677bat Privacy Policy

1 Introduction

677bat is committed to protecting the privacy and security of the personal information of all users who interact with our online casino and sports betting platform. This Policy sets out the principles and standards we apply to the handling of personal data in connection with the services we provide, including cricket betting, baseball wagering, live casino games, slot games, account management, and financial transactions processed through bKash, Nagad, Rocket, and Upay.

We have drafted this Policy to be clear, direct, and comprehensive. If at any point you are unclear about how we use your personal data, or if you wish to exercise any of your rights described in this Policy, please contact us at [email protected]. We will respond to all privacy enquiries within a reasonable timeframe and no later than 30 calendar days from receipt.

2 Data Controller

For the purposes of applicable data protection legislation, 677bat acts as the data controller in respect of personal data collected through the 677bat platform. As data controller, 677bat determines the purposes for which, and the means by which, personal data is processed.

All data protection queries, subject access requests, correction requests, and deletion requests should be directed to the 677bat data protection contact:

• Contact Name: Data Protection Officer, 677bat
• Email: [email protected]
• Platform: 677bat.app
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

3 Personal Data We Collect

677bat collects personal data that is necessary to provide our services, comply with legal obligations, and protect the integrity of the platform. The categories of personal data we collect are set out in the table below.

4 How We Collect Your Data

677bat collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: Through cookies, web server logs, and similar tracking technologies when you access and navigate the 677bat platform. This includes your IP address, session duration, pages visited, and device and browser characteristics.
• From payment providers: When you initiate a transaction via bKash, Nagad, Rocket, or Upay, we receive transaction confirmation data and associated account identifiers from those payment providers.
• From third-party identity verification services: Where 677bat uses a third-party KYC verification provider, that provider may return identity verification results, document authenticity scores, and age verification outcomes.
• From game providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe) may share session and game-result data with 677bat for dispute resolution, fair play auditing, and reporting purposes.

5 Purposes of Processing

677bat processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account balance, and administer your profile and preferences.
• Service delivery: To allow you to place bets on cricket, baseball, and other sports markets; to access live casino games and slot titles; and to use all other features of the 677bat platform.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain a complete and accurate transaction ledger.
• KYC and identity verification: To verify that you meet the minimum age requirement of 18 years, to confirm your identity for anti-money laundering (AML) compliance, and to satisfy our Know Your Customer obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other violations of our Terms & Conditions.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling, to apply deposit limits and self-exclusion measures where requested or required, and to fulfil our duty of care to players.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and audit purposes.
• Legal compliance: To meet our obligations under applicable AML, counter-terrorism financing, data protection, and other regulatory frameworks.
• Platform improvement: To analyse platform usage patterns, diagnose technical issues, test new features, and improve the overall user experience on 677bat.
• Marketing communications: Where you have given consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw consent at any time by contacting [email protected].

6 Legal Bases for Processing

677bat processes your personal data on one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and 677bat — for example, account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with a legal obligation to which 677bat is subject — for example, AML screening, KYC verification, and record-keeping obligations.
• Legitimate interests: Processing carried out for 677bat's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms — for example, fraud detection, platform security, and internal analytics.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — for example, sending direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

677bat does not sell, rent, or licence your personal data to unaffiliated third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and any other payment processing partners receive the transactional data required to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive the documents and personal details required to complete KYC checks on your account.
• Game content providers: Studio partners such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive your account identifier and session data to deliver their games and resolve game-related disputes.
• IT and infrastructure providers: Cloud hosting, content delivery, database management, and cybersecurity service providers who process data on 677bat's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory request, 677bat will disclose personal data to the relevant authority. We will notify you of such disclosures where legally permitted to do so.
• Fraud prevention agencies: Where 677bat suspects or detects fraudulent activity, data may be shared with fraud prevention and AML screening agencies in accordance with our legal obligations.

8 International Data Transfers

As an internationally operated platform serving users in Bangladesh, 677bat may transfer personal data to servers and service providers located in countries outside Bangladesh. Where such transfers occur, 677bat takes appropriate steps to ensure that your personal data receives an equivalent level of protection to that afforded within the jurisdiction of collection.

Safeguards applied to international data transfers may include:

• Contractual clauses that impose data protection obligations on the receiving party equivalent to internationally recognised standards
• Transfer to countries or organisations that maintain data protection standards recognised as adequate under applicable frameworks
• Binding corporate rules where the recipient is part of the same corporate group as 677bat

If you would like further information about the specific safeguards applied to any particular international transfer of your data, please contact [email protected].

