2777but Privacy Policy
Your personal data matters to us. This Privacy Policy explains exactly what information 2777but collects, how it is used, who it may be shared with, and the controls you have over your own data as a player on our Bangladesh-based platform.
SSL-Secured Data Transfer
Every piece of data transmitted between your device and the 2777but platform is protected by 256-bit SSL encryption. Your financial and personal details are never sent over an unencrypted connection.
No Unnecessary Data Sale
2777but does not sell your personal data to third-party advertisers or data brokers. Data sharing is strictly limited to the trusted partners and processors required to operate the platform safely.
You Control Your Data
You have the right to access, correct, restrict, or request deletion of your personal data. Submit a data request to our support team at any time and we will respond within 30 days.
Transparent Cookie Use
We use cookies to keep you logged in, remember your preferences, and analyse site performance. Our cookie use is explained in full in the Cookies section of this policy. You may adjust cookie settings in your browser.
Defined Retention Periods
2777but retains personal data only for as long as is necessary for the stated purpose. Account data is held for the lifetime of your account plus a minimum five-year post-closure retention period for compliance purposes.
Opt-Out of Marketing
You may opt out of promotional emails and SMS messages at any time by adjusting your communication preferences in your account settings or by contacting the 2777but support team directly.
Information We Collect
2777but collects personal information from you in a number of ways during your use of the platform. We collect only the data that is necessary for the purposes described in this Privacy Policy and in our Terms & Conditions. The categories of personal data we collect are as follows:
| Category | Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, National ID (NID) number | Registration form, KYC verification |
| Contact Data | Mobile number, email address, residential district (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, transaction amounts, deposit and withdrawal history | Cashier / payment processor |
| Verification Documents | NID card scan or photograph, proof of address (utility bill, bank statement) | KYC submission portal |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatic collection via server logs |
| Usage Data | Pages visited, games played, session duration, bet history, wagering patterns | Platform analytics systems |
| Communications Data | Live chat transcripts, support emails, feedback messages | Customer support system |
| Marketing Preferences | Opt-in / opt-out status for email, SMS, and push notification marketing | Account settings, subscription forms |
We do not knowingly collect sensitive personal data beyond what is strictly required for identity verification and fraud prevention. Specifically, we do not collect or process data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes beyond the NID photograph submitted for age and identity verification.
Where you access 2777but through a mobile device, your device may transmit additional technical information such as your mobile network operator and approximate geographic location derived from your IP address. This data is used solely for fraud prevention and service optimisation purposes and is not used to track your physical movements.
Minimum Necessary Principle
2777but collects only the personal data that is strictly necessary for the purpose for which it is collected. We do not collect data speculatively or for purposes that are not disclosed in this Privacy Policy. If we need additional data for a new purpose, we will update this policy and notify you.
Children's Data
2777but does not knowingly collect any personal data from individuals under the age of 18. If we discover that data has been collected from a minor, it will be permanently deleted and the associated account immediately closed. All balances in underage accounts are forfeited in accordance with our Terms & Conditions.
How We Use Your Data
2777but uses the personal data we collect for the following specific purposes. Each purpose is supported by a lawful basis, which is indicated alongside it. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your explicit consent or updating this Privacy Policy.
- Account Creation and Management: To register your account, verify your identity, manage your account settings, and communicate important account-related information. Lawful basis: contractual necessity.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer. Financial data is passed to our payment processing partners solely for transaction execution. Lawful basis: contractual necessity.
- Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct. This includes automated risk scoring and manual review of flagged accounts. Lawful basis: legitimate interest and legal obligation.
- Platform Analytics and Improvement: To understand how players use 2777but, identify performance issues, and improve the overall experience. Usage data is analysed in aggregate wherever possible. Lawful basis: legitimate interest.
- Marketing Communications: To send you information about promotions, bonuses, and seasonal offers relevant to your interests — including BPL season offers, Eid promotions, and IPL betting events — where you have opted in to receive such communications. Lawful basis: consent.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat, email, and other support channels. Support communications are logged and retained for quality assurance purposes. Lawful basis: contractual necessity.
- Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to enforce self-exclusion and deposit limit settings, and to proactively reach out to players who may be showing signs of gambling harm. Lawful basis: legitimate interest and legal obligation.
Where 2777but relies on your consent as the lawful basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, adjust your preferences in your account settings or contact the support team.
Automated Decision-Making: 2777but uses automated systems to detect fraudulent account activity and to assess responsible gaming risk signals. Where an automated decision significantly affects your account (for example, a temporary suspension), you have the right to request human review of that decision by contacting our support team.
Marketing Opt-Out
If you no longer wish to receive promotional emails or SMS messages from 2777but, you may opt out at any time by visiting your account notification settings. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.
Data Sharing and Disclosure
2777but does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with external parties only where it is necessary for the operation of the platform, required by law, or where you have given explicit consent. The categories of third parties with whom we may share your data are set out below.
