Privacy Policy
2u77 Casino & Sportsbook

The categories of personal data that 2u77 may collect from you include the following:

Identity & Registration Data: When you create a 2u77 account, we collect your full legal name, date of birth, residential address, nationality, and the email address or mobile phone number used to register. This data is essential for account creation, identity verification, and responsible gaming compliance.

KYC & Verification Documents: Before processing your first withdrawal, we require documentary evidence of your identity and address. This typically includes a government-issued photo ID (national ID card, passport, or driving licence) and a recent proof of address document (utility bill or bank statement). Where your payment method is a mobile financial service, we may also require evidence of ownership of the bKash, Nagad, or Rocket account used for deposits.

Financial & Transaction Data: We record all deposit and withdrawal transactions on your 2u77 account, including amounts in Bangladeshi Taka (৳ BDT), transaction timestamps, payment method references, and transaction status. We do not store full card numbers or mobile banking PINs — payment authentication is handled directly by the relevant payment provider.

Technical & Device Data: When you access 2u77, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and time-zone setting. This data is used for platform security, fraud detection, and performance optimisation.

Gameplay & Betting History: We maintain a full record of all bets placed, games played, casino sessions, sports markets accessed, and outcomes on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Communications Data: If you contact 2u77 support via email, live chat, or any other channel, we retain records of those interactions including the content of your messages, timestamps, and any attachments you provide. This enables us to manage your queries effectively and maintain service quality.

Marketing Preferences: If you opt in to receive promotional communications from 2u77, we store your marketing preference alongside your contact details. You may withdraw consent for marketing communications at any time by contacting [email protected].

The table below summarises the categories of data collected and the primary legal basis and purpose for each:

The personal data we collect is used for the following purposes:

• Account Management: Creating and maintaining your player account, verifying your identity, processing deposits and withdrawals, and managing your account preferences and settings.
• Platform Security & Fraud Prevention: Monitoring login activity, detecting unusual transaction patterns, preventing unauthorised account access, and investigating suspected fraud or money laundering activity.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify signs of problem gambling, enforcing self-exclusion requests, applying deposit limits, and complying with age verification obligations.
• Customer Support: Responding to your queries, resolving disputes, investigating complaints, and providing technical assistance.
• Legal & Regulatory Compliance: Fulfilling record-keeping obligations, responding to lawful requests from relevant authorities, and satisfying anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, payment reliability, and the overall user experience for players across Bangladesh.
• Promotional Communications (opt-in only): Sending you information about bonuses, promotions, seasonal campaigns, and VIP rewards — but only if you have explicitly opted in to receive such communications. You can withdraw consent at any time.

The categories of third parties with whom 2u77 may share your personal data are as follows:

Payment Service Providers: To process your deposits and withdrawals, we share the minimum necessary transaction data with our payment partners. These include mobile financial services operators (bKash, Nagad, Rocket, Upay) and partner banks (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank). Payment providers receive only the data required to authenticate and complete the specific transaction — they do not receive your full account history or gameplay data.

Game Content Providers: Casino games and live dealer tables on the 2u77 platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a player session token and game round data sufficient to operate the game. They do not receive your full name, address, payment details, or KYC documents.

Identity Verification Services: To support our KYC processes, 2u77 may use third-party identity verification service providers. These providers process the documents you submit for verification purposes and return a verification result to 2u77. Document data shared with verification providers is subject to their own privacy policies and is not retained by them beyond what is required for the verification process.

IT Infrastructure & Security Providers: 2u77 uses third-party cloud hosting, content delivery, DDoS protection, and fraud detection services to operate the platform. These providers process technical and device data as part of their infrastructure and security functions. All such providers are contractually required to process data only as instructed by 2u77 and to maintain appropriate security standards.

Law Enforcement & Regulatory Authorities: 2u77 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, or where we have reasonable grounds to believe that disclosure is necessary to prevent or investigate financial crime, fraud, or other serious offences.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of 2u77's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is processed.

A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to store certain information about your session. 2u77 uses the following categories of cookies:

What We Do Not Use: 2u77 does not use third-party advertising cookies, retargeting pixels, or any tracking technology that builds a behavioural advertising profile linked to your identity for use by external ad networks.

