Privacy Policy — How ber177 Protects Your Data

For the purposes of this Privacy Policy, ber177 acts as the data controller in respect of all personal data collected from users of the ber177 platform. As data controller, ber177 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, subject access requests, correction requests, and complaints should be directed to the ber177 data protection contact at [email protected]. Please include "Data Protection" in the subject line of your correspondence so that it is routed to the appropriate team member promptly. Our support team operates 24 hours a day, seven days a week, on Bangladesh Standard Time (UTC+6).

ber177 collects personal data that is necessary and proportionate for operating a safe, compliant, and high-quality online gaming platform. The categories of data we collect are described below.

ber177 does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health data) except where strictly required by applicable law or where you have explicitly provided such information in the course of a responsible gaming support interaction.

ber177 collects personal data through the following channels and methods:

• Direct interactions: When you complete the ber177 registration form, update your account profile, contact our support team, or submit a responsible gaming request, you provide personal data directly to us.
• Automated technical collection: When you access the ber177 platform — whether logged in or as a visitor — our servers automatically record technical data including your IP address, device identifiers, browser characteristics, and session timing information. This happens as a standard function of web server operation.
• Payment processing: When you initiate a deposit or withdrawal, ber177 receives confirmation data from the relevant payment provider (bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard). This confirmation data includes transaction reference numbers and the masked identifier of the payment instrument used.
• Identity verification partners: In cases where ber177 uses a third-party identity verification service to confirm the authenticity of documents submitted during the KYC process, that partner may return structured data fields to ber177 as part of the verification result. ber177 selects verification partners who are bound by confidentiality and data protection obligations equivalent to those applied internally.
• Cookies and similar technologies: ber177 uses session cookies, persistent cookies, and local storage objects to maintain your login session, remember your preferences, and collect anonymised usage statistics. See Section 8 for a full description of our cookie practices.

ber177 processes personal data only where a clear and lawful purpose exists. The table below summarises the primary processing activities, the purpose behind each, and the legal basis that justifies that processing.

Where ber177 relies on consent as the legal basis for processing (for example, for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or contact [email protected].

ber177 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial compliance requirements.
• Support and communications records: Retained for three (3) years from the date of the last interaction, unless the communication relates to an unresolved dispute, in which case records are retained until the dispute is fully closed.
• Technical and usage logs: Retained for up to twelve (12) months in detailed form, after which they may be aggregated and anonymised for statistical analysis. Anonymised data is no longer considered personal data and is not subject to the retention limits described above.
• Responsible gaming records: Self-exclusion records and deposit limit history are retained for the full duration of any active restriction period plus five (5) years thereafter, to enable ber177 to re-apply appropriate safeguards if an affected player attempts to re-register.
• Consent records: Records of marketing consent and consent withdrawal are retained for five (5) years to provide an auditable history of consent status.

Where ber177 no longer has a lawful basis to retain personal data, it will be securely deleted or permanently anonymised. Secure deletion means overwriting stored data in a manner that makes recovery technically infeasible.

ber177 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data may be shared with third parties only in the limited circumstances described below:

• Payment providers: When you initiate a deposit or withdrawal, the minimum data necessary to process that transaction is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard). These providers process transaction data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification partners: Where a third-party KYC or identity document verification service is used, the documents and data you submit for verification are shared with that partner solely for the purpose of completing the verification check.
• Game studios and content providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical data (such as a pseudonymous player identifier and session token) necessary to deliver and authenticate your game session. These providers do not receive your name, contact details, or financial data.
• Fraud prevention and security services: ber177 may share technical identifiers (IP address, device fingerprint) with specialist fraud detection services for the purpose of identifying and blocking fraudulent activity on the platform.
• Legal and regulatory authorities: ber177 may be required to disclose player data to law enforcement agencies, financial intelligence units, or other competent authorities in response to lawful requests, court orders, or applicable anti-money laundering obligations. Such disclosures will not be notified to the player where doing so would prejudice an ongoing investigation.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of ber177's business assets, player data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity's agreement to maintain equivalent privacy protections.

