277db Privacy Policy

This Privacy Policy (the "Policy") describes how 277db (the "Platform", "we", "us", or "our"), accessible at https://277db.io, collects, uses, stores, shares, and protects the personal data of individuals (the "Player", "User", or "you") who visit our website, create a registered player account, or otherwise interact with our online casino, sports betting, and live dealer services.

This Policy applies to all personal data processed by 277db in connection with the delivery of its services to players located in Bangladesh and other jurisdictions. It applies to data collected through the 277db website, mobile-optimised browser interface, any affiliated promotional landing pages, and any direct communication channels (including support email and live chat).

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. By using the 277db platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

For the purposes of applicable data protection law, 277db acts as the data controller in respect of all personal data collected through the platform. As data controller, 277db determines the purposes for which, and the means by which, personal data is processed.

All data subject requests, privacy enquiries, and complaints relating to data processing practices should be directed to the 277db data protection contact point:

• Contact Method: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Privacy Request — [Your Account ID]"
• Response Time: Within 30 calendar days of receipt of a valid request
• Operating Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

277db is committed to responding to all data subject requests in a timely, accurate, and respectful manner. We take our obligations as a data controller seriously and maintain internal records of all processing activities in accordance with best practice data governance standards.

277db collects personal data across several categories, depending on your level of interaction with the platform. The categories of personal data we collect are as follows:

277db does not collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is strictly necessary for identity verification purposes as part of our Know Your Customer (KYC) obligations, in which case such data is handled with heightened security controls and deleted promptly once verification is complete.

277db collects your personal data through the following means:

• Direct provision by you: When you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, contact our support team, or complete any other form or interaction on the platform that requires you to provide personal information.
• Automated technical collection: When you visit the 277db website, our servers and analytics systems automatically record technical data including your IP address, device identifiers, browser type, referring URL, pages visited, and session duration. This collection occurs whether or not you are a registered player.
• Cookies and similar technologies: Through the use of first-party and third-party cookies, web beacons, and local storage objects, as described in Section 9 of this Policy.
• Payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a supported bank transfer service, the relevant payment provider may share transaction confirmation data and wallet/account reference numbers with 277db for the purposes of reconciliation and fraud prevention.
• Game providers: Our certified game partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — share gameplay session data and RNG outcome logs with 277db for dispute resolution, fair play auditing, and responsible gaming monitoring purposes.
• Identity verification services: Where you are required to complete enhanced KYC verification, a third-party identity verification provider may process your identity documents and biometric liveness data on our behalf and return a verification result to 277db.

277db processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to open and maintain your player account, process deposits and withdrawals, deliver gaming services, and manage bonuses and promotions. Without this processing, 277db cannot fulfil its obligations under the Terms & Conditions contract with you.
• Legal obligation: Processing required to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, fraud prevention obligations, and any applicable reporting requirements under international financial crime frameworks.
• Legitimate interests: Processing necessary to protect the security and integrity of the 277db platform, detect and prevent fraud, maintain accurate records of gaming activity for dispute resolution, conduct analytics to improve the platform, and communicate service updates to registered players. We ensure that our legitimate interests are balanced against your rights and do not override them.
• Consent: Where we rely on your consent for specific processing activities — such as sending you promotional communications about new games, bonuses, or seasonal offers — we will obtain your explicit, informed consent before doing so. You may withdraw consent at any time by contacting [email protected].

The personal data 277db collects is used for the following specific, defined purposes:

• Account management: Creating, maintaining, verifying, and closing player accounts; resetting passwords; updating account details at your request.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers; crediting winnings to your account balance; administering bonuses, free spins, and promotions.
• Identity verification (KYC): Verifying that you meet the 21+ age requirement and that the identity and payment methods registered to your account are legitimately yours.
• Responsible gaming monitoring: Monitoring your gaming activity for signs of problematic gambling behaviour; enforcing self-exclusion or deposit limit requests; complying with responsible gaming obligations.
• Fraud and AML compliance: Detecting, investigating, and preventing fraudulent transactions, money laundering, and other financial crime; reporting suspicious activity as required by applicable regulations.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance.
• Platform improvement: Conducting anonymised analytics on platform usage patterns to improve game selection, user experience, performance, and security infrastructure.
• Marketing communications (consent-based): Sending you relevant promotional offers, bonus notifications, new game announcements, and seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season offers) where you have given explicit consent.
• Legal compliance: Maintaining records as required by applicable law; responding to lawful requests from relevant authorities; exercising or defending legal claims.

