2p777 Privacy Policy

01 Introduction

2p777 is an online gaming platform serving adult players across Bangladesh, offering cricket betting, live casino, slots, fishing games, and crash titles. As a platform that handles financial transactions and personal identity data, 2p777 takes the protection of user privacy with the utmost seriousness. This Policy applies to all data collected via the 2p777 website, mobile-optimised interface, and any related communication channels, including email and customer support.

This Policy should be read alongside the 2p777 Terms & Conditions, which govern the overall contractual relationship between you and the platform. In the event of any conflict between this Policy and any other document, this Privacy Policy shall govern with respect to matters of data protection and privacy. This Policy is written in plain English to ensure it is accessible and understandable to all 2p777 users regardless of their familiarity with legal language.

We regularly review and update this Policy to reflect changes in our data practices, technology, and applicable obligations. The "Last Updated" date displayed in the hero section of this page reflects the date of the most recent revision. We will notify registered users of material changes to this Policy via the email address registered to their account.

02 Data We Collect

2p777 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform, and in certain cases from third-party verification partners used to support KYC compliance. The categories of data we collect are set out below.

2.1 Data You Provide Directly

• Registration data: Your chosen username, email address, mobile number, date of birth, and any other information provided when creating your account.
• Identity verification data: Copies of government-issued photo identification (National ID card, passport, driving licence), proof of address documents, and payment method ownership screenshots submitted as part of the KYC process.
• Financial data: bKash mobile number, Nagad mobile number, Rocket or Upay account details, bank account numbers (Dutch-Bangla Bank, BRAC Bank, City Bank, or others), and card details (Visa/Mastercard) where applicable.
• Communications data: The content of emails, live chat transcripts, and any other correspondence you send to 2p777 support or compliance teams.
• Preference and self-exclusion data: Responsible gaming settings you configure on your account, including deposit limits, cooling-off periods, and self-exclusion requests.

2.2 Data Collected Automatically

• Technical data: Your IP address, device fingerprint, operating system, browser type and version, screen resolution, and time zone setting (Bangladesh Standard Time, UTC+6).
• Usage data: Pages and game titles accessed, session start and end times, bet amounts, game outcomes, navigation paths, and feature interactions within the platform.
• Cookie data: Session cookies, preference cookies, and first-party analytics cookies placed by 2p777 to maintain your login state and measure platform performance. See Section 7 for full cookie details.

2.3 Data from Third Parties

2p777 may receive limited personal data from third-party identity verification service providers engaged to assist with KYC and anti-fraud screening. Such data is used solely for the purpose of verifying your identity and will not be used for any other purpose or shared with any further party.

03 How We Use Your Data

2p777 processes your personal data only for the purposes described in this Policy. We do not engage in processing that is incompatible with the purposes for which data was originally collected. The specific purposes for which we use your data are as follows:

• Account creation and management: To register your account, maintain your player profile, process login requests, and manage account settings and preferences.
• Transaction processing: To process deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain an accurate record of your transaction history.
• Identity and age verification: To confirm that you are who you claim to be, that you are aged 21 or above, and that you are eligible to use the 2p777 platform under these Terms.
• Anti-fraud and anti-money laundering (AML): To detect, investigate, and prevent fraudulent activity, suspicious transactions, and any attempt to use the platform for money laundering or other illegal financial activity.
• Customer support: To respond to your enquiries, resolve disputes, handle complaints, and provide assistance with account, payment, and gaming matters.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to apply protective limits you have set on your account, and to administer self-exclusion requests.
• Platform security: To detect and prevent unauthorised account access, protect the integrity of the platform, and investigate security incidents.
• Legal compliance: To comply with applicable obligations, respond to lawful requests from regulatory authorities, and maintain records required by law.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, improve game performance, and develop new features that better serve Bangladesh players.
• Service communications: To send you transactional messages relating to your account — including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These communications are not optional as they are integral to the operation of your account.
• Promotional communications (with consent): To send you information about bonuses, promotions, and seasonal offers relevant to your interests, where you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

04 Legal Bases for Processing

Every instance of personal data processing by 2p777 is carried out on one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 2p777 — including account registration, transaction processing, KYC verification, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements — including anti-money laundering obligations, identity verification mandates, and record-keeping requirements.
• Legitimate interest: Processing carried out to pursue 2p777's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms — including fraud prevention, platform security, and aggregate analytics for platform improvement.
• Consent: Processing carried out on the basis of your explicit, freely given consent — primarily for optional promotional communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

05 Data Sharing & Disclosure

2p777 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Service Providers

We engage a small number of carefully selected third-party service providers to assist in the operation of the 2p777 platform. These providers may process your personal data solely on our behalf, under strict data processing agreements, and are not permitted to use your data for their own purposes. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners) — for transaction facilitation only;
• Identity verification and KYC service providers — for document authentication;
• Cloud hosting and infrastructure providers — for secure platform operation;
• Anti-fraud and cybersecurity service providers — for platform protection.

5.2 Legal and Regulatory Disclosure

2p777 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or other binding legal process. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will notify you of the disclosure where permitted to do so by law.

5.3 Business Transfers

In the event that 2p777 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered users of any such transfer via email and will ensure that the acquiring entity is bound by privacy obligations no less protective than those described in this Policy.

