di77 Privacy Policy

1.1 Controller Identity. di77 operates the online cricket betting and casino platform accessible at https://di77.io (the "Platform"). For the purposes of this Privacy Policy, di77 acts as the data controller in respect of all personal data collected from members and visitors to the Platform.

1.2 Platform Scope. This Privacy Policy applies to all personal data collected through the di77.io website, its mobile-optimised web application, and all related customer support, payment, and marketing communications. It does not apply to third-party websites that may be referenced in or linked from our Platform, as those sites operate under their own privacy policies.

1.3 Contact Details. For all privacy-related enquiries, requests, or complaints, please contact our Data Protection team at: [email protected]. All privacy enquiries receive a dedicated response within 5 business days.

di77 collects personal data through several channels during your use of the Platform. The categories of data we collect and the context in which each is gathered are set out in the table below.

2.1 Data You Provide Directly. The majority of personal data we hold about you is information you voluntarily provide — during account registration, identity verification, payment setup, or when contacting our support team.

2.2 Data Collected Automatically. When you use the Platform, certain technical and usage data is collected automatically by our servers and analytics systems. This data is used primarily to maintain platform security, prevent fraud, and improve the quality of the gaming experience for all di77 members.

2.3 Data from Third Parties. In limited circumstances, di77 may receive personal data about you from third-party identity verification providers, payment processors, or fraud-detection services. In all such cases, those third parties are contractually required to handle your data lawfully and in accordance with their own privacy obligations.

di77 uses the personal data it collects for the following specific purposes:

• Account Administration: To create, manage, and maintain your member account, including verifying your identity at registration and during ongoing use.
• Payment Processing: To receive deposits and execute withdrawal requests via bKash, Nagad, Rocket, Upay, DBBL, and other accepted payment methods in Bangladeshi Taka (BDT).
• Platform Delivery: To provide access to casino games, sports betting markets (including cricket BPL, T20, and IPL markets), live dealer tables, and all other features of the di77 Platform.
• Identity Verification and KYC Compliance: To verify that you meet the 21+ age requirement and to comply with applicable Know Your Customer (KYC) obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other unlawful activities on the Platform.
• Responsible Gaming: To monitor gaming patterns, apply member-requested deposit limits and self-exclusion periods, and proactively identify members who may require responsible gaming assistance.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 English- and Bengali-speaking support team.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal promotions (such as BPL season offers or Eid bonuses) by email or SMS, where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, improve game performance, and enhance the overall member experience on di77.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from competent authorities, and to enforce our Terms and Conditions.

di77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for the processing.

di77 processes your personal data on the following legal bases depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and di77 — i.e., to operate your account, process your deposits and withdrawals, and deliver the gaming services you have registered for.
• Legal Obligation: Processing that is necessary for di77 to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out to protect the security of the Platform, prevent fraud, conduct internal analytics, and improve the quality of our services — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for direct marketing communications and optional personalisation features, which is carried out only where you have given your explicit, freely given, and informed consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your account notification preferences.

5.1 Service Providers. di77 shares personal data with carefully vetted third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, cloud hosting providers, and customer support platform operators. All such providers are bound by data processing agreements requiring them to handle your data securely and only for the specific purposes we have authorised.

5.2 Game Providers. Game content on di77 is supplied by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session tokens and game-round identifiers) to deliver their games within the Platform. They do not receive your full identity or financial data.

5.3 Legal and Regulatory Disclosures. di77 may disclose your personal data to competent governmental or regulatory authorities where required by law, court order, or other binding legal process. In all cases, di77 will disclose only the minimum data necessary to satisfy the legal obligation and will notify you of such disclosure where permitted to do so by law.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of di77's business, your personal data may be transferred as part of that transaction. If this occurs, you will be notified by email and given the opportunity to exercise your data rights before any transfer takes place.

5.5 No Sale of Data. di77 does not sell, rent, license, or otherwise commercially exploit your personal data to any third party for their own marketing or commercial purposes. This is an absolute commitment — not subject to exceptions.

6.1 What Are Cookies. Cookies are small text files placed on your device by the di77 Platform when you visit. They allow the Platform to recognise your browser, maintain your session, remember your preferences, and gather analytical data about how you use di77.

6.2 Types of Cookies We Use.

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in during an active session, and security cookies that help detect and prevent fraudulent activity. These cannot be disabled without breaking core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how members navigate the Platform — which pages are visited most, how long sessions last, and which features are most used. This data is used solely to improve the Platform and is never linked back to individual identities.
• Preference Cookies: Used to remember your settings such as game display preferences and notification choices, so you do not need to re-enter them each visit.
• Marketing Cookies: Used — only with your prior consent — to track whether you have responded to a promotional offer and to avoid showing you the same promotion repeatedly. You may opt out of marketing cookies at any time.

6.3 Managing Cookies. You may control and delete cookies through your browser settings at any time. Disabling essential cookies will impair your ability to use the di77 Platform, as session authentication requires them. Disabling analytics or preference cookies will not affect core functionality but may reduce personalisation quality.

6.4 Do Not Track. di77 respects "Do Not Track" browser signals. Where a Do Not Track signal is detected, non-essential tracking and analytics cookies are suppressed automatically for that session.

7.1 Retention Principle. di77 retains personal data only for as long as is reasonably necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

7.2 Active Accounts. While your account remains open and active, di77 retains your identity, contact, financial, and usage data in full in order to provide uninterrupted service and maintain a complete transaction history accessible to you.