277db will not use your personal data for any purpose that is incompatible with the purposes listed above without first providing you with clear notice and, where required, obtaining your renewed consent.

277db does not sell, rent, or trade your personal data to any third party for marketing or commercial profiling purposes. Your data may be shared with the following categories of third parties, strictly as necessary to deliver our services and meet our legal obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — to process deposits, withdrawals, and transaction verification.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers — to deliver game content, manage RNG audit trails, and resolve game outcome disputes.
• Identity verification providers: Third-party KYC and AML screening services — to verify your identity documents and perform sanctions screening as required by our compliance obligations.
• Analytics and infrastructure providers: Cloud hosting, CDN, and anonymised analytics service providers — to maintain platform uptime, performance, and security.
• Legal and regulatory authorities: Competent regulatory bodies, law enforcement agencies, and financial intelligence units — where 277db is legally required to disclose personal data in connection with AML investigations, fraud proceedings, or lawful court orders.
• Professional advisers: Lawyers, auditors, and insurance providers — where necessary in connection with legal claims, regulatory audits, or compliance reviews, under strict confidentiality obligations.

All financial transactions on the 277db platform are denominated in Bangladeshi Taka (BDT, ৳). Payment data — including bKash wallet numbers, Nagad account references, Rocket mobile banking details, Upay wallet identifiers, and bank account numbers — is treated as highly sensitive data and is subject to enhanced security controls.

277db does not store full payment card numbers (PAN), CVV codes, or mobile banking PINs. Financial data submitted during deposit and withdrawal requests is transmitted directly to the relevant payment provider via encrypted channels. 277db retains only the minimum payment reference data necessary for transaction reconciliation, dispute resolution, and AML compliance.

Transaction history — including deposit amounts, withdrawal requests, and bonus transactions — is retained in your 277db account dashboard and in our internal records for a minimum of five years from the date of each transaction, as required by applicable financial record-keeping obligations. This retention period may be extended where a transaction is subject to an active AML investigation or legal dispute.

• Withdrawal requests are processed to the same payment method used for the original deposit, as an anti-fraud and AML control measure.
• Enhanced due diligence applies to withdrawal requests above defined thresholds, which may require submission of additional financial documentation before funds are released.
• All payment data transmissions between your device and 277db are protected by TLS 1.3 encryption with 256-bit key strength.

277db uses cookies and similar tracking technologies (including web beacons, local storage, and session tokens) to operate the platform, maintain session security, analyse usage patterns, and deliver a personalised experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account authentication state, and enable the core security features of the platform. These cookies cannot be disabled without rendering the platform non-functional.
• Functional cookies: These remember your preferences — such as language settings, game lobby filters, and display preferences — so that you do not need to re-enter them on each visit.
• Analytical cookies: These collect anonymised, aggregated data about how players interact with the 277db platform — including which pages are visited most frequently, average session durations, and game category popularity. This data is used solely to improve platform performance and user experience. We do not use individual-level analytics data for profiling or targeting.
• Security cookies: These are used to detect and prevent fraudulent login attempts, account takeover attacks, and bot activity on the platform.

You may control cookie behaviour through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the 277db platform. Disabling functional or analytical cookies will not prevent platform access but may affect the quality of your user experience. Most browsers provide options to view, manage, and delete cookies stored on your device — refer to your browser's help documentation for guidance.