9 Data Retention

677bat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, audit, and reporting requirements. The following general retention principles apply:

• Active account data: Retained for the duration of your account registration and for a minimum of five years after account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of verification, or longer where required by applicable law or regulatory guidance.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for a minimum of two years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or investigation.
• Technical and session data: Typically retained for 12 months for analytical and security purposes, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

When personal data is no longer required for any of the above purposes, 677bat will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised or aggregated data that cannot be used to identify you may be retained indefinitely for statistical and research purposes.

10 Cookies & Tracking Technologies

The 677bat platform uses cookies and similar tracking technologies to deliver, secure, and improve our services. A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits and to remember certain preferences or session states.

677bat uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as login session management, account security tokens, and shopping cart functionality for deposits. These cookies cannot be disabled without disrupting the platform's basic functionality.
• Performance & Analytics Cookies: These cookies collect information about how users interact with the platform — for example, which pages are visited most frequently, how long sessions last, and which features are used. This data is used in aggregate form to improve the platform experience. We do not use this data to identify individual users.
• Functional Cookies: These cookies remember your preferences and settings — for example, your preferred language, display settings, and responsible gaming limit configurations — so that you do not need to reconfigure them on each visit.

You can control and manage cookies through your browser settings. Most browsers allow you to view, manage, delete, and block cookies. Please be aware that blocking strictly necessary cookies will impair the functionality of the 677bat platform and may prevent you from logging in or placing bets. For instructions on managing cookies in your browser, refer to your browser's help documentation.

11 Your Data Protection Rights

Subject to applicable law and the conditions set out in this Policy, you have the following rights in respect of the personal data that 677bat holds about you. To exercise any of these rights, please contact [email protected] with the subject line "DATA RIGHTS REQUEST" and include your registered username and the email address associated with your account.

677bat will respond to all data rights requests within 30 calendar days of receipt. Where a request is particularly complex or a high volume of requests has been received, this period may be extended by a further two months, in which case you will be notified of the extension and the reason for it.

Please note that certain rights are subject to limitations. For example, we may not be able to delete data that we are required to retain by law for AML compliance or that is necessary to resolve an ongoing dispute.

12 Children's Privacy

The 677bat platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any individual under the age of 18. If you are under 18, you must not register an account, deposit funds, or use any feature of the 677bat platform.

If 677bat becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended and all personal data associated with it will be securely deleted, subject to any legal obligation to retain evidence of the underage access for compliance purposes.

If you have reason to believe that a person under the age of 18 has registered an account or is using the 677bat platform, please notify us immediately at [email protected]. We will investigate and take appropriate action without delay.

13 Security Measures

677bat takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• Transport Layer Security (TLS): All data transmitted between your device and the 677bat platform is encrypted using TLS 1.2 or higher, providing 256-bit SSL encryption in transit.
• Encryption at rest: Sensitive data stored in 677bat databases — including KYC documents, financial records, and account credentials — is encrypted using industry-standard algorithms.
• Access controls: Access to personal data is restricted to authorised 677bat personnel and service providers on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly when no longer required.
• Password hashing: Account passwords are never stored in plain text. All passwords are processed through a strong cryptographic hashing algorithm before storage.
• Vulnerability management: 677bat conducts regular security assessments of its platform infrastructure and remediates identified vulnerabilities on a risk-prioritised basis.
• Incident response: 677bat maintains an incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law and in a timely manner.

14 Third-Party Links

The 677bat platform may contain references to or integrations with third-party services, including game studio platforms (such as Pragmatic Play, Evolution Gaming, Ezugi, and others) and payment gateway interfaces (such as bKash and Nagad). While 677bat takes care in selecting its service partners, we have no control over the privacy practices of these third parties and are not responsible for their data handling.

This Privacy Policy applies solely to data collected and processed by 677bat through the 677bat platform. It does not apply to data processed by third-party game studios, payment providers, or any other external service. We encourage you to review the privacy policies of any third-party service provider with whom you interact in connection with your use of 677bat.

15 Updates to This Privacy Policy

677bat reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where the changes are significant, provide a more prominent notice such as an in-platform notification or an email to registered users.

Your continued use of the 677bat platform after the publication of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with any changes, you should stop using the platform and may request account closure by contacting [email protected].

We recommend reviewing this page periodically — at least once per quarter — to stay informed about how 677bat protects and handles your personal data. The current version of this Policy is always available at 677bat.app/privacy-policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 677bat handles your personal data, please contact us using the details below. All privacy communications must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "DATA RIGHTS REQUEST" or "PRIVACY QUERY"
• Response Time: Within 30 calendar days of receipt
• Support Hours: 24 hours a day, 7 days a week
• Platform: 677bat.app

Please include your registered username and the email address associated with your 677bat account in all privacy-related correspondence so that we can locate your records and respond efficiently.