dd77 Privacy Policy — Your Data, Your Rights

01 Introduction

This Privacy Policy ("Policy") describes how dd77 ("we", "us", "our", "the Platform") collects, processes, stores, and discloses the personal data of individuals ("you", "the Player") who visit, register on, or interact with the dd77 website and its associated services, including the sportsbook, live casino, slot games, and payment facilities.

dd77 is an internationally operated online gaming platform serving players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy applies to all data processing activities conducted by dd77 in connection with the delivery of its services to players in Bangladesh and internationally.

By creating a dd77 account or continuing to use the platform after the effective date of this Policy, you acknowledge that you have read and understood how your personal data is handled as described herein. If you do not agree with this Policy, you should discontinue use of the platform and contact support to arrange closure of your account.

This Policy should be read alongside dd77's Terms & Conditions and Responsible Gaming Policy, which together form the full legal framework governing your relationship with dd77.

02 Data We Collect

dd77 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from trusted third-party sources where necessary for verification and fraud prevention purposes.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, gender, and nationality as provided during account registration or KYC verification;
• Contact data: Email address, mobile phone number, and residential address;
• Identity documents: National Identity Card (NID), passport, or driving licence submitted for age and identity verification;
• Financial data: Payment method details including bKash account numbers, Nagad mobile wallet numbers, Rocket account references, bank account details, and Visa/Mastercard information as required for deposit and withdrawal processing;
• Communications data: Records of correspondence between you and the dd77 support team, including live chat transcripts, support ticket content, and email exchanges.

2.2 Data Collected Automatically

• Device data: IP address, device type, operating system, browser version, and unique device identifiers;
• Usage data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths within the platform;
• Transaction data: Full records of all deposits, withdrawals, wagers, bonus credits, and account balance changes;
• Geolocation data: Approximate geographic location derived from your IP address, used to verify eligibility and detect suspicious access patterns.

2.3 Data from Third Parties

dd77 may receive supplementary identity and fraud-screening data from KYC verification providers, payment processors such as bKash, Nagad, and banking partners, and from fraud detection services engaged to protect the platform and its players. We only receive this data where we have a documented legal basis to do so.

03 How We Use Your Data

dd77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose incompatible with what is described below without first obtaining your explicit consent.

04 Legal Basis for Processing

dd77 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the dd77 Terms & Conditions, including account creation, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, age verification mandates, and regulatory reporting duties;
• Legitimate interests: Processing carried out for dd77's legitimate business interests — including fraud prevention, platform security, and product improvement — where those interests are not overridden by your privacy rights;
• Consent: Processing carried out only where you have given clear, freely withdrawable consent, specifically for receiving promotional and marketing communications from dd77.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent, contact support or update your account preferences.

05 Data Sharing & Disclosure

dd77 does not sell your personal data. We share personal data only in the circumstances described below, and only with parties who are contractually required to handle it with the same level of care and security that we apply ourselves.

5.1 Payment Processors

To process deposits and withdrawals, dd77 shares necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and international card networks Visa and Mastercard. These parties act as independent data processors and are bound by their own privacy and security obligations.

5.2 Game Providers

dd77's casino and sportsbook products are powered by licensed third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and others. A limited dataset (typically a session token and account identifier) is passed to these providers to enable game delivery. These providers do not receive your full identity or financial profile.

5.3 Identity Verification Services

Where required for KYC compliance, dd77 engages specialist identity verification providers to authenticate documents submitted by players. These providers process identity data under strict data processing agreements and do not retain document images beyond the verification period.

5.4 Legal and Regulatory Authorities

dd77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or in connection with the investigation of fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent strictly necessary and in accordance with applicable legal process.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or asset sale involving dd77, player data may be transferred to the acquiring or successor entity. In such circumstances, dd77 will provide reasonable prior notice and ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Policy.

06 Cookies & Tracking Technologies

dd77 uses cookies and similar technologies (including local storage and session tokens) to enable core platform functionality and to understand how players interact with our services. We categorise our cookie use as follows:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable session authentication, maintain your logged-in state, preserve game session continuity, and support platform security features. These cookies cannot be disabled without impairing your ability to use dd77.

