Privacy Policy — nb77 Bangladesh

1. Information We Collect

nb77 collects personal data through several channels: directly from you when you register an account, interact with customer support, or make a deposit; automatically through your use of the platform (device information, browsing behaviour, session data); and from third-party service providers such as payment processors and identity verification partners. The categories of personal data we collect are set out below.

1.1 Registration Data

When you open an nb77 account, we collect the following information:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — collected to verify that you meet the 18+ eligibility requirement.
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postcode.
• Email address — used for account communications, security alerts, and optional marketing.
• Mobile number — used for account verification and, where applicable, bKash, Nagad, or Rocket payment processing.
• Username and password — your password is stored in hashed form only; nb77 staff cannot view it in plain text.
• Preferred currency — Bangladeshi Taka (BDT) by default for all Bangladesh-market accounts.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer process, nb77 may request the following documents to verify your identity and age before processing your first withdrawal or when your account activity reaches defined thresholds:

• National Identity Card (NID) scan or photograph — both sides.
• Passport biographical data page.
• Driving licence (front and back).
• Proof of address — a recent utility bill, bank statement, or official correspondence dated within 90 days and showing your registered address.
• Proof of payment method — a screenshot or statement confirming that the bKash, Nagad, Rocket, or bank account used for deposits belongs to you.

1.3 Transaction Data

For every deposit, withdrawal, and wager placed on nb77, we record the transaction type, amount in BDT, date and time (Bangladesh Standard Time, UTC+6), payment method used, and the resulting account balance. This data is required for financial record-keeping, fraud prevention, and responsible gaming monitoring.

1.4 Automatically Collected Technical Data

When you access nb77 through any device or browser, our servers automatically collect the following technical information:

• IP address — used for geolocation checks, fraud detection, and duplicate account identification.
• Device type, operating system, and browser version — used to optimise platform performance for your device.
• Session timestamps and duration — used for responsible gaming monitoring and platform analytics.
• Pages visited and features used — used to improve platform design and user experience.
• Referral source — the URL from which you arrived at nb77, where available.

1.5 Communications Data

When you contact nb77 support by email or live chat, we retain a record of the correspondence, including any attachments or screenshots you provide. This allows us to maintain consistent service quality, resolve disputes accurately, and comply with record-keeping obligations.

2. How We Use Your Data

nb77 processes your personal data for the following purposes. For each purpose, we have identified the legal basis under which the processing is carried out.

2.1 Marketing Communications

nb77 will only send you promotional emails, bonus notifications, or event announcements if you have explicitly opted in to marketing communications during registration or through your Account Settings. You may withdraw this consent at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of processing carried out before withdrawal and does not affect service communications, which are sent regardless of marketing preference (for example, account security alerts, withdrawal confirmations, and KYC request notices).

2.2 Automated Decision-Making

nb77 uses automated systems for certain fraud detection and responsible gaming functions, including flagging accounts for duplicate detection and identifying betting patterns that may indicate problem gambling behaviour. Where an automated process results in a consequential decision about your account — such as a payment hold or account suspension — you have the right to request human review of that decision by contacting our support team.

3. Data Sharing & Third Parties

nb77 does not sell your personal data to any third party. We share data only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. The categories of recipients are as follows.

3.1 Payment Service Providers

To process your deposits and withdrawals, nb77 shares your name, mobile number, and transaction details with the relevant payment service provider. Depending on your chosen payment method, this may include:

• bKash — mobile financial service operated by bKash Limited.
• Nagad — mobile financial service operated by Bangladesh Post Office.
• Rocket (DBBL) — mobile banking service operated by Dutch-Bangla Bank Limited.
• Upay — mobile financial service operated by UCash.
• Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank — for direct bank transfer transactions.

Each payment provider operates under its own privacy policy and data handling practices. nb77 is not responsible for the data practices of these third-party services once data has been transmitted to them for payment processing purposes.

3.2 Game Content Providers

The games available on nb77 are provided by independent studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, PG Soft, Spribe, and Hacksaw Gaming. To enable game play, these providers receive your account identifier and session token. They do not receive your full name, payment details, or KYC documents.

3.3 Identity Verification Partners

nb77 may use third-party identity verification service providers to assist with KYC document checks. These providers process your identity documents on our behalf under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification for nb77.

3.4 Legal and Regulatory Disclosure

nb77 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in response to a court order, to report suspected money laundering activity, or to comply with anti-fraud investigations. In such cases, we will disclose only the minimum data necessary to fulfil the legal obligation.

4. Cookies & Tracking Technologies

nb77 uses cookies and similar browser-based technologies to make the platform function correctly, keep your session secure, and understand how players interact with different parts of the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can manage or block cookies through your browser settings at any time. Most modern browsers allow you to view, delete, and block cookies from specific sites. Please note that disabling essential cookies will prevent you from logging in to your nb77 account. Disabling analytics cookies will not affect your ability to play games, deposit, or withdraw.

nb77 does not use third-party advertising or retargeting cookies. We do not participate in cross-site advertising networks, behavioural ad targeting, or any form of cookie-based audience building for third-party advertisers.

