677b Privacy Policy

1 Introduction

677b ("we", "us", "our") operates the online casino and sports betting platform accessible at https://677b.io (the "Platform"). We are committed to protecting the privacy and personal data of every individual who visits, registers on, or otherwise interacts with the Platform ("you", "your", "User").

This Privacy Policy sets out in clear, plain English the categories of personal data we collect about you, the purposes for which we process that data, the legal bases on which we rely, the circumstances in which we may share your data with third parties, your rights in relation to your personal data, and how you may exercise those rights.

This policy applies to all personal data processed by 677b in connection with the Platform, including data collected through the 677b Login process, during payment transactions in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and through any electronic communication between you and 677b support.

This Privacy Policy should be read alongside the 677b Terms & Conditions and Responsible Gaming Policy, both of which are published on the Platform. By creating a 677b account, completing the 677b Login, or placing any wager, you acknowledge that you have read and accepted this Privacy Policy in its entirety.

2 Personal Data We Collect

677b collects the following categories of personal data about registered Users and Platform visitors. We collect only data that is proportionate and necessary for the purposes described in Section 4.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data unless you voluntarily disclose such information in the course of a responsible gaming self-assessment or a support communication, in which case it is used solely to assist you and is not shared.

3 How We Collect Your Data

677b collects your personal data through the following channels:

• Directly from you: When you register a 677b account, complete the 677b Login, make a deposit or withdrawal request, submit a KYC document, contact support, or participate in a promotional offer.
• Automatically: When you access the Platform, our servers and analytics tools automatically record Technical Data and Usage Data as described in Section 2. This includes cookie-based data collection as detailed in Section 7.
• From payment providers: When you make a deposit via bKash, Nagad, Rocket, or Upay, our payment processing partners share confirmation data (transaction reference, amount, mobile wallet number) with 677b to credit your account balance.
• From KYC verification partners: Where 677b uses a third-party identity verification service to check the authenticity of documents you submit, that service may return a verification result and risk score to 677b. The underlying document data is handled in accordance with the KYC partner's own privacy policy.
• From fraud prevention services: 677b may receive data from industry fraud-prevention databases to identify accounts associated with known fraudulent activity, money laundering, or underage gambling.

4 How We Use Your Personal Data

677b processes your personal data for the following purposes. Each purpose is linked to a legal basis, which is set out in full in Section 5.

• Account creation and management: To create, maintain, and administer your 677b account, including enabling the 677b Login, managing your Real Money and Bonus Balances, and processing account closure requests.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, reconcile transactions, and maintain accurate financial records.
• Age and identity verification (KYC): To verify that you are at least 21 years of age and are the true holder of the identity and payment details provided. This is a regulatory and responsible gaming obligation.
• Platform operation and improvement: To monitor Platform performance, identify and resolve technical issues, analyse usage patterns, and improve the user experience for all players based in Bangladesh and beyond.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion settings you have requested, and contact you with responsible gaming information where appropriate.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multiple account creation, bonus abuse, money laundering, and unauthorised access to accounts.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in accordance with the 677b Terms & Conditions.
• Legal compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement and relevant authorities in Bangladesh.
• Marketing communications: To send you promotional offers, bonus notifications, and news about 677b events (such as BPL and T20 cricket promotions) where you have consented to receive such communications. You may withdraw this consent at any time.

5 Legal Basis for Processing

677b relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and 677b — namely operating your account, processing payments, verifying your identity, and resolving disputes.
• Legal obligation: Processing required to comply with applicable laws, including KYC and anti-money-laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for 677b's legitimate business interests where those interests are not overridden by your fundamental rights. This includes fraud prevention, Platform security, and analytical improvements to the user experience.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Third Parties

677b does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive only the financial data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents you submit. These providers are bound by strict confidentiality and data processing agreements.
• Fraud prevention services: Industry databases used to identify and prevent fraudulent activity. Data shared is limited to the minimum necessary to perform a fraud check.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous session identifier to manage your in-game session. They do not receive your full name, financial data, or contact details.
• Customer support platforms: Third-party live chat and ticketing tools used to manage support communications. These tools process Communication Data solely for the purpose of providing you with support.
• Legal and regulatory authorities: 677b will disclose personal data to law enforcement, regulatory bodies, or other authorities when required to do so by a lawful order, warrant, or applicable legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 677b's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections set out in this policy.

All third-party partners with whom 677b shares personal data are required to process that data only for the specified purpose, maintain appropriate technical and organisational security measures, and comply with applicable data protection law. We do not permit third-party partners to use your data for their own unrelated purposes.

7 Cookies and Tracking Technologies

677b uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain your logged-in session after completing the 677b Login, and to understand how Users interact with the Platform so that we can continue to improve it.

