01 Introduction
This Privacy Policy describes how ba777 ("ba777", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", or "Player") who access or use the ba777 online gaming and sports betting platform at https://ba777.bio, including all associated pages, products, and services (collectively, the "Platform").
ba777 is an online gaming platform designed specifically for players in Bangladesh. We are committed to handling your personal data with the highest standards of care, transparency, and security. This Privacy Policy has been written in plain, accessible English so that every player can clearly understand how their data is managed.
Scope: This Privacy Policy applies to all personal data collected via the ba777 website, mobile browser interface, customer support channels, and any other ba777-operated touchpoints. It applies regardless of the device or network you use to access the Platform.
By registering an account, making a deposit, or otherwise using any part of the ba777 Platform, you confirm that you have read and understood this Privacy Policy in full and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not use the ba777 Platform.
This Privacy Policy should be read alongside the ba777 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and available via their respective links.
02 Data We Collect
ba777 collects two broad categories of personal data: information you provide directly to us, and information collected automatically as you use the Platform. The specific data points within each category are described in the table below.
| Category |
Data Points Collected |
| Identity Data |
Full legal name, date of birth, gender (where provided), government-issued ID number, nationality |
| Contact Data |
Mobile phone number, email address, residential address (street, city, division, postal code) |
| Account Data |
Registered username, hashed password, account creation date, last login timestamp, account status |
| Financial Data |
bKash / Nagad / Rocket / Upay / Dutch-Bangla account numbers associated with deposits and withdrawals, transaction reference IDs, deposit and withdrawal amounts in BDT (৳) |
| Gaming Activity Data |
Game session history, wager amounts, win/loss records, bonus claims and usage, sports bets placed, preferred game categories |
| KYC Verification Data |
Copies of government-issued ID documents (National ID card, passport), proof of address documents, selfie/liveness verification images |
| Technical Data |
IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL |
| Communications Data |
Records of live chat conversations, email correspondence, support ticket content, and any other messages sent to ba777 support |
| Marketing Preferences |
Opt-in / opt-out status for promotional communications, preferred communication channel (email, SMS, in-platform notification) |
Note on Sensitive Data: ba777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond that which is strictly necessary for age and identity verification in accordance with KYC obligations. Where KYC document images contain incidental sensitive information, that data is not separately processed or stored beyond the verification purpose.
03 How We Collect Data
ba777 collects personal data through the following channels and mechanisms:
- Account Registration: When you create a ba777 account, you directly provide your name, date of birth, contact details, and chosen account credentials. This is the primary source of identity and contact data.
- Deposits and Withdrawals: When you initiate a financial transaction on ba777, your payment method details (such as your bKash or Nagad mobile wallet number) are collected to process the transaction and maintain a compliant financial record.
- KYC Verification: When ba777 requests identity verification, you submit copies of identity documents and may complete a liveness check. These are collected directly by our KYC verification process.
- Platform Usage: As you navigate the ba777 website and play games, our servers automatically log technical data including your IP address, device identifiers, browser information, pages visited, and session timestamps. This data is collected via server logs and first-party analytics tools.
- Cookies and Similar Technologies: ba777 uses cookies and related tracking technologies to maintain your session, remember your preferences, and understand aggregate usage patterns on the Platform. Full details are provided in Section 7 below.
- Customer Support Interactions: When you contact ba777 via live chat or email, the content of those communications is collected and stored to allow our support team to assist you and to maintain a record of the interaction.
- Responsible Gaming Tools: When you set deposit limits, session reminders, or request self-exclusion, the relevant preferences and dates are recorded in connection with your account to ensure the tools function correctly.
04 Why We Use Your Data
ba777 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first informing you and, where required, obtaining your consent.
- Account Creation and Management: To create, maintain, and secure your ba777 player account, including authenticating your identity at login and enabling you to manage your account settings.
- Payment Processing: To process deposits and withdrawals via your chosen Bangladesh payment method (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank) and to maintain accurate financial records of all transactions.
- KYC and Regulatory Compliance: To verify your identity and age (18+ requirement), comply with anti-money-laundering (AML) obligations, and meet any other applicable regulatory requirements that govern the operation of an online gaming platform serving players in Bangladesh.
- Service Delivery: To provide you with access to ba777's full range of games, sports betting markets, jackpot products, live dealer tables, and all other platform features included in the ba777 Services.
- Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, collusion, and any other activity that violates ba777's Terms & Conditions or applicable law.
- Responsible Gaming: To monitor player activity for indicators of problem gambling, enforce self-set limits and exclusion requests, and proactively contact players where our responsible gaming team identifies concerning patterns of play.
- Customer Support: To respond to your support queries, investigate complaints, and maintain a record of your communications with the ba777 support team.
- Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the ba777 platform's performance, user experience, and game selection — particularly to serve the needs of mobile users in Bangladesh.
