tb77 Privacy Policy – Your Data, Your Rights

This Privacy Policy ("Policy") describes how tb77 ("tb77", "we", "us", "our") collects, uses, stores, shares and protects personal data relating to users ("you", "your", "Player") of the tb77 online casino and sports betting platform available at tb77.lat. This Policy forms part of the tb77 Terms and Conditions and should be read alongside them. By registering an account or using the Platform in any way, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

tb77 takes data protection seriously. We collect only the personal data that is necessary to provide you with a safe, functional and compliant online gaming experience. We do not sell personal data to third parties, and we do not use your data for purposes unrelated to the operation of the Platform and the services we provide to you.

Privacy at a Glance

The following summary covers the six most important points of this Policy. Please read the full sections below for complete details.

1. Information We Collect

tb77 collects personal data in the following categories, depending on how you interact with the Platform:

• Identity data: your full legal name, date of birth, gender, and government-issued identification document details (National ID, passport number) collected as part of the KYC verification process. This data is required to comply with age verification obligations and to prevent fraud and identity theft.
• Contact data: your email address, mobile telephone number and, where provided, your residential address. This data is used to communicate with you about your account, to process withdrawals, and to send service notifications.
• Financial data: transaction history, deposit amounts, withdrawal amounts, payment method identifiers (e.g. bKash account reference, Nagad wallet ID, bank account last-four digits), and account balance information. This data is required to process payments, prevent money laundering, and maintain accurate financial records.
• Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, mobile network operator, and session timestamps. This data is collected automatically when you access the Platform and is used to detect fraud, maintain security, and improve the Platform's performance.
• Behavioural and gaming data: bet history, game session logs, bonus usage records, responsible gaming tool settings (e.g. deposit limits you have set), and customer support interaction records. This data is used to deliver a personalised experience, to detect problem gambling patterns, and to respond to support queries.

Where tb77 collects personal data directly from you (for example, at registration or when you contact support), provision of that data is either a contractual requirement — meaning the Platform cannot function without it — or a voluntary choice where the consequences of not providing it are explained at the point of collection.

2. How We Use Your Information

tb77 uses your personal data only for the purposes described below. We do not use your data for automated decision-making that produces legal effects without human review, and we do not use your data for purposes that are incompatible with those for which it was originally collected.

• Account management and service delivery: to register and maintain your account, process deposits and withdrawals, verify your identity and age, issue and track bonuses, and provide you with access to games and betting markets.
• Fraud prevention and security: to detect and investigate fraudulent activity, bonus abuse, account takeovers, money laundering and other prohibited conduct as described in the Terms and Conditions. We use automated systems that flag unusual patterns for human review.
• Responsible gaming compliance: to monitor gaming behaviour for indicators of problem gambling, to apply player-set limits, to enforce self-exclusion requests, and to intervene proactively where we identify a player who may be experiencing harm from gambling.
• Customer support: to receive, process and respond to your support requests, complaints and queries; to maintain a record of communications for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, to respond to lawful requests from competent authorities, and to maintain financial records as required by applicable law.
• Platform improvement and analytics: to analyse aggregated, anonymised usage patterns to improve the Platform's functionality, game selection, payment system reliability and overall user experience. Individual player data is not used for this purpose in a form that identifies you personally.

3. Legal Basis for Processing

tb77 processes your personal data on one or more of the following legal grounds, depending on the specific purpose and category of data involved:

• Contractual necessity: processing that is necessary to provide the tb77 service to you in accordance with the Terms and Conditions you accepted at registration — including account management, payment processing and KYC verification.
• Legal obligation: processing that is required to comply with applicable legal and regulatory requirements — including AML record-keeping, age verification and responding to lawful authority requests.
• Legitimate interests: processing carried out in tb77's legitimate interests — including fraud prevention, security monitoring, responsible gaming oversight and Platform analytics — provided such interests do not override your fundamental rights and freedoms.
• Consent: where tb77 sends you optional promotional communications (e.g. bonus offer emails), this is done on the basis of your consent given at registration or subsequently. You may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe link in any marketing email.

4. Sharing Your Information

tb77 does not sell, rent or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors and financial institutions: we share the minimum necessary financial data with payment partners (including bKash, Nagad, Rocket, Upay and banking partners) to process deposits and withdrawals. These partners process data as independent data controllers under their own privacy policies.
• Game and platform technology providers: we share session data and account identifiers with game providers (such as Evolution Gaming and Pragmatic Play) to enable you to access their games on the tb77 Platform. These providers are bound by contractual confidentiality obligations.
• Legal and regulatory authorities: we disclose personal data to competent governmental, law enforcement or regulatory authorities where we are legally required to do so — for example, in response to a court order, a lawful AML investigation request, or a legally valid subpoena.
• Corporate transactions: in the event of a merger, acquisition, restructuring or sale of all or part of tb77's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

tb77 requires all third parties who process personal data on our behalf to implement appropriate technical and organisational security measures and to use personal data only for the purposes specified by tb77. We do not allow third-party partners to use your data for their own marketing or commercial purposes.