277db retains your personal data for defined periods that are proportionate to the purpose for which the data was collected. Our standard retention periods are as follows:

When a retention period expires, personal data is either securely deleted from our systems or anonymised in an irreversible manner such that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Where your account is subject to an active investigation — whether internal, regulatory, or legal — the relevant data will be retained beyond the standard retention period until the matter is resolved, after which standard deletion procedures will apply.

As a data subject, you hold the following rights in respect of your personal data processed by 277db. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Privacy Request — [Your Account ID]". We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data 277db holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: You may request that inaccurate or incomplete personal data held about you be corrected or updated. You may also update basic account information directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request that 277db delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Note that this right is subject to our legal data retention obligations — we cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You may request that 277db suspend active processing of your personal data while a dispute over its accuracy or the lawfulness of its processing is resolved.
• Right to Data Portability: You may request that personal data you have provided to 277db be delivered to you, or transferred to another controller, in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing of your personal data based on our legitimate interests. 277db will cease that processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, contact [email protected] or use the unsubscribe option in any marketing communication.

277db implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser and the 277db platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. Our SSL certificate is issued by a trusted certificate authority and is renewed proactively before expiry.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents, financial reference data, and KYC records — is encrypted using AES-256 at the storage layer.
• Access controls: Access to personal data within 277db's internal systems is restricted on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations. Access is managed through role-based access control (RBAC) and authenticated via multi-factor authentication (MFA).
• Intrusion detection and monitoring: Our infrastructure is protected by automated intrusion detection systems (IDS), web application firewalls (WAF), and 24/7 security monitoring. Anomalous access patterns trigger automated alerts and human review.
• Regular security assessments: 277db conducts periodic security assessments of its infrastructure and application code, including vulnerability scanning and penetration testing, to identify and remediate security weaknesses before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, 277db maintains a documented incident response procedure and will notify affected players without undue delay, along with details of the nature of the breach, the data affected, the likely consequences, and the steps taken to address it.

While 277db takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 277db account credentials. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

The 277db platform is strictly intended for adults aged 21 years and above. 277db does not knowingly collect or process personal data from individuals under the age of 21. Our registration process includes an age declaration, and our KYC verification procedures are designed to detect and reject applications from underage individuals.

If 277db becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered a 277db account or provided personal data to the platform, please contact us immediately at [email protected] with the subject line "Underage Account Report".

In order to deliver its services to players across Bangladesh, 277db works with third-party service providers — including game content providers, payment processors, and cloud infrastructure providers — who may be located outside Bangladesh. As a result, your personal data may be transferred to, stored in, or processed in countries other than Bangladesh.

Where personal data is transferred internationally, 277db ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include:

• Binding contractual clauses that require the recipient to protect personal data to standards consistent with this Policy.
• Transfers to service providers in jurisdictions that maintain adequate data protection standards as assessed by 277db's legal team.
• Technical security measures — including end-to-end encryption of data in transit — applied to all international data transfers regardless of jurisdiction.

By using the 277db platform and providing your personal data, you acknowledge that your data may be transferred internationally as described in this section. If you have questions about the specific safeguards applied to any particular international transfer, please contact [email protected].

277db reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform services. When material changes are made to this Policy, we will notify registered players via email to the address registered on their account, and we will update the "Last Updated" date displayed at the top of this document.

Minor clarifications or non-material amendments may be made without individual notification, though the updated Policy will always be published on this page with a revised effective date. We encourage you to review this Privacy Policy periodically to remain informed about how 277db handles your personal data.

Your continued use of the 277db platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and contact [email protected] to request account closure and data deletion.

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, and complaints regarding 277db's data processing practices, please contact our dedicated data protection contact point using the details below:

• Email (plain text — not a link): [email protected]
• Subject line format: "Data Privacy Request — [Your 277db Account ID]"
• Response commitment: All valid data subject requests will receive an initial response within 5 business days and a full substantive response within 30 calendar days.
• Support availability: 24 hours a day, 7 days a week, including Bangladesh public holidays — Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with how 277db has handled your data subject request or privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. 277db is committed to resolving all data privacy concerns fairly, thoroughly, and in accordance with applicable data protection standards.