible for the privacy practices of external websites or services that are not under our control.

We encourage you to read the privacy policies of any third-party services you interact with independently of the bn777 Platform. The presence of a reference to a third-party provider on the Platform does not constitute an endorsement of that provider's privacy practices.

Changes to This Policy

bn777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or the technical infrastructure of the Platform. All amendments will take effect upon publication of the updated Policy on the Platform.

Where a proposed change is material — meaning it significantly affects your rights or the way in which we process your personal data — bn777 will provide at least 14 days' advance notice before the change takes effect. Notice will be provided via email to your registered address and/or via a prominent notice on the Platform.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and contact us to close your account.

We recommend reviewing this Policy periodically to remain informed of how bn777 handles your personal data. The effective date at the top of the document will always reflect the date of the most recent revision.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bn777 processes your personal data, please contact our Data Protection team using the details below:

We take all privacy-related communications seriously and aim to resolve any concerns promptly, fairly, and transparently. If you are not satisfied with our response to your enquiry or request, you have the right to escalate your complaint to the relevant supervisory or data protection authority in your jurisdiction.