Privacy Policy — How 277be Protects Your Data

This Privacy Policy ("Policy") describes how 277be ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data provided by or obtained about users ("you", "your") of the 277be website located at https://277be.io and all associated services, games, and features (collectively, "the Services").

277be is committed to protecting your privacy and handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By accessing the platform, creating an account, or making use of any of the Services, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the 277be Terms and Conditions and the Responsible Gaming Policy. In the event of any conflict between this Policy and the Terms and Conditions with respect to data handling obligations, this Policy shall take precedence for matters relating to personal data.

277be collects only the personal data that is necessary for the lawful and efficient operation of the platform and the delivery of Services to you. The categories of personal data we may collect include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data, except where you voluntarily provide information about a health condition in the context of a responsible gaming self-exclusion request — in which case such data is processed solely for the purpose of applying the requested restriction.

277be collects personal data through the following channels:

• Direct submission: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or submit a complaint.
• Automated collection: Technical and usage data collected automatically when you access the platform, including via cookies, web beacons, server logs, and similar tracking technologies described in Section 9 of this Policy.
• Payment processors: Transaction confirmation data received from mobile financial service providers including bKash, Nagad, Rocket, and Upay, and from banking partners including BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, and Sonali Bank.
• Third-party game studios: Aggregated gameplay performance and session data may be shared by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Ezugi solely for the purposes of result verification, dispute resolution, and fair play auditing.
• Identity verification services: Where automated document verification tools are used to assist with KYC checks, data may be passed to and received from approved identity verification service providers operating under confidentiality obligations.

277be uses your personal data only for the purposes for which it was collected or for closely related compatible purposes. The primary uses of your data are as follows:

• To create and manage your 277be account, including verifying your identity and age as required under our eligibility policy (21+ only).
• To process deposits and withdrawals and to maintain an accurate record of your transaction history on the platform.
• To provide you with access to betting markets, casino games, slots, and all other Services available on the 277be platform.
• To comply with anti-money laundering (AML) obligations, including monitoring transactions for suspicious activity and reporting to relevant authorities where legally required.
• To personalise your experience on the platform, including tailoring bonus and promotional offers to your account profile and gameplay preferences, subject to your marketing preferences.
• To send you service-related communications such as account notifications, deposit confirmations, withdrawal updates, and security alerts. These communications are not optional as they are necessary for the operation of your account.
• To operate responsible gaming monitoring tools, including detecting usage patterns that may indicate problem gambling behaviour and applying any limits or restrictions you have voluntarily set.
• To investigate and resolve complaints, disputes, and suspected fraudulent or prohibited activity.
• To improve the performance, security, and user experience of the platform through aggregated analytics and technical monitoring.

277be processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing that is necessary to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing that is required by applicable law, including anti-money laundering regulations, age verification requirements, and any reporting obligations to competent authorities.
• Legitimate interests: Processing carried out in pursuit of 277be's legitimate business interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your own rights and interests.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — including for optional marketing communications and for the processing of voluntarily provided health-related data in a responsible gaming context. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

277be does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment service providers: Financial data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely to the extent necessary to process your deposit and withdrawal transactions.
• Identity and age verification providers: Identity documents and relevant personal data may be shared with approved KYC and age verification service providers under strict confidentiality obligations.
• Game studios and technology providers: Aggregated or session-level gameplay data may be shared with licensed game studios including Pragmatic Play, Evolution Gaming, and Spribe strictly for result verification and audit purposes.
• Regulatory and law enforcement authorities: We may disclose personal data to competent authorities when required to do so by law, court order, or in response to a lawful request from a regulatory or law enforcement body.
• Fraud prevention and AML agencies: We may share data with industry fraud prevention and anti-money laundering agencies where we have reasonable grounds to suspect prohibited financial activity.
• Professional advisers: Personal data may be disclosed to our legal advisers, auditors, and other professional service providers where strictly necessary and subject to confidentiality obligations.

Any third party that receives your personal data from 277be is required to handle it in accordance with applicable data protection principles and may only use it for the specific purpose for which it was shared. We do not permit third-party recipients to use your data for their own marketing or commercial purposes.