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card scheme partners (Visa, Mastercard) receive the minimum personal and financial data required to execute your deposit and withdrawal transactions. These partners are independently regulated financial institutions subject to their own data protection obligations.
- Game Content Providers: Licensed game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive your player session identifier to enable game functionality and to resolve disputes about game outcomes. They do not receive your full identity or financial data.
- KYC and Identity Verification Partners: Third-party identity verification services may receive your NID data and verification documents to perform automated age and identity checks on 2777but's behalf. These partners act as data processors under strict contractual data protection obligations.
- Analytics Providers: Aggregated, anonymised usage data may be shared with analytics service providers to help us understand platform performance. These providers do not receive personally identifiable information.
- Legal and Regulatory Authorities: Where required by applicable law, court order, or a legitimate request from a competent authority — including Bangladesh Financial Intelligence Unit (BFIU) enquiries — 2777but will disclose the minimum personal data necessary to comply with its legal obligations.
All third-party data processors engaged by 2777but are bound by contractual data processing agreements that require them to process your personal data only on 2777but's documented instructions, to maintain appropriate technical and organisational security measures, and to delete or return data upon termination of the processing relationship. 2777but remains responsible for the personal data processed on its behalf by these partners.
No Data Sales
2777but will never sell your personal data to data brokers, advertising networks, or any other commercial third party. Your data is used solely to provide, operate, and improve the 2777but platform and to comply with applicable legal obligations.
Cross-Border Transfers
Some of our game content providers and technical service partners are located outside Bangladesh. Where personal data is transferred internationally, 2777but ensures appropriate safeguards are in place — including standard contractual clauses — to protect your data to an equivalent standard as within Bangladesh.
Cookies and Tracking Technologies
2777but uses cookies and similar tracking technologies to operate the platform effectively, to remember your preferences, and to analyse how the site is used. A cookie is a small text file placed on your device by a website when you visit it. Cookies do not contain executable code and cannot access other files on your device.
We use the following categories of cookies on the 2777but platform:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent CSRF attacks, enable core cashier functionality | Session / 24 hours |
| Functional | Remember language preferences, last visited game lobby, display settings | Up to 90 days |
| Analytics | Track page views, session duration, bounce rate, game engagement metrics (anonymised) | Up to 12 months |
| Security | Detect suspicious login attempts, flag unusual geographic access patterns, support fraud detection | Up to 30 days |
Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may disable functional and analytics cookies by adjusting your browser settings. Note that disabling functional cookies may affect your experience — for example, your session may not persist between pages and your preferences may not be saved.
In addition to cookies, 2777but may use web beacons (also called pixel tags) within promotional emails to determine whether messages have been opened and links clicked. This information is used to measure the effectiveness of our communications and to improve future messages. If you prefer not to receive tracked emails, you may opt out of all marketing communications entirely via your account notification settings.
Managing Your Cookies
You can control cookies through your browser settings. Most modern browsers (Chrome, Firefox, Samsung Internet, Opera Mini) allow you to view, block, or delete cookies. The browser manufacturer's help pages provide instructions specific to your browser. Please note that blocking strictly necessary cookies will prevent you from accessing your 2777but account.
Third-Party Cookies: Our game providers (Evolution Gaming, Pragmatic Play, Spribe, etc.) may set their own cookies in game iframes to support gameplay functionality. These cookies are subject to each provider's own privacy policy. 2777but does not control third-party cookies set by game studios.
Data Retention and Storage
2777but retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, tax, or accounting obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Identity Data | Duration of account + 5 years post-closure | AML compliance, legal obligation |
| KYC Verification Documents | Duration of account + 5 years post-closure | Regulatory record-keeping |
| Financial Transaction Records | Duration of account + 7 years post-closure | Tax and accounting obligation |
| Betting and Game History | Duration of account + 3 years post-closure | Dispute resolution, responsible gaming |
| Support Communications | 3 years from date of last interaction | Quality assurance, dispute resolution |
| Marketing Preference Logs | Duration of account + 2 years post-closure | Consent record-keeping |
| Server Log / Technical Data | 90 days rolling | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes without restriction.
Where a 2777but account is closed at the player's request, all real-money balances are withdrawn before closure. The account record and associated personal data are then subject to the post-closure retention periods listed above. Data subject to an ongoing legal hold — for example, where an account is under investigation — will be retained until the hold is lifted, after which standard post-closure retention periods apply.
Secure Data Storage
All personal data held by 2777but is stored on secured servers protected by access controls, encryption at rest, and regular security audits. Access to personal data is restricted to authorised 2777but personnel and contracted data processors on a strict need-to-know basis.
Account Closure and Data
Closing your 2777but account does not result in the immediate deletion of all your personal data. Post-closure retention periods apply to meet legal and regulatory obligations. You may submit a data deletion request after the applicable retention period has elapsed by contacting the support team.
