ih77 Privacy Policy

ih77 collects personal data from you in several ways: directly through the account registration process, through your ongoing use of the ih77 platform, through KYC verification submissions, through payment transactions, and automatically through technical systems that record how the platform is accessed and used. The categories of personal data ih77 collects are described below.

1.1 Registration and Account Data

When you create an ih77 account, we collect the following information you provide directly:

• Full legal name
• Date of birth
• Residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other)
• Email address
• Mobile phone number
• Chosen username and encrypted password (passwords are hashed; ih77 never stores plaintext passwords)
• Preferred currency (Bangladeshi Taka, BDT)

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, ih77 collects the following verification documents:

• A scanned copy or photograph of a government-issued photo ID — Bangladesh National ID (NID), passport, or driving licence
• Proof of residential address (e.g., utility bill, bank statement, or official government correspondence dated within the past three months)
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket account showing the registered mobile number that matches your ih77 registration details)

KYC documents are processed securely by ih77's compliance team. Copies are stored in encrypted form in ih77's secure document management system and are not shared with third parties except where required by applicable anti-money laundering (AML) regulations or law enforcement orders.

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, ih77 records the following transaction data:

• Payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank)
• Transaction amount in BDT
• Transaction reference number provided by the payment processor
• Date and time of the transaction (Bangladesh Standard Time, UTC+6)
• Transaction status (pending, completed, failed, reversed)

ih77 does not store full card numbers. Card payment data processed via Visa or Mastercard is handled by a PCI-DSS compliant payment processor. ih77 retains only a masked card reference (e.g., last four digits) sufficient to identify the payment method for withdrawal routing purposes.

1.4 Gameplay and Betting Activity Data

ih77 records a complete log of your betting and gaming activity on the platform, including:

• Game sessions — game title, provider (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Spribe), session start and end times, and session duration
• Individual bet records — market or game round ID, stake amount, odds or game outcome, settlement result, and net profit or loss
• Bonus claims and wagering requirement progress
• In-play and sports betting market selections

This data is used to calculate your account balance, settle disputes, detect unusual betting patterns for fraud and AML purposes, and provide you with account transaction history.

1.5 Technical and Device Data

ih77's platform automatically collects the following technical data when you access the site:

• IP address
• Device type (desktop, mobile, tablet), operating system, and browser version
• Pages visited on ih77.bio, time spent on each page, and navigation path through the site
• Referral source (the URL from which you arrived at ih77.bio, if applicable)
• Cookie identifiers (see Section 4 for full details)

1.6 Customer Support Communications

When you contact ih77 via live chat or email, ih77 retains a full record of the conversation, including the date and time, the nature of your query, and all messages exchanged. These records are used to resolve disputes, train support staff, and maintain an audit trail of account-related decisions.

ih77 uses the personal data it collects for the following purposes. For each purpose, the legal basis for processing is identified.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, email, mobile number	Performance of contract
Identity verification (KYC / AML)	KYC documents, NID, address proof	Legal obligation
Processing deposits and withdrawals	Financial transaction data, payment method details	Performance of contract
Fraud detection and prevention	IP address, device data, betting activity, transaction data	Legitimate interest
Responsible gaming monitoring	Betting activity, session data, deposit history	Legitimate interest / Legal obligation
Customer support and dispute resolution	Support communications, account data, bet records	Performance of contract / Legitimate interest
Platform analytics and improvement	Technical data, page visit data (anonymised where possible)	Legitimate interest
Marketing communications (opt-in only)	Email address, betting preferences	Consent

2.1 Marketing Communications

ih77 will only send you promotional emails, bonus notifications, or personalised offers if you have explicitly opted in to receive marketing communications at the time of registration or subsequently updated your communication preferences in Account Settings. You may withdraw consent for marketing communications at any time by updating your Account Settings or by contacting ih77 support via live chat. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

2.2 Automated Decision-Making

ih77 uses automated systems to screen accounts for fraud indicators, unusual betting patterns, and AML risk factors. Where an automated system flags an account for review, a trained ih77 compliance team member will conduct a manual review before any account restriction is applied. ih77 does not make final account closure or fund withholding decisions based solely on automated processing without human oversight.

ih77 shares personal data with third parties only in the limited circumstances described below. In all cases, ih77 applies contractual data protection obligations to third-party processors to ensure that your data is handled with the same standard of care that ih77 applies internally.

3.1 Payment Processors

To process your deposits and withdrawals, ih77 shares the minimum necessary transaction data with the relevant payment service provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, or participating Bangladeshi banks. Payment processors receive only the data required to execute the transaction (e.g., mobile number for bKash/Nagad transfers, masked card reference for card transactions). Payment processors are not permitted to use this data for any purpose beyond completing the transaction.

