277bed Privacy Policy

1. Introduction

277bed ("we", "us", "our") operates the online casino and sports betting platform accessible at https://277bed.vip (the "Platform"). In the course of providing Platform services to players and visitors in Bangladesh and other eligible jurisdictions, 277bed collects and processes certain personal data. This Privacy Policy sets out, in clear and precise terms, what data we collect, why we collect it, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it.

This policy applies to all personal data collected through the 277bed website, mobile-optimised browser experience, customer support channels, and any associated communications. It should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy, both of which form part of your agreement with 277bed.

277bed is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We apply the principle of data minimisation — collecting only what is genuinely necessary — and the principle of purpose limitation — using collected data only for the purposes for which it was collected.

2. Data We Collect

277bed collects the following categories of personal data from players and visitors:

2.1 Identity and Registration Data

• Full legal name as it appears on official identification documents
• Date of birth (used to verify the 18+ age requirement)
• Gender (optional, collected during registration)
• Bangladesh National Identity Card (NID) number or passport number
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Profile username chosen at registration

2.2 Contact Data

• Mobile phone number (required; used for OTP two-factor authentication and account notifications)
• Email address (required; used for account correspondence and, where opted in, promotional communications)

2.3 Financial and Payment Data

• bKash, Nagad, Rocket, or Upay wallet numbers used for deposits and withdrawals
• Bank account number and bank name (for bank transfer transactions via BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank, or others)
• Transaction history, deposit amounts, withdrawal amounts, and payment method used per transaction
• Card details (last four digits only) where Visa or Mastercard is used; full card numbers are never stored by 277bed

2.4 Identity Verification (KYC) Documents

• Scanned or photographed copies of national identity documents (NID, passport, birth certificate)
• Proof of address documents where required during enhanced verification
• Selfie or live photo submitted during identity verification, where required

2.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and session duration
• Pages visited, games played, bets placed, and in-platform navigation patterns
• Referring URL (the page from which you arrived at 277bed)

2.6 Communications Data

• Records of live chat conversations, support ticket exchanges, and email correspondence with the 277bed support team
• Dispute records and complaint history
• Responsible gaming self-assessment responses, where submitted voluntarily

3. How We Collect Your Data

277bed collects personal data through the following means:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, making deposits or withdrawals, completing your account profile, or contacting the support team.
• Automated collection: Technical data collected automatically when you access the 277bed website, including IP address, device data, and session data via server logs and analytics tools.
• Cookies and similar technologies: Data collected via cookies, local storage, and session tokens as described in Section 7 of this policy.
• Payment processors: Confirmation data relayed by bKash, Nagad, Rocket, Upay, and bank payment gateways following a transaction. 277bed receives confirmation and reference data only; full payment credentials are handled by the payment processor and are not stored on 277bed servers.
• Identity verification providers: Where 277bed uses a third-party KYC verification service to authenticate identity documents, that provider returns a verification result and confidence score to 277bed. The underlying document image may be processed by that provider under their own privacy framework.

4. How We Use Your Data

277bed uses the personal data it collects for the following specific purposes:

Purpose	Data Categories Used
Account registration and management	Identity data, contact data
Age verification (18+ compliance)	Date of birth, KYC documents
Identity verification (KYC / AML)	Identity data, KYC documents, financial data
Processing deposits and withdrawals	Financial data, identity data
Fraud prevention and security monitoring	Technical data, financial data, identity data
Customer support and dispute resolution	Communications data, identity data, financial data
Responsible gaming monitoring and tools	Usage data, communications data, financial data
Platform performance analytics (anonymised)	Technical data, usage data (aggregated)
Marketing communications (opted-in players only)	Contact data, usage data
Legal and regulatory compliance	All categories as required by law

5. Legal Basis for Processing

277bed processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, age verification requirements, and tax record-keeping duties.
• Legitimate interests: Processing carried out in pursuit of 277bed's legitimate business interests, including fraud prevention, platform security, and platform performance analysis, provided those interests are not overridden by your data protection rights.
• Consent: Processing for which we have obtained your explicit consent, specifically marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Third Parties

6.1 Categories of Recipients

277bed shares personal data only with the following categories of trusted third parties, and only to the extent necessary for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank payment gateway operators, who receive the data required to execute your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC and AML screening services that process identity document data to produce a verification result for 277bed.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios. These providers receive a player session token necessary to load games but do not receive your full personal profile.
• Customer support platform providers: The technology provider operating our live chat and ticketing system, which processes support conversation data on our behalf under a data processing agreement.
• IT infrastructure and hosting providers: Secure cloud hosting providers that store platform data in encrypted form on our behalf under contractual data protection obligations.
• Regulatory and law enforcement bodies: Where 277bed is legally required to disclose data in response to a valid legal request, court order, or regulatory inquiry, we will comply with that obligation after verifying its legitimacy.

