277det Privacy Policy

1. Introduction

Section 1

277det ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who interacts with our services. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It describes what information we gather, the purposes for which it is used, the conditions under which it may be shared, and the rights available to you in relation to your personal data.

This policy is written in clear, accessible English and applies to all services operated under the 277det brand at 277det.vip, including the desktop website, mobile browser experience, and any application interface that links to this policy. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

The effective date of this version of the Privacy Policy is July 2026. Any prior versions of the Privacy Policy are superseded in their entirety by this document from that date.

2. Data We Collect

Section 2

277det collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration and Identity Data

When you create a 277det account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you select. This information is required to establish your account, verify your identity, and ensure that only eligible individuals (aged 18 and above) may access the platform.

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may request copies of government-issued photo identification (such as a National Identity Card, passport, or driving licence), proof of residential address (such as a utility bill or bank statement), and proof of ownership of the payment method(s) used on your account. These documents are used solely for identity verification and anti-money laundering compliance purposes.

2.3 Financial and Transaction Data

We collect information about deposits, withdrawals, and wagering activity conducted through your 277det account. This includes the amounts transacted, the payment methods used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or linked bank accounts), transaction timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs; payment instrument data is handled directly by our certified payment processor partners under their own security standards.

2.4 Device, Technical, and Usage Data

When you access the 277det platform, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type and model, screen resolution, language preference, referring URL, and the pages or features you interact with during your session. This data is used for platform security, fraud detection, performance optimisation, and aggregate analytics.

2.5 Communications Data

We retain records of communications between you and the 277det support team, whether conducted via live chat, email, or any other channel made available by the platform. These records are kept for quality assurance, dispute resolution, and compliance purposes.

2.6 Responsible Gaming Data

Where you use 277det's responsible gaming tools — such as deposit limits, session time reminders, cooling-off periods, or self-exclusion — we record and process the settings you apply. This data is treated with particular sensitivity and is used exclusively to enforce the protective measures you have requested and to comply with our responsible gaming obligations.

3. Legal Basis for Processing

Section 3

277det processes personal data only where a lawful basis exists. The legal bases on which we rely are as follows:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any such communication or contact us at [email protected].

4. How We Use Your Data

Section 4

The personal data collected by 277det is used for the following purposes:

• Account Registration and Management: To create, maintain, and administer your 277det member account, including verifying your identity and age, resetting credentials, and updating account information.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment methods, reconcile transactions, and investigate payment disputes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, collusion, money laundering, and other prohibited activities on the platform.
• Responsible Gaming Compliance: To enforce deposit limits, self-exclusion requests, cooling-off periods, and other player protection measures; to monitor betting patterns that may indicate problem gambling behaviour.
• Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes in a timely and accurate manner.
• Platform Improvement: To analyse aggregate usage patterns, diagnose technical errors, test new features, and optimise the overall performance of the 277det platform.
• Legal and Regulatory Compliance: To meet obligations imposed by applicable anti-money laundering legislation, responsible gaming regulations, and any lawful requests from competent authorities.
• Marketing Communications (with consent): To send you information about promotions, bonuses, seasonal offers, and platform updates where you have opted in to receive such communications. You may opt out at any time.

277det does not use personal data for automated decision-making that produces significant legal effects, other than automated age and identity verification checks that are a prerequisite for account registration. Where such automated checks generate a negative result, you have the right to request human review of the decision by contacting [email protected].

5. Data Sharing & Disclosure

Section 5

5.1 Service Providers and Technology Partners

277det works with carefully selected third-party service providers who process personal data on our behalf under strict contractual terms that prohibit them from using your data for any purpose other than providing their contracted service to 277det. These include KYC and identity verification providers, payment processors (including bKash, Nagad, Rocket, and Upay gateway operators), cloud infrastructure providers, fraud detection services, and customer support platform vendors.

5.2 Game Software Providers

When you play games on the 277det platform provided by third-party software studios — including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe — limited technical data (such as your anonymised session identifier and game activity) is transmitted to those providers to operate the games and generate outcomes. These providers operate under their own certified privacy and security standards.

5.3 Regulatory and Law Enforcement Authorities

277det may disclose personal data to competent regulatory bodies, law enforcement agencies, or other government authorities where we are legally required to do so, where disclosure is necessary to protect the rights and safety of 277det members, or where we have a good-faith belief that disclosure is necessary to investigate suspected fraud, money laundering, or other unlawful activity.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 277det's business assets, personal data held by 277det may be transferred to the successor entity. In such circumstances, 277det will use reasonable efforts to notify affected members and ensure that the receiving entity is bound by privacy commitments consistent with this policy.