3.2 Game Providers

Third-party game providers whose titles are hosted on the ih77 platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a session token and anonymised player identifier when you launch one of their games. Game providers do not receive your name, email address, or payment details. Game round results are transmitted back to ih77 to update your account balance. Game providers are required under their licensing agreements with ih77 to maintain the confidentiality of session data and not to use it for their own marketing purposes.

3.3 Identity Verification Services

ih77 may use a third-party identity verification service to assist with KYC document review. Where such a service is used, the KYC documents you upload are securely transmitted to the verification provider under a data processing agreement. The provider processes the documents solely for the purpose of confirming your identity on ih77's behalf and is not permitted to retain your documents or use them for any other purpose.

3.4 Legal and Regulatory Disclosure

ih77 may be required by applicable law, court order, or regulatory authority to disclose personal data relating to specific account holders. In such cases, ih77 will disclose only the data specifically required by the legal instrument and will, where legally permissible, notify the affected account holder of the disclosure request before complying.

3.5 Business Transfers

In the event that ih77 undergoes a merger, acquisition, or sale of all or a substantial part of its business assets, personal data held by ih77 may be transferred to the acquiring entity as part of the transaction. In such circumstances, ih77 will notify registered users via their registered email address before their personal data is transferred and will ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this Privacy Policy.

ih77 uses cookies and similar browser-based technologies to enable essential platform functionality and — where you have provided consent — to collect anonymised analytics data to help improve the ih77 platform. This section explains what cookies ih77 uses and how you can manage your cookie preferences.

4.1 Essential Cookies

Essential cookies are required for the ih77 platform to function correctly and cannot be disabled without breaking core platform features. These include:

• Session cookies: Maintain your login state while you navigate the platform. These are deleted automatically when you close your browser.
• Security cookies: Protect against cross-site request forgery (CSRF) attacks by validating that form submissions originate from authenticated ih77 sessions.
• Load balancing cookies: Ensure that your session is consistently routed to the same server node during a platform session, preventing session interruption.

Essential cookies do not require your consent and are set automatically when you access ih77.bio.

4.2 Analytics Cookies

With your consent, ih77 sets anonymised analytics cookies to collect aggregated data about how players navigate and use the ih77 platform. This data helps ih77's development team identify performance bottlenecks, improve navigation flow, and prioritise new features. Analytics cookies do not identify you personally — they use a randomly generated anonymous visitor ID that cannot be linked back to your ih77 account or your personal details.

4.3 What ih77 Does NOT Use Cookies For

• ih77 does not use third-party advertising or retargeting cookies.
• ih77 does not share cookie data with social media platforms or external advertising networks.
• ih77 does not use cookies to track your browsing activity on websites other than ih77.bio.

4.4 Managing Your Cookie Preferences

You can manage cookie settings at the browser level using your browser's built-in privacy or cookie management tools. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Note that disabling essential cookies will prevent you from logging in to your ih77 account and will impair core platform functionality. ih77 does not currently use a separate on-site cookie consent manager, as the only non-essential cookies used are anonymised analytics cookies which are applied using privacy-preserving settings.

ih77 applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practice.

5.1 Technical Security Controls

• Transport layer encryption: All data in transit between your device and ih77's servers is encrypted using TLS 1.2 or TLS 1.3 (256-bit).
• Encryption at rest: Personal data and KYC documents stored on ih77's servers are encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plaintext. ih77 uses a modern, salted cryptographic hashing algorithm (bcrypt) to store password credentials.
• Role-based access control (RBAC): Access to personal data is restricted to ih77 team members who require it to perform their specific job function. Access rights are reviewed periodically and revoked immediately upon staff role changes or departures.
• Intrusion detection: ih77's infrastructure is monitored continuously by automated intrusion detection systems. Anomalous access patterns trigger immediate alerts to ih77's security operations team.
• Penetration testing: ih77 commissions independent penetration testing of its platform infrastructure on a regular basis to identify and remediate security vulnerabilities.

5.2 Organisational Security Controls

• All ih77 staff with access to personal data are required to complete data protection training as part of their onboarding and on an annual basis thereafter.
• Data access is governed by a formal data classification policy that defines handling requirements for each category of personal data ih77 processes.
• Third-party service providers with access to ih77 player data are required to sign data processing agreements (DPAs) before any data is shared.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, ih77 will notify affected account holders via their registered email address without undue delay, and in any case within 72 hours of becoming aware of the breach, where technically feasible. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures ih77 has taken or proposes to take to address the breach.

ih77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The table below summarises ih77's standard data retention periods by data category.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	AML and fraud audit obligations
KYC / identity documents	Duration of account + 5 years post-closure	Legal and regulatory compliance
Financial transaction records	Duration of account + 7 years post-closure	Financial record-keeping obligations
Betting and game activity logs	Duration of account + 3 years post-closure	Dispute resolution and audit trail
Customer support communications	3 years from last interaction	Dispute resolution
Analytics cookies (browser-side)	12 months from date set	Platform analytics
Marketing consent records	Until consent is withdrawn + 3 years	Proof of consