677bed Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 677bed ("we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your", "the player") who access and use the 677bed online casino and sports betting platform, available at https://677bed.app and all associated mobile and web-based services (collectively, "the Platform").

677bed is committed to handling your personal information with the highest standards of care, transparency, and security. This Policy is intended to give you a clear and honest account of our data practices so that you can make informed decisions about your use of the Platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering a 677bed account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

Data We Collect

677bed collects personal data in two broad categories: data you provide directly to us, and data we collect automatically when you use the Platform. The specific data we collect includes, but is not limited to, the following:

677bed does not intentionally collect sensitive special-category data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless you voluntarily disclose such information in the context of a responsible gaming or support interaction, and only to the extent necessary to assist you.

How We Collect Data

677bed collects personal data through the following methods:

• Direct Registration: When you create a 677bed account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• KYC Verification Submissions: When we request identity documents, you upload or transmit copies of your national ID, passport, or utility bills directly to our verification system.
• Payment Transactions: When you make a deposit or request a withdrawal, your payment provider (such as bKash, Nagad, Rocket, or your card issuer) shares transaction reference data with our payment processing system.
• Platform Interaction: As you browse, play games, and place bets on the Platform, our systems automatically record usage data including game history, session timestamps, and IP addresses via server logs and analytics tools.
• Cookies and Tracking Technologies: When you visit the 677bed Platform, cookies and similar technologies are placed on your device to track session activity, authentication status, and platform preferences. See Section 7 for full details.
• Customer Support Interactions: When you contact 677bed support via live chat or email, the content of those communications is recorded and stored for quality assurance, compliance, and dispute resolution purposes.
• Third-Party Verification Services: We may receive identity verification and fraud screening data from contracted third-party providers in the course of processing your KYC documentation.

How We Use Your Data

677bed uses the personal data we collect for the following purposes:

• Account Management: To create and maintain your 677bed account, authenticate your identity at login, and keep your account records accurate and current.
• KYC and Age Verification: To verify that you are at least 18 years of age and to confirm that your identity documents match the information provided at registration, in compliance with our anti-money-laundering and responsible gaming obligations.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other accepted payment methods, and to maintain an accurate financial record for your account.
• Platform Personalisation: To tailor your experience on the 677bed Platform — including game recommendations, promotional offers, and interface preferences — based on your usage history and stated preferences.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, unauthorised account access, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor betting and deposit patterns for signs of problem gambling behaviour, to enforce deposit and session limits you have set, and to flag accounts that may require a responsible gaming intervention.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver support via live chat and email.
• Legal Compliance: To comply with applicable legal, regulatory, and law enforcement obligations, including the retention of transaction records and the reporting of suspicious activity where required.
• Marketing Communications (with consent): To send you promotional emails, SMS notifications, or in-platform messages about 677bed bonuses, new games, and special offers — but only where you have given us explicit consent to do so, and subject to your right to withdraw that consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to identify technical issues, improve platform performance, and develop new features that serve the needs of our Bangladeshi player base.

Legal Basis for Processing

677bed processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific purpose of the processing:

• Contract Performance: Processing that is necessary to provide the services described in our Terms & Conditions — including account creation, transaction processing, and game delivery — is carried out on the basis of the contractual relationship between you and 677bed.
• Legal Obligation: Processing carried out to comply with applicable laws — including anti-money-laundering requirements, age verification obligations, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, IT system maintenance, and internal analytics is carried out on the basis of 677bed's legitimate interests, balanced against your privacy rights. We conduct legitimate interest assessments to ensure that our interests do not override your fundamental rights.
• Consent: Processing your data for marketing communications, non-essential cookies, and optional personalisation features is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

677bed does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial use. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, and card processing networks — solely to facilitate deposits and withdrawals on your behalf. These providers process your data under their own privacy policies and are contractually bound to handle it securely.
• Identity Verification Providers: We share your submitted KYC documents and identity data with contracted identity verification service providers who perform document authentication and biometric checks on our behalf.
• Fraud Prevention and AML Screening: We may share account and transaction data with fraud prevention and anti-money-laundering screening services to identify and mitigate financial crime risks. This processing is carried out on the basis of legal obligation and legitimate interests.
• Game Providers: Our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive session and wagering data necessary to deliver their games and calculate game outcomes. They do not receive your full identity or financial profile.
• Customer Support Platforms: Our live chat and support ticketing systems are operated by contracted service providers who process communication data on our behalf. These providers are contractually prohibited from using your data for any purpose other than delivering the support service.
• Law Enforcement and Regulatory Authorities: Where we are legally required to do so — for example, in response to a valid court order, regulatory investigation, or law enforcement request — we may disclose your personal data to the relevant authority. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 677bed's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy protections applicable to your data will be maintained.

All third-party service providers who receive your personal data are required to enter into data processing agreements with 677bed. These agreements impose strict obligations regarding data security, purpose limitation, and confidentiality. 677bed does not authorise any third party to use your data for their own marketing or commercial purposes.

