th77 Privacy Policy – How We Handle Your Personal Data
At th77, your privacy is treated as a fundamental obligation, not a compliance checkbox. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we store and protect it, and what rights you hold over your own information as a player on the th77 platform.
Table of Contents
Summary: th77 collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with our legal obligations. We do not sell your personal data to any third party, ever. We share data only with the service providers necessary to run the platform, under binding data processing agreements. You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected].
1 Introduction
This Privacy Policy ("Policy") describes how th77 ("th77", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("you", "your", "player") of the th77 online betting and casino platform accessible at th77.io (the "Platform").
th77 is committed to handling personal data responsibly and transparently. We apply the principle of data minimisation — collecting only what is genuinely required — and the principle of purpose limitation, meaning we use your data only for the specific, legitimate purposes stated in this Policy.
By registering an account on th77, accessing the Platform, or continuing to use our services after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting [email protected].
2 Data Controller
th77 is the data controller for all personal data collected through the Platform. As data controller, th77 determines the purposes and means by which your personal data is processed. All data-related queries, subject access requests, and complaints should be directed to the th77 data team using the contact details provided in Section 15 of this Policy.
Where th77 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification services, or game content providers — those parties act as data processors under binding contractual arrangements that restrict their use of your data to the purposes specified by th77.
3 Personal Data We Collect
th77 collects the following categories of personal data, depending on how you interact with the Platform:
3.1 Identity Data
- Full legal name (as it appears on official government-issued documents)
- Date of birth (used to verify that you meet the 21+ age requirement)
- Nationality and country of residence
- Copies of identity documents (National Identity Card, passport, or driver's licence) submitted during KYC verification
- Facial image or selfie submitted as part of identity verification, where requested
3.2 Contact Data
- Email address
- Mobile telephone number (including the country code registered with your bKash, Nagad, Rocket, or Upay account)
- Residential address or city of residence (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or elsewhere in Bangladesh)
3.3 Financial Data
- Mobile banking account identifiers (bKash number, Nagad number, Rocket number, Upay number) — account numbers are stored in tokenised or masked form wherever technically feasible
- Card details for Visa or Mastercard transactions — card numbers are never stored in full on th77 servers; they are processed exclusively by the relevant payment gateway provider
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
- Account balance history
3.4 Account & Activity Data
- Username and encrypted password (passwords are hashed and are never stored or transmitted in plain text)
- Betting history and game play history, including stakes, outcomes, and timestamps
- Bonus and promotion participation history
- Responsible gaming tool settings (deposit limits, loss limits, cool-off periods, self-exclusion status)
- Customer support communications (live chat transcripts, email correspondence)
- Preferences and account settings
3.5 Technical Data
- IP address at time of login and at time of each transaction
- Device type, operating system, and browser type and version
- Unique device identifiers
- Geolocation data (country and city level, derived from IP address)
- Session duration and page interaction data collected via cookies and analytics tools
Special Category Data: th77 does not intentionally collect special category data (including health data, religious beliefs, political opinions, or biometric data for identification purposes) unless it is strictly required by applicable law or provided voluntarily by you in the context of a responsible gaming request or a support query. Any such data is treated with the highest level of confidentiality and is accessible only to the minimum number of staff necessary to process your request.
4 How We Collect Your Data
th77 collects personal data through the following channels:
- Direct registration: Information you provide when creating your account, completing KYC verification, or updating your profile.
- Platform usage: Data generated automatically as you browse, bet, play games, or interact with any feature of the th77 Platform.
- Payment transactions: Data transmitted by payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) when you initiate a deposit or withdrawal.
- Support interactions: Data you provide when contacting our customer support team via live chat or email.
- Cookies and tracking technologies: Data collected automatically via cookies, web beacons, and similar technologies as described in Section 10.
- Third-party identity verification: Data returned by independent identity verification services during the KYC process.
- Fraud prevention services: Data returned by third-party fraud detection and anti-money laundering screening providers.