6.2 Analytics Cookies

dd77 uses aggregate, anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. This data does not identify individual players and is used exclusively for internal product improvement purposes. No third-party analytics providers are given access to individually identifiable data.

6.3 Preference Cookies

These cookies store your platform preferences — such as language settings, display options, and notification choices — so that your experience is consistent across sessions. They are not used for tracking or profiling.

6.4 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the dd77 platform and may prevent you from accessing certain features, including logging in and placing bets. Instructions for managing cookies are available in the help documentation of all major browsers.

07 Data Retention

dd77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being open, plus a minimum of 5 years after account closure for anti-money laundering compliance purposes;
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, in line with financial crime prevention requirements;
• Transaction records: Full records of all deposits, withdrawals, and wagers are retained for a minimum of 7 years;
• Support communications: Retained for 3 years after the last interaction, or longer where a dispute remains unresolved;
• Marketing data: Retained only while consent remains active. Upon withdrawal of consent, marketing data is removed from active systems within 30 days.

After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data may be retained indefinitely for statistical and product development purposes.

08 Your Rights

As a player on the dd77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the dd77 support team with your request. We will acknowledge all rights requests within 5 business days and provide a full response within 30 days.

• Right of Access: You may request a copy of the personal data that dd77 holds about you, including information about how it is being used;
• Right to Rectification: If any personal data held by dd77 is inaccurate or incomplete, you have the right to request that it be corrected without undue delay;
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Restriction: You may request that dd77 restrict processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved;
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format;
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

09 Children & Minors

The dd77 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If dd77 discovers that personal data belonging to a minor has been collected — whether through a misrepresentation during registration or any other means — the account will be immediately suspended, all data will be deleted, and any funds will be returned to the originating payment source following a review.

Parents and guardians who believe that a minor may have registered on the dd77 platform are urged to contact our support team immediately. dd77 takes the protection of minors extremely seriously and cooperates fully with any lawful request related to underage access.

dd77 employs age verification checks at registration and may request documentary proof of age at any point during a player's account lifetime. Please visit our Responsible Gaming page for more information on the tools available to prevent underage access.

10 Security Measures

dd77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the dd77 platform;
• Encryption at rest for all sensitive personal and financial data stored on dd77's servers;
• Role-based access controls ensuring that only authorised personnel with a documented operational need can access player data;
• Multi-factor authentication requirements for all internal administrative systems accessing player data;
• Regular penetration testing and third-party security audits to identify and remediate vulnerabilities;
• Intrusion detection and monitoring systems to identify and respond to suspicious access patterns in real time;
• Secure data backup procedures with encrypted off-site storage to support business continuity.

While dd77 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, dd77 will notify affected players without undue delay and will take all necessary remedial steps.

11 Third-Party Services

The dd77 platform integrates with a number of third-party services to deliver games, process payments, and support platform operations. When you interact with these services through the dd77 platform, a limited amount of data may be shared with the relevant third party as described in Section 5 of this Policy.

dd77 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services. Players are encouraged to review the privacy policies of the relevant third parties if they have concerns about how their data is handled by those parties directly. However, dd77 conducts due diligence on all third-party partners and requires contractual privacy and security commitments before entering into any data-sharing arrangement.

dd77 does not operate social media plugins, embedded third-party advertising widgets, or external tracking scripts that would cause your data to be shared with social networks or advertising platforms without your knowledge.

12 Policy Updates

dd77 reserves the right to update or amend this Privacy Policy at any time. Changes will be effective immediately upon publication of the updated Policy on the dd77 website. Material changes — those that meaningfully affect how your data is used or your rights in relation to it — will be communicated to registered players by email to the address on file, or via a prominent notice on the platform, at least 14 days before the change takes effect.

The version number and effective date at the top of this Policy will always reflect the most current version. We recommend that you review this Policy periodically to stay informed about how dd77 is protecting your information. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised Policy.

A full archive of previous versions of this Policy is available on request from the dd77 support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dd77 handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days.

Email: [email protected]
Hours: 24 hours a day, 7 days a week
Response time: Within 5 business days for formal data requests; within 24 hours for general support enquiries