- Promotional Communications (with consent): To send you information about ba777 bonuses, promotions, seasonal offers (such as Eid, BPL cricket season, or Pohela Boishakh specials), and new game launches — but only where you have opted in to receive such communications. You may opt out at any time.
05 Legal Basis for Processing
ba777 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
- Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform our contractual obligations to you under the ba777 Terms & Conditions — including operating your account, processing payments, and delivering gaming services. Without this data, ba777 cannot provide the Services.
- Legal Obligation: Processing for KYC verification, AML screening, and financial record-keeping is required to comply with applicable legal and regulatory obligations. ba777 cannot waive this processing at a player's request, as it is mandated by law.
- Legitimate Interests: ba777 processes technical data, gaming activity data, and communications data on the basis of its legitimate interests in operating a secure, fraud-free platform, improving the quality of Services, and protecting the safety of all players. This processing does not override your fundamental privacy rights.
- Consent: ba777 processes your marketing preferences and sends promotional communications only where you have given explicit consent. You may withdraw this consent at any time by contacting ba777 support or updating your account settings.
06 Sharing Your Data
ba777 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:
- Payment Processors: Your payment method details are shared with the relevant Bangladesh payment service provider (bKash, Nagad, Rocket, Upay, or Dutch-Bangla Bank) solely to facilitate the processing of your deposits and withdrawals. ba777 does not store full payment credentials beyond what is necessary to match transactions to your account.
- Third-Party Game Providers: When you launch a game powered by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your session data and wager information are transmitted to that provider's systems to operate the game. Game providers receive only the data required to run the specific game session.
- KYC Verification Partners: ba777 may use a third-party KYC verification service to process identity document checks and liveness verification. These partners act under strict data processing agreements and may not use your data for any purpose other than the verification task.
- Platform Analytics Providers: Aggregated, anonymised technical and usage data may be shared with analytics service providers to help ba777 understand platform performance. No personally identifiable information is included in these analytics data sets.
- Legal and Regulatory Authorities: ba777 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or other binding legal process. ba777 will endeavour to notify you of any such disclosure where legally permitted to do so.
- Business Transfers: In the event that ba777's business is subject to a merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.
International Data Transfers: ba777's game provider partners and analytics tools may process data on servers located outside Bangladesh. Where personal data is transferred internationally, ba777 requires all recipient parties to maintain data protection standards equivalent to those described in this Privacy Policy and to process your data only for the purposes specified herein.
07 Cookies & Tracking Technologies
ba777 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored in your browser that help the Platform recognise you between sessions and remember your preferences. The types of cookies ba777 uses are described below:
| Cookie Type |
Purpose |
Duration |
| Strictly Necessary |
Maintain your login session, keep your account secure, remember items in your session (e.g., active game state). These cannot be disabled as they are essential to the Platform's operation. |
Session / up to 24 hours |
| Functional |
Remember your language preference, display settings, and responsible gaming limit configurations between visits. |
Up to 90 days |
| Analytics |
Collect anonymised data about how players navigate the Platform — which pages are visited most, how long sessions last, and which devices are used — to help ba777 improve the user experience for Bangladesh mobile traffic. |
Up to 12 months |
| Security |
Detect and prevent fraudulent logins, automated bot activity, and other security threats by tracking unusual access patterns. |
Up to 30 days |
ba777 does not use advertising or retargeting cookies that track your activity across third-party websites. You may manage your cookie preferences through your browser's settings. Please note that disabling strictly necessary cookies may prevent you from logging into your ba777 account or accessing core Platform features.
08 Data Retention
ba777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention obligations. The following retention periods apply to the key categories of data ba777 holds:
- Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to meet AML record-keeping requirements and to handle any post-closure disputes or regulatory enquiries.
- Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping obligations applicable to online payment processing.
- KYC Verification Documents: Retained for the duration of your account plus five (5) years post-closure, consistent with AML obligations. Document images are stored in encrypted form and access is restricted to authorised compliance personnel only.
- Gaming Activity Data: Retained for the duration of your account plus three (3) years post-closure, for dispute resolution, responsible gaming monitoring, and platform improvement purposes.
- Technical and Log Data: Retained for up to twelve (12) months from the date of collection, after which it is anonymised or deleted. Anonymised aggregate data may be retained indefinitely for analytics purposes.
- Customer Support Communications: Retained for three (3) years from the date of the interaction, to allow ba777 to refer to prior support history in the event of follow-up enquiries or complaints.
- Marketing Consent Records: Retained for the duration of your account or until you withdraw consent, whichever is earlier, plus an additional two (2) years to demonstrate compliance with consent-based marketing rules.
On expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised in accordance with ba777's internal data destruction procedures.
09 Your Privacy Rights
As a ba777 player, you hold the following rights with respect to the personal data ba777 holds about you. To exercise any of these rights, please contact ba777 support via live chat or at the email address provided in Section 13 below.
