bm777 Privacy Policy — Your Data, Our Responsibility

1Information We Collect

bm777 collects personal information from you in connection with your registration and ongoing use of the Platform. The categories of personal data we collect include the following.

• Identity data: your full name, date of birth, and any government-issued identity document details provided during KYC verification (such as a National Identity Card or passport number).
• Contact data: your mobile phone number and email address. These are used for account verification, support communications, and — where you have opted in — promotional messages.
• Financial data: transaction records including deposit amounts, withdrawal requests, payment method identifiers (e.g. the registered bKash or Nagad number used), and transaction timestamps. bm777 does not store full payment account credentials.
• Technical and usage data: your IP address, device type, operating system, browser type, session duration, pages visited, games played, bets placed, and other interaction data collected automatically when you use the Platform.

2How We Use Your Information

bm777 uses the personal data we collect for the following purposes. We only process your data for purposes that are compatible with the reason it was collected.

• Account management: to create and maintain your bm777 account, verify your identity during KYC, process your deposits and withdrawals, and provide you with access to all features of the Platform.
• Customer support: to respond to your queries, resolve disputes, investigate complaints, and communicate with you about your account or any transactions.
• Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, fraud prevention requirements, responsible gaming obligations, and any applicable legal or regulatory requirements.
• Platform improvement: to analyse usage patterns, diagnose technical issues, improve the performance and design of the Platform, and develop new features or products that better serve players in Bangladesh.

3Legal Basis for Processing

bm777 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific type of processing involved.

• Contract performance: processing that is necessary to fulfil our contractual obligations to you — including account creation, payment processing, and access to betting and casino services.
• Legal obligation: processing that is required by applicable law, including AML obligations, age verification, fraud detection, and co-operation with lawful requests from regulatory authorities.
• Legitimate interests: processing that is necessary for bm777's legitimate business interests — such as preventing fraud, improving Platform security, analysing usage trends, and sending transactional account notifications — provided those interests are not overridden by your rights.

4Sharing Your Information

bm777 does not sell your personal data to any third party. We may share your personal data with external parties only in the circumstances described below.

• Payment processors: we share the minimum necessary financial data with payment service providers (including bKash, Nagad, Rocket, and Upay) to process your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely.
• Game and technology providers: we share session and gameplay data with our game platform partners (such as Pragmatic Play, Evolution Gaming, and Spribe) to the extent required to deliver their games within the Platform. These providers act as data processors under our instruction.
• Regulatory and law enforcement authorities: we may disclose personal data when required to do so by applicable law, court order, or a lawful request from a regulatory or law enforcement authority.
• Business successors: in the event of a merger, acquisition, or sale of all or part of bm777's assets, personal data held by the Platform may be transferred to the successor entity. You will be notified of any such transfer in advance where reasonably practicable.

5Payment Data and Financial Privacy

bm777 treats payment and financial data with the highest level of care. All transactions processed through bKash, Nagad, Rocket, or Upay are handled according to the following data protection standards.

• bm777 does not store your full mobile financial service (MFS) account credentials, PIN numbers, or passwords. We store only the transaction reference, the registered number associated with the payment, and the transaction amount.
• All financial data is stored in encrypted form. Access to financial records within bm777 is restricted to authorised personnel only and is subject to strict access controls and audit logging.
• bm777 monitors transactions for signs of fraudulent activity, money laundering, and unusual patterns. Where suspicious activity is detected, bm777 is required by law to report the relevant information to the appropriate authorities without notifying you in advance.

6Cookies and Tracking Technologies

bm777 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be set when you access the Platform.

• Essential cookies: required for the Platform to function correctly. They enable core features such as login session management, security protections, and page-to-page navigation. These cookies cannot be disabled without disrupting your use of the Platform.
• Functional cookies: used to remember your preferences — such as language settings and interface layout — so that your experience is consistent between sessions. Disabling functional cookies may affect how certain features display.
• Analytics cookies: used to collect aggregated, anonymised data about how users interact with the Platform — such as which pages are visited most frequently and how long users spend on each page. This data helps us understand usage patterns and prioritise improvements to the Platform.

7Data Retention

bm777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide.

• Account data: retained for the duration of your active account and for a minimum of five years after account closure, in order to comply with anti-money laundering record-keeping requirements.
• Transaction data: retained for a minimum of five years from the date of each transaction. This includes deposit records, withdrawal records, and any associated payment method data.
• Technical and usage data: retained for up to 24 months from the date of collection. After this period, data is aggregated or deleted. Analytics data derived from usage logs is anonymised before retention beyond 12 months.

8Your Rights Over Your Personal Data

As a user of bm777, you have the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or at [email protected].

• Right of access: you may request a copy of the personal data bm777 holds about you. We will respond to a verified access request within 30 days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. Identity data corrections may require supporting documentation.
• Right to erasure: you may request that bm777 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations we are required to meet.
• Right to withdraw consent: where bm777 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9Security Measures

bm777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, the following protections are in place.

• All data transmitted between your browser or mobile device and the bm777 Platform is encrypted using SSL (Secure Sockets Layer) technology. This ensures that data in transit cannot be intercepted by third parties.
• Personal and financial data stored within bm777's systems is encrypted at rest. Access to production databases is restricted to a small number of authorised personnel and is subject to multi-factor authentication requirements.
• bm777 conducts regular internal security reviews of its data handling processes. In the event of a data breach that is likely to affect your rights and freedoms, bm777 will notify affected users as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

10Minors and Age Restriction

bm777 is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that a user is under the minimum age, we will immediately close their account, delete all associated personal data to the extent permitted by law, and refund any real-money balance after deducting any bonus winnings. If you believe that a minor has registered on bm777, please contact our support team immediately so that we can investigate and take appropriate action.

11Third-Party Services and Links

The bm777 Platform integrates third-party game providers and payment processors whose services are governed by their own privacy policies. bm777 is not responsible for the data practices of these third-party providers. However, we carefully vet all third-party partners before integration and require them to comply with data protection standards equivalent to those described in this Policy. We encourage you to review the privacy policies of any third-party service you use in connection with your bm777 account.

12Changes to This Privacy Policy

bm777 reserves the right to update this Privacy Policy at any time. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes are significant, we will make reasonable efforts to notify registered users via email or an in-platform notification. Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised Policy. We recommend that you review this page periodically to stay informed of any changes.

13Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bm777 handles your personal data, please contact our support team at any time via live chat on the Platform. You may also reach us by email at [email protected] — please note this address is displayed as plain text only and is not a clickable link. We aim to acknowledge all privacy-related queries within 24 hours and to resolve them fully within 14 days of receipt.