Your Privacy Matters — bq77 Data Policy
At bq77, protecting the personal information of every player in Bangladesh is a non-negotiable commitment. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and secured, and the rights you hold over your own information. We encourage you to read this document in full before creating an account or using any service on the Platform.
Six Privacy Principles Behind bq77
Every data decision at bq77 is guided by six core principles. These are not marketing promises — they are enforceable standards built into our internal data-handling procedures and reflected throughout this Privacy Policy.
Purpose Limitation
bq77 collects personal data only for specific, explicit, and legitimate purposes. Your data is never used in ways that are incompatible with the reason it was originally collected. We do not sell, rent, or trade personal data to third-party marketers under any circumstances.
Data Minimisation
We collect only the information that is strictly necessary for the purpose at hand. If a process can be completed with less data, we use less data. Your name, date of birth, and payment method details are required for regulatory compliance — we do not request anything beyond what the law and our platform operations genuinely require.
Security by Design
The bq77 platform is protected by industry-standard SSL/TLS encryption in transit and AES-256 encryption at rest. Access to player data is restricted to authorised personnel on a need-to-know basis. Our infrastructure is monitored 24/7 for unauthorised access attempts, and security reviews are conducted on a regular basis.
Defined Retention Periods
bq77 retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable anti-money-laundering and financial regulations. Account data for closed accounts is retained for a minimum of five years to comply with legal obligations, after which it is securely deleted or anonymised.
Your Rights Are Real
bq77 respects your right to access, correct, and — where legally permissible — request deletion of your personal data. Requests are handled by our support team and processed within 30 calendar days of receipt. We will never obstruct a legitimate data rights request or ask you to waive your rights as a condition of continued service.
No Unsolicited Marketing
Promotional communications from bq77 are sent only to players who have opted in to receive them. You may withdraw marketing consent at any time by contacting our support team or by using the preferences panel in your account settings. Withdrawal of marketing consent does not affect your ability to use the Platform.
1 Definitions
In this Privacy Policy, the following terms carry the meanings set out below unless the context otherwise requires:
- "bq77" refers to the online platform operated at bq77.io, including all casino, sportsbook, and account management services accessible through that domain.
- "Platform" means the bq77 website, mobile-optimised site, and any associated software through which services are delivered to players.
- "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other data.
- "Player" / "You" means any individual who registers an account on the Platform or who accesses any part of the Platform.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, restriction, or deletion.
- "Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, bq77.
- "Third Party" means any natural or legal person, public authority, or body other than the Player, bq77, or persons directly authorised by bq77 to process data.
- "KYC" means know-your-customer identity verification procedures conducted to satisfy anti-money-laundering obligations.
- "BST" means Bangladesh Standard Time (UTC+6), used for all timestamps referenced in this policy.
2 Data We Collect
2.1 Registration Data
When you create a bq77 account, we collect the following information directly from you:
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used to verify the 21+ age requirement).
- Residential address, including district, division, and postcode.
- Mobile phone number registered in Bangladesh.
- Email address (if provided as an alternative contact method).
- Preferred currency (Bangladeshi Taka, BDT).
- Username and securely hashed password.
2.2 Identity Verification (KYC) Data
In order to process withdrawals and comply with anti-money-laundering requirements, bq77 may request the following documentation:
- A copy of a valid government-issued photo identity document (National Identity Card, passport, or driving licence).
- Proof of residential address dated within the last three months (utility bill, bank statement, or official government correspondence).
- Proof of ownership or control of the payment method(s) used to deposit funds — for example, a screenshot of your bKash, Nagad, or Rocket account displaying your registered name and mobile number.
- Source-of-funds documentation where triggered by bq77's internal monitoring thresholds.
2.3 Transaction Data
All financial transactions on the Platform generate records that bq77 retains for legal and operational purposes. Transaction data includes:
- Deposit amounts, dates, times (BST), and payment method identifiers.
- Withdrawal requests, processed amounts, dates, and destination payment method identifiers.
- Bonus credits issued, wagering progress, and bonus settlement outcomes.
- Account balance snapshots at key transaction events.
2.4 Gaming & Betting Activity Data
bq77 records all gaming and betting activity for dispute resolution, responsible gaming monitoring, and system integrity purposes. This includes:
- Game session logs: game title, stake amount, outcome, timestamp.
- Sports bet slip details: market, selection, odds, stake, settlement result.
- Session duration and frequency data used to power responsible gaming alerts.
2.5 Technical & Device Data
When you access the Platform, our servers automatically log certain technical information:
- IP address and approximate geolocation (country/city level).
- Device type, operating system, browser type, and version.
- Referring URL (the page from which you arrived at bq77.io).
- Pages visited, time spent on each page, and click-path data.
- Session identifiers and cookie data (see Section 6).
