1 Data We Collect
ber1777 collects personal data to deliver a safe, personalised, and compliant online betting and casino experience to our users in Bangladesh. We collect only what is necessary for the stated purposes and do not gather data beyond what those purposes require. The categories of data we collect are described below.
Registration and Identity Data
When you create a ber1777 account, we collect the following information: your full legal name, date of birth, residential address in Bangladesh (including district, division, and postal code), email address, and a mobile phone number registered with a Bangladesh operator. This information is used to create your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.
Identity Verification Documents
To comply with anti-money laundering (AML) regulations and to confirm that you meet the minimum age requirement of 18 years, ber1777 requires users to submit identity verification documentation at certain points during account use — including at first withdrawal. Accepted documents include:
- National Identity Card (NID) issued by the Bangladesh Election Commission.
- Valid Bangladeshi passport.
- Bangladesh driving licence (where accompanied by a secondary address proof document).
- Recent utility bill, bank statement, or MFS account statement for proof of address.
Verification documents are uploaded via a secure encrypted channel and stored in a restricted-access document vault. Document images are used solely for identity verification purposes and are never shared with third parties for commercial purposes.
Transaction and Payment Data
ber1777 records details of all financial transactions processed through your account, including deposit amounts, withdrawal requests, bonus credits, wager amounts, game results, and running wallet balances. Payment method identifiers — such as the registered mobile number linked to your bKash, Nagad, or Rocket account — are recorded for reconciliation, fraud prevention, and AML compliance purposes. ber1777 does not store full bank account numbers, card numbers, or MFS PINs. Payment credentials are handled directly by the relevant payment service provider and are never transmitted to or stored on ber1777 infrastructure.
Technical and Device Data
When you access ber1777 through a browser or mobile device, we automatically collect certain technical information, including: your IP address, browser type and version, operating system, device type (desktop, tablet, or mobile), screen resolution, referring URL, pages visited within ber1777, time spent on each page, and session duration. This data is collected through server logs and analytics tools to maintain platform security, detect fraudulent access patterns, and improve the user experience.
Behavioural and Gaming Data
We collect data about how you interact with the ber1777 platform — including which sports markets you browse, which casino games you play, your average stake size, your preferred payment method, and your session frequency and duration. This data is used to personalise your experience, identify responsible gaming risk patterns, and inform platform improvements.
Communications Data
If you contact ber1777 through our live chat, email support, or any other support channel, we retain records of those communications including the content of messages, timestamps, and any attachments. This data is retained for quality assurance, dispute resolution, and training purposes.
2 How We Use Your Data
ber1777 uses the personal data we collect for the following purposes. We will only ever use your data for a purpose that is compatible with the reason it was originally collected.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, identity data | Contractual necessity |
| Identity verification (KYC) | NID, passport, proof of address | Legal obligation |
| Processing deposits and withdrawals | Transaction data, payment identifiers | Contractual necessity |
| Fraud prevention and AML monitoring | Transaction data, device data, IP data | Legal obligation / Legitimate interest |
| Responsible gaming monitoring | Behavioural data, gaming history | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Communications data, account data | Contractual necessity |
| Platform analytics and improvement | Technical data, behavioural data | Legitimate interest |
| Promotional communications (opt-in only) | Email, mobile number, gaming preferences | Consent |
ber1777 does not use your personal data for automated individual decision-making that produces significant legal effects on you without human review. Where automated tools are used to flag accounts for responsible gaming review or fraud investigation, a trained compliance team member reviews every flagged case before any consequential action is taken.
3 Legal Basis for Processing
ber1777 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:
- Contractual necessity: Processing is necessary to perform the contract between you and ber1777 — that is, to provide you with the betting and casino services you have registered to use. Without this processing, we cannot operate your account or facilitate your transactions.
- Legal obligation: Processing is necessary for ber1777 to comply with applicable legal and regulatory requirements, including AML obligations, age verification mandates, and record-keeping requirements under applicable financial and gaming regulations.
- Legitimate interests: Processing is necessary for the purposes of ber1777's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
- Consent: Where we rely on your consent as the legal basis for processing — for example, to send you promotional emails or SMS messages about ber1777 offers — you may withdraw that consent at any time by updating your communication preferences in Account Settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4 Data Sharing and Disclosure
ber1777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with third parties only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.
Payment Service Providers
To process your deposits and withdrawals, ber1777 shares the minimum necessary transaction data with your chosen payment service provider — bKash, Nagad, Rocket, Upay, or the relevant banking institution. Each payment provider operates under its own data protection policy and is independently responsible for data processed on its own systems. ber1777 does not share your gaming history or account balance with payment providers beyond what is required to process the specific transaction.
Game Content Providers
Live casino games and slot titles on the ber1777 platform are powered by third-party providers including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a session token and a randomly generated player identifier when you launch a game. They do not receive your full name, NID number, payment details, or contact information. Game results and RTP performance data are reported in aggregate form only.