6. Cookies & Tracking Technologies

Section 6

277det uses cookies and similar tracking technologies to operate the platform, understand how members use it, and provide a consistent, personalised experience. The following categories of cookies are used:

277det does not use third-party advertising cookies or behavioural tracking cookies that follow your activity outside the 277det platform. You can control cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core platform features, including login.

7. Data Retention

Section 7

277det retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention principles applied by 277det are as follows:

• Active Account Data: Retained for the duration of your membership with 277det and for a period of five years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any late-emerging disputes.
• KYC and Identity Documents: Retained for a minimum of five years following the closure of the associated account, or longer if required by applicable law or ongoing investigation.
• Transaction Records: Retained for a minimum of five years following the relevant transaction date, in accordance with financial record-keeping requirements.
• Customer Support Communications: Retained for three years following the resolution of the relevant enquiry or complaint.
• Technical and Usage Logs: Retained for up to 12 months, after which they are aggregated or deleted.
• Marketing Consent Records: Retained for as long as you remain opted in, plus three years following withdrawal of consent, to demonstrate compliance.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised or aggregated data derived from your information may be retained indefinitely for platform analytics and improvement purposes.

8. Data Security

Section 8

The technical security measures implemented by 277det include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 277det platform is encrypted in transit using industry-standard TLS protocols, preventing interception by third parties.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and financial information, is stored in encrypted form on secure servers with restricted access controls.
• Access Controls: Access to personal data within 277det's systems is restricted on a need-to-know basis. All staff with data access undergo background checks and receive regular data protection training.
• Intrusion Detection and Monitoring: Our infrastructure is subject to continuous security monitoring, intrusion detection, and regular independent security assessments.
• Two-Factor Authentication (2FA): 277det offers optional 2FA for member accounts to provide an additional layer of login security. We strongly recommend enabling this feature.
• Incident Response: 277det maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected members without undue delay.

You also have a responsibility to maintain the security of your 277det account. You must keep your login credentials confidential, choose a strong and unique password, and notify us immediately at [email protected] if you suspect your account has been compromised.

9. Your Rights

Section 9

As a 277det member whose personal data we process, you hold the following rights in relation to that data. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 days (or inform you if an extension is required in complex cases).

• Right of Access: You have the right to request confirmation of whether 277det processes personal data about you and, if so, to receive a copy of that data together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that certain data must be retained by law (e.g., KYC and transaction records) and cannot be deleted upon request.
• Right to Restriction of Processing: You may request that 277det restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of 277det's legitimate interests, including profiling for fraud prevention. 277det will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to Complain: If you are dissatisfied with how 277det has handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in your jurisdiction.

10. Children's Privacy

Section 10

If 277det discovers or has reason to believe that personal data has been collected from a person under the age of 18, the associated account will be immediately suspended, the personal data will be deleted as soon as reasonably practicable, and any funds in the account will be handled in accordance with the 277det Terms & Conditions governing underage accounts.

If you are a parent or guardian and believe that a person under 18 in your care has registered a 277det account or provided personal information to the platform, please contact us immediately at [email protected]. We take child protection obligations extremely seriously and will act without delay on any credible report of underage access.

11. International Data Transfers

Section 11

The 277det platform primarily serves members based in Bangladesh. Certain of our technology partners and service providers may be located in or operate infrastructure in countries outside Bangladesh. Where personal data is transferred to such countries, 277det ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy.

Safeguards used for international transfers include contractual clauses binding the recipient to process data only in accordance with our instructions and to maintain equivalent security standards, as well as ensuring that recipients are located in jurisdictions recognised as providing adequate data protection by applicable standards.

You may request further information about the safeguards applicable to any specific international transfer of your personal data by contacting [email protected].

12. Changes to This Policy

Section 12

277det reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made — meaning changes that significantly affect your rights or how we use your personal data — we will notify registered members by email to the address on record or via a prominent in-platform notice, at least 14 days before the changes take effect.

For minor, non-material changes (such as typographical corrections, clarifications, or formatting updates), the revised policy will be published on the 277det website with an updated effective date. We recommend reviewing this policy periodically. Continued use of the 277det platform after any change takes effect constitutes your acceptance of the revised Privacy Policy.

The current effective date of this Privacy Policy is stated at the top of this document and in the hero section of this page. All previous versions of the 277det Privacy Policy are superseded by this document.

13. Contact & Data Requests

Section 13

For all privacy-related enquiries, data subject access requests, correction requests, deletion requests, objections to processing, or any other matter arising from this Privacy Policy, please contact the 277det data team using the contact details below. Please include your registered email address and a clear description of your request to help us locate your records and respond efficiently.