Privacy Policy
Your Data, Your Rights

This Privacy Policy ("Policy") describes how bit177 collects, processes, stores, and protects personal data belonging to users of the bit177 platform, accessible at https://bit177.app (the "Platform"). This Policy applies to all visitors, registered users, and players regardless of the device or method used to access the Platform.

bit177 is committed to handling your personal information with transparency, integrity, and care. We collect only the data that is necessary to deliver a safe, compliant, and enjoyable experience to players in Bangladesh and to meet our obligations under applicable law.

By registering an account, accessing the Platform, or otherwise interacting with any feature of the bit177 service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact [email protected] to request account closure.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is bit177, operating the Platform at https://bit177.app. The data controller determines the purposes and means by which your personal data is processed.

All enquiries, requests, and complaints relating to the handling of your personal data should be directed to the bit177 data protection contact point at [email protected]. Please include "Privacy Enquiry" in the subject line of your message to ensure it is routed to the correct team.

bit177 collects personal data across several categories depending on how you interact with the Platform. The categories of data we collect and typical examples within each category are set out in the table below.

bit177 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identification data beyond what is strictly necessary for age and identity verification purposes.

bit177 collects personal data through a combination of direct interactions, automated technologies, and third-party sources. The primary collection methods are described below.

• Direct interactions: When you create an account, complete your profile, submit KYC documents, make a deposit or withdrawal request, contact the support team, or respond to a promotional offer, you directly provide personal data to bit177.
• Automated technologies: As you browse and interact with the Platform, bit177 automatically collects Technical Data and Usage Data through cookies, web beacons, session logs, and similar tracking technologies embedded in the Platform interface. See Section 10 for full details of cookie usage.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank, those payment providers share confirmation and reference data with bit177 to allow us to credit your account and reconcile transactions. bit177 does not receive your full payment credentials (PIN, full card number) through this channel.
• Identity verification services: bit177 works with identity verification partners to validate the documents you submit during KYC checks. These partners may return verification results and risk scores to bit177 as part of the verification process.
• Fraud and risk analytics: bit177 uses automated fraud-detection services that analyse patterns in Technical Data and Usage Data to flag accounts for review. These systems generate risk indicators that may be associated with your account record.

bit177 processes personal data only for specific, documented purposes. The primary purposes for which we use each category of data are listed below.

• Account creation and management: Identity Data and Contact Data are used to create and maintain your bit177 account, verify your identity at registration, and enable you to log in securely.
• Transaction processing: Financial Data is used to process deposits from and withdrawals to your registered payment methods (bKash, Nagad, Rocket, and bank accounts), and to maintain an accurate record of your account balance in Bangladeshi Taka (৳).
• Age and identity verification (KYC): Verification Data is used to confirm that you meet the 18+ age requirement and to satisfy our anti-money-laundering (AML) obligations. bit177 may request updated KYC documents at any point in the account lifecycle.
• Fraud prevention and security: Technical Data, Financial Data, and Usage Data are processed to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms & Conditions.
• Platform personalisation: Usage Data is used to tailor the game lobby, promotional offers, and content recommendations to your preferences and play history, improving your overall experience on the Platform.
• Customer support: Communication Data is used to respond to support requests, investigate complaints, and improve service quality through internal quality-assurance reviews.
• Marketing communications: Where you have opted in to receive promotional communications, Contact Data and Marketing Preferences are used to send you information about bonuses, seasonal promotions (including Eid, Pohela Boishakh, BPL, and IPL offers), and new game launches. You may opt out at any time.
• Legal and regulatory compliance: All categories of data may be processed as necessary to comply with applicable Bangladeshi law, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions.
• Platform analytics and improvement: Aggregated and anonymised Usage Data and Technical Data are used to analyse Platform performance, identify technical issues, and guide product development decisions.

bit177 relies on one or more of the following legal bases when processing your personal data. The applicable basis depends on the specific purpose for which the data is being used.

