277bat Privacy Policy

277bat operates the online casino and sports betting platform accessible at https://277bat.onl (the "Platform"). For all privacy-related queries, data subject requests, or complaints, you may contact our Data Protection team at:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related correspondence within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 20 business days.

When contacting us about a data subject request, please include your registered email address and a description of your request so we can verify your identity and process your request efficiently.

277bat collects personal data through several channels: directly from you when you register and use the Platform, automatically through technical systems as you interact with the Platform, and from third-party verification and payment service providers. The categories of personal data we collect include:

277bat processes your personal data for the following specific purposes, each of which has a corresponding lawful basis:

• Account Registration and Management: To create and maintain your 277bat account, verify your identity, and provide you with access to the Platform's services. Lawful basis: performance of a contract.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment providers. Lawful basis: performance of a contract and compliance with legal obligations.
• Identity Verification (KYC): To verify that you meet the eligibility requirements to use the Platform, including age verification (21+ requirement) and identity document checks. Lawful basis: legal obligation and legitimate interests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other illicit activity. Lawful basis: legitimate interests and legal obligation.
• Responsible Gaming Compliance: To enforce deposit limits, session limits, self-exclusion requests, and other responsible gaming protections you have set or that 277bat applies as a matter of policy. Lawful basis: legal obligation and legitimate interests.
• Customer Support: To respond to your enquiries, resolve disputes, and improve our service quality based on feedback. Lawful basis: performance of a contract and legitimate interests.
• Marketing and Promotions: To send you information about 277bat promotions, bonuses, and offers where you have consented to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting [email protected].
• Platform Improvement and Analytics: To understand how players use the Platform, identify technical issues, and improve the user experience. Lawful basis: legitimate interests. Where possible, analytics are conducted on aggregated or anonymised data.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities. Lawful basis: legal obligation.

277bat will not use your personal data for any purpose that is incompatible with the purposes described above without first obtaining your consent or establishing a new lawful basis for such processing.

277bat does not sell your personal data to third parties. We may share your personal data with the following categories of recipients where strictly necessary to operate the Platform or to comply with our legal obligations:

• Payment Service Providers: We share necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, and affiliated banking partners in Bangladesh to process deposits and withdrawals. These providers are bound by their own privacy and security standards.
• Identity Verification Providers: We may share identity document information with third-party KYC and age verification service providers to confirm that you meet eligibility requirements. These providers process data solely for the purpose of identity verification on 277bat's behalf.
• Game Technology Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and stake amounts) necessary to operate their games within the Platform. They do not receive your full identity or financial details.
• IT and Hosting Infrastructure: Servers and infrastructure services used to host and operate the 277bat Platform may be provided by third-party technology companies. These providers have access to data solely in their capacity as data processors acting on 277bat's instructions under appropriate data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or where necessary to protect the rights, property, or safety of 277bat, its players, or the public.
• Fraud Prevention and Security Services: We may share data with fraud detection and cybersecurity service providers to identify and prevent fraudulent or harmful activity on the Platform.

Any third party with whom 277bat shares personal data is contractually required to handle that data securely, to use it only for the specified purpose, and not to further disclose it without authorisation. 277bat remains responsible for ensuring that such third-party data processing meets appropriate standards of data protection.

The 277bat Platform uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during a gaming session and security cookies used to prevent cross-site request forgery. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings or your last visited game category. Disabling these cookies will not prevent you from using the Platform but may reduce convenience.
• Analytics Cookies: Used to collect aggregated information about how players use the Platform — such as which pages are visited most frequently and where technical errors occur. This data helps us improve the Platform experience.
• Security and Fraud Detection Cookies: Used to detect unusual activity patterns that may indicate fraud, account takeover attempts, or bot activity.

You can manage or disable non-essential cookies through your browser's settings menu. Please note that blocking cookies may affect certain Platform features. The 277bat Platform does not currently use cookies for third-party advertising or behavioural advertising networks.

277bat retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with financial crime prevention and anti-money laundering requirements.
• Transaction Records: Retained for a minimum of 5 years following the transaction date to satisfy financial record-keeping requirements.
• Customer Support Communications: Retained for 2 years following resolution of the relevant query or complaint.
• Technical and Usage Data: Retained in identifiable form for up to 12 months; thereafter anonymised for analytical purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for 2 years following withdrawal of consent, as evidence of the original consent.

When the relevant retention period expires, personal data is securely deleted or irreversibly anonymised. 277bat periodically reviews its data inventory to ensure that data not required for any ongoing purpose is disposed of promptly.

277bat takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive personal data stored on 277bat's servers.
• Access controls that restrict employee access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular security testing, including vulnerability assessments and penetration testing of Platform infrastructure.
• Secure procedures for managing and responding to suspected data security incidents.

While 277bat takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for keeping your own login credentials secure. If you suspect that your account has been compromised, contact [email protected] immediately.

Subject to applicable law, you have the following rights in relation to the personal data that 277bat holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right does not apply where retention is required by law or where the data is necessary for us to fulfil our contractual obligations to you.
• Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.

To exercise any of the above rights, submit a written request to [email protected]. We will respond within 20 business days of receiving a verified request. We may ask you to verify your identity before processing your request. There is no fee for making a data subject request, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

The 277bat Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. If you are under 21, you must not register an account or use the Platform in any way.

If 277bat becomes aware that personal data has been collected from a person under 21 without appropriate age verification, that account will be immediately suspended, all funds will be frozen pending review, and the personal data of the underage user will be deleted as soon as legally permissible. If you believe that a person under 21 has registered on the Platform, please notify us at [email protected].

277bat reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will post a notice on the Platform and update the "Last Updated" date at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the 277bat Platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].