Privacy Policy — How tp77 Protects Your Personal Data

1 Information We Collect

1.1 Information You Provide Directly

When you create an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in promotions on tp77, you provide us with personal information. The categories of information we collect directly from you include:

• Identity information: Full legal name, date of birth, gender, and nationality.
• Contact information: Email address, Bangladesh mobile number, and residential address (city, district).
• Verification documents: Copies of government-issued identification such as Bangladesh National Identity Card (NID), passport, or driving licence, provided during the KYC verification process.
• Financial information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details, and records of transactions including deposits, withdrawals, and bet settlements.
• Account credentials: Your chosen username and encrypted password hash. We do not store your plain-text password at any point.
• Communications: Messages, emails, and chat logs exchanged with the tp77 customer support team.

1.2 Information Collected Automatically

When you access and use the tp77 platform, certain technical and behavioural data is collected automatically through our servers, analytics tools, and cookies. This includes:

• Device information: Device type, operating system, browser type and version, screen resolution, and device language settings.
• Network information: IP address, approximate geographic location derived from IP, and internet service provider.
• Session data: Login timestamps, session duration, pages visited, features accessed, and navigation patterns within the tp77 platform.
• Betting and gaming activity: Games played, bet amounts, wagering frequency, win/loss records, bonus usage, and game provider interactions.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 4 of this Privacy Policy.

1.3 Information from Third Parties

In limited circumstances, tp77 may receive information about you from third parties. This includes identity verification data from KYC service providers used to validate the documents you submit, fraud prevention data from payment processors to protect against unauthorised transactions, and technical data from analytics partners used to understand platform performance. All third-party data sharing arrangements are governed by strict data processing agreements.

2 How We Use Your Information

tp77 processes your personal data only where there is a lawful basis for doing so. The primary purposes for which we use your information are set out in the table below:

2.1 Marketing Communications

tp77 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, cricket betting offers, and seasonal promotions (such as those tied to BPL, IPL, or T20 World Cup events). These communications are sent only where you have provided explicit consent during registration or have subsequently opted in via your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support at [email protected].

2.2 Responsible Gaming Monitoring

tp77 uses your gaming activity data — including betting frequency, session lengths, deposit patterns, and self-assessment responses — to identify potential signs of problem gambling behaviour. Where our systems flag a concern, a member of the tp77 responsible gaming team may make contact to offer support resources or to apply appropriate account safeguards. This processing is carried out in your interest and in compliance with our responsible gaming obligations.

3 Data Sharing and Third Parties

3.1 Service Providers and Data Processors

tp77 works with a limited number of trusted third-party service providers who process personal data on our behalf and strictly under our instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These parties receive only the financial data necessary to complete your transaction.
• Identity verification providers: Third-party KYC service providers who verify the authenticity of identity documents submitted by players. These providers are bound by strict confidentiality and data security obligations.
• Game providers: Certified game studios including Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, and Ezugi. These providers may receive your player session identifier and game activity data to operate game sessions. They do not receive your full identity or financial data.
• Analytics providers: Platform performance and user behaviour analytics tools that help us understand how the tp77 platform is used. Analytics data is processed in aggregated or pseudonymised form wherever possible.
• Customer support platforms: Tools used to manage and respond to support tickets and live chat interactions.

All third-party service providers engaged by tp77 are required to enter into data processing agreements that obligate them to process your personal data only as instructed by tp77, to maintain appropriate security measures, and to assist tp77 in meeting its data protection obligations.

3.2 Legal Disclosures

tp77 may be required to disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where such disclosure is required by applicable law. In such circumstances, tp77 will disclose only the minimum amount of data required to satisfy the legal obligation and will, where legally permitted to do so, notify the affected player of the disclosure.

3.3 No Sale of Personal Data

tp77 does not sell, rent, lease, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing agencies. Your personal information is never used to build third-party advertising profiles or sold to any commercial entity for any purpose.

4 Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by the tp77 platform when you visit. They allow tp77 to recognise your device across sessions, remember your preferences, keep you logged in securely, and understand how you navigate and use the platform. In addition to cookies, tp77 may use similar technologies such as web beacons, pixel tags, and local storage objects for comparable purposes.

4.2 Types of Cookies Used by tp77

• Strictly necessary cookies: These are essential for the tp77 platform to function. They enable you to log in, navigate between pages, and complete transactions securely. These cookies cannot be disabled without impairing core platform functionality.
• Functional cookies: These cookies remember your preferences such as your preferred language, display settings, and last-used payment method, so you do not need to re-enter these details on each visit.
• Analytics cookies: These cookies collect information about how you and other users interact with the tp77 platform, which pages are most visited, and where errors occur. This data is used in aggregated form to improve platform performance and user experience.
• Session security cookies: Short-lived cookies used to maintain the security of your active session and protect against cross-site request forgery (CSRF) attacks. These expire immediately when your session ends.