• Contractual necessity: Processing your Identity Data, Contact Data, and Financial Data is necessary to perform the contract between you and bit177 — specifically, to provide you with access to the Platform, process your transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing Verification Data and certain Financial Data is necessary to comply with legal obligations including anti-money-laundering regulations, age verification requirements, and tax reporting duties applicable under Bangladeshi law.
• Legitimate interests: Processing Technical Data and Usage Data for fraud prevention, platform security, and service improvement is necessary for the legitimate interests of bit177 and its users, provided those interests are not overridden by your privacy rights. bit177 has conducted legitimate interest assessments to confirm that this balance is maintained.
• Consent: Processing your Contact Data for marketing communications is based on your freely given, specific, and informed consent provided at registration or subsequently via account settings. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

bit177 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We share personal data only with the categories of recipients described below, and only to the extent necessary to fulfil the relevant purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive transaction reference data necessary to process deposits and withdrawals to and from your account. These providers operate under their own privacy policies and are independently responsible for data they collect through their own interfaces.
• Identity verification providers: KYC document verification services receive copies of identity documents you submit during the verification process and return verification results to bit177.
• Game studio providers: Game providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive a pseudonymised player identifier and relevant session data necessary to run the games you play. They do not receive your full personal profile.
• Fraud and risk analytics providers: Fraud-detection services receive Technical Data and Usage Data to assess risk signals associated with your account and sessions.
• Hosting and infrastructure providers: Cloud hosting and infrastructure partners store Platform data on servers subject to industry-standard security controls and data processing agreements with bit177.
• Legal and regulatory authorities: bit177 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities in Bangladesh or internationally where required to do so by law or pursuant to a lawful order.

bit177 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The standard retention periods applied by bit177 are summarised below.

Where legal proceedings, regulatory investigations, or active disputes require data to be preserved beyond the standard retention period, bit177 will retain the relevant data until those matters are fully resolved. At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

bit177 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security controls in place include the following.

• 256-bit SSL encryption: All data transmitted between your device and the bit177 Platform is encrypted using Transport Layer Security (TLS) with 256-bit AES encryption, preventing interception by third parties during transit.
• Password hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. bit177 does not store or have access to your password in readable form at any point.
• Access controls: Access to personal data within bit177 is restricted on a strict need-to-know basis. Staff members may only access the categories of data required to perform their specific role. All internal access is logged and subject to periodic audit.
• Firewalls and intrusion detection: The bit177 Platform infrastructure is protected by enterprise-grade firewalls and continuous intrusion-detection and prevention systems that monitor for anomalous activity around the clock.
• Regular security assessments: bit177 conducts periodic security vulnerability assessments and penetration testing to identify and remediate weaknesses before they can be exploited.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected individuals, bit177 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.

bit177 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session, and gather analytics data. Cookies are small text files placed on your device when you visit the Platform. The types of cookies used by bit177 are described below.

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, keep your account basket state, and enable security features. These cookies cannot be disabled as they are required for the Platform to operate.
• Functional cookies: These cookies remember your language preference, display settings, and in-session preferences to provide a more personalised experience. Disabling these cookies may affect some non-essential Platform features.
• Analytics cookies: bit177 uses anonymised analytics cookies to understand how users navigate and interact with the Platform. This data is used in aggregate form to improve page performance, game discovery flows, and feature design. Analytics data does not identify you personally.
• Fraud prevention cookies: Certain session identifiers and device fingerprinting technologies are used to detect and prevent fraudulent activity including multi-accounting and automated bot access. These are classified as strictly necessary for the security of the Platform.

You can control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your account. For details of how to manage cookies in your browser, please consult your browser's help documentation.

As an individual whose personal data is processed by bit177, you have a number of rights in relation to that data. bit177 is committed to honouring these rights promptly and transparently. Your rights are set out below.