ber177 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• TLS/SSL encryption: All data transmitted between your browser or device and the ber177 platform is encrypted using industry-standard Transport Layer Security (TLS). This protects your login credentials, session data, and financial information while in transit.
• Encryption at rest: Sensitive stored data — including identity document files, payment identifiers, and password hashes — is encrypted at rest using strong encryption standards. Passwords are stored exclusively as salted cryptographic hashes; ber177 staff cannot view your plaintext password.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a need-to-know basis. Role-based access controls and multi-factor authentication are applied to administrative systems.
• Intrusion detection and monitoring: ber177's infrastructure is monitored for anomalous activity, unauthorised access attempts, and potential security incidents on a continuous basis. Alerts are reviewed by the platform security team and escalated where necessary.
• Regular security assessments: ber177 conducts periodic internal and third-party security reviews, including vulnerability assessments, to identify and remediate security weaknesses in the platform infrastructure.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected individuals, ber177 will notify impacted players via their registered contact details as promptly as practicable and will take immediate steps to contain and remediate the breach.

While ber177 takes all reasonable precautions to protect your data, no system connected to the internet can be guaranteed to be completely secure. Players are strongly encouraged to use a strong, unique password for their ber177 account and to enable any available two-factor authentication feature.

ber177 uses cookies and similar technologies to operate the platform effectively, maintain your session, and collect anonymised usage statistics that help us improve the product. The following cookie categories are in use:

ber177 does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertising networks to build a profile of your browsing behaviour across other websites. Analytics data collected on the ber177 platform is used exclusively for internal product improvement purposes.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the platform from functioning correctly and will log you out of your session. Disabling functional or analytics cookies will not affect your ability to place bets or access games, but may result in certain preferences not being remembered between visits.

As a registered player on the ber177 platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and your registered username or email address.

• Right of access: You have the right to request a copy of the personal data that ber177 holds about you, along with information about how it is being used and with whom it has been shared. ber177 will respond to verified access requests within 30 calendar days.
• Right to rectification: If any personal data held by ber177 is inaccurate or incomplete, you have the right to request that it be corrected. You may update most contact details directly within your account settings panel without needing to contact support.
• Right to erasure: You may request that ber177 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe ber177 has processed it unlawfully. Please note that erasure requests may not be fulfilled in full where ber177 is required to retain data by applicable law (for example, AML record-keeping obligations).
• Right to restriction of processing: You may request that ber177 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing based on legitimate interest and a determination is pending.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to processing of your personal data that is based on ber177's legitimate interests, including profiling for platform analytics purposes. You also have the absolute right to object to processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

The ber177 platform is strictly intended for individuals who are 18 years of age or older. ber177 does not knowingly collect personal data from any individual under the age of 18. Age verification is performed as part of the registration and KYC process, and accounts for which the registered user is found to be under 18 will be closed immediately, with any deposited funds returned to the original payment source.

If you believe that ber177 has inadvertently collected personal data from a minor, please contact [email protected] immediately. Upon receiving such a report, ber177 will take prompt action to verify the claim and, if confirmed, to delete all data associated with the underage account without unnecessary delay.

ber177 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Where changes are material — meaning they substantially affect how your data is used or your rights in relation to it — ber177 will provide advance notice to registered players via their registered email address or a prominent notice displayed on the platform.

The "Last updated" date shown at the top of this document indicates when the most recent revision took effect. We encourage you to review this Privacy Policy periodically, particularly before providing any new category of personal data to ber177. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Archived versions of previous Privacy Policy documents are available on request by contacting [email protected]. If you disagree with any changes made to this Privacy Policy, you have the right to close your account and request erasure of your personal data in accordance with Section 9 above.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way ber177 handles your personal data, please get in touch using the details below. Our data protection team operates 24 hours a day, seven days a week, on Bangladesh Standard Time (UTC+6).

• Email: [email protected] — please use the subject line "Privacy Policy" or "Data Rights Request" for faster routing.
• Response time: ber177 aims to acknowledge all privacy-related enquiries within one business day and to provide a substantive response within 7 calendar days for general queries, or within 30 calendar days for formal data rights requests.
• Language: Correspondence may be submitted in English. All formal responses will be issued in English.