5 Purposes of Processing
th77 processes your personal data for the following specific, documented purposes:
| Purpose | Data Categories Used | Necessity |
|---|---|---|
| Account registration and management | Identity, Contact, Account | Essential to provide the service |
| Age verification (21+ compliance) | Identity, Technical | Legal obligation |
| KYC identity verification | Identity, Contact, Financial | Legal obligation |
| Processing deposits and withdrawals | Financial, Identity | Essential to provide the service |
| Anti-money laundering screening | Identity, Financial, Technical | Legal obligation |
| Fraud detection and prevention | Technical, Financial, Account | Legitimate interest |
| Responsible gaming monitoring | Account, Activity | Legal obligation / Player protection |
| Customer support | Identity, Contact, Account | Essential to provide the service |
| Platform analytics and improvement | Technical, Activity | Legitimate interest |
| Promotional communications (opted-in only) | Contact, Activity | Consent |
th77 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent or establishing a new legitimate legal basis for processing.
6 Lawful Basis for Processing
th77 relies on the following lawful bases when processing your personal data:
- Contractual necessity: Processing required to perform our obligations under the account agreement with you, including operating your account, processing payments, and settling bets.
- Legal obligation: Processing required to comply with applicable law, including age verification, identity verification, anti-money laundering obligations, and record-keeping requirements.
- Legitimate interests: Processing carried out for th77's legitimate business interests, including fraud prevention, platform security, abuse detection, and product improvement — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily used for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.
7 Data Sharing & Third Parties
th77 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited circumstances, and only to the minimum extent necessary:
7.1 Service Providers (Data Processors)
th77 engages carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These include:
- Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard gateway providers — to facilitate deposits and withdrawals.
- Identity verification providers: Third-party KYC services that verify the authenticity of identity documents and confirm player age.
- Fraud and AML screening providers: Services that cross-reference account data against watchlists and risk indicators to prevent financial crime.
- Game content providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — game providers receive only the session and wager data necessary to run their games and calculate outcomes.
- Cloud infrastructure providers: Hosting and storage services that maintain the technical infrastructure underpinning the Platform, operating under strict confidentiality and security obligations.
- Customer support technology: Live chat and ticketing system providers that process support correspondence data.
7.2 Legal Disclosures
th77 may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful governmental request. In such cases, th77 will disclose only the minimum information required and, where legally permissible, will notify you of the disclosure.
7.3 Business Transfers
In the event that th77 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by th77 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.
We do not share with advertisers: th77 does not share your personal data with advertisers, data brokers, social media platforms, or any other commercial third party for the purpose of targeted advertising, audience profiling, or list building. Your data stays within the th77 ecosystem.
8 Data Retention
th77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:
- Active account data: Retained for the full duration of your account relationship with th77 plus a minimum of 5 years following account closure, to comply with anti-money laundering and record-keeping obligations.
- KYC and identity documents: Retained for a minimum of 5 years from the date of verification or the date of account closure, whichever is later.
- Transaction records: Retained for a minimum of 5 years from the date of the relevant transaction.
- Support communications: Retained for 3 years from the date of the interaction, or longer where the communication relates to an open dispute or legal claim.
- Marketing data (consent-based): Retained until you withdraw consent or request deletion, subject to the overriding retention obligations above.
- Technical / log data: Retained for up to 12 months from collection, after which it is anonymised or deleted.
When the retention period for any category of personal data expires, th77 will securely delete, anonymise, or pseudonymise that data so that it can no longer be linked back to you as an individual.
9 Security Measures
th77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and th77 servers
- Encryption of sensitive data fields at rest (including financial account references and identity document metadata)
- Bcrypt or equivalent one-way hashing of all account passwords — passwords are never stored or transmitted in plain text
- Role-based access controls that limit employee access to personal data to the minimum necessary for each job function
- Multi-factor authentication for staff accessing systems that contain player personal data
- Regular penetration testing and security audits conducted by independent third parties
- Intrusion detection and monitoring systems that flag anomalous access patterns in real time
- Formal data breach response procedures, including notification obligations to affected players where required by applicable law
Despite these measures, no online platform can guarantee absolute security. If you have reason to believe that your th77 account has been compromised, please contact us immediately at [email protected] so that we can take prompt protective action.