Cookies & Tracking Technologies

The 677bed Platform uses cookies and similar tracking technologies (including web beacons and local storage) to provide essential functionality, improve platform performance, and personalise your experience. This section explains what cookies we use and how.

677bed does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with advertising networks or social media platforms for the purpose of serving you targeted advertisements on other websites.

Most web browsers allow you to control cookie settings through the browser preferences menu. Disabling strictly necessary or fraud prevention cookies may impair your ability to use the 677bed Platform. For functional and analytics cookies, you may update your preferences in your account settings at any time.

Data Retention

677bed retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of 5 years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later, to satisfy legal and regulatory obligations.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction for financial audit and compliance purposes.
• Customer Support Communications: Retained for 3 years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of the consent period and for 3 years following withdrawal of consent, to provide evidence of lawful processing.
• Analytics Data: Aggregated and anonymised within 13 months of collection. Once anonymised, data no longer constitutes personal data and is retained indefinitely for platform improvement analysis.

Upon the expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. If you submit a data deletion request before the end of the applicable retention period, 677bed will delete or anonymise your data to the maximum extent permitted by our legal obligations.

Data Security

677bed employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 677bed Platform is encrypted using 256-bit SSL/TLS protocols, the same standard used by major international banks and financial institutions.
• Encrypted Data Storage: Sensitive data stored on our servers — including financial records, identity documents, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 677bed's systems is restricted on a strict need-to-know basis. Staff who require access to player data to perform their job functions are granted the minimum level of access necessary, and all access is logged and audited.
• Two-Factor Authentication (2FA): All 677bed staff with access to player data systems are required to use two-factor authentication. We also strongly encourage players to enable 2FA on their own 677bed accounts for an additional layer of security.
• Regular Security Audits: 677bed conducts regular internal and third-party security audits and penetration tests to identify and address vulnerabilities in our platform and infrastructure.
• Incident Response: In the event of a confirmed data breach that is likely to result in a risk to your rights and freedoms, 677bed will notify affected players as soon as practicable and take immediate steps to contain and remediate the breach.

Your Rights

As a 677bed player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will acknowledge your request within 5 business days and aim to provide a full response within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how it is used, where it came from, and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to our legal retention obligations described in Section 8.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests pending verification of whether those interests override yours.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV) and to transmit it to another controller.
• Right to Object: You have the right to object at any time to the processing of your personal data on the basis of legitimate interests. You also have an unconditional right to object to your data being processed for direct marketing purposes, which will result in immediate cessation of such processing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent can be done via your account notification settings or by contacting support.

677bed will not charge any fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse to act on the request — in which case we will explain our reasons in writing within 30 days.

Children's Privacy

The 677bed Platform is strictly intended for adults aged 18 years and above. 677bed does not knowingly collect, process, or store personal data relating to any person under the age of 18. Age verification is a mandatory step in the 677bed account registration and KYC process, and we employ multiple verification mechanisms to enforce this requirement.

If 677bed becomes aware that personal data has been collected from a person under the age of 18 — whether through a misrepresentation at registration or any other means — we will immediately close the relevant account, delete all associated personal data to the extent permitted by law, and report the matter to the appropriate authorities if required.

If you are a parent or legal guardian and you believe that your child has registered a 677bed account or otherwise provided personal information to 677bed, please contact us immediately at [email protected] or via the Platform's 24/7 live chat. We will investigate and take appropriate action promptly.

Third-Party Links

The 677bed Platform may, from time to time, contain references to third-party websites, platforms, or services — for example, game providers or payment partners. These third-party services operate independently of 677bed and have their own privacy policies which govern the collection and use of your data when you interact with them directly.

677bed has no control over the privacy practices of any third-party service and accepts no responsibility or liability for the content, privacy policies, or data handling practices of any third-party website or service that you access via a link from the 677bed Platform. We encourage you to review the privacy policy of any third-party service before submitting personal information to it.

The inclusion of any link or reference to a third-party service on the 677bed Platform does not constitute an endorsement of that service's privacy practices or data handling standards by 677bed.

Policy Updates

677bed reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will notify registered players via email to the address on file and/or via a prominent notice on the Platform at least 7 calendar days before the changes take effect.

The "Last updated" date displayed at the top of this Policy will be revised each time we make changes. We encourage you to review this Policy periodically to stay informed about how 677bed is protecting your information.

Your continued use of the 677bed Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must cease using the Platform and may contact support to request the closure of your account and the withdrawal of any remaining balance.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 677bed handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the 677bed Platform. Identify your query as a privacy or data rights matter so that it is routed to the appropriate team member promptly.
• Email: [email protected] — Please include "Privacy Request" or "Data Rights Request" in the subject line. We aim to acknowledge all privacy-related emails within 5 business days and to provide a substantive response within 30 calendar days.

For responsible gaming-related enquiries — including self-exclusion requests, deposit limit adjustments, or concerns about your gambling behaviour — please identify your query as a responsible gaming matter. You can also visit our dedicated Responsible Gaming page for full information on available tools and external support resources.