277bed Privacy Policy

277bed processes your personal data only for the following lawful purposes:

• Account management: creating and maintaining your player account, processing logins, and managing account settings.
• Payment processing: facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity verification (KYC): confirming that you meet the 21+ age requirement and fulfilling our anti-money-laundering obligations.
• Fraud prevention and security: detecting suspicious login activity, unusual transaction patterns, and other indicators of account compromise or fraudulent use.
• Responsible gaming: monitoring betting patterns to identify players who may be showing signs of problem gambling, and delivering self-exclusion and limit tools.
• Platform improvement: analysing aggregated, anonymised usage data to improve the site experience, game selection, and performance.
• Legal compliance: meeting record-keeping, reporting, and data-retention obligations under applicable financial regulations.
• Customer support: responding to your queries, resolving disputes, and providing account assistance.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

For each processing activity, 277bed relies on one or more of the following legal bases:

• Contractual necessity: processing required to fulfil our obligations to you under the Terms & Conditions (e.g., account creation, payment processing).
• Legal obligation: processing required by applicable anti-money-laundering, counter-terrorism financing, and financial record-keeping obligations.
• Legitimate interest: fraud prevention, platform security, and responsible gaming monitoring, where our interest does not override your fundamental privacy rights.
• Consent: where we rely on your consent — for example, for non-essential marketing communications — you may withdraw that consent at any time via your account settings or by contacting our support team.

277bed does not sell your personal data. We may share your data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data-processing agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and affiliated banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) — to process deposits and withdrawals.
• KYC and identity verification providers: specialist third-party services that assist us in verifying player identity documents and performing AML screening.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — receive only the minimum technical session data required to deliver their game content. They do not receive your financial or identity data.
• Cloud infrastructure and hosting providers: who provide the servers and storage on which platform data resides, bound by strict data-security contracts.
• Law enforcement and regulatory bodies: where we are required by law, court order, or regulatory direction to disclose personal data. We will notify you of such disclosure where we are legally permitted to do so.

All third-party processors are required to handle your data only in accordance with our instructions and applicable data-protection law. They may not use your data for their own independent purposes.

277bed uses cookies and similar technologies (such as local storage and session tokens) on the platform. These fall into the following categories:

• Strictly necessary cookies: required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies: remember your preferences such as language setting, previously used payment method, and responsible gaming limit configurations.
• Analytical cookies: collect anonymised data on how players interact with the platform — which pages are visited most, session duration, and navigation paths. This data is used solely to improve the platform and is never linked back to individual identities.

We do not deploy advertising cookies, cross-site tracking pixels, or social media tracking scripts. You may manage functional and analytical cookies via your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent login.

277bed implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• End-to-end SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• One-way cryptographic hashing (bcrypt) for account passwords. We never store your password in plain text and our staff cannot retrieve it.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a documented need to access it.
• Regular penetration testing and vulnerability scanning of the platform infrastructure.
• Intrusion detection systems that monitor for unusual access patterns and trigger automated alerts for investigation.

While we apply all reasonable technical and organisational measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify affected players promptly and take all available steps to contain and remediate the incident.

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: retained for the lifetime of your account plus five years after closure, to satisfy financial compliance and dispute resolution obligations.
• Transaction records: retained for a minimum of five years from the date of each transaction in accordance with standard financial record-keeping requirements.
• KYC documentation: retained for five years after account closure or the conclusion of any investigation, whichever is later.
• Support communications: retained for three years from the date of the last interaction.
• Analytical and usage data: anonymised after 12 months and retained in aggregate form indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

As a 277bed player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your account username and the nature of your request. We will respond within 30 days.

• Right of access: request a copy of all personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data where it is no longer required for the purposes it was collected, subject to our legal retention obligations. Note that data subject to AML retention requirements cannot be deleted before the statutory retention period expires.
• Right to restriction: request that we restrict processing of your data while a dispute about its accuracy or our lawful basis for processing is resolved.
• Right to object: object to processing based on legitimate interest, including direct marketing communications.
• Right to withdraw consent: where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

277bed's primary platform infrastructure is located in data centres serving the Asia-Pacific region. Some third-party service providers — including certain KYC verification partners and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, we ensure that adequate protections are in place through contractual data-processing agreements that require the recipient to apply security and privacy standards equivalent to those described in this Policy.

We do not transfer your data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate contractual safeguards.

The 277bed platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under 21 years of age. During registration, all players are required to confirm their age and to complete identity verification (KYC) before any deposit or wager is permitted.

If we discover or are notified that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and refund any deposits to the originating payment method. If you believe a minor may have registered an account, please contact our support team immediately.

With your consent at registration or via your account settings, 277bed may send you promotional communications about new games, upcoming cricket and BPL betting markets, seasonal offers (for example, Eid, Pohela Boishakh, or T20 World Cup promotions), and platform updates. These communications are delivered via email or SMS to the contact details registered on your account.

• You may opt out of marketing communications at any time by updating your preferences in your account settings or by contacting our support team.
• Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts — these are essential account communications that cannot be disabled while your account is active.
• Players who have activated a self-exclusion or cooling-off period will not receive marketing communications for the duration of that restriction, regardless of their stated marketing preferences.

277bed reserves the right to amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify active players via email or an in-platform notification.

Your continued use of the platform following the publication of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 277bed handles your personal data, please contact our support team. All privacy-related requests will be directed to our data protection team and handled with priority.

Contact email: [email protected] (plain text — not a clickable link).

We aim to acknowledge all privacy enquiries within two business days and to provide a substantive response within 30 calendar days of receipt.