- Right of Access: You may request a copy of all personal data ba777 holds about you. ba777 will provide this information in a structured, readable format within 30 days of a verified request.
- Right to Rectification: If any personal data ba777 holds about you is inaccurate or incomplete, you may request that it be corrected. ba777 will action verified correction requests within 14 days.
- Right to Erasure: You may request that ba777 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where the processing was unlawful. This right is subject to ba777's legal retention obligations — data that must be kept for regulatory compliance cannot be deleted at your request.
- Right to Restrict Processing: You may request that ba777 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
- Right to Object: You may object at any time to ba777 processing your personal data for marketing purposes. You may also object to processing based on ba777's legitimate interests, though ba777 may be entitled to continue processing if it can demonstrate compelling legitimate grounds that override your interests.
- Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a machine-readable format suitable for transfer to another service provider.
- Right to Withdraw Consent: Where ba777 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Identity Verification for Rights Requests: To protect your privacy, ba777 will verify your identity before processing any data rights request. You will be asked to confirm details that match your registered account. ba777 will not action requests from individuals who cannot be verified as the account holder.
10 Children's Privacy
ba777 is strictly an adult platform. The Services are intended exclusively for individuals who are 18 years of age or older. ba777 does not knowingly collect, store, or process personal data from any individual under the age of 18.
During registration, ba777 requires all players to confirm that they are 18 or older and may request KYC documentation to verify this. Where ba777 discovers or has reason to believe that a player is under 18, the account will be immediately suspended, all pending withdrawals will be withheld pending investigation, any wagers placed will be voided, and the underage player's data will be handled in accordance with applicable child protection requirements.
Parental Advisory: If you are a parent or guardian and believe that a person under 18 in your care has registered on ba777, please contact our support team immediately via live chat or at the support email address in Section 13. ba777 will investigate promptly and take appropriate action to close the account and protect the minor. We also strongly recommend using parental control software to restrict access to online gambling websites for minors in your household.
11 Security Measures
ba777 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key security measures in place include:
- SSL/TLS Encryption in Transit: All data transmitted between your device and the ba777 Platform is encrypted using industry-standard TLS 1.2 or higher. This prevents interception of your account credentials, payment details, or any other personal data during transmission.
- AES-256 Encryption at Rest: Sensitive personal data stored in ba777's databases — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
- Password Hashing: ba777 never stores your password in plain text. Passwords are stored as irreversible cryptographic hashes using a modern hashing algorithm. ba777 staff cannot read or retrieve your password — only you know it.
- Access Controls: Access to ba777's production systems and player databases is restricted to a small number of authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
- Fraud and Anomaly Detection: ba777 employs automated systems that continuously monitor for unusual login patterns, rapid device switching, suspicious transaction sequences, and other indicators of account compromise or fraud. Suspected incidents trigger immediate security alerts.
- Regular Security Reviews: ba777 conducts periodic internal security reviews of its data handling practices, access controls, and platform infrastructure to identify and address potential vulnerabilities before they can be exploited.
Your Role in Security: While ba777 implements robust platform-side security, you also play a critical role in keeping your account safe. Choose a strong, unique password for your ba777 account. Do not share your login credentials with anyone. Log out of your account when using a shared or public device. Contact ba777 support immediately if you suspect unauthorised access to your account.
12 Changes to This Privacy Policy
ba777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the range of Services we offer. When material changes are made, ba777 will notify registered players by posting a prominent notice on the Platform and, where possible, by sending a notification to the email address registered on the affected account.
The updated Privacy Policy will take effect from the date stated in the "Effective" notice at the top of the policy. Your continued use of the ba777 Platform after the effective date of any amendment constitutes your acknowledgement of the updated policy. If you do not accept a material change to this Privacy Policy, you must cease using the Platform and may request account closure.
Version History: The current version of this Privacy Policy is effective as of 1 January 2026. If you have questions about any change from a prior version, please contact ba777 support using the details provided in Section 13 below. ba777 will retain prior versions of the Privacy Policy for reference upon request.
13 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ba777 handles your personal data, please reach out to our support team using the following contact details:
- Live Chat: Available 24 hours a day, 7 days a week, in Bangladesh Standard Time (UTC+6). Access live chat from any ba777 page via the on-screen chat widget.
- Email: [email protected] (plain text — not a clickable link). ba777 aims to respond to all privacy-related enquiries within 24 hours BST.
When submitting a privacy-related request, please include your registered ba777 username and a clear description of your request or concern so that our team can identify your account and respond accurately. For data access or erasure requests, you will be asked to complete identity verification before your request is actioned.
Data Rights Requests: If you wish to exercise any of the rights described in Section 9 of this Privacy Policy — including the right to access, correct, delete, or port your personal data — please submit your request via live chat or to the email address above with the subject line "Data Rights Request – [your username]". ba777 will acknowledge your request within 5 business days (BST) and complete the action within 30 calendar days unless a legal exemption applies.