ba77 Privacy Policy
— How We Protect Your Data
At ba77, protecting the personal data of every player in Bangladesh is a core obligation — not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how we store and protect it, and what rights you hold over your own data at every stage of your ba77 account lifecycle.
Six Privacy Principles ba77 Lives By
The full Privacy Policy appears below. These six cards capture the core principles underpinning ba77's approach to data protection. In all cases, the full policy governs.
Minimal Data Collection
ba77 collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and comply with applicable legal obligations. We do not collect data for its own sake.
Encrypted at Every Step
All data transmitted between your device and ba77 servers is protected by 256-bit SSL/TLS encryption. Data at rest is stored in access-controlled environments with industry-standard encryption applied to sensitive fields.
Your Data Is Never Sold
ba77 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Data shared with service partners is limited to what is operationally required and is governed by binding data processing agreements.
You Control Your Data
You retain the right to access, correct, export, or request deletion of your personal data at any time by contacting ba77 support. Requests are processed within a reasonable timeframe consistent with our legal obligations.
Defined Retention Periods
ba77 retains personal data only for as long as it is needed to fulfil the purposes described in this policy, or as required by applicable law. Account data is deleted or anonymised following the retention period unless a legal hold applies.
Transparent Policy Updates
Whenever this Privacy Policy is materially updated, ba77 will notify registered players by email or via a prominent in-platform notice at least seven days before the changes take effect. Continued use of ba77 constitutes acceptance.
This Privacy Policy explains how ba77 ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "the Player") who access or use the ba77 website and services. By creating a ba77 account or using any part of the ba77 platform, you acknowledge that you have read and understood this Privacy Policy. This policy is incorporated by reference into the ba77 Terms & Conditions.
Table of Contents
1 Data Controller
1.1 For the purposes of this Privacy Policy, ba77 is the data controller responsible for your personal data. ba77 operates the online gaming and sports betting platform accessible at ba77.io and is the entity that determines the means and purposes of processing your personal information.
1.2 If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, you may contact the ba77 Data Protection team at any time:
- Email:
- Live Chat: Available 24 hours a day, 7 days a week through the ba77 platform
- Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6)
2 Data We Collect
2.1 Registration Data. When you create a ba77 account, we collect the information you provide directly, including your full legal name, date of birth, Bangladeshi mobile phone number, email address, and the login credentials you choose (username and hashed password).
2.2 Identity Verification (KYC) Data. As part of our Know Your Customer process, we may collect copies of government-issued identification documents (such as your National Identity Card or passport), proof of residential address, and documentary evidence of ownership of the payment method you use to deposit funds.
2.3 Transaction Data. We record all financial transactions associated with your ba77 account, including deposit amounts, withdrawal requests, bet histories, bonus credits, wagering activity, and the payment method identifiers (e.g., bKash mobile number, Nagad wallet reference) associated with each transaction.
2.4 Technical and Device Data. When you access ba77, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, and the pages you visit within the ba77 platform along with timestamps for each visit.
2.5 Communication Data. If you contact ba77 support by email, live chat, or any other channel, we retain records of that correspondence including the content of your messages, the time of contact, and the outcome of any support interaction.
2.6 Behavioural and Gaming Data. We collect data about how you use the ba77 platform, including the games you play, time spent per session, betting patterns, and feature interactions. This data is used to improve platform performance and to support responsible gaming monitoring.
Summary of data categories and their sources:
| Data Category | Source | Required? |
|---|---|---|
| Registration details (name, DOB, contact) | Provided by you at sign-up | Mandatory |
| KYC / identity documents | Provided by you during verification | Mandatory for withdrawals |
| Transaction and payment records | Generated through platform use | Mandatory |
| Device and technical data | Collected automatically | Automatic |
| Support communications | Provided by you when contacting support | Only when you contact us |
| Behavioural and gaming data | Collected automatically during sessions | Automatic |
3 Lawful Basis for Processing
ba77 processes your personal data on one or more of the following lawful grounds:
- Contractual Necessity: Processing is necessary to perform our contract with you — for example, to operate your account, process deposits and withdrawals, and settle bets.
