eb77 Privacy Policy

Privacy at a Glance

The summary cards below highlight the key points of this Privacy Policy. They are provided for convenience — the full text of each section below is the authoritative version.

1.Introduction

eb77 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every player and visitor who uses the eb77 platform at eb77.ws. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share data, and the rights available to you as a data subject.

By using the eb77 platform — including browsing the website, creating an account, making a deposit, or placing a bet — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to this policy, please do not use the eb77 platform. You may withdraw consent at any time by contacting our support team, subject to the limitations set out in Section 8 (Data Retention).

2.Personal Data We Collect

eb77 collects personal data through three primary channels: information you provide directly, information generated automatically through your use of the platform, and information obtained from third-party payment processors and identity verification services. We collect only the data that is necessary for the purposes described in this policy.

Data You Provide Directly

• Registration data: your full name, mobile phone number, date of birth, and chosen account password at the time of creating your eb77 account.
• Identity verification (KYC) documents: national identity card (NID), passport, or driving licence image or scan; and where required, proof of address such as a utility bill or bank statement.
• Financial data: mobile wallet numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals, transaction amounts, and deposit/withdrawal histories associated with your account.
• Communications data: messages you send to eb77 through live chat, email, or any other support channel, including the content of complaints, feedback, or support requests.

Data Generated Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings at the time of each session on the eb77 platform.
• Behavioural and usage data: pages visited, time spent on each page, games played, bet amounts, game outcomes, session duration, navigation paths, and click patterns recorded during your use of the platform.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this policy.
• Geolocation data: approximate geographic location derived from your IP address, used to detect access from restricted jurisdictions and to comply with responsible gaming obligations.

Data Received from Third Parties

• Payment confirmation data received from mobile wallet providers (bKash, Nagad, Rocket, Upay) to verify successful deposits and to process withdrawal requests — limited to transaction reference numbers, amounts, and timestamps.
• Identity verification results from third-party KYC service providers where eb77 uses an automated or third-party verification workflow — limited to a pass/fail outcome and any flags raised during verification.
• Fraud and anti-money laundering (AML) screening data from industry-standard risk assessment databases, used to comply with our anti-financial crime obligations.

3.How We Use Your Personal Data

eb77 processes your personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the purposes described below. The primary purposes for which eb77 processes personal data are:

• Account creation and management: to create, maintain, and administer your eb77 account, including verifying your identity at registration and during ongoing account reviews.
• Platform delivery: to provide access to the games, sports betting markets, promotions, and other features that constitute the eb77 platform, and to personalise the experience based on your preferences and history.
• Financial processing: to process deposits and withdrawals, to reconcile account balances, and to maintain accurate financial records in accordance with our obligations as a platform operator.
• Legal compliance: to comply with anti-money laundering (AML) obligations, to conduct required KYC verification, to enforce the 21+ age restriction, to respond to lawful requests from law enforcement agencies, and to meet any other applicable legal or regulatory obligations.
• Responsible gaming: to monitor gameplay patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion requests, and to fulfil our duty of care to players showing signs of gambling-related harm.
• Customer support: to respond to your queries, complaints, and account-related requests, and to maintain a record of support interactions for quality assurance and dispute resolution purposes.

4.Legal Basis for Processing

eb77 processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

• Contract performance: processing that is necessary to create and maintain your account, to deliver platform services, and to process your deposits and withdrawals — all of which are necessary to perform the contract between you and eb77.
• Legal obligation: processing that is required to comply with applicable law, including AML obligations, age verification requirements, and responses to lawful requests from public authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where our legitimate interests in operating a safe and fair platform are not overridden by your data protection rights.
• Consent: processing for marketing communications and the use of non-essential cookies — where you have given clear, informed, and freely given consent, which may be withdrawn at any time without detriment.

5.Sharing Your Personal Data

eb77 does not sell , rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with third parties only in the following limited circumstances:

• Service providers and processors: third-party companies that provide services on our behalf, including payment processing (bKash, Nagad, Rocket, Upay gateway operators), KYC and identity verification providers, cloud hosting providers, customer support platform operators, and analytics service providers. All such providers are bound by data processing agreements that restrict their use of your data to the specific services they provide to eb77.
• Game providers: game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive session tokens and anonymised or pseudonymised player identifiers necessary to deliver game content and settle results. These providers do not receive your full name, mobile number, or financial details.
• Law enforcement and regulatory authorities: where eb77 is required by applicable law, court order, or lawful request from a public authority to disclose personal data, we will comply. We will, where permitted by law, notify you of such a request before complying.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of eb77's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any change to the applicable privacy policy before the transfer takes effect.