Managing Cookies: You can control cookie settings through your browser's privacy settings. Most browsers allow you to block or delete cookies. Please note that blocking essential session and security cookies will prevent you from logging in to your 2u77 account and will significantly impair your ability to use the platform. Blocking preference and analytics cookies will not prevent access to the platform but may affect personalisation features.

Local Storage & Similar Technologies: In addition to cookies, 2u77 may use browser local storage and session storage to maintain certain application state data during your session. This data is stored on your device only and is not transmitted to 2u77's servers independently of normal application requests.

Security Measures: 2u77 protects your personal data through a combination of technical and organisational controls including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 2u77 platform.
• Encrypted storage of passwords using industry-standard hashing algorithms — 2u77 staff cannot read your password.
• Role-based access controls limiting internal access to personal data to staff who require it for their specific job functions.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Automated monitoring for unusual login patterns, multiple failed authentication attempts, and suspicious transaction activity.
• Secure data centre facilities with physical access controls and environmental monitoring.

Your Responsibility: While 2u77 takes all reasonable steps to secure the platform, no internet-based service can guarantee absolute security. You are responsible for keeping your login credentials confidential and for using a strong, unique password for your 2u77 account. If you suspect that your account has been compromised, contact [email protected] immediately and we will take steps to secure your account.

Data Retention: 2u77 retains personal data in accordance with the following principles:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account relationship and for a minimum of 5 years from the date of the last account activity, in line with standard financial record-keeping obligations.
• Closed accounts: Following account closure, core identity and transaction records are retained for 5 years for AML compliance and dispute resolution purposes. After that period, data is securely deleted or anonymised.
• KYC documents: Identity verification documents are retained for the period required by applicable KYC and AML regulations from the date of submission.
• Customer support records: Support interaction logs are retained for 2 years from the date of the interaction.
• Marketing data: Marketing preference records and opt-in logs are retained for the duration of the account relationship plus 1 year.

Your rights in relation to the personal data that 2u77 holds about you include the following:

• Right of Access: You have the right to request a copy of all personal data that 2u77 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For certain data (such as your account email address), you can update it directly in your account settings. For other data (such as your legal name on record), contact [email protected].
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where: it is no longer necessary for the purpose it was collected; you withdraw consent (where consent was the basis for processing); or the data has been processed unlawfully. Please note that 2u77 may be required to retain certain data for legal, regulatory, or AML compliance purposes even following a deletion request — we will inform you of any such limitations in our response.
• Right to Restriction of Processing: You may request that 2u77 restrict processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while you have objected to processing based on legitimate interest.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interest. This includes the right to object to receiving direct marketing communications at any time, with immediate effect.
• Rights Related to Automated Decision-Making: Where 2u77 makes decisions about you using automated processes (for example, automated fraud scoring or bonus eligibility assessment), you have the right to request human review of such decisions.

How to Exercise Your Rights: To exercise any of the rights listed above, submit a written request to [email protected] with the subject line "Privacy Rights Request". Please include your registered account email address and a brief description of the right you wish to exercise. 2u77 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days — you will be notified if an extension is required.

2u77 reserves the right to update or amend this Privacy Policy at any time. Minor clarifications or wording improvements may be made without prior notice. Material changes — those that meaningfully affect how your personal data is collected, processed, or shared — will be communicated to registered players via the email address on their account at least 14 days before the change takes effect.

The most current version of this Privacy Policy will always be accessible at https://2u77.net/privacy-policy. The "Last Updated" date displayed in the hero section of this page and at the top of the document reflects the date of the most recent revision. We encourage you to review this page periodically to stay informed about how 2u77 protects your data.

Your continued use of the 2u77 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept an updated Privacy Policy, please contact [email protected] to arrange closure of your account before the changes take effect.

Questions About This Policy? If you have any questions, concerns, or complaints about this Privacy Policy or about how 2u77 handles your personal data, please contact us at [email protected]. Our support team is available 24/7 · BST (UTC+6) and will ensure your query is directed to the appropriate person.