- Legal Obligation: Processing is necessary to comply with applicable laws — for example, anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and improving the quality of our services — provided those interests are not overridden by your rights.
- Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or adjusting your account communication preferences.
4 How We Use Your Data
4.1 Account Operations. Your registration and transaction data is used to create and maintain your account, authenticate your logins, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, and provide customer support.
4.2 Identity Verification. KYC data is used to verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and that your payment method belongs to you. This is required before withdrawals are processed and may be re-requested following significant account changes.
4.3 Fraud Prevention and Security. Technical data, behavioural data, and transaction records are analysed by ba77's automated fraud detection systems to identify unusual patterns, prevent account takeover, detect bonus abuse, and protect the integrity of the ba77 platform and its players.
4.4 Responsible Gaming. Behavioural and gaming data is used to identify indicators of potentially problematic gambling behaviour, to enforce self-imposed account limits, and to support ba77's responsible gaming obligations. Players who show signs of distress may be contacted proactively by the ba77 support team.
4.5 Legal and Regulatory Compliance. Transaction records, KYC data, and communication logs are retained as required by applicable anti-money laundering, counter-terrorist financing, and financial regulation frameworks. This data may be disclosed to competent authorities upon lawful request.
4.6 Platform Improvement. Aggregated, anonymised data about platform usage patterns helps ba77 improve its user interface, game offering, payment processes, and support services. This data cannot be used to identify any individual player.
4.7 Marketing Communications. With your consent, ba77 may send you promotional communications about new games, bonuses, and platform features via email or in-app notification. You may opt out at any time by contacting support at .
5 Data Sharing and Disclosure
5.1 ba77 does not sell, rent, or share your personal data with third parties for their own commercial marketing purposes. Data is shared with third parties only in the following circumstances:
- Payment Processors: To process your deposits and withdrawals, ba77 shares necessary transaction data with approved payment providers including bKash, Nagad, Rocket, Upay, and banking partners. These providers are contractually obligated to use your data solely for payment processing purposes.
- KYC and Fraud Prevention Providers: ba77 may use third-party identity verification and fraud detection services. These providers receive only the data necessary to perform their specific function and are bound by confidentiality and data protection obligations.
- Game Software Providers: ba77 hosts games developed by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, and others. Game providers may receive anonymised session and wagering data necessary to operate their games. They do not receive your personal identity data.
- Legal and Regulatory Authorities: ba77 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities in Bangladesh or internationally where required by law, court order, or for the prevention and detection of serious crime including financial fraud and money laundering.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of ba77's business assets, personal data held by ba77 may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this policy will be maintained.
In every case where ba77 shares data with a third-party processor, we require that processor to maintain security standards consistent with this Privacy Policy. ba77 remains responsible for ensuring your data is handled appropriately by our partners.
6 International Data Transfers
6.1 Some of ba77's technology and service partners operate infrastructure outside Bangladesh. Where your personal data is transferred to servers or processors located in other countries, ba77 ensures that appropriate safeguards are in place, such as contractual data transfer agreements that impose obligations equivalent to the protections described in this Privacy Policy.
6.2 By using the ba77 platform, you acknowledge that your data may be processed in countries outside Bangladesh. In all such cases, ba77 applies the same standard of care to your data regardless of where it is processed.
7 Data Retention
7.1 ba77 retains your personal data for the minimum period necessary to fulfil the purposes outlined in this policy. The following general retention periods apply:
- Active Account Data: Retained for the duration of your account relationship with ba77 and for a minimum of five (5) years following account closure, to comply with financial record-keeping obligations.
- KYC Documents: Retained for a minimum of five (5) years following the end of the account relationship, or longer if required by applicable law.
- Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction for anti-money laundering compliance purposes.
- Support Communications: Retained for two (2) years from the date of the interaction unless the communication forms part of an ongoing investigation or legal matter.