Identity Verification Partners
Where ber1777 uses a third-party KYC service provider to assist with automated document verification, your submitted identity documents and extracted data points may be transmitted to that provider via an encrypted API connection. KYC providers engaged by ber1777 are contractually bound to process your data only for identity verification purposes and to delete document images within a specified retention period following verification completion.
Regulatory and Law Enforcement Authorities
ber1777 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, in response to a valid legal process, court order, or regulatory investigation. Such disclosures are made without prior notice to the affected user where applicable law requires or permits non-disclosure.
Corporate Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of ber1777's business assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify affected users via the registered email address prior to such a transfer taking effect, and the acquiring entity will be required to honour the terms of this Privacy Policy.
5 Cookies and Tracking Technologies
ber1777 uses cookies and similar tracking technologies — including pixel tags, local storage objects, and session tokens — to operate, maintain, and improve the platform. This section explains the types of cookies we use and how you can manage your preferences.
Types of Cookies Used
- Strictly necessary cookies: These cookies are essential for the ber1777 platform to function and cannot be switched off. They include session authentication tokens that keep you logged in during a betting session, CSRF protection tokens, and load-balancing cookies. These cookies do not collect any personally identifiable information beyond what is required for the session to function.
- Performance and analytics cookies: We use analytics tools to understand how users navigate the ber1777 platform — which pages are visited most, where users encounter errors, and how long sessions last. Analytics data is processed in aggregate or pseudonymised form and does not directly identify individual users by name.
- Functional cookies: These cookies remember your platform preferences — such as your preferred language setting, odds format (decimal or fractional), and last-visited sports market — so that you do not have to reconfigure your preferences on each visit.
- Responsible gaming cookies: Where you have activated a session timer or a deposit limit reminder tool, a cookie is used to maintain those settings across your browser sessions until you actively modify them.
Managing Cookie Preferences
You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, disable, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent certain core functions of the ber1777 platform from operating correctly, including the ability to log in and maintain an active session. For specific instructions on managing cookies in your browser, refer to your browser's Help documentation.
6 Data Retention and Storage
ber1777 retains personal data for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal retention requirements. The following retention periods apply:
- Active account data: Retained for the duration of the account relationship and for a period of five years following permanent account closure, in line with standard AML record-keeping obligations.
- Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction, consistent with financial record-keeping requirements applicable to regulated payment activities.
- Identity verification documents: KYC documents are retained for five years from the date of submission or from the date of account closure, whichever is later. After this period, document images are securely deleted from our systems and from any third-party KYC provider systems.
- Communications records: Support chat transcripts and email records are retained for two years from the date of the communication, unless the communication is directly relevant to an ongoing dispute or investigation, in which case it is retained until that matter is fully resolved.
- Technical and analytics data: Server log data is retained for up to 12 months. Aggregated analytics data with no personally identifiable components may be retained indefinitely for platform improvement purposes.
All personal data held by ber1777 is stored on servers protected by 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data stores is restricted to authorised personnel on a strict need-to-know basis, and access events are logged and audited regularly.
7 Your Data Rights
As a user of the ber1777 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your full registered name and account email address.
- Right of access: You have the right to request a copy of the personal data ber1777 holds about you. We will provide a structured, commonly used, machine-readable summary of your data within 30 days of a verified request.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your registered address — can be made directly within Account Settings. Changes to identity-critical fields such as your legal name require supporting documentation.
- Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. Please note that this right is subject to ber1777's legal obligations — we cannot erase data that we are required by law to retain, including transaction records and KYC documentation within the mandatory retention periods described in Section 6.
- Right to restriction of processing: You may request that we temporarily restrict our processing of your data — for example, while a dispute about data accuracy is being resolved — rather than deleting it entirely.
- Right to data portability: Where processing is carried out on the basis of your consent or on the basis of contractual necessity, you have the right to receive your data in a portable format suitable for transfer to another service provider.
- Right to object: You have the right to object to processing carried out on the basis of ber1777's legitimate interests, including profiling for personalisation purposes. Where you object and we cannot demonstrate compelling legitimate grounds that override your interests, we will cease that processing.
- Right to withdraw consent: Where processing is based on your consent — for example, to receive marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
ber1777 aims to respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window.
8 Contact and Data Enquiries
If you have any questions about this Privacy Policy, about the data ber1777 holds about you, or about how to exercise your data rights, please contact our data protection team using the details below. We are committed to addressing all data-related enquiries promptly and transparently.
Data Enquiries Contact:
Email: [email protected] (plain text — not a clickable link)
Subject line: "Privacy Enquiry" or "Data Rights Request"
Response time: Within 2 business days for general enquiries; within 30 days for formal data rights requests.
All data rights requests must be submitted from the email address registered to your ber1777 account, or must include sufficient information to allow us to verify your identity before disclosing or modifying any personal data. This verification step is a security measure designed to protect you from unauthorised access to your account data.