b477 Privacy Policy
— Your Data, Your Rights
At b477, the privacy and security of your personal data is a responsibility we take seriously. This Privacy Policy explains in clear, formal terms what personal information b477 collects, why we collect it, how we use and protect it, who we may share it with, and what rights you hold as a data subject under our framework.
Section 1
Information We Collect
b477 collects personal data from users in order to operate a secure, compliant, and personalised online casino and sports betting experience for players in Bangladesh and other supported markets. We collect information through multiple touchpoints: during account registration, during the identity verification (KYC) process, through your ongoing use of the platform, through payment transactions, and through your communications with the b477 support team.
The categories of personal information b477 may collect about you are described in the table below. This list is not exhaustive — additional data may be collected where required by law or where necessary to deliver a specific platform feature.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Registration form, KYC submission |
| Contact Data | Email address, phone number, residential address | Registration form, account settings |
| Verification Documents | National ID, passport, utility bill, bank statement | KYC process |
| Financial Data | bKash / Nagad / Rocket account numbers, transaction history, deposit and withdrawal amounts | Payment processing |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automatic collection via platform |
| Behavioural Data | Games played, wager amounts, session duration, bonus usage, navigation patterns | Platform activity tracking |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limits set, time-out activations | Responsible gaming tools |
b477 does not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has submitted personal data to b477, please contact us immediately at [email protected].
Section 2
How We Use Your Information
b477 uses the personal data we collect for specific, lawful purposes. We do not use your data in ways that are inconsistent with the purposes described at the time of collection. The primary purposes for which b477 processes your personal data are as follows:
Account Management
We use your identity and contact data to create and maintain your b477 account, verify your identity, manage your login credentials, and communicate important account-related updates to you.
Payment Processing
Financial data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, verify payment source ownership, and maintain accurate transaction records.
Fraud Prevention
Technical and behavioural data helps us detect and prevent fraudulent activity, unauthorised account access, money laundering, and bonus abuse across the b477 platform.
Platform Improvement
Aggregated and anonymised behavioural data is used to improve game offerings, optimise the user interface, personalise the platform experience, and develop new features that serve the needs of Bangladesh market players.
Responsible Gaming
Responsible gaming data — including self-exclusion status, deposit limits, and time-out periods — is processed to ensure we honour your preferences and fulfil our duty of care obligations to all players.
Marketing Communications
With your explicit consent, we may use your contact data to send you promotional offers, bonus notifications, and seasonal campaigns relevant to the Bangladesh market. You may withdraw consent at any time.
b477 processes your personal data on one or more of the following legal bases: (a) performance of a contract — processing is necessary to deliver the services you have requested; (b) legal obligation — processing is required to comply with applicable laws, including anti-money laundering regulations and responsible gaming requirements; (c) legitimate interests — processing supports the operational, security, and fraud prevention functions of b477 where those interests are not overridden by your rights; and (d) consent — where you have provided explicit consent for a specific use, such as receiving marketing communications.
Section 3
Sharing and Disclosure of Data
b477 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. We share your data only in the specific, limited circumstances set out below, and only to the extent necessary to fulfil the stated purpose.
- Game Providers: Platform data necessary to deliver gameplay (such as your player ID and session token) may be shared with certified game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, solely for the purpose of delivering their games to you on the b477 platform.
- Payment Service Providers: Financial transaction data is shared with payment processors including bKash, Nagad, Rocket, Upay, and participating banks to facilitate deposits and withdrawals. These providers are contractually bound to use your data only for transaction processing purposes.
- Identity Verification Partners: Where required for KYC compliance, your identity documents and personal details may be shared with certified third-party identity verification service providers. All such providers operate under strict data processing agreements with b477.
- Regulatory and Law Enforcement Authorities: b477 may be required by law to disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies. Such disclosures will only be made where legally compelled and to the minimum extent required.
- Fraud Prevention Agencies: Technical and transactional data may be shared with fraud detection and prevention services to protect the platform and its users from financial crime and account misuse.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of b477's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.
- Professional Advisors: b477 may share limited personal data with legal, financial, or auditing advisors under strict confidentiality obligations where necessary to obtain professional advice.
b477 does not transfer your personal data to countries or territories that do not provide an adequate level of data protection without first implementing appropriate safeguards, such as standard contractual clauses or equivalent contractual protections. Where data is processed outside of Bangladesh, b477 takes reasonable steps to ensure that equivalent protections are in place.
Section 4
Cookies and Tracking Technologies
b477 uses cookies and similar tracking technologies on the platform to ensure core functionality, enhance your experience, analyse platform performance, and support fraud prevention. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not grant access to your device or any personal information stored on it beyond what you choose to share with us.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the platform to function — session management, login authentication, security tokens, fraud prevention signals | Session / up to 24 hours |
| Functional | Remembers your preferences such as language setting, preferred deposit method, and responsible gaming limits | Up to 12 months |
| Analytical | Collects aggregated, anonymised data about how users navigate and interact with b477, used to improve platform performance and UX | Up to 24 months |
| Marketing | Used to deliver relevant promotional content and measure the effectiveness of b477 campaigns, only active with your explicit consent | Up to 12 months |
You may control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair core platform functionality, including your ability to log in and conduct transactions. Disabling functional cookies may affect your personalised settings. Analytical and marketing cookies can be disabled without materially affecting your access to b477's core features.
b477 may also use web beacons (also known as pixel tags or clear GIFs) in emails and on certain platform pages to measure the effectiveness of our communications and monitor platform usage patterns. The data collected through web beacons is aggregated and does not individually identify you.
