yd77 Privacy Policy

yd77 collects personal information from you in two primary ways: information you provide directly when creating and managing your account, and information collected automatically as you use our platform. The categories below set out exactly what we collect and why.

1.1 Information You Provide Directly

When you register a yd77 account, complete KYC verification, make deposits or withdrawals, or contact our support team, you may provide us with the following personal data:

Data Category	Specific Examples	Collection Point
Identity Data	Full legal name, date of birth, NID number, passport number	Registration & KYC
Contact Data	Email address, mobile phone number, residential address in Bangladesh	Registration
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, Visa/Mastercard last four digits, transaction history	Deposit & withdrawal
Verification Documents	Scanned NID, passport photo page, proof of address (utility bill, bank statement)	KYC verification
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support

1.2 Information Collected Automatically

When you access the yd77 platform, certain technical information is collected automatically by our servers and analytics systems. This includes:

• Device & Browser Data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution.
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, and in-platform navigation paths.
• Location Data: Approximate geographic location derived from your IP address (country and city level). yd77 does not collect precise GPS coordinates.
• Cookie Data: Session tokens, preference identifiers, and analytics identifiers placed on your device. See Section 3 for full details.

1.3 Data From Third Parties

In certain circumstances, yd77 may receive personal data about you from trusted third-party sources, including:

• Identity verification and KYC service providers who assist us in confirming the authenticity of documents you submit.
• Payment processors and mobile financial service providers (including bKash, Nagad, and Rocket) who confirm transaction completion and flag suspicious activity.
• Fraud detection and anti-money laundering screening services that cross-reference your details against relevant watchlists.

yd77 processes your personal data only for specific, documented purposes. The table below sets out each processing purpose, the legal basis under which we rely on it, and the categories of data involved.

Processing Purpose	Legal Basis	Data Categories Used
Account creation and management	Contractual necessity	Identity, Contact
Processing BDT deposits and withdrawals	Contractual necessity	Financial, Identity
KYC identity and age verification	Legal obligation	Identity, Verification Documents
Responsible gaming monitoring	Legal obligation / Legitimate interest	Usage, Financial
Fraud detection and AML screening	Legal obligation / Legitimate interest	Identity, Financial, Device
Customer support and dispute resolution	Contractual necessity	Communications, Identity
Platform analytics and improvement	Legitimate interest	Usage, Cookie, Device
Promotional communications (with consent)	Consent	Contact, Usage

2.1 Marketing Communications

yd77 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, cricket betting offers, and seasonal promotions (such as those tied to the BPL, IPL, Eid, and Pohela Boishakh). These communications are sent only if you have opted in to receive them at the time of registration or subsequently through your account preferences. You can withdraw your marketing consent at any time by updating your notification settings within your yd77 account or by contacting [email protected].

2.2 Automated Decision-Making

yd77 uses automated systems to assist with certain decisions, including fraud risk scoring, responsible gaming alerts, and promotional eligibility checks. Where an automated decision has a significant effect on your account (for example, triggering an account review), you have the right to request human review of that decision by contacting [email protected].

yd77 uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, and analyse how players interact with our services. This section explains the types of cookies we use and how you can manage them.

3.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the yd77 platform to function. They maintain your login session, remember your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without rendering the platform non-functional.
• Analytics Cookies: yd77 uses first-party analytics cookies to understand how players navigate the platform — which games are most popular, where players encounter friction, and how betting patterns evolve over time. This data is used in aggregate, anonymised form to improve the platform. You may opt out of analytics cookies through your account settings.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method (for example, bKash or Nagad), your display settings, and your most recently played games — so that you do not need to re-enter them on every visit.

3.2 Managing Your Cookie Preferences

You can manage your cookie preferences in two ways. First, through your yd77 account settings under the "Privacy & Cookies" section, where you can enable or disable non-essential cookie categories at any time. Second, through your browser's built-in cookie management tools — most modern browsers allow you to block or delete cookies entirely, although doing so may affect your ability to use certain features of the yd77 platform. Clearing your browser cookies will also log you out of your active yd77 session.

yd77 does not sell, rent, or trade your personal data. We share personal data only with trusted third-party service providers who assist us in operating the platform, and only to the extent necessary for that specific purpose. All third-party processors are bound by data processing agreements that obligate them to handle your data securely and in accordance with this Privacy Policy.