6.2 No Data Sales

277bed does not sell, rent, lease, or otherwise transfer your personal data to any third party for that party's own commercial or marketing purposes. All third parties with whom data is shared are contractually bound to use it only for the specific purpose for which it was disclosed and to protect it to a standard at least equivalent to that applied by 277bed.

7. Cookies and Tracking Technologies

277bed uses cookies and similar browser-based technologies on the 277bed.vip website. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and collect anonymised usage statistics.

7.1 Types of Cookies Used

• Essential cookies: Strictly necessary for the platform to operate. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings and interface customisation choices across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform — which pages are most visited, how long sessions last, and where players encounter errors. This data is used solely to improve platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised login attempts.

7.2 Cookie Management

You may manage or delete cookies through your browser settings at any time. Disabling essential cookies will impair or prevent your ability to log in to and use the 277bed platform. Disabling analytics cookies will not affect your ability to use the platform but will prevent your session data from contributing to platform improvement analytics.

8. Data Security

277bed implements a multi-layered security framework to protect the personal data it holds against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between the player's device and 277bed servers
• AES-256 encryption for sensitive data stored at rest in the 277bed database
• SMS OTP two-factor authentication available to all registered players
• Role-based access controls ensuring that 277bed staff can access personal data only to the extent required by their specific job function
• Regular internal security audits and penetration testing of the platform infrastructure
• Incident response procedures to detect, contain, and notify affected parties of any data security breach in a timely manner

While 277bed takes all reasonable technical and organisational measures to protect your data, no digital platform can guarantee absolute security. In the event of a data breach affecting your personal data, 277bed will notify affected players without undue delay and take all necessary steps to mitigate the impact.

9. Data Retention

277bed retains personal data for as long as is necessary for the purpose for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the full duration of the player's active account relationship with 277bed.
• Closed account data: Following account closure, player identity data, transaction records, and KYC documents are retained for a minimum of 5 years to comply with anti-money-laundering and responsible gaming record-keeping requirements.
• Customer support records: Support conversation records are retained for 2 years from the date of the last interaction to support dispute resolution and quality assurance.
• Marketing data: Email addresses and communication preferences retained until opt-out or account deletion, whichever comes first.
• Technical and log data: Server logs and session data retained for 12 months for security monitoring and fraud investigation purposes, then automatically purged.

On expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual player.

10. Your Data Rights

As a 277bed player, you have the following rights in relation to your personal data, exercisable by contacting the 277bed support team:

• Right of access: You may request a copy of the personal data 277bed holds about you at any time. 277bed will respond to verified access requests within 30 days.
• Right to rectification: If any personal data 277bed holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support or update your information directly in the account settings panel.
• Right to erasure: You may request deletion of your personal data. This right is subject to 277bed's legal retention obligations — data required by law to be retained cannot be deleted on request, but all other data will be removed within 30 days of a verified request.
• Right to restrict processing: You may request that 277bed limits its processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for fraud prevention purposes, where you have grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time with immediate effect on future processing.
• Right to data portability: You may request that 277bed provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

11. Children's Privacy

The 277bed Platform is strictly for persons aged 18 years and above. 277bed does not knowingly collect, process, or store personal data belonging to individuals under the age of 18. If 277bed becomes aware that a registered account belongs to a player under the age of 18, that account will be immediately suspended, the player's data will be deleted (subject to legal retention obligations for fraud records), and the matter will be escalated to 277bed's responsible gaming team.

If you are a parent or guardian and believe that a minor in your care has registered an account on 277bed, please contact us immediately at [email protected] so that we can take the necessary action promptly.

12. Third-Party Links

The 277bed platform does not contain links to external third-party websites. Game content is delivered within the 277bed platform environment via embedded game sessions provided by licensed studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others). Each game provider operates under its own privacy framework for data processed within their game engine. 277bed is not responsible for the privacy practices of third-party game content providers in relation to data processed within their game software environments.

13. Changes to This Privacy Policy

277bed may update this Privacy Policy from time to time to reflect changes in platform operations, applicable law, or industry best practice. When material changes are made, registered players will be notified via an in-platform notification and, where appropriate, via the email address registered on their account. The effective date of the current version of this policy is displayed at the top of this page.

Continued use of the 277bed platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with a revised policy, you should contact support to close your account before the updated policy takes effect.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights, please contact the 277bed privacy team using the details below:

• Email: [email protected]
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Support hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Response time: Acknowledgement within 5 business days; resolution within 30 days for formal data rights requests