2.6 Communications Data
When you contact bq77 support, participate in surveys, or respond to promotional communications, we retain records of that correspondence, including the content of messages, timestamps, and any attachments you provide.
No Sensitive Categories: bq77 does not intentionally collect data revealing racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related disclosures are made voluntarily by a player in the context of a responsible gaming request. Such disclosures are handled with the utmost confidentiality and used solely to provide the relevant responsible gaming support.
3 How We Use Your Data
bq77 processes personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data |
| Identity verification (KYC) and age verification | Registration data, KYC documents |
| Processing deposits and withdrawals | Transaction data, KYC documents |
| Delivering casino games and sportsbook services | Gaming activity data, session data |
| Detecting and preventing fraud, money laundering, and cheating | All categories |
| Responsible gaming monitoring and interventions | Gaming activity data, communications data |
| Customer support and dispute resolution | Registration data, transaction data, communications data |
| Sending marketing communications (opted-in players only) | Registration data, gaming activity data |
| Platform analytics and performance improvement | Technical data, gaming activity data (anonymised where possible) |
| Legal and regulatory compliance | All categories as required |
bq77 does not use personal data for automated decision-making that produces legal or similarly significant effects on a player, except in the context of fraud detection systems where automated flags are always subject to human review before any account action is taken.
4 Legal Basis for Processing
bq77 processes personal data on the following legal bases:
- Contractual necessity: Processing your registration data, transaction data, and gaming activity data is necessary to perform the contract between you and bq77 — namely, providing the casino and sportsbook services you have agreed to use.
- Legal obligation: KYC verification, anti-money-laundering checks, transaction record-keeping, and the enforcement of the 21+ age restriction are required by applicable law. bq77 cannot waive these obligations on a player's request.
- Legitimate interests: Processing technical data for platform security, fraud prevention, and responsible gaming monitoring is carried out on the basis of bq77's legitimate interests in maintaining a safe, fair, and compliant platform. These interests are balanced against your rights and do not override your fundamental data protection rights.
- Consent: Sending marketing communications and placing non-essential cookies are carried out only on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment.
5 Data Sharing & Disclosure
5.1 Game and Platform Providers
bq77 shares limited technical and session data with third-party game studio providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — solely to the extent necessary to deliver their games within the Platform. These providers process data as data processors acting on bq77's instructions and are contractually prohibited from using player data for any independent purpose.
5.2 Payment Service Providers
To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, bq77 must share transaction reference data with the relevant payment service provider. This sharing is limited to the information strictly necessary to complete or verify the transaction. bq77 does not retain full card numbers or full mobile wallet credentials — these are handled directly by the payment provider under their own security standards.
5.3 Identity Verification Partners
bq77 may engage specialist third-party identity verification services to assist with KYC document checks. Any such partner is engaged under a data processing agreement that restricts their use of player data to the verification task and prohibits retention beyond the period required to complete that task.
5.4 Legal and Regulatory Disclosure
bq77 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where bq77 determines in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of bq77, its players, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.
5.5 No Sale of Personal Data
bq77 does not sell, rent, lease, or otherwise transfer personal data to third parties for their own commercial purposes. Data sharing is strictly limited to the categories and purposes described in this Section 5.
Cross-Border Transfers: Some of bq77's third-party service providers operate infrastructure outside Bangladesh. Where personal data is transferred internationally, bq77 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that applied within the Platform.
6 Cookies & Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. bq77 uses cookies and similar technologies (such as web beacons and local storage objects) to enable essential platform functionality, remember your preferences, and gather anonymised analytics data about how the Platform is used.
6.2 Cookie Categories
- Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
- Functional Cookies: Used to remember your preferences such as your preferred language, time zone display, and game lobby filters. Disabling these cookies will not prevent you from using the Platform but may reduce your experience quality.
- Analytics Cookies: Used to collect anonymised data on page visits, session durations, and navigation paths to help bq77 improve the Platform. Analytics data is aggregated and does not identify individual players.
- Marketing Cookies: Placed only where you have provided explicit consent. These cookies enable bq77 to deliver relevant promotional content based on your activity on the Platform.
6.3 Managing Cookies
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in or using transaction features on the Platform. Instructions for managing cookies are available in your browser's help section.
7 Data Retention
bq77 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration and KYC data | 5 years after account closure | Anti-money-laundering legal obligation |
| Transaction records | 5 years after the transaction date | Financial record-keeping legal obligation |
| Gaming and betting activity logs | 3 years after account closure | Dispute resolution and responsible gaming audit |
| Support communications | 3 years from the date of last correspondence | Complaint handling and audit trail |
| Marketing consent records | Until consent is withdrawn, then 1 year | Proof of consent under data protection principles |
| Technical / server log data | 90 days from the date of generation | Security monitoring and incident investigation |
| Analytics data (anonymised) | Indefinite (no personal identifier retained) | Platform performance and product improvement |
Where a legal dispute, regulatory investigation, or fraud inquiry is ongoing at the time a standard retention period expires, bq77 will extend retention of the relevant data until that matter is fully resolved. Players will be notified of any such extension where it is legally permissible to do so.