Your Data Rights and Controls
As a 2777but player, you have a number of rights in relation to the personal data we hold about you. These rights apply subject to applicable law and to any overriding legitimate interests or legal obligations that 2777but must satisfy. To exercise any of the rights listed below, please contact the 2777but support team with your account details and the specific right you wish to exercise. We will respond within 30 days of receiving a valid request.
- Right of Access: You may request a copy of all personal data that 2777but holds about you. We will provide this in a clear, structured format within 30 days of your verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update some information directly in your account settings; changes to identity data require KYC re-verification.
- Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where we have processed it unlawfully. This right is subject to our mandatory legal retention obligations.
- Right to Restriction: You may ask us to restrict processing of your personal data in certain circumstances — for example, while we are verifying the accuracy of data you have contested, or while a complaint is under investigation.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a machine-readable format (such as CSV) so that you may transfer it to another service provider.
- Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Rights Relating to Automated Decision-Making: Where a significant decision about your account is made solely by automated means (including fraud detection systems), you have the right to request human review of that decision. Contact the support team to initiate a review.
How to Submit a Data Request
To exercise any of your data rights, contact 2777but support via live chat or by emailing [email protected] (plain text — not a clickable link). Include your registered account mobile number and the specific right you are exercising. Identity verification is required before we can action your request.
Response Timeframe: 2777but will acknowledge all valid data requests within 5 business days (Bangladesh Standard Time, UTC+6) and will provide a full response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.
Data Security Measures
2777but takes the security of your personal data seriously and implements a layered set of technical and organisational security measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis in response to emerging threats and changes in the technological environment.
Our primary technical security measures include:
- All data transmitted between your device and the 2777but platform is encrypted using TLS 1.2 or higher (256-bit SSL). The 2777but domain maintains an A-grade SSL certificate at all times.
- Personal data stored on 2777but servers is encrypted at rest using AES-256 encryption. Database servers are not publicly accessible and are protected by network-level access controls.
- Account passwords are stored as salted cryptographic hashes. 2777but staff cannot view plaintext passwords. If you forget your password, a reset link is sent to your registered email address — no staff member will ever ask for your password directly.
- Access to production systems containing personal data is restricted to authorised personnel using multi-factor authentication (MFA). All access is logged and subject to periodic review.
- 2777but operates continuous security monitoring and intrusion detection systems. Anomalous activity — including unusual login locations and high-frequency transaction patterns — triggers automated alerts for manual review.
- Security vulnerability assessments and penetration testing are conducted periodically by qualified security professionals. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to your rights and freedoms, 2777but will notify affected players as soon as is practicable, and will take immediate steps to contain the breach, assess its scope, and implement remediation measures. 2777but will fulfil any applicable legal breach notification obligations promptly.
Your Security Responsibilities
While 2777but implements robust security measures, you also play an important role in keeping your account secure. Use a strong, unique password for your 2777but account. Never share your login credentials with anyone. Do not access your account over unsecured public Wi-Fi. Log out after each session, particularly on shared devices.
Phishing Warning: 2777but will never contact you by email, SMS, or phone to ask for your password, full NID number, or bKash PIN. If you receive any such request, do not respond — it is a phishing attempt. Report it to [email protected] immediately.
Contact and Privacy Queries
If you have any questions, concerns, or complaints about this Privacy Policy, about the way 2777but processes your personal data, or about the exercise of your data rights, please contact the 2777but support team using the details below. We take all privacy enquiries seriously and will respond within the timeframes stated in Section 6 of this policy.
For general privacy questions, account data requests, or marketing opt-out requests, our customer support team is available 24 hours a day, 7 days a week via live chat on the 2777but platform, or by email.
Contact email: (plain text — not a clickable link; type this address directly into your email client).
When contacting us about a privacy matter, please include your registered mobile number or account username so that we can verify your identity before processing your request. Do not include your full NID number or financial details in an unsolicited email — we will guide you through a secure submission process if such data is required.
2777but reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made, we will update the effective date at the top of this page and, where appropriate, send a notification to your registered email address. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Privacy Policy Updates
This Privacy Policy was last updated in January 2026. 2777but reviews this policy at least annually and whenever a material change in data processing practices occurs. Continued use of the 2777but platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms.
Responsible Gaming and Privacy
Your responsible gaming data — including self-exclusion status, deposit limits, and time-out settings — is treated with the highest level of confidentiality. This data is never shared with third parties for marketing purposes and is used solely to protect your wellbeing on the 2777but platform.
Ready to Play Responsibly at 2777but?
Now that you know exactly how 2777but protects your personal data, explore our games and betting markets with full confidence. Cricket, slots, live casino, and more — all secured and SSL-encrypted for Bangladesh players.