277be retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of account closure or last transaction, whichever is later, in order to satisfy AML and record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date the documents were submitted. Where regulatory obligations require a longer retention period, the longer period applies.
• Support and complaints correspondence: Retained for a minimum of 3 years from the date the matter was resolved, to support any subsequent dispute or legal proceedings.
• Technical and usage data: Typically retained for up to 24 months for analytics and fraud prevention purposes, after which data is aggregated or anonymised and is no longer traceable to an individual.
• Marketing preferences and consent records: Retained for as long as you hold an active account with 277be, and for 1 year after account closure.

When personal data is no longer required for any of the above purposes, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. 277be reviews its data holdings periodically to ensure that no data is retained beyond its applicable retention period.

277be applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the 277be servers, ensuring that your account credentials and financial data cannot be intercepted in transit.
• Encryption of sensitive data at rest, including identity documents, financial records, and authentication credentials stored within our systems.
• Role-based access controls that restrict access to personal data to only those members of the 277be team who require it for a specific, legitimate operational purpose.
• Multi-factor authentication requirements for administrative access to systems that process or store personal data.
• Regular penetration testing and vulnerability assessments carried out by independent security professionals to identify and remediate weaknesses in the platform's security posture.
• Comprehensive audit logging of all access to systems containing personal data, enabling the detection and investigation of any unauthorised access attempts.

277be uses cookies and similar tracking technologies to operate the platform effectively, to remember your preferences, and to collect the technical and usage data described in Section 2. Cookies are small text files placed on your device when you visit the platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in to your account and security cookies that help protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences such as language settings and display options, so that the platform delivers a consistent experience each time you visit.
• Analytics cookies: Used to collect aggregated information about how users navigate the platform, which pages are most visited, and where technical errors occur. This data is used solely to improve the platform and does not identify you personally.
• Session tracking cookies: Used to monitor the duration and pattern of your gameplay sessions in support of the platform's responsible gaming obligations, including automatic session time reminders.

You can control the use of non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect certain aspects of your experience on the 277be platform. Disabling strictly necessary cookies will prevent the platform from functioning correctly and will make it impossible to maintain a logged-in session.

As an individual whose personal data is processed by 277be, you have the following rights with respect to your data. To exercise any of these rights, please contact the 277be support team at [email protected] with a clear description of your request and evidence of your identity.

• Right of access: You have the right to request a copy of the personal data that 277be holds about you, along with information about how it is being used. We will respond to a valid access request within 30 days.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. Where a correction request is valid, we will update your records without undue delay.
• Right to erasure: You may request that 277be delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds for continued processing. Note that this right is subject to our retention obligations under applicable law, including AML record-keeping requirements.
• Right to restrict processing: You may request that 277be restricts the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending our assessment of that objection.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling for personalised bonus offers. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

The 277be platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps specifically designed to prevent minors from creating accounts.

If 277be becomes aware that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. Any funds deposited by an underage user will be handled in accordance with our Terms and Conditions and applicable law.

If you have reason to believe that a minor may have registered an account on the 277be platform, please notify our support team immediately at [email protected]. We take underage access extremely seriously and will investigate all such reports without delay.

277be reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made, we will notify active account holders by email to the address registered on their account and will update the "Last updated" date at the top of this page. The revised Policy will take effect from the date it is published unless a later effective date is stated.

We encourage you to review this Policy periodically to stay informed about how 277be protects your personal data. Your continued use of the platform following the publication of a revised Policy constitutes your acknowledgement of the changes. If you do not accept a revised version of this Policy, you should cease using the platform and contact [email protected] to arrange account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 277be handles your personal data, please contact the support team using the details below. All privacy-related correspondence is handled with strict confidentiality and in accordance with the standards described in this Policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Enquiry — [Your Username]"
• Response time: within 24 hours for general enquiries; within 30 days for formal data subject rights requests
• Operating hours: 24/7 on Bangladesh Standard Time (BST, UTC+6)

277be is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter through the formal complaints procedure described in the Terms and Conditions.