tb777 Privacy
Policy

1. Data We Collect

tb777 collects personal data through several distinct channels: information you provide directly when registering or contacting support, information generated automatically through your use of the platform, and information received from third-party service providers such as payment processors and game studios. Each category is described below.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (city, district), email address, and mobile phone number provided when creating your tb777 account.
• Identity verification (KYC) documents: Scanned copies or photographs of government-issued identification (National ID card, passport, or driving licence) and, where required, proof of address documents such as utility bills or bank statements.
• Payment information: Your registered bKash, Nagad, Rocket, or Upay mobile wallet number, or bank account details (account name, account number, bank name) for the purpose of processing deposits and withdrawals. Full card numbers are never stored on tb777 servers.
• Support communications: Any messages, emails, or live chat transcripts you send to the tb777 support team, including the content of your queries, attachments you share, and your contact details as provided in those communications.
• Responsible gaming preferences: Deposit limit settings, loss limits, session time limits, cooling-off durations, and self-exclusion requests you submit through the platform's responsible gaming tools.
• Promotional responses: Information submitted when entering a promotion, tournament, or prize draw — including your account details and any optional preference information requested as part of the promotion entry.

Information collected automatically:

• Device and browser data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and language preference.
• Session and log data: Date and time of login and logout, pages visited, features used, session duration, and error logs generated during your visit.
• Betting and gaming activity: Game titles played, stake amounts, bet outcomes, bonus credits used, wagering progress, and withdrawal requests. This data is integral to operating a fair gaming platform and resolving any disputes.
• Transaction records: Full history of all deposits and withdrawals including amounts in BDT, timestamps, payment method used, and transaction reference numbers.
• Cookies and similar technologies: Session cookies, preference cookies, and analytical tracking data as described in detail in the Cookies section of this policy.

Information received from third parties:

• Payment confirmation data: Transaction status confirmations, reference IDs, and partial account identifiers returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard after a payment is initiated.
• Identity verification results: Pass or fail outcomes from third-party KYC services where tb777 uses an automated identity verification partner to cross-reference your submitted documents.
• Fraud and risk signals: Device fingerprint risk scores, IP reputation data, and velocity check results provided by fraud prevention partners to help tb777 protect the platform and all its players from fraudulent activity.

3. Data Sharing & Third Parties

tb777 shares personal data with third parties only where it is strictly necessary to deliver the service, comply with a legal obligation, or protect the safety and integrity of the platform. We do not sell or rent your data to any third party for their own commercial purposes. Every third-party recipient of tb777 player data is subject to a contractual obligation to handle that data securely and only for the specified purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. We share your payment account identifier and transaction amount with the relevant processor solely to execute your requested deposit or withdrawal. These providers operate under their own regulatory frameworks and privacy policies.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a player session token and account identifier to launch games within your session. They do not receive your full name, contact details, or payment information. Game providers use session data to calculate RTP and generate certified game outcomes.
• KYC and fraud prevention partners: Where tb777 uses a third-party identity verification service to process KYC documents, your submitted identification images and personal details are transmitted securely to that service. The service returns a pass or fail decision and does not retain your documents beyond the period specified in their own privacy policy.
• IT and hosting infrastructure: tb777's platform is hosted on secure servers. Our infrastructure partners have access to server-level data as part of their hosting and maintenance obligations and are contractually bound to treat all data as confidential.
• Legal and regulatory authorities: Where tb777 is required by applicable law, court order, or regulatory instruction to disclose player data, we will comply with that requirement. Where legally permitted, tb777 will notify the affected player of such a disclosure request before responding.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving tb777, player data may be transferred to the acquiring entity as part of the transaction. In such cases, tb777 will notify affected players via their registered email address and the new entity will be bound by the same data protection obligations as set out in this policy.

5. Data Security

tb777 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online service can guarantee absolute security, the measures described below represent our commitment to maintaining the highest practically achievable level of protection.

• Transport encryption: All data transmitted between your device and tb777 uses 256-bit SSL/TLS encryption. The padlock icon in your browser confirms that your connection is encrypted at all times when using the platform.
• Data storage encryption: Sensitive data fields — including identity document images, payment account identifiers, and KYC records — are encrypted at rest using AES-256 encryption on tb777's servers.
• Access controls: Access to player personal data is restricted to authorised tb777 staff on a strict need-to-know basis. All internal access is logged and audited. Staff with access to sensitive data undergo background checks and regular security training.
• Password security: Player passwords are hashed using a strong one-way hashing algorithm. tb777 never stores or transmits your password in plain text. Our support team cannot view your password and will never ask for it.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security. 2FA is available via SMS to your registered mobile number.
• Security incident response: tb777 maintains a documented incident response plan. In the event of a data breach that is likely to result in a risk to player rights, tb777 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, detailing the nature of the incident and the remediation steps taken.

7. Your Privacy Rights

As a tb777 player, you hold meaningful rights over your personal data. The following rights are available to all registered players and can be exercised by contacting our support team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address for identity verification purposes.

• Right of access: You may request a copy of all personal data tb777 holds about you. We will provide this in a structured, readable format within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your name or date of birth, KYC re-verification may be required to process the correction.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to limitations where tb777 is legally required to retain the data — for example, transaction records and identity documents must be retained for the periods set out in the Data Retention section. Where erasure is not possible in full, tb777 will delete all data that is not subject to a retention obligation and will confirm what remains and why.
• Right to restrict processing: You may request that tb777 restrict the processing of your personal data to storage only — for example, while a dispute is pending. During a restriction period, tb777 will not use the relevant data for any other purpose.
• Right to data portability: You may request that tb777 provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider. This right applies to data that you provided directly and that tb777 processes on the basis of your consent or for contract performance.
• Right to object: You may object to tb777's processing of your personal data where that processing is based on legitimate interest — for example, analytical processing or fraud monitoring. tb777 will assess the objection and cease processing unless there are compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (primarily promotional communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of any processing that took place before withdrawal.
• Right not to be subject to solely automated decisions: Where tb777 makes a significant decision about your account using solely automated means — such as an automated fraud flag triggering account suspension — you have the right to request human review of that decision by contacting support.