Privacy Policy — How 3777b Collects, Uses, and Protects Your Data
Your privacy is a core commitment at 3777b. This Privacy Policy explains in plain, formal English exactly what personal data we collect from players in Bangladesh, how we use it, who we share it with, and what rights you hold over your own information. We encourage you to read it fully.
About This Document: This Privacy Policy applies to all personal data collected by 3777b through the website https://3777b.app, its related mobile-optimised pages, customer support channels, and any other touchpoints through which players interact with the 3777b platform. By registering a Player Account or continuing to use 3777b, you acknowledge that you have read, understood, and agreed to the data practices described in this document.
SSL Encryption
All data transmitted between your device and 3777b servers is protected by industry-standard 256-bit SSL encryption, ensuring your personal and financial information is never exposed in transit.
No Sale of Data
3777b does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely to operate the platform and comply with legal obligations.
Your Rights Protected
You retain meaningful rights over your own data — including the right to access, correct, delete, and export your information. Submit any data request to our support team in plain English.
Transparent Cookie Use
We explain every category of cookie and tracking technology in plain language. Essential session cookies keep the platform functional; analytics and preference cookies can be managed by you.
Defined Retention Periods
We do not keep your data indefinitely. This policy sets out specific retention periods for each data category, after which data is securely deleted or irreversibly anonymised.
AML & KYC Compliance
Certain data is collected and retained specifically to meet our anti-money-laundering and Know Your Customer obligations. This data is handled with the highest level of security and access control.
1. Data We Collect
3777b collects personal data through several channels — principally through your registration process, ongoing use of the platform, payment transactions, and communications with our support team. The categories of personal data we collect are set out below.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, national ID or passport number | Registration form; KYC document upload |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form; account settings |
| Financial Data | bKash/Nagad/Rocket wallet numbers, bank account name, deposit and withdrawal history | Payment processing; transaction logs |
| Verification Documents | Scanned national ID card, passport bio-page, utility bill (proof of address), source-of-funds documents | KYC verification portal |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution | Automatic collection via server logs and cookies |
| Usage Data | Pages visited, games played, session duration, bet history, wagering patterns | Platform analytics; game server logs |
| Communications Data | Live chat transcripts, support email content, dispute correspondence | Customer support system |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, session time limits, cooling-off periods | Responsible gaming tools within the platform |
We do not intentionally collect data from individuals under the age of 18. If we discover that we have inadvertently collected personal data from a person who is under 18 years of age, we will immediately delete that data and close the associated account. Players are required to confirm their age during registration, and 3777b may request documentary proof of age at any time.
Special Category Data: 3777b does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data as part of its standard operations. If, in exceptional circumstances, sensitive data is provided (e.g., a medical certificate provided voluntarily in connection with a responsible gaming claim), it is handled under the strictest access restrictions and deleted as soon as the specific purpose has been fulfilled.
2. How We Use Your Data
3777b processes personal data only for lawful, specific, and transparent purposes. The following table sets out each processing purpose, the data categories involved, and the legal basis on which we rely.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and identity verification | Identity, Contact, Verification Documents | Contract performance; Legal obligation |
| Processing deposits and withdrawals | Financial, Identity | Contract performance; Legal obligation (AML) |
| Fraud detection and prevention | Technical, Financial, Usage | Legitimate interests; Legal obligation |
| Providing customer support | Identity, Contact, Communications | Contract performance |
| Responsible gaming monitoring | Usage, Responsible Gaming | Legal obligation; Legitimate interests |
| Platform analytics and improvement | Technical, Usage | Legitimate interests |
| Promotional communications (where opted in) | Contact, Usage | Consent |
| Legal and regulatory compliance | All categories as required | Legal obligation |
3777b will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your explicit consent. Where we rely on legitimate interests as a legal basis, we conduct a balancing test to ensure our interests do not override your fundamental rights and freedoms.
If you have opted in to receive promotional communications from 3777b — including information about seasonal offers tied to events such as Eid, Pohela Boishakh, BPL, or IPL — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
3. Data Sharing & Disclosure
3777b does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.
- Payment Service Providers: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, or local bank transfer, we share the minimum necessary financial and identity data with the relevant payment service provider. These providers are contractually bound to process your data solely for the payment transaction and in compliance with applicable data protection standards.
- Identity Verification Partners: We may use a third-party KYC and document verification service to validate identity documents submitted during account registration or at the withdrawal stage. These partners receive only the specific documents and data required for the verification task.
- Game Software Providers: To deliver games from providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming, certain technical and session data (such as player session tokens) is shared with those providers' game servers. No identity or financial data is shared with game providers beyond what is technically necessary to authenticate your game session.
- Fraud Prevention and Security Services: Technical data including IP addresses and device fingerprints may be shared with specialist fraud prevention and cybersecurity partners to protect the platform and all its players from fraudulent activity, account takeover, and abuse.
- Legal and Regulatory Authorities: 3777b may be required by applicable law, court order, or regulatory instruction to disclose personal data to government bodies or law enforcement authorities. We will comply with such requirements and, where legally permitted, will notify affected players of any such disclosure.
- Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of 3777b's business, personal data held on Player Accounts may form part of the transferred assets. Players will be notified of any such transfer and of any material changes to the privacy terms that result from it.