5. Payment Data and Financial Information

tb77 processes payment data to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank and Visa/Mastercard. We do not store full card numbers, CVV codes or full mobile wallet PINs on our servers. Payment credentials are transmitted directly to the relevant payment processor using encrypted channels. tb77 retains transaction reference identifiers, amounts and timestamps for accounting, fraud prevention and dispute resolution purposes.

All financial data held by tb77 is maintained in segregated, encrypted storage systems with strict access controls. Only authorised tb77 personnel with a legitimate operational need may access financial records, and all such access is logged and auditable. tb77 conducts regular internal audits of financial data access logs to detect and prevent any unauthorised access or internal data misuse.

6. Cookies and Tracking Technologies

tb77 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit tb77.lat. We use the following categories of cookies:

• Essential cookies: strictly necessary for the Platform to function — for example, session authentication cookies that keep you logged in during your visit, and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform's core functionality.
• Analytics cookies: used to collect anonymised, aggregated data about how players use the Platform — for example, which pages are visited most frequently, how long sessions last, and which games are most popular. This data helps tb77 improve the Platform experience. These cookies do not identify you personally.
• Preference cookies: used to remember your Platform settings — for example, your preferred language (English or Bengali), display preferences and session configuration. These cookies improve your experience by ensuring the Platform behaves consistently between visits.

You can manage non-essential cookies through your browser settings. Note that disabling analytics or preference cookies will not prevent you from using the Platform, but may affect some personalisation features. tb77 does not use third-party advertising cookies or retargeting pixels.

7. Data Retention

tb77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply: account data and KYC documents are retained for the duration of the account's active life plus a minimum of five (5) years following permanent account closure, to meet applicable financial record-keeping and AML obligations. Transaction records are retained for a minimum of seven (7) years in accordance with financial regulatory requirements.

Gaming behaviour data (bet history, session logs) is retained for the same minimum five-year period following account closure, to support responsible gaming monitoring, dispute resolution and fraud investigations. Support correspondence is retained for three (3) years from the date of the last communication in a given thread. When data is no longer required for any of these purposes, it is securely deleted or irreversibly anonymised.

8. Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data that tb77 holds about you:

• Right of access: you have the right to request a copy of the personal data that tb77 holds about you, along with information about how it is being used. Requests will be fulfilled within 30 calendar days of receipt, free of charge for the first request in any 12-month period.
• Right to rectification: you have the right to request that inaccurate or incomplete personal data held by tb77 be corrected or completed. For account information such as name and contact details, you may update some fields directly in your account settings; for identity documents, please contact support.
• Right to erasure: in certain circumstances you may request that tb77 delete your personal data — for example, where the data is no longer necessary for the purposes for which it was collected and there is no overriding legal obligation requiring retention. Note that tb77 may be unable to delete data that it is legally required to retain (such as AML transaction records).
• Right to restriction: you have the right to request that tb77 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis on which tb77 is processing your data.
• Right to withdraw consent: where tb77 processes your data on the basis of your consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact our support team in writing at [email protected]. Please include your registered account username and a description of your request so we can locate your data and respond efficiently. tb77 will acknowledge your request within 5 business days and will endeavour to fulfil it within 30 calendar days.

9. Security Measures

tb77 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: SSL/TLS encryption for all data transmitted between your device and tb77.lat; encrypted storage of sensitive personal and financial data at rest; role-based access controls that limit internal data access to authorised personnel with a legitimate operational need; regular security assessments and penetration testing of the Platform's infrastructure; and multi-factor authentication requirements for internal administrative access to player data systems.

While tb77 takes data security seriously and maintains robust protections, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: use a strong, unique password, do not share your login credentials with anyone, and contact tb77 support immediately if you suspect your account has been compromised. tb77 will never ask for your password by email, chat or phone.

10. Children and Minors

tb77 is strictly an adult platform. The Platform is not directed at, and is not intended for use by, any person under the age of 21. tb77 does not knowingly collect personal data from individuals under the age of 21. If tb77 becomes aware that personal data has been collected from a person under 21 — whether through age verification failure, parental notification or any other means — that account will be immediately suspended, all associated funds returned to the payment source, and the personal data securely deleted to the extent permitted by law. If you believe that a person under 21 has registered on tb77, please notify us immediately at [email protected].

11. Changes to This Privacy Policy

tb77 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or share data with a new class of third party — we will notify registered players by email at least 14 days before the changes take effect. The date of the most recent revision is shown at the top of this page. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how tb77 protects your data.

12. Contact and Data Queries

If you have any questions, concerns or requests relating to this Privacy Policy or to tb77's handling of your personal data, please contact our support team at [email protected]. Our team is available 24/7 and will acknowledge privacy-related queries within 5 business days. Please include your registered account username and a clear description of your query so we can respond as efficiently as possible.