06 Data Retention

2p777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account's existence and for a period of five years following account closure, to meet anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years following the completion of verification, in line with applicable anti-money laundering requirements.
• Transaction records: Retained for a minimum of five years following the date of the transaction.
• Support communications: Retained for three years from the date of the communication, unless the communication relates to a dispute or complaint that remains unresolved, in which case it is retained until final resolution plus two years.
• Technical and usage data: Retained for a maximum of 24 months in identifiable form, after which it is anonymised and may be retained indefinitely for aggregate analytics purposes.
• Cookie data: Session cookies expire when your browser session ends. Persistent preference cookies expire after 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. If you request deletion of your data before the expiry of a mandatory retention period, we will restrict processing of your data to the minimum required to satisfy our legal obligations, and delete it fully upon expiry of that period.

07 Cookies & Tracking Technologies

2p777 uses cookies and similar local storage technologies to provide a functional, secure, and personalised platform experience. A cookie is a small text file placed on your device by the 2p777 platform when you visit. The following categories of cookies are used:

7.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They manage your login session, maintain your account state across pages, and protect against cross-site request forgery (CSRF). Strictly necessary cookies cannot be disabled without breaking core platform functionality. No consent is required for their placement.

7.2 Preference Cookies

These cookies remember your settings and preferences — such as your selected language display, preferred interface layout, and responsible gaming reminder frequency — so you do not need to reconfigure them on each visit. These cookies expire after 12 months and are first-party only.

7.3 Analytics Cookies

2p777 uses first-party analytics tools to understand how players interact with the platform — which game categories are most popular, where users encounter friction, and how the platform performs across different device types and connection speeds in Dhaka, Chittagong, Sylhet, and other locations across Bangladesh. Analytics data is aggregated and does not identify individual users.

08 Security Measures

2p777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the 2p777 platform is encrypted using TLS 1.3, the current industry-leading standard for in-transit data protection.
• Database encryption: Sensitive data fields — including identity document data, financial account numbers, and passwords — are encrypted at rest using AES-256 cryptography.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a modern, salted hashing algorithm (bcrypt) that cannot be reversed to reveal the original password.
• Access controls: Strict role-based access controls ensure that 2p777 staff may only access the data necessary to perform their specific job function. All data access by internal personnel is logged and subject to periodic audit.
• Intrusion detection: Automated monitoring systems analyse platform traffic patterns in real time to detect and alert on anomalous activity indicative of a data breach, unauthorised access attempt, or automated attack.
• Penetration testing: 2p777 undergoes periodic security assessments including vulnerability scanning and penetration testing to identify and remediate potential weaknesses in the platform infrastructure.

Notwithstanding these measures, no internet-connected system can be guaranteed to be completely secure. In the event of a data security incident that poses a risk to your rights and freedoms, 2p777 will notify affected users via the email address registered to their account as soon as reasonably practicable following discovery of the incident.

09 Your Rights

As a 2p777 account holder, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". We will acknowledge your request within two business days and aim to fulfil it within 30 days of receipt.

• Right of Access: You have the right to request a copy of all personal data held by 2p777 about you, together with information about how that data is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account. You may update basic contact information directly from your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations — data required to meet AML record-keeping requirements cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is under consideration.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interest. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Children & Minors

If you are a parent or guardian and believe that a person under the age of 21 has registered an account with 2p777 or has accessed the platform, please contact us immediately at [email protected]. Include as much identifying information as possible (such as the username or email address used to register) so that we can act quickly to protect that individual. 2p777 supports parental control software and internet filtering tools as complementary measures for households with young people.

11 Third-Party Services & Links

The 2p777 platform integrates games and content from third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and others. While these games are delivered within the 2p777 platform environment, the game providers may collect certain technical data (such as session tokens and game round data) to operate their software. This data collection is governed by the game providers' own data processing arrangements with 2p777 and is subject to strict contractual data protection obligations.

2p777 does not include outbound links to external third-party websites within the platform interface. If you navigate away from 2p777 to any external website, that site's own privacy policy governs the collection and use of your data, and 2p777 accepts no responsibility for third-party privacy practices.

12 International Data Transfers

2p777 operates primarily to serve players in Bangladesh. However, certain technical infrastructure and service providers used by the platform may process or store data on servers located outside Bangladesh. Where such international transfers occur, 2p777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Safeguards applied to international data transfers include contractual data processing agreements with all third-party service providers, technical security requirements (including encryption in transit and at rest), and restrictions prohibiting onward transfer of your data without 2p777's prior written authorisation. We do not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing compensating contractual safeguards.

13 Policy Updates

2p777 reviews this Privacy Policy periodically and updates it as necessary to reflect changes in our data processing practices, the services we offer, applicable legal obligations, or feedback from our player community. The date of the most recent revision is displayed in the hero section at the top of this page.

Where we make material changes to this Policy — changes that meaningfully affect how we collect, use, or share your personal data, or that reduce your rights under this Policy — we will notify you by email to the address registered to your 2p777 account at least 14 days before the changes take effect. Your continued use of the platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Policy each time you visit the page to stay informed about how 2p777 protects your information. If you disagree with any material change to this Policy, you may close your account before the effective date by contacting [email protected].

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 2p777 handles your personal data, please contact our support team using the details below. We take all privacy-related enquiries seriously and aim to respond within two business days.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data queries: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time target: 2 business days for acknowledgement; 30 days for full resolution
• Operating hours: Monday to Sunday, 09:00–22:00 Bangladesh Standard Time (UTC+6)

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. 2p777 is committed to cooperating fully with any such investigation and to resolving any legitimate complaint in good faith.