- Technical and Device Logs: Retained for twelve (12) months from the date of collection unless retained longer for fraud investigation purposes.
7.2 When data is no longer required and no legal obligation to retain it exists, ba77 will securely delete or anonymise it so that it can no longer be associated with any individual.
8 Security Measures
8.1 ba77 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ba77 servers
- One-way cryptographic hashing of passwords — no ba77 staff member can read your password in plain text
- Multi-factor authentication options for account access
- Role-based access controls limiting staff access to personal data on a strict need-to-know basis
- Regular security audits and vulnerability assessments of the ba77 platform
- Automated intrusion detection systems monitoring for unusual access patterns
- Segregated data storage environments separating financial data from general account data
8.2 Despite these measures, no internet-based service can guarantee absolute security. If you become aware of any security vulnerability or suspect that your ba77 account has been compromised, please notify us immediately at .
8.3 In the event of a personal data breach that is likely to result in a risk to your rights, ba77 will notify affected players without undue delay and will take all reasonable steps to contain and mitigate the breach.
9 Cookies and Tracking
9.1 ba77 uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, to prevent fraud, and to understand how players navigate the site so we can make improvements.
9.2 The following categories of cookies are used on the ba77 platform:
- Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language settings and interface customisations to improve your experience on return visits.
- Analytics Cookies: Collect anonymised data about how players use the platform, including which pages are visited most often, session duration, and navigation paths. This data helps ba77 improve the user experience.
- Security and Fraud Prevention Cookies: Help ba77 detect unusual behaviour patterns that may indicate fraudulent activity or account takeover attempts.
9.3 You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent ba77 from functioning correctly. Disabling other categories of cookies will limit certain platform features but will not prevent basic use of the service.
10 Your Privacy Rights
As a ba77 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact us at . We will respond within a reasonable timeframe and in any event within thirty (30) days of receipt of your request.
Right of Access
Request a copy of all personal data ba77 holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
Request correction of any personal data that is inaccurate or incomplete. Account details may also be updated directly within your ba77 account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to ba77's legal retention obligations.
Right to Restrict Processing
Request that ba77 limits how your data is used in certain circumstances — for example, while a correction request is being assessed.
Right to Data Portability
Request an export of your personal data in a structured, machine-readable format so you can transfer it to another service provider.
Right to Object
Object to ba77 processing your data on the basis of legitimate interests, including profiling for marketing purposes. You may also withdraw consent for optional marketing at any time.
11 Minors and Age Policy
11.1 The ba77 platform is strictly for adults aged 21 and above. ba77 does not knowingly collect or process personal data belonging to individuals under 21 years of age. Age verification is conducted as part of the registration process and again at the KYC stage prior to the first withdrawal.
11.2 If ba77 becomes aware that personal data has been collected from an individual under 21, that account will be suspended immediately, all data associated with the underage account will be deleted as soon as is legally permissible, and any real money balance will be returned to the payment source after appropriate investigation.
11.3 If you believe that a person under 21 has registered a ba77 account, please notify us immediately at so that we can take prompt action.
12 Changes to This Policy
12.1 ba77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform services. Where changes are material, ba77 will notify registered players by email or via a prominent notice on the ba77 platform at least seven (7) days before the amended policy takes effect.
12.2 The date shown in the "Last Updated" field at the top of this document indicates when the current version of the Privacy Policy came into effect. Your continued use of the ba77 platform after the effective date of any revision constitutes your acceptance of the updated policy.
12.3 The current version of this Privacy Policy is always accessible at ba77.io/privacy-policy. We encourage you to review this page periodically so that you remain informed about how ba77 protects your data.
For any privacy-related queries, data access requests, or concerns about how your personal data is handled, please reach out to our support team at . Our team is available 24 hours a day, 7 days a week to assist players across Bangladesh.
Your Privacy Is Safe at ba77
Now that you understand how ba77 protects your data, you can play with confidence. Explore the full game library, check out our FAQ, or head to your account — all backed by industry-standard encryption and a firm no-data-selling policy.