We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They include your session cookie (which keeps you logged in after the 677b Login), security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language, selected game category, and responsible gaming settings, so that you do not need to re-enter them on each visit.
• Analytical cookies: These cookies collect anonymised information about how Users navigate the Platform — which pages are visited most frequently, where Users drop off, and which features are most popular. This data is used exclusively to improve the Platform experience. No personally identifiable information is included in analytical cookie data.

677b does not use third-party advertising cookies or behavioural tracking cookies that build profiles of your online activity outside of the 677b Platform. You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including the 677b Login process.

8 Data Retention

677b retains your personal data for no longer than is necessary for the purposes for which it was collected, taking into account legal retention obligations and legitimate business needs. The following retention periods apply:

• Active account data: Retained for the full duration of your active 677b account relationship.
• Account data following closure: Retained for a minimum of five (5) years following account closure to comply with anti-money-laundering record-keeping obligations and to enable resolution of any disputes that may arise after closure.
• KYC documents: Retained for a minimum of five (5) years following the completion of verification, in accordance with applicable legal requirements.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction to comply with financial record-keeping obligations.
• Support communications: Retained for three (3) years following the closure of each support ticket, to enable review in the event of a subsequent dispute.
• Marketing consent records: Retained for the period during which consent is active, plus three (3) years following withdrawal of consent as evidence of the consent lifecycle.
• Technical and usage data (anonymised): Anonymised analytical data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes personal data once anonymised.

At the end of the applicable retention period, personal data is securely deleted from 677b systems or irreversibly anonymised so that it can no longer be associated with any individual User.

9 Data Security

677b takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all pages of the Platform, including the 677b Login page and all payment pages, ensuring that data in transit cannot be intercepted.
• Encrypted storage of sensitive data fields, including passwords (which are stored as salted cryptographic hashes and never in plain text) and financial account details.
• Role-based access controls ensuring that only authorised 677b personnel with a legitimate business need can access personal data, with all access activity logged and audited.
• Automated session timeout on the Platform to protect accounts that have been left unattended.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that ensure any data breach affecting User personal data is identified promptly, contained, and — where legally required — notified to the relevant authority and affected Users without undue delay.

While 677b takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure: please use a strong, unique password for your 677b Login, enable any two-factor authentication option offered, and contact [email protected] immediately if you suspect unauthorised access to your account.

10 Your Data Rights

As a User of the 677b Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and your 677b account username. We will respond within ten (10) business days of receiving your complete request.

Please note that some rights are subject to limitations. For example, the right to erasure does not apply where 677b is required by law to retain the data, such as KYC records and financial transaction records subject to anti-money-laundering retention periods. 677b will always explain the basis for any limitation applied to a rights request.

11 Children and Underage Users

The 677b Platform is strictly for adults aged 21 and above. 677b does not knowingly collect, process, or retain personal data from individuals under the age of 21. If you are under 21, you must not attempt to register an account, complete the 677b Login, or place any wager on the Platform.

If 677b discovers or has reasonable grounds to believe that a registered User is under 21, the account will be closed immediately, all pending transactions will be cancelled, and any balance will be voided. Any personal data collected in connection with such an account will be deleted promptly, subject only to any legally required retention of records relating to the underage access incident itself.

If you are a parent or guardian and you believe that a minor in your household has registered a 677b account or has accessed the Platform, please contact [email protected] immediately. We recommend using parental control software to restrict access to online gambling websites. 677b takes underage gambling prevention extremely seriously as part of its responsible gaming commitment.

12 Third-Party Links

The 677b Platform does not contain links to third-party websites for general browsing purposes. In the limited cases where 677b references third-party services — for example, payment provider names such as bKash or Nagad — those services operate under their own privacy policies, which are entirely separate from and independent of this 677b Privacy Policy.

677b is not responsible for the privacy practices, data security measures, or content of any third-party service. If you interact with a payment provider's own application or website (for example, the bKash mobile app) as part of completing a deposit or withdrawal, that interaction is governed by the relevant provider's own privacy policy. We encourage you to review the privacy policies of all third-party services you use in connection with your 677b account.

13 Changes to This Privacy Policy

677b reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When changes are made, we will publish the updated policy on this page with a revised effective date at the top of the document.

Where changes are material — for example, where we introduce a new category of personal data collection, a new purpose for processing, or a new category of third-party recipient — we will notify registered Users by email to the address associated with their 677b account at least fourteen (14) days before the changes take effect. For minor or administrative updates, the revised policy will take effect on the date of publication.

Your continued use of the 677b Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated policy, you should cease using the Platform and contact [email protected] to request account closure. We encourage you to review this page periodically to stay informed of how 677b protects your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 677b processes your personal data, please contact our support team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy concerns: "Privacy Enquiry"
• Support hours: 24 hours a day, 7 days a week, including Eid and public holidays in Bangladesh
• Response time: Privacy and data rights requests responded to within 10 business days
• Language: English

677b is committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with the response you receive, you may have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction.