bf77 Privacy Policy — How We Handle Your Data
bf77 is committed to protecting the personal information of every player in Bangladesh. This policy explains exactly what data we collect, why we collect it, and how it is kept secure.
Introduction
Last updated: January 2026
This Privacy Policy ("Policy") describes how bf77 ("bf77", "we", "us", "our") collects, processes, stores, and discloses personal information obtained from users ("User", "Member", "Player", "you") who access and use the bf77.cam website and related services, including casino games, sports betting, payment services, and customer support. By creating an account on bf77, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
bf77 is operated with Bangladeshi players as its primary audience. All data handling described in this Policy takes place with appropriate technical and organisational security measures applied. The Platform uses SSL encryption on every session and applies access controls to limit who within the bf77 team can view personal member data. This Policy should be read alongside the bf77 Terms and Conditions, which govern your use of the Platform generally.
Our Core Privacy Commitments
Before diving into the full detail, here are the six principles that underpin how bf77 approaches your data:
SSL Encryption
Every data transfer between your device and bf77.cam is encrypted with SSL.
No Data Sales
bf77 never sells your personal data to third parties for marketing or commercial purposes.
Access on Request
You can request a copy of the personal data bf77 holds about you at any time by contacting support.
Minimal Contact
We only contact you about your account, promotions you have opted into, or security alerts. We do not spam.
Right to Erasure
You may request deletion of your personal data when your account is closed, subject to legal retention obligations.
Payment Security
Full payment card and mobile wallet credentials are never stored on bf77 servers. Transactions are processed via secure provider APIs.
1. Information We Collect
bf77 collects the minimum amount of personal data necessary to provide a safe, compliant, and functional gaming service. The categories of data we collect are set out below.
1.1 Registration Data
When you create a bf77 account, we collect your registered mobile number, a password (stored as a one-way cryptographic hash — we never store your plain-text password), your chosen username or display name, and your date of birth (used for age verification to confirm you are 21 or older). You may also voluntarily provide your full name and a contact email address, which we use for account recovery and promotional communications where you have opted in.
1.2 Identity Verification (KYC) Data
When a withdrawal request triggers a KYC review or when bf77 proactively requests identity verification, you will be asked to submit a government-issued identity document — typically your Bangladesh National ID card (NID) or passport. We may also request a photograph of the document alongside a selfie to confirm document authenticity. KYC documents are stored securely and retained for the period required by applicable anti-money laundering obligations. KYC data is not used for any purpose other than identity verification and fraud prevention.
1.3 Transaction and Financial Data
bf77 records all deposit and withdrawal transactions associated with your account, including transaction amounts (in BDT), timestamps, payment method type (e.g. bKash, Nagad, Rocket, Visa), and transaction reference numbers. We do not store full mobile wallet account numbers or full payment card numbers — only the last four digits and the provider name are retained for reference. Full payment credentials are processed directly by the relevant payment provider API and are not passed through or stored on bf77 servers.
1.4 Technical and Device Data
When you use bf77.cam, our servers automatically log certain technical data: your IP address, browser type and version, device operating system, screen resolution, session start and end times, pages visited within the Platform, game sessions played (game title, session duration, stakes, outcomes), and referral source (how you arrived at the site). This data is used for security monitoring, fraud detection, platform optimisation, and responsible gaming analysis. It is not shared with third parties for advertising purposes.
2. How We Use Your Information
bf77 uses the personal data it collects solely for the following purposes. We do not use your data for purposes incompatible with those listed below, and we do not sell your data to any third party:
- ▸Account creation, authentication, and management — verifying your identity at login, enabling account recovery via OTP, and maintaining your account preferences and history.
- ▸Payment processing — initiating and confirming deposit and withdrawal transactions through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods in BDT.
- ▸KYC and fraud prevention — verifying your age and identity to comply with responsible gaming obligations, detecting and preventing fraudulent activity, money laundering, and bonus abuse.
- ▸Customer support — enabling the support team to identify your account and assist with queries, disputes, and technical issues related to your bf77 experience.
- ▸Responsible gaming monitoring — analysing your gameplay patterns, session durations, and deposit behaviour to identify potential problem gambling indicators and to apply responsible gaming interventions where appropriate.
- ▸Promotional communications — where you have opted in, sending you information about bf77 bonuses, promotions, seasonal offers (such as Eid or Pohela Boishakh specials), and new game launches. You may opt out of promotional communications at any time by contacting support.
3. Legal Basis for Processing Your Data
bf77 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
3.1 Contractual Necessity
The majority of data processing at bf77 is necessary to perform the contract between bf77 and the member — that is, to provide the gaming services, process payments, and maintain the member's account as described in the Terms and Conditions. Without this processing, bf77 could not provide the services the member has signed up for.
3.2 Legal Obligation
Certain processing activities — particularly KYC identity verification, anti-money laundering record keeping, and age verification — are required by applicable law and regulation. bf77 is required to retain certain transaction and identity records for defined periods regardless of member requests for deletion, where applicable law mandates retention.
3.3 Legitimate Interests
bf77 processes technical data (IP addresses, session logs, device fingerprints) on the basis of its legitimate interests in preventing fraud, ensuring platform security, and detecting prohibited conduct. This processing does not override individual members' privacy rights — it is proportionate to the security risk and is conducted with appropriate access controls. Members may object to processing on this basis by contacting support, though doing so may affect bf77's ability to provide services.
4. Data Sharing and Disclosure
bf77 does not sell your personal data. We share data only in the limited circumstances described below. Any third party that receives personal data from bf77 is required to handle it securely and use it only for the purpose for which it was shared.
4.1 Payment Service Providers
To process deposit and withdrawal transactions, bf77 shares the minimum necessary transactional data with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or another supported method). This data is limited to what the payment provider requires to authenticate and complete the transaction. Payment providers operate under their own privacy policies and are independently responsible for data they hold.
4.2 Game Software Providers
Game software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe) may receive session identifiers and stake/result data to facilitate real-time game delivery and audit logging. These providers do not receive your full personal profile, payment details, or KYC documents. They process game-level technical data only.
4.3 Legal and Regulatory Disclosure
bf77 will disclose personal data to law enforcement, regulatory authorities, or competent courts when required by applicable law, a valid court order, or a lawful request from a government authority. We will, where permitted by law, notify the affected member before complying with such a request. We will also disclose data where necessary to prevent imminent harm to persons or to respond to a verified emergency.
5. Payment Data and Financial Information
bf77 takes payment security seriously. We do not store full mobile wallet account numbers, bKash PIN codes, Nagad PINs, payment card numbers, CVV codes, or bank account details on bf77 servers. When you initiate a transaction, the relevant sensitive financial credentials are entered directly into the payment provider's secure interface (or transmitted directly to the provider's API) and are never exposed to or stored by bf77 infrastructure.
What bf77 does retain is a record of each transaction for account history, responsible gaming monitoring, and anti-money laundering compliance purposes: the transaction amount in BDT, the transaction timestamp, the payment method type (e.g. "bKash"), the masked reference number (last four digits only where applicable), and the transaction status (completed, pending, failed). This financial transaction log is retained for the legally required period and then securely deleted.
6. Cookies and Tracking Technologies
bf77.cam uses cookies and similar technologies to operate the site, maintain your logged-in session, and analyse platform usage. The table below describes the types of cookies in use:
| Cookie Type | Purpose |
|---|---|
| Essential / Session | Keeps you logged in during a session, maintains your language preference, and enables the shopping cart and cashier to function. Cannot be disabled — the site requires these to operate. |
| Analytics | Tracks aggregated, anonymised data on pages visited, session durations, and navigation paths to help bf77 improve the platform. No personally identifiable information is included in analytics data. |
| Security / Fraud Detection | Detects suspicious login patterns, multiple account creation from the same device, and bot activity. These cookies are essential for platform integrity and cannot be disabled. |
| Preference | Stores your display settings such as odds format and notification preferences so they are remembered between sessions. These are optional and can be cleared via your browser settings. |
You can manage or delete cookies at any time through your browser settings. Disabling essential cookies will affect the functionality of bf77.cam — some features, including staying logged in and accessing the cashier, may not work correctly if essential cookies are blocked.
7. Data Retention
bf77 retains personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply: active account data is retained for the duration of the membership and for a period of five years after account closure to satisfy anti-money laundering record-keeping requirements; KYC identity documents are retained for five years from the date of submission or five years from account closure, whichever is longer; transaction records are retained for five years from the date of each transaction; support correspondence is retained for two years from the date of the last message in a thread.
When the retention period for a category of data expires, bf77 securely deletes or anonymises that data so that it can no longer be linked to an identifiable individual. Where anonymisation is used rather than deletion (for example, for aggregate analytics or responsible gaming research), the anonymised data retains no personally identifiable attributes and cannot be re-linked to you.
8. Your Privacy Rights
As a bf77 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact support at the email address published on the website. bf77 will respond to all valid requests within a reasonable time, typically within 30 days:
7.1 Right of Access
You have the right to request a copy of the personal data bf77 holds about you. Upon a valid access request, bf77 will provide you with a summary of the data categories held, the purposes of processing, and, where technically feasible, a copy of the underlying data. We may ask you to verify your identity before fulfilling an access request.
7.2 Right to Rectification
If you believe that personal data bf77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered mobile number or display name, you can update these directly from within your account settings. For KYC records, contact support to initiate a correction request.
7.3 Right to Erasure
You may request deletion of your personal data when your account is closed and after applicable retention periods have elapsed. bf77 will erase your personal data upon a valid erasure request except where retention is required by law (for example, anti-money laundering transaction records must be retained for five years). Where erasure of some data categories is not possible due to legal obligations, bf77 will inform you which categories are affected and why.
7.4 Right to Object
You have the right to object to processing of your personal data that is conducted on the basis of bf77's legitimate interests (as described in Section 3.3). If you object, bf77 will review whether its legitimate interests override your right to object in the specific circumstances. You also have the right to withdraw consent to promotional communications at any time — this will not affect the lawfulness of processing carried out before your withdrawal.
9. Security Measures
bf77 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include: SSL/TLS encryption on all data transmissions between your device and bf77.cam; one-way cryptographic hashing of passwords so that plain-text passwords are never stored; access controls that restrict which bf77 personnel can view member personal data, with access logged and audited; regular security reviews of the Platform infrastructure; and two-factor authentication (OTP via SMS) available to members to protect account access.
While bf77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: never share your password or OTP with anyone, use a unique password not shared with other services, and log out of your account when using a shared or public device. If you suspect your account has been compromised, contact support immediately.
10. Children and Minors
bf77 is strictly an adult platform. The minimum age to register and use bf77 is 21 years. bf77 does not knowingly collect personal data from persons under the age of 21. If bf77 becomes aware that a registered member is under the age of 21, the account will be closed immediately, all associated data will be flagged for review, and any funds held will be subject to investigation. If you believe that a person under 21 is using bf77 — including a member of your household — please contact support immediately at [email protected]. Protecting minors from gambling harm is a responsibility that bf77 takes very seriously.
11. Changes to This Privacy Policy
bf77 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will publish the revised Policy on bf77.cam with an updated "Last updated" date at the top of the page. Your continued use of the Platform after the revised Policy is published constitutes your acceptance of the changes. If you do not agree with a revised Policy, you must cease using the Platform and may request account closure. We encourage you to review this Policy periodically to stay informed about how bf77 handles your personal data.
12. Contact Us About This Policy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bf77 holds about you, please contact the bf77 support team in writing. Include your registered mobile number in all privacy-related communications so that the support team can locate your account record promptly.
Support Email: [email protected] (plain text — not a clickable link). Response time: typically within 24 hours on business days (Bangladesh Standard Time, UTC+6). For account-specific data requests, please include your registered mobile number and a brief description of your request to help the team respond efficiently.
Continue Exploring bf77
Your privacy is protected. Now explore our games, read our FAQ for quick answers, or learn more about the bf77 story.
Go to bf77 Casino Read the FAQ About bf77