7.3 Closed Accounts. Following the closure of your account — whether initiated by you or by di77 — your personal data is retained for a minimum period of five (5) years from the date of closure. This retention period is required to support AML compliance obligations, enable the resolution of any outstanding disputes, and satisfy applicable financial record-keeping requirements.

7.4 Communication Data. Live chat transcripts and email support correspondence are retained for a period of two (2) years from the date of the interaction, after which they are permanently deleted from our systems.

7.5 Marketing Data. Where you have consented to receive marketing communications from di77, your contact details used for that purpose are retained until you withdraw your consent or request deletion, plus a further 30 days to ensure suppression lists are updated across all sending systems.

7.6 Deletion and Anonymisation. On expiry of the applicable retention period, personal data is either securely and permanently deleted from di77's systems or anonymised in a manner that makes re-identification impossible. Anonymised data may be retained indefinitely for statistical and platform-improvement purposes.

As a di77 member, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a description of your request. All verified requests will be actioned within 10 business days.

• Right of Access: You have the right to request a copy of all personal data di77 holds about you, along with information about how that data is being used.
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. For basic account details such as email address or phone number, you may update these directly within your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis exists for continued processing. Note that this right is subject to di77's legal retention obligations — data that must be retained under AML or financial record-keeping laws cannot be deleted during the mandatory retention period.
• Right to Restriction: You have the right to request that di77 temporarily stop processing your personal data — for example, while a dispute about its accuracy is being resolved — without requesting full deletion.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to di77 in a structured, commonly used, machine-readable format (such as CSV), and to request that this data be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on di77's legitimate interests, where your particular situation provides grounds for doing so.
• Right to Withdraw Consent: Where di77 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.1 Age Restriction. The di77 Platform is strictly intended for adults aged 21 years and above. di77 does not knowingly collect, store, or process personal data from individuals under the age of 21.

9.2 Discovery of Minor's Data. If di77 discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended, all associated data will be deleted without delay, and any deposits made will be returned to the originating payment method. di77 will not retain any data belonging to a verified minor beyond the time strictly necessary to action these steps.

9.3 Parental or Guardian Notification. If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account on di77, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours of notification.

10.1 Technical Safeguards. di77 employs industry-standard technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption across all Platform pages and API communications, encrypted storage of sensitive data fields, and regular independent security audits of our infrastructure.

10.2 Organisational Safeguards. Access to personal data within di77's organisation is restricted on a strict need-to-know basis. Staff who handle member data are trained in data protection best practices and are bound by confidentiality obligations. Elevated access to sensitive data requires multi-factor authentication.

10.3 Payment Security. di77 does not store full payment card details on its own servers. Card payment data is tokenised and handled directly by our PCI-DSS compliant payment processing partners. Mobile wallet transactions via bKash, Nagad, and Rocket are processed exclusively through the official APIs of those providers.

10.4 Breach Response. In the event of a data security breach that is likely to affect the rights and freedoms of members, di77 will notify affected members by email as promptly as reasonably possible — and in any event within 72 hours of di77 becoming aware of the breach — with information about what data was affected, what steps di77 is taking, and what members can do to protect themselves.

10.5 Your Role in Security. While di77 takes all reasonable technical and organisational steps to protect your data, you also play an important role. You should use a strong, unique password for your di77 account, never share your login credentials with any third party, and notify di77 immediately at [email protected] if you suspect any unauthorised access to your account.

11.1 Game Studios. Games available on di77 are delivered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios operate under their own data processing arrangements and applicable gaming certifications. di77 maintains data processing agreements with all game providers to ensure that any technical data processed in the course of game delivery is handled securely and not used for purposes beyond game delivery and fair-play certification.

11.2 Payment Partners. Payment processing on di77 is handled in partnership with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. When you make a deposit or withdrawal, the relevant payment provider will process your transaction data under their own privacy policy and terms of service. di77 recommends that you review the privacy policy of your chosen payment provider.

11.3 No Responsibility for Third-Party Privacy Practices. di77 is not responsible for the privacy practices of any third-party service provider, game studio, or payment partner beyond the scope of the data processing agreements in place. If you have concerns about how a specific provider handles your data, you should contact that provider directly.

12.1 Right to Update. di77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements.

12.2 Notification of Material Changes. Where a proposed change is material — meaning it significantly affects how we collect, use, or share your personal data — di77 will notify active members by email to the registered address on their account at least 14 calendar days before the change takes effect. A prominent notice will also be displayed on the Platform during this period.

12.3 Continued Use. Your continued use of the di77 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you are entitled to request account closure and data deletion before the effective date.

12.4 Version History. The effective date shown in the hero section of this page reflects the current version. Prior versions of this Privacy Policy are available upon written request to [email protected].

13.1 Privacy Enquiries. For any questions, concerns, or requests relating to this Privacy Policy or the personal data di77 holds about you, please contact our Data Protection team. We are available 24 hours a day, 7 days a week.

13.2 Email Contact. All privacy-related correspondence should be directed to: [email protected]. Please include your registered account username and a clear description of your request or concern to help us respond as efficiently as possible.

13.3 Response Timelines. General privacy enquiries are typically answered within 2–5 minutes via live chat during business hours. Formal data rights requests (access, erasure, portability, etc.) are actioned within 10 business days of identity verification being confirmed.

13.4 Complaints. If you are not satisfied with di77's response to a privacy concern, you have the right to escalate your complaint through applicable dispute resolution channels. di77 will cooperate fully with any legitimate escalation or investigation process.