6.Payment Data and KYC Information

Payment data processed by eb77 is handled with the highest level of care. Mobile wallet transaction details received from bKash, Nagad, Rocket, and Upay are used exclusively to verify deposits, process withdrawals, and maintain transaction records. eb77 does not store full mobile wallet credentials or PINs. Transaction data is encrypted at rest and in transit using industry-standard SSL/TLS encryption.

KYC documents submitted for identity verification — including NID images, passport scans, and proof of address documents — are stored in a secure, access-controlled environment with restricted internal access. KYC documents are retained for the period required by our record-keeping obligations (see Section 8) and are then securely deleted. KYC documents are never shared with game providers or marketing partners.

7.Cookies and Tracking Technologies

eb77 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to understand how players use the platform so we can improve it. A cookie is a small text file placed on your device by the eb77 platform when you visit. Cookies do not contain your name, financial details, or any directly personally identifying information.

Types of Cookies We Use

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during a session, security tokens, and load-balancing cookies. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: used to remember your preferences such as language settings, responsible gaming limits you have set, and display preferences. These improve your experience but are not essential for core platform operation.
• Analytics cookies: used to collect anonymised data about how visitors navigate and use the eb77 platform — such as which pages are most visited, session duration, and common navigation flows. This data is used solely to improve platform performance and user experience.

You may manage or disable non-essential cookies through your device's browser settings. Please note that disabling functional or analytics cookies may affect some features of the eb77 platform but will not prevent you from accessing core services. eb77 does not use advertising or third-party retargeting cookies.

8.Data Retention

eb77 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: retained for the full duration of your active eb77 account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
• KYC documents: retained for the duration of your active account and for 5 years following account closure. After this period, KYC documents are securely and permanently deleted from eb77 systems.
• Support communications: retained for 2 years from the date of the last interaction, after which they are anonymised or deleted. Where a support interaction relates to an ongoing dispute, the relevant records are retained until the dispute is fully resolved plus an additional 12 months.

9.Your Data Protection Rights

As a data subject, you hold a number of rights in relation to the personal data that eb77 holds about you. These rights are described below. To exercise any of these rights, please contact eb77 at [email protected] with the subject line "Data Rights Request". eb77 will respond to all data rights requests within 30 days of receipt.

10.Data Security

eb77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the eb77 platform, ensuring that session data, account credentials, and transaction details cannot be intercepted in transit.
• Encryption at rest for all stored personal data and financial records, using industry-standard encryption algorithms. Sensitive data fields such as account credentials and KYC document storage are subject to additional encryption layers.
• Role-based access controls that restrict internal access to personal data to only those staff members who require it to perform their specific job functions. All internal access to personal data is logged and auditable.
• Regular security assessments and vulnerability testing of the eb77 platform infrastructure to identify and address potential security weaknesses before they can be exploited.

While eb77 takes every reasonable precaution to protect your personal data, no digital platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, eb77 will notify affected players without undue delay and will take all necessary steps to contain and remediate the breach.

11.Children's Privacy

The eb77 platform is strictly for adults aged 21 and above. eb77 does not knowingly collect, process, or retain personal data from any person under the age of 21. If eb77 discovers or is made aware that personal data has been collected from a person under 21 years of age — whether through misrepresentation during registration or any other means — eb77 will immediately suspend the relevant account, delete the associated personal data, and take any further steps required to protect the minor concerned. If you are a parent or guardian and believe that your child may have created an eb77 account, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

12.Marketing Communications

eb77 may send you marketing communications about promotions, bonuses, new game launches, platform updates, and seasonal offers relevant to the Bangladesh market — including during Eid, Pohela Boishakh, the BPL season, and other occasions — where you have given prior consent to receive such communications. Marketing communications are sent via SMS to your registered mobile number, or via in-platform notifications.

You may opt out of marketing communications at any time by contacting eb77 support at [email protected] or by following the opt-out instructions included in any marketing message. Opting out will take effect within 5 business days. Please note that opting out of marketing communications does not affect transactional communications (such as deposit confirmations, withdrawal notices, or account security alerts), which eb77 is required to send as part of its service obligations.

13.Changes to This Privacy Policy

eb77 reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this policy, eb77 will notify registered players by posting a prominent notice on the platform and updating the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Continued use of the eb77 platform after any amendment to this Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the updated policy, you must cease using the platform and may request account closure by contacting eb77 support.

14.Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data eb77 holds about you, please contact the eb77 support team. Our team is available 24 hours a day, 7 days a week, and aims to respond to all privacy-related queries within 72 hours. Please use the subject line "Privacy Query" or "Data Rights Request" so that your message is directed to the appropriate team. The email address below is for written contact only and is not a clickable link.