International Transfers: Some of the third parties listed above may process your data outside Bangladesh. Where data is transferred internationally, 3777b takes steps to ensure appropriate safeguards are in place — including contractual clauses that require the recipient to protect your data to a standard equivalent to that described in this policy.
5. Data Retention
3777b retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:
- Active Player Accounts: All personal data associated with an active account is retained for the lifetime of the account plus five (5) years after permanent closure, in order to satisfy anti-money-laundering, tax, and regulatory record-keeping obligations.
- KYC and Verification Documents: Identity documents are retained for a minimum of five (5) years from the date of the last transaction or account closure, as required by international AML frameworks.
- Financial Transaction Records: All deposit and withdrawal records are retained for seven (7) years from the date of the transaction. This retention period is driven by financial compliance requirements.
- Customer Support Communications: Support tickets, live chat transcripts, and email correspondence are retained for three (3) years from the date of the final message in the interaction, or for the duration of any related unresolved dispute.
- Analytics and Usage Data: Aggregated and anonymised analytics data (from which no individual can be identified) may be retained indefinitely for platform improvement purposes. Identifiable usage logs are deleted or anonymised after twenty-four (24) months.
- Marketing Preferences and Consent Records: Records of your marketing consent status and any withdrawal of consent are retained for three (3) years from the date of the last consent event, to demonstrate regulatory compliance.
When data reaches the end of its retention period, it is securely deleted from 3777b's live systems and backup infrastructure in a manner that makes recovery technically infeasible. Deletion is carried out on a regular scheduled basis across all storage environments.
6. Data Security
3777b employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:
- Transport Encryption: All communications between your browser or mobile device and 3777b's servers are encrypted using TLS 1.3 with 256-bit AES encryption. The 3777b.app domain maintains an A-rated SSL certificate at all times.
- Data Encryption at Rest: Sensitive data stored in 3777b's databases — including identity document scans, payment method references, and KYC information — is encrypted at rest using AES-256 encryption with hardware security module (HSM) protected key management.
- Access Controls: Access to personal data within 3777b's internal systems is strictly controlled on a need-to-know basis. Staff access rights are reviewed quarterly, and all access events are logged and auditable. No member of staff has unrestricted access to the full dataset of player information.
- Two-Factor Authentication: All internal 3777b staff accounts that have access to player data systems are required to use two-factor authentication. Players are also encouraged to enable two-factor authentication on their own accounts where the feature is available.
- Penetration Testing: 3777b's platform and infrastructure undergo regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 3777b will notify affected players without undue delay — and within the timeframes required by applicable law — providing details of the nature of the breach, the data affected, and the steps being taken to mitigate its impact.
Your Role in Security: While 3777b maintains robust security controls on our end, the security of your account also depends on you keeping your login credentials confidential. Never share your password with anyone, including 3777b support staff — our team will never ask for your full password. If you suspect your account has been compromised, contact support immediately.
7. Your Privacy Rights
As a player on the 3777b platform, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our support team in writing. 3777b will respond to all valid data rights requests within 30 calendar days of receipt.
Right of Access
Request a copy of all personal data 3777b holds about you, along with information about how it is used and with whom it is shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account. Some corrections may require document verification.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
Request that we restrict processing of your data while a rectification or objection request is being assessed, rather than deleting it outright.
Right to Portability
Receive your personal data in a structured, machine-readable format (such as JSON or CSV) that you can transfer to another service provider.
Right to Object
Object to processing of your data for legitimate interests purposes, including any profiling carried out for responsible gaming monitoring or fraud prevention.
Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), withdraw that consent at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with a relevant data protection supervisory authority if you believe your data rights have not been respected by 3777b.
To exercise any of the rights listed above, submit a written request to the 3777b support team. You will be required to verify your identity before the request is processed. 3777b will not charge a fee for data rights requests unless they are manifestly unfounded, excessive, or repetitive. Where a fee is applied, you will be informed in advance.
Important Limitation — Legal Retention Obligations: The right to erasure is not absolute. Where 3777b is required by anti-money-laundering law, gambling regulation, or tax law to retain certain data for a specified period, we cannot delete that data upon request until the mandatory retention period has expired. We will always explain any limitation on a deletion request clearly and in writing.
8. Policy Updates & Contact
3777b reviews this Privacy Policy periodically and will publish updates on this page when material changes are made. The effective date at the top of this document reflects the date of the most recent revision. For significant changes that materially affect the way we process your data, 3777b will send an email notification to your registered address or display an in-platform notice at next login.
Continued use of the 3777b platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should stop using the platform and contact the support team to close your account and request deletion of your data subject to applicable retention obligations.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 3777b handles your personal data, you may contact our support team directly. Our English-speaking data support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.
Data Contact: Email our support team at (plain text — not a clickable link). Please use the subject line "Privacy Request" or "Data Rights Request" to ensure your message is routed to the correct team. Response time is typically under 2 hours during Bangladesh Standard Time (UTC+6) business hours, and within 12 hours at other times.
Questions About Your Privacy?
Our support team is ready to help with data access requests, cookie questions, or anything else related to your personal information at 3777b.
18+ only. Gambling involves risk. Please play responsibly and within your means.