gfb77 Privacy Policy

gfb77 is Bangladesh's leading online casino and sports betting platform, operating at gfb77.io. As part of operating a regulated, real-money gaming environment, gfb77 is required to collect and process certain categories of personal data from registered players and platform visitors. This processing is necessary to verify player identities, facilitate deposits and withdrawals, prevent fraud and money laundering, deliver a personalised gaming experience, and comply with applicable legal obligations.

gfb77 is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. We do not treat data collection as a commercial asset — we treat it as a responsibility. Every data processing activity carried out by gfb77 is tied to a specific, legitimate purpose, and we do not retain data beyond the period necessary to fulfil that purpose.

This Privacy Policy applies to all personal data collected by gfb77 through the gfb77.io website, the gfb77 player dashboard, promotional communications, customer support interactions, and any other channel through which a player or visitor provides information to gfb77. By accessing or using the gfb77 platform, you acknowledge that you have read, understood, and agreed to the data practices described in this policy.

gfb77 collects the following categories of personal data from players and platform visitors. The specific data collected in each category depends on your level of engagement with the platform — for example, a visitor who does not register an account will generate less data than a fully verified, active player.

gfb77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data except where specifically required for responsible gaming self-exclusion processes, in which case such data is handled with the highest level of care and is not used for any commercial purpose.

gfb77 collects personal data through the following means:

• Direct Collection: Data you provide directly when registering your gfb77 account, completing KYC verification, making a deposit or withdrawal request, contacting support via live chat or email, or submitting any form on the gfb77 platform.
• Automated Collection: Data collected automatically when you access or use the gfb77 platform, including IP address, device identifiers, browser fingerprint, session logs, and in-platform activity logs. This data is collected via server logs, cookies, and similar tracking technologies — see Section 6 for full cookie disclosure.
• Third-Party Sources: Data received from KYC verification providers and payment processors (such as bKash, Nagad, and Rocket) to confirm the accuracy of information you have provided directly to gfb77. gfb77 may also receive fraud-screening data from third-party risk assessment services.

gfb77 does not purchase personal data lists or acquire personal data from data brokers. All data collected by gfb77 originates from your own interactions with the platform or from verified operational partners acting on gfb77's behalf.

gfb77 uses your personal data only for the following specified purposes. Each purpose is supported by a legitimate legal basis for processing:

• Account Management: To create, maintain, and manage your gfb77 player account, including processing login authentication and securing your account against unauthorised access.
• Identity Verification (KYC): To verify that you meet the age eligibility requirement of 21 years or older and that your identity is accurately represented. KYC is a legal requirement for operating a real-money gaming platform.
• Payment Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to reconcile transaction records for financial compliance purposes.
• Legal & Regulatory Compliance: To comply with anti-money laundering (AML) obligations, fraud prevention requirements, and any other legal obligations applicable to gfb77's operations, including responding to lawful requests from competent authorities.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to administer self-exclusion and deposit limit tools, and to contact players who show indicators of gambling-related harm.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated usage data in order to improve the performance, design, and game selection of the gfb77 platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Promotional Communications: To send you relevant promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time via your account notification settings or by contacting support.

gfb77 does not use automated decision-making or algorithmic profiling that produces legal or similarly significant effects on players, except where such processing is required for fraud detection or AML compliance, in which case human review is available upon request.

gfb77 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for commercial or marketing purposes. Personal data is shared only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Personal and financial data is shared with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank, solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents and personal details may be shared with third-party KYC verification services to confirm your identity and age eligibility.
• Game Providers: Pseudonymised player identifiers and gameplay data are shared with game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to facilitate game delivery, calculate results, and resolve game-related disputes.
• Fraud Prevention & Security Services: Technical data including IP addresses and device identifiers may be shared with fraud detection and cybersecurity service providers to protect the integrity of the gfb77 platform.
• Legal & Regulatory Authorities: gfb77 will disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, court order, or lawful instruction from a government body. gfb77 will notify affected players of such disclosures where legally permitted to do so.