4.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to block cookies, delete existing cookies, or receive notifications when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from accessing the tp77 platform. Instructions for managing cookies in popular browsers are available in your browser's help documentation. tp77 does not use third-party advertising cookies or behavioural tracking cookies for external retargeting purposes.

5 Data Security Measures

5.1 Technical Security Controls

tp77 implements a comprehensive set of technical security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These include:

• Encryption in transit: All data transmitted between your device and tp77 servers is encrypted using TLS 1.3, providing 256-bit SSL protection. This prevents interception of data during transmission over the internet.
• Encryption at rest: Personal data stored in tp77 databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated regularly.
• Password security: User passwords are never stored in plain text. Passwords are hashed using industry-standard cryptographic hashing algorithms with unique per-account salts.
• Access controls: Access to personal data within tp77's systems is restricted on a strict need-to-know basis. Staff access is controlled via role-based access controls, multi-factor authentication, and audit logging.
• Intrusion detection: tp77 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Vulnerability management: The tp77 platform undergoes regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.

5.2 Organisational Security Measures

In addition to technical controls, tp77 maintains organisational policies and procedures designed to protect your personal data. All staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations. Data access is logged and audited regularly. tp77 maintains an incident response plan to ensure that any personal data breach is identified, contained, and reported to affected individuals promptly.

5.3 Your Role in Security

While tp77 takes every reasonable measure to protect your data, you also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your tp77 login credentials, using a strong and unique password, logging out of your account when using shared devices, and notifying tp77 immediately if you suspect any unauthorised access to your account.

6 Data Retention

6.1 Retention Periods

tp77 retains your personal data for as long as your account is active and for a period thereafter as required to fulfil the purposes set out in this Privacy Policy or as required by applicable legal, regulatory, or contractual obligations. Specific retention periods that apply to different categories of data are set out below:

6.2 Deletion and Anonymisation

When the applicable retention period expires, tp77 will either securely delete your personal data or anonymise it such that it can no longer be attributed to you as an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes. Secure deletion processes applied by tp77 ensure that deleted data cannot be recovered or reconstructed.

7 Your Privacy Rights

As a tp77 player, you have a number of rights in relation to the personal data we hold about you. tp77 is committed to honouring these rights and to responding to all legitimate requests within 30 days of receipt. The rights available to you are described below:

7.1 Right of Access

You have the right to request a copy of the personal data that tp77 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receipt of a verified request, tp77 will provide you with a summary of the personal data held, the purposes for which it is processed, and the categories of third parties with whom it has been shared.

7.2 Right to Rectification

If the personal data tp77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered email address or contact number, you may update these directly in your account settings. For identity or KYC data, please contact the support team at [email protected].

7.3 Right to Erasure

In certain circumstances, you have the right to request that tp77 delete your personal data. This right applies where the data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been unlawfully processed. Please note that this right is subject to override by legal retention obligations — see Section 6 for applicable retention periods.

7.4 Right to Data Portability

Where tp77 processes your personal data on the basis of consent or contract performance, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that tp77 transmit this data directly to another data controller where technically feasible.

7.5 Right to Restrict Processing

You have the right to request that tp77 restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint about our processing is under investigation. Where processing is restricted, tp77 will continue to store the data but will not process it further until the restriction is lifted.

7.6 Right to Object

You have the right to object to tp77's processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming monitoring purposes. You also have an unconditional right to object to the use of your personal data for direct marketing purposes, in which case your data will no longer be used for that purpose.

7.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to tp77 at [email protected] with the subject line "Privacy Rights Request". Please include your registered email address and a description of the right you wish to exercise. tp77 may request additional information to verify your identity before processing the request. We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

8 Contact and Data Enquiries

8.1 How to Contact tp77 About Privacy

If you have any questions, concerns, or complaints about how tp77 collects, uses, or protects your personal data, or if you wish to exercise any of the privacy rights described in Section 7, please contact the tp77 data protection team in writing:

• Email: [email protected] (please include "Privacy Enquiry" or "Data Rights Request" in the subject line)
• Response target: Acknowledgement within 5 business days; full written response within 30 calendar days (Bangladesh Standard Time, UTC+6)

8.2 Updates to This Privacy Policy

tp77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform. Where changes are material, tp77 will notify registered players by email to their registered address at least 7 days before the updated policy takes effect. The "Last Updated" date at the top of this document indicates when the current version became effective. We encourage you to review this policy periodically.

8.3 Children's Privacy

The tp77 platform is strictly for adults aged 18 and above. tp77 does not knowingly collect personal data from individuals under the age of 18. If tp77 becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be closed. If you believe that a person under 18 has registered on tp77, please notify us immediately at [email protected].