• Right of access: You have the right to request a copy of the personal data that bit177 holds about you, together with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update basic contact details directly from your account settings, or contact support for other corrections.
• Right to erasure: You may request that bit177 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. This right is subject to legal retention obligations, which may require bit177 to retain certain data for a minimum statutory period.
• Right to restrict processing: You may request that bit177 temporarily restrict the processing of your personal data while a dispute about accuracy or lawfulness is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to bit177.
• Right to object: You have the right to object to processing based on legitimate interests, and to opt out of direct marketing communications at any time. You can update your marketing preferences through your account settings or by emailing [email protected] with the subject line "Marketing Opt-Out".
• Rights related to automated decision-making: Where automated decision-making is used, you have the right to request human review of any decision that significantly affects you, to express your point of view, and to contest the outcome.

To exercise any of the rights listed above, please contact bit177 at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. bit177 will respond within 30 calendar days. We may need to verify your identity before processing a rights request.

In the course of operating the bit177 Platform and delivering services to players in Bangladesh, personal data may be transferred to and processed in countries outside Bangladesh. This may occur where bit177 uses cloud infrastructure, game studio APIs, or verification service providers whose servers are located in other jurisdictions.

• Transfer safeguards: Where personal data is transferred internationally, bit177 ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that required under Bangladeshi data protection principles. Safeguards may include standard contractual clauses, binding corporate rules, or adequacy assessments.
• Processor obligations: All international data processors are required to enter into data processing agreements with bit177 that impose binding obligations relating to data security, purpose limitation, and prohibition on onward transfer without authorisation.
• Payment providers: Mobile money providers (bKash, Nagad, Rocket, Upay) and Bangladeshi banking partners process transaction data within Bangladesh. Their data handling is governed by their own terms and the regulatory framework of the Bangladesh Bank.

If you have specific concerns about the international transfer of your personal data, you may contact bit177 at [email protected] to request further information about the safeguards applicable to your data.

The bit177 Platform is intended exclusively for adults aged 18 years and above. bit177 does not knowingly collect personal data from individuals under the age of 18 and does not permit minors to register for or use the Platform.

• Age verification: bit177 requires all registering users to confirm that they are 18 years of age or older at the point of registration. KYC verification procedures are used to validate this declaration using government-issued identity documents.
• Discovery of underage use: If bit177 discovers or has reasonable grounds to suspect that personal data has been collected from an individual under the age of 18, it will immediately suspend the relevant account, delete the collected data to the extent permitted by legal obligation, and return any funds to the originating payment source.
• Parental concerns: If you believe that a minor in your household has registered an account or submitted personal data to bit177, please contact us immediately at [email protected] with the subject line "Underage Account Report". bit177 will investigate promptly and take appropriate action.

bit177 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of the Platform. When material changes are made to this Policy, bit177 will take reasonable steps to notify affected users.

• Notification of changes: Where a change is material — meaning it significantly affects how your personal data is processed or reduces your rights — bit177 will notify you by email to the address registered on your account and will display a prominent notice on the Platform for a minimum of 30 days following the update.
• Minor updates: Non-material changes such as typographical corrections, clarifications of existing practice, or restructuring of content that does not alter the substance of the Policy will be made without individual notification. The "Last updated" date at the top of this page will reflect all revisions.
• Continued use as acceptance: Your continued use of the bit177 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact [email protected] to close your account.

bit177 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being handled. The current version of the Policy is always accessible via the footer of every page on the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit177 handles your personal data, please reach out to us using the contact details below. Our dedicated data protection team is available to assist you in English, and operates on Bangladesh Standard Time (BST, UTC+6).

• General privacy enquiries: Email [email protected] with the subject line "Privacy Enquiry".
• Subject Access Requests: Email [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise.
• Underage account reports: Email [email protected] with the subject line "Underage Account Report".
• Marketing opt-out: Email [email protected] with the subject line "Marketing Opt-Out", or update your preferences directly in your account settings.
• Response times: bit177 acknowledges all privacy-related communications within 48 hours and aims to provide a substantive response within 30 calendar days. Complex requests involving large volumes of data may require additional time, in which case we will inform you of the expected timeline.