5. Data Retention & Storage

nb77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply to the primary categories of data we hold:

5.1 Data Storage Location

nb77's primary data infrastructure is hosted on secure, access-controlled servers. All stored data — including account records, KYC documents, and transaction history — is encrypted at rest using AES-256 encryption. Physical and logical access to production data systems is restricted to authorised personnel only, and all access is logged and audited.

5.2 Data Deletion

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with a specific individual. Where data is anonymised rather than deleted (for example, aggregated analytics data), it is no longer considered personal data and falls outside the scope of this Privacy Policy.

6. Your Privacy Rights

As a data subject, you hold the following rights with respect to the personal data nb77 holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within five business days and aim to resolve all requests within 30 days of receipt.

6.1 Right of Access

You have the right to request a copy of all personal data nb77 holds about you. We will provide this in a structured, commonly used, machine-readable format (CSV or JSON) at no charge. We may ask you to verify your identity before processing an access request to ensure we disclose data only to the account holder.

6.2 Right to Rectification

If any personal data nb77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details — such as your email address and mobile number — directly from your Account Settings page. For corrections to core identity data (name, date of birth), please contact support and provide the relevant supporting documentation.

6.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, for example where the data is no longer needed for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that nb77 is not able to erase data that must be retained to comply with legal obligations (such as transaction records and KYC documents) — in such cases, we will explain what data must be retained and why.

6.4 Right to Restrict Processing

You may request that nb77 restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being investigated. During a restriction, nb77 will continue to store your data but will not actively process it except with your consent or for legal claims.

6.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, portable format and to transmit that data to another controller where technically feasible.

6.6 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. You can exercise this right by updating your notification preferences in your nb77 Account Settings, or by emailing [email protected]. Upon receipt of your objection, we will stop sending you marketing communications within two business days.

7. Data Security Measures

nb77 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures are reviewed and updated on a regular basis.

7.1 Technical Controls

• 256-bit SSL/TLS encryption on all data transmitted between your device and nb77 servers. Look for the padlock icon in your browser address bar when using nb77.
• AES-256 encryption at rest for all stored personal data, including KYC documents and transaction records.
• Bcrypt password hashing — passwords are never stored in recoverable form. Even nb77 staff cannot retrieve your password.
• Firewall and intrusion detection systems monitoring all inbound and outbound network traffic to production systems.
• Regular security patching and vulnerability scanning of all platform components.
• Rate limiting and CAPTCHA on login and account creation endpoints to prevent brute-force attacks.

7.2 Organisational Controls

• Access to production data systems is restricted to a minimum number of authorised personnel on a need-to-know basis.
• All staff with access to personal data receive data protection and security awareness training as part of their onboarding and on an annual basis thereafter.
• Third-party service providers who process data on behalf of nb77 are subject to data processing agreements that mandate appropriate security standards equivalent to those applied by nb77 itself.
• nb77 maintains an internal data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, nb77 will notify affected account holders without undue delay and will document the breach internally.

7.3 Your Role in Security

While nb77 takes its security responsibilities seriously, the security of your account also depends on actions you take. nb77 strongly recommends the following:

• Use a strong, unique password for your nb77 account that you do not use on any other website or application.
• Do not share your nb77 login credentials with any other person. nb77 support staff will never ask for your password.
• Always log out of your nb77 account fully when using a shared device, public computer, or public Wi-Fi network.
• Contact [email protected] immediately if you suspect that your account has been accessed without your authorisation.

8. Policy Updates & Contact

nb77 reviews this Privacy Policy periodically and updates it when our data practices change, when new services are introduced, or when applicable legal requirements are amended. The effective date at the top of this policy reflects the date of the most recent material revision.

8.1 Notification of Changes

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect or use your personal data, or that affect your rights — we will notify registered account holders via their registered email address or through an in-platform dashboard notification at least 14 days before the revised policy takes effect. For minor, non-material changes (such as clarifying existing language or correcting typographical errors), we will update the effective date without prior individual notification.

Continued use of nb77 following notification of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should close your account before the effective date of the changes.

8.2 Children's Privacy

nb77 is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, that account will be closed immediately and any personal data associated with it will be deleted, subject to any legal retention obligations that may apply. If you believe a minor has accessed nb77 and provided personal data, please contact us at [email protected] immediately.

8.3 Contact Our Privacy Team

For any questions, concerns, or requests relating to this Privacy Policy or the personal data nb77 holds about you, please contact us using the details below. All privacy-related enquiries are handled with priority and treated with strict confidentiality.

• Email: [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request".
• Live Chat: Available 24/7 through the nb77 platform after login. Select "Privacy & Data" from the support topic menu.
• Response commitment: All privacy enquiries are acknowledged within 24 hours and substantively addressed within five business days (Bangladesh Standard Time).

For information on deposit limits, session controls, and self-exclusion tools, please visit the Responsible Gaming page. For answers to account and payment questions, visit our FAQ.