10 Cookies & Tracking Technologies
th77 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, and analyse usage patterns. The following types of cookies are used:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable login sessions, maintain account security, and ensure the Platform functions correctly. Cannot be disabled. | Session / up to 24 hrs |
| Functional | Remember your preferences such as language, game history, and display settings across sessions. | Up to 12 months |
| Analytics | Collect anonymised data on how users navigate the Platform to help us identify areas for improvement. No personally identifying data is sent to analytics providers. | Up to 24 months |
| Security | Detect fraudulent sessions, flag suspicious login patterns, and support bot detection. | Session |
th77 does not use third-party advertising cookies or behavioural targeting cookies. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly and may result in your being unable to log in or complete transactions.
11 Your Data Rights
As a th77 player, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting us at [email protected]. th77 will respond to all valid requests within 30 calendar days, or sooner where practicable:
Right of Access
You have the right to request a copy of all personal data th77 holds about you, along with information about how and why it is being processed. We will provide this in a clear, readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For account details, many fields can be updated directly within your account settings.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under anti-money laundering and record-keeping laws.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or while an objection to processing is being assessed.
Right to Portability
Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
Right to Object
You have the right to object to processing carried out on the basis of th77's legitimate interests, including the use of your data for platform analytics. You may also object to receiving marketing communications at any time.
12 Minors & Age Restriction
The th77 Platform is strictly intended for adults aged 21 years and above. th77 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step of the account registration process and is enforced through our KYC procedures.
If th77 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated account, delete the relevant data where permitted by law, and return any deposited funds to the originating payment method. If you are a parent or guardian and believe that a minor under your care has registered an account on th77, please contact us immediately at [email protected].
13 International Data Transfers
th77's primary infrastructure is maintained within data centres serving the Asia-Pacific region. However, some third-party service providers — including identity verification services, game studios, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh. In all cases where personal data is transferred internationally, th77 ensures that appropriate safeguards are in place to maintain a standard of data protection equivalent to that applied within Bangladesh, including:
- Binding contractual clauses with all third-party processors that obligate them to apply appropriate security and confidentiality standards
- Restricting transfers to service providers operating in jurisdictions that maintain adequate data protection frameworks
- Conducting due diligence on new service providers before granting access to player data
14 Changes to This Privacy Policy
th77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services available on the Platform. When material changes are made, we will notify registered players by email to the address on file and will publish a prominent notice on the Platform for no fewer than 14 days following the update.
The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. Where applicable law requires your explicit consent to certain new uses of your data, we will seek that consent before processing commences.
15 Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how th77 handles your personal data, please contact us using the details below. All privacy-related queries are handled by the th77 data team and will receive a response within 5 business days:
- Email: [email protected]
- Subject line for data requests: "Privacy Request – [Your Username]"
- Support Hours: 24 hours a day, 7 days a week
- Live Chat: Available within the Platform when logged into your account
Data Access Requests: When submitting a subject access request or a deletion request, please include your registered username, the email address associated with your account, and a copy of a valid identity document so that we can verify your identity before processing the request. This verification step is required to protect your data from unauthorised third-party access requests.
Our Privacy Commitments
Six principles that guide every decision we make about your personal data at th77
Military-Grade Encryption
All data in transit is protected by 256-bit SSL/TLS encryption — the same standard used by major international banks. Your personal and financial details are never exposed in plain text at any point in the transmission chain.
Zero Data Selling
th77 has a firm, unconditional policy: we never sell, rent, or trade your personal data to advertisers, data brokers, or any commercial third party. Your data exists solely to support your account and comply with our legal obligations.
Minimal Data Collection
We apply the principle of data minimisation rigorously — collecting only what is genuinely needed. If a piece of information is not required to operate your account, process a payment, or satisfy a legal requirement, we do not collect it.
You Control Your Data
You hold meaningful rights over your personal data: access, correction, deletion, restriction, portability, and objection. A simple email to [email protected] is all it takes to exercise any of these rights — no complex procedures, no unnecessary delays.
Fraud & AML Protection
We use your data actively to protect you. Real-time fraud detection, anti-money laundering screening, and suspicious activity monitoring safeguard your account balance and the integrity of the th77 platform for all players.
Transparent & Up to Date
This Policy is reviewed and updated regularly. When material changes are made, you are notified by email before the changes take effect. We believe in plain-language, honest communication about how your data is used — no hidden clauses.
Your Privacy is Our Priority
Now that you understand how th77 protects your data, explore Bangladesh's most trusted cricket betting platform with complete peace of mind. Questions? Our support team is here around the clock.