All third parties with whom gfb77 shares personal data are required to handle that data in accordance with applicable data protection principles and are bound by contractual data processing agreements that prohibit them from using gfb77 player data for any purpose other than the specific service they provide to gfb77.

gfb77 uses cookies and similar tracking technologies on the gfb77.io website and player dashboard. Cookies are small text files placed on your device that allow gfb77 to recognise your browser across sessions, maintain your login state, and collect usage analytics. The following categories of cookies are used by gfb77:

Strictly necessary cookies cannot be disabled as they are essential for the gfb77 platform to function correctly. Functional and analytics cookies may be managed through your browser's cookie settings. Please note that disabling certain functional cookies may affect your experience on the gfb77 platform.

gfb77 does not use third-party advertising cookies or retargeting pixels. We do not participate in cross-site behavioural advertising networks.

gfb77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account, and for a minimum of 5 years following account closure, in accordance with standard AML record-keeping obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• KYC Documents: Retained for the duration of the account relationship and for 5 years post-closure, or longer if required by a specific legal obligation or ongoing investigation.
• Support Communications: Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical & Log Data: Server logs and device data retained for 12 months for security analysis purposes, then securely deleted or anonymised.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Following the expiry of the applicable retention period, personal data is securely and irreversibly deleted from gfb77's systems unless retention is required by a specific legal obligation, active legal proceeding, or regulatory investigation. Where full deletion is not immediately possible due to backup system schedules, data will be isolated from active processing until deletion can be completed.

gfb77 implements technical and organisational security measures appropriate to the sensitivity of the personal data it holds. Key security measures include:

• Transport Encryption: All data exchanged between your device and the gfb77 platform is encrypted in transit using 256-bit SSL/TLS encryption. This protects your login credentials, payment data, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data stored in gfb77's databases — including identity document records and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within gfb77's internal systems is restricted on a strict need-to-know basis. Staff with access to player data receive regular data protection training and are bound by confidentiality obligations.
• Intrusion Detection: gfb77 operates continuous monitoring of its platform infrastructure for anomalous activity, unauthorised access attempts, and security incidents.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their gfb77 accounts as an additional layer of protection against unauthorised access.

While gfb77 takes all reasonable precautions to protect your personal data, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, gfb77 will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.

As a registered player on the gfb77 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact gfb77's support team via the in-dashboard live chat or at [email protected]. gfb77 will respond to all valid data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data gfb77 holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data gfb77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as address updates, you may make changes directly within your account profile settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing on legitimate interest grounds. Please note that gfb77 may be required to retain certain data to comply with legal obligations (see Section 7), in which case erasure of that specific data cannot be fulfilled until the applicable retention period expires.
• Right to Restrict Processing: In certain circumstances — such as where you contest the accuracy of data or where processing is unlawful but you prefer restriction over deletion — you may request that gfb77 restrict the processing of your personal data.
• Right to Data Portability: Where processing is based on your consent and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interest where you believe your individual interests and rights override those of gfb77.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The gfb77 platform is strictly for adults aged 21 years and above. gfb77 does not knowingly collect personal data from individuals under the age of 21. All registration attempts undergo age verification as part of the KYC process, and accounts where the player is found to be under 21 will be immediately closed.

If you are a parent or guardian and you believe that a minor has registered an account on the gfb77 platform or has submitted personal data to gfb77, please contact our support team immediately via live chat or at [email protected]. Upon verification of your report, gfb77 will close the account and delete all associated personal data without undue delay.

gfb77 also strongly recommends that households with minors use parental control software to restrict access to online gambling platforms. Several reputable parental control tools are available that can prevent underage access to gaming and betting websites.

gfb77 operates primarily within the Bangladesh market and stores the majority of its player data on servers located in or near the Asia-Pacific region to minimise data transfer latency and align with Bangladesh Standard Time (BST, UTC+6) operational requirements.

In certain circumstances, personal data may be transferred to or accessed by third-party service providers — such as game providers, KYC verification services, or cloud infrastructure providers — whose systems may be located outside of Bangladesh. Where such transfers occur, gfb77 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those applied by gfb77.

By using the gfb77 platform, you acknowledge that your personal data may be transferred internationally as described in this section, and you consent to such transfers where they are necessary for the provision of the gfb77 service.

gfb77 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, gfb77 will update the effective date displayed at the top of this document and, where appropriate, notify registered players via the platform's in-dashboard notification system or via the email address registered to the account.

Your continued use of the gfb77 platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should stop using the platform and may request account closure as described in the gfb77 Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how gfb77 collects, uses, and protects your personal data. The current version is always available at gfb77.io/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to gfb77's handling of your personal data, please contact our support team through the following channels:

• Live Chat: Available 24/7 via the in-dashboard live chat feature. This is the fastest way to reach the gfb77 support team for data rights enquiries.
• Email: [email protected] — Please note that this email address is displayed as plain text only and is not a clickable link. Do not send sensitive identity documents as email attachments; use the secure document upload feature within your account dashboard instead.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

gfb77 aims to acknowledge all data-related written enquiries within 24 hours and to resolve them fully within 30 calendar days. For complex requests involving large volumes of data or requiring coordination with third-party processors, gfb77 will inform you of any extension to this timeframe within the initial 30-day period.