8 Security Measures
bq77 implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal data against unauthorised access, accidental loss, destruction, or alteration:
- Encryption in Transit: All data transmitted between your device and the bq77 servers is protected by TLS 1.2 or higher, preventing interception during transmission.
- Encryption at Rest: Sensitive data fields — including identity document copies, payment method identifiers, and hashed passwords — are encrypted at rest using AES-256.
- Access Controls: Access to personal data is restricted to bq77 personnel who require it for their specific role. Access is managed through role-based permissions and is logged for audit purposes.
- Intrusion Detection: Our infrastructure is monitored continuously for anomalous activity. Automated alerts trigger human review for any access pattern that falls outside normal parameters.
- Password Security: Player passwords are never stored in plaintext. They are processed using a one-way cryptographic hashing algorithm with salting to prevent rainbow-table attacks.
- Security Reviews: bq77 conducts periodic internal security reviews and vulnerability assessments to identify and remediate weaknesses in the Platform's security posture.
- Incident Response: bq77 maintains a documented incident response plan. In the event of a data breach that poses a risk to players, affected players will be notified without undue delay and provided with guidance on protective steps they can take.
Your Responsibility: The security of your bq77 account also depends on the strength and confidentiality of your login credentials. bq77 strongly recommends using a unique, complex password and enabling two-step verification via your registered Bangladeshi mobile number. Do not share your credentials with any third party.
9 Your Data Rights
As a player on the bq77 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address or mobile number registered to your account.
- Right of Access: You may request a copy of the personal data bq77 holds about you, together with information about how it is used and with whom it is shared. We will respond within 30 calendar days of receiving a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Where the correction relates to identity data, we may require documentary evidence before updating our records.
- Right to Erasure: You may request deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and no other legal basis applies; or (c) the data has been processed unlawfully. This right is subject to bq77's legal data retention obligations — we cannot erase data that we are required by law to retain.
- Right to Restrict Processing: You may request that bq77 temporarily suspend the active processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
- Right to Data Portability: Where processing is based on your consent or on a contract, you may request that bq77 provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
- Right to Object to Marketing: You may object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bq77 will cease all marketing communications immediately.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
Response Timelines: bq77 aims to acknowledge all data rights requests within 5 business days and to provide a substantive response within 30 calendar days. Complex or volume requests may take up to 60 calendar days, in which case we will notify you of the extension and provide a reason.
10 Children & Minors
The bq77 Platform is strictly intended for adults aged 21 years and above. bq77 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and KYC documentation is required to confirm that every player meets the minimum age requirement before any financial transaction is processed.
If bq77 discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under the age of 21, the relevant account will be immediately suspended, all associated transactions will be reversed or forfeited in accordance with our Terms & Conditions, and the data will be deleted as soon as is legally permissible.
Parents and guardians who believe that a minor in their care has registered an account on the Platform should contact bq77 immediately at [email protected]. bq77 will treat such reports as high priority and respond within 24 hours.
11 Third-Party Links
The bq77 Platform may contain references to third-party game providers and payment partners. While bq77 takes care to work only with reputable partners, we do not control the privacy practices of third-party organisations and are not responsible for the content or privacy standards of any third-party service. This Privacy Policy applies exclusively to the bq77 Platform. We encourage you to review the privacy policies of any third-party service you interact with directly.
12 Amendments to This Policy
bq77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When amendments are material, we will display a prominent notice on the Platform and, where practicable, send a notification to the mobile number or email address registered to your account, at least 14 calendar days before the changes take effect.
Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The most current version of this policy is always available at bq77.io/privacy-policy, together with the date on which it was last updated. If you do not accept the revised policy, you must stop using the Platform and request account closure prior to the effective date.
13 Contact & Data Requests
All data rights requests, privacy concerns, and questions regarding this Privacy Policy should be directed to the bq77 support team. Our English-speaking team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).
Email: [email protected]
When submitting a data rights request, please include: your registered username, the specific right you wish to exercise, and any relevant details that will help us locate and process your request efficiently. For security purposes, we may ask you to verify your identity before acting on a request.
The email address above is the sole official contact channel for bq77 privacy matters. Do not share your account credentials, payment details, or identity documents with anyone claiming to represent bq77 through any channel other than the official support email listed here. bq77 will never ask for your password via email.
Questions About Your Data at bq77?
Our support team is available around the clock at Bangladesh Standard Time to handle any privacy request or data query. You can also review our FAQ for quick answers, or head directly to the bq77 Casino to explore 500+ games on a platform that takes your privacy seriously.