4.1 Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateways receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated by Bangladesh Bank.
• KYC and Identity Verification Providers: Third-party services that assist in verifying the authenticity of government-issued identity documents submitted during the verification process.
• Fraud Prevention and AML Services: Specialised providers that help yd77 detect and prevent financial crime, including screening against sanctions and politically exposed person (PEP) lists.
• Cloud Infrastructure Providers: yd77's platform is hosted on secure cloud infrastructure. Server-level access to encrypted data may be available to infrastructure providers, but they are strictly prohibited from accessing or processing that data for any purpose other than infrastructure provision.
• Customer Support Platforms: Live chat and ticketing software providers that process support communications on our behalf.

4.2 Disclosure to Authorities

yd77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of our players, or comply with a valid legal process. We will notify affected players of such disclosures to the extent permitted by law.

4.3 International Data Transfers

Some of yd77's third-party service providers operate outside Bangladesh. Where personal data is transferred internationally, yd77 ensures that appropriate safeguards are in place — including contractual data protection clauses and security certifications — to ensure your data receives a level of protection consistent with the standards described in this Privacy Policy.

yd77 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and yd77's servers is encrypted using industry-standard TLS protocols. This includes all login sessions, financial transactions, and document uploads.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and KYC materials — is stored in encrypted form on our servers. Encryption keys are managed separately from encrypted data.
• Access Controls: Access to personal data within yd77's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role, and all access is logged and audited.
• Two-Factor Authentication: yd77 strongly recommends — and in certain circumstances requires — that players enable two-factor authentication (2FA) on their accounts as an additional layer of protection against unauthorised access.
• Penetration Testing: yd77's platform undergoes regular security assessments, including penetration testing by independent security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: yd77 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected players promptly and take all necessary steps to contain and remediate the breach.

yd77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below reflect our current data management policy.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and regulatory compliance
KYC verification documents	Duration of account + 7 years after closure	AML regulatory requirements
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
Customer support communications	3 years from last interaction	Dispute resolution reference
Analytics and usage data	24 months (rolling)	Platform improvement purposes
Marketing consent records	Until consent is withdrawn + 3 years	Evidence of lawful processing basis

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data must be retained beyond the standard period due to an ongoing legal dispute, investigation, or regulatory requirement, we will notify you of the extended retention period where possible.

As a yd77 player, you have a number of rights in relation to the personal data we hold about you. These rights are set out below, along with guidance on how to exercise them. yd77 will respond to all verified privacy rights requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that yd77 holds about you. This is sometimes called a "Subject Access Request" (SAR). We will provide a structured summary of your data in a readable format. To submit a SAR, contact us at [email protected] with the subject line "Subject Access Request" and include sufficient information to verify your identity.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most of your account information directly through your yd77 account settings. For changes to identity-verified data (such as your legal name or date of birth), please contact [email protected] with supporting documentation.

7.3 Right to Erasure

You have the right to request that yd77 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw your consent and there is no other legal basis for processing. Please note that yd77 may be required to retain certain data (particularly KYC and financial records) for regulatory compliance purposes even after an erasure request. We will inform you of any such limitations when responding to your request.

7.4 Right to Restrict Processing

You may request that yd77 restrict the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of your data is being resolved, or while an objection to processing is being assessed. During a restriction period, yd77 will continue to store your data but will not actively process it for other purposes.

7.5 Right to Data Portability

Where yd77 processes your personal data on the basis of your consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, machine-readable format (such as CSV or JSON) for transfer to another service provider.

7.6 Right to Object

You have the right to object to yd77's processing of your personal data where we rely on "legitimate interests" as the legal basis for processing — including certain analytics activities. You also have the right to object to receiving marketing communications at any time, regardless of whether you previously consented. To object to marketing, update your preferences in your account settings or contact [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or the way yd77 handles your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy-related concerns promptly and transparently.

8.1 Privacy & Data Enquiries

For questions about how your data is used, to exercise any of your privacy rights, or to raise a general data protection concern, contact us at:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Responsible Gaming Data: [email protected]
• Response Time: Within 2 business hours for urgent matters; within 30 days for formal privacy rights requests (BST, UTC+6)
• Support Availability: 24/7 live chat support; email monitored continuously

8.2 Changes to This Privacy Policy

yd77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. Where changes are material, we will notify registered players via the email address associated with their account and post a prominent notice on the platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

By continuing to use the yd77 platform after a Privacy Policy update has taken effect, you acknowledge that you have reviewed the revised policy and agree to its terms. If you do not agree to any update to this Privacy Policy, you should cease using the yd77 platform and may request account closure by contacting [email protected].