Section 5
Data Retention and Storage
b477 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The retention periods set out below reflect both our operational needs and our compliance obligations, including anti-money laundering record-keeping requirements.
- Active Account Data: Personal and financial data associated with an active b477 account is retained for the duration of the account relationship and for a minimum of 5 years following permanent account closure.
- Transaction Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping obligations.
- KYC Documentation: Identity verification documents (national ID, passport, proof of address) are retained for a minimum of 5 years following account closure, and may be retained for longer where required by applicable law.
- Responsible Gaming Records: Self-exclusion records, deposit limit settings, and time-out activations are retained indefinitely to ensure that re-registration safeguards can be applied if you return to the platform after a self-exclusion period.
- Support Communications: Support chat transcripts and email correspondence are retained for up to 3 years from the date of the communication, unless a longer retention period is required by the circumstances of the case.
- Marketing Consent Records: Records of your consent to receive marketing communications, and any subsequent withdrawal of that consent, are retained for as long as they remain relevant to our compliance obligations.
- Technical and Log Data: Server logs, IP address records, and session data are retained for up to 12 months for fraud prevention and security monitoring purposes, and may be retained longer where an active investigation is ongoing.
When personal data is no longer required and no legal basis for further retention exists, b477 will delete or anonymise it using secure disposal methods appropriate to the sensitivity of the data category. Anonymised or aggregated data that can no longer identify you individually may be retained indefinitely for statistical and analytical purposes.
All personal data held by b477 is stored on secure servers. b477 employs physical, technical, and administrative safeguards to protect stored data against unauthorised access, alteration, disclosure, or destruction. Please refer to Section 7 of this Policy for a detailed description of our security measures.
Section 6
Your Privacy Rights
As a data subject, you hold a number of rights in respect of your personal data held by b477. b477 is committed to facilitating the exercise of these rights in a timely and transparent manner. Requests relating to your data rights should be submitted in writing to [email protected] with sufficient detail to allow b477 to identify your account and the specific right you wish to exercise.
Right of Access
You have the right to request a copy of the personal data b477 holds about you, along with information about how that data is being used. We will provide a response within 30 days of receiving a valid request.
Right to Rectification
If the personal data b477 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Some corrections may require supporting documentation to verify the amended information.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to our legal retention obligations.
Right to Restrict Processing
In certain circumstances, you may request that b477 restrict the processing of your personal data — for example, while the accuracy of the data is being contested, or while an objection to processing is under consideration.
Right to Data Portability
Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to b477's ability to demonstrate compelling grounds that override your interests.
b477 will endeavour to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case b477 will notify you of the extension and the reasons for it within the initial 30-day window. There is no fee for submitting a data rights request, although b477 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in their scope.
Section 7
Security Measures
The security of your personal data is of paramount importance to b477. We implement a layered security architecture designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure at every stage of its lifecycle on the b477 platform.
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the b477 platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages, payment flows, and API communications on the platform.
- Two-Factor Authentication (2FA): b477 offers and strongly recommends two-factor authentication via SMS OTP for all player accounts. 2FA provides an additional layer of protection against unauthorised login attempts even if your password is compromised.
- Encrypted Data Storage: Sensitive personal and financial data stored within b477's systems is encrypted at rest using AES-256 encryption. Payment credentials are tokenised and never stored in plain text.
- Access Controls: Access to personal data within b477's internal systems is strictly limited to authorised personnel on a need-to-know basis. All internal data access is logged and subject to regular audit review.
- Intrusion Detection and Monitoring: b477's infrastructure is monitored continuously using automated intrusion detection systems that flag and respond to unusual access patterns, brute force attempts, and other potential security threats in real time.
- Regular Security Assessments: b477 conducts periodic vulnerability assessments and penetration testing to proactively identify and remediate potential weaknesses in its security infrastructure before they can be exploited.
- Data Breach Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights, b477 will notify affected individuals without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken to address it.
While b477 takes every reasonable precaution to protect your personal data, no security system is entirely impenetrable. You also play a critical role in the security of your account — b477 strongly encourages you to use a strong, unique password for your b477 account, enable two-factor authentication, avoid accessing your account on shared or public devices, and log out of your account after each session. If you suspect that your account has been compromised, contact b477 support immediately at [email protected].
Section 8
Updates to This Policy
b477 reserves the right to update, modify, or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform features, or business practices. The most current version of this Privacy Policy will always be published at b477.app/privacy-policy, and the effective date at the top of this document will be updated to reflect the date of the most recent revision.
Where a change to this Privacy Policy is material — meaning it significantly alters how we process your personal data or affects your rights as a data subject — b477 will notify registered users via the email address associated with their account prior to the change taking effect. For non-material changes, such as clarifications of existing language or minor administrative updates, publication of the revised Policy on the b477 website will constitute sufficient notice.
Your continued use of the b477 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated terms. If you do not agree with any change to this Privacy Policy, you should cease using the platform and may request account closure by contacting [email protected].
b477 is an internationally operated platform and this Privacy Policy is written in English. In the event of any conflict or inconsistency between this English-language version and any translated version, the English version shall prevail. This Privacy Policy was last reviewed and updated in January 2026 and supersedes all previous versions.
Ready to Play at b477?
Now that you understand how b477 protects your personal data, explore our full range of games and sports betting options — from cricket and slots to live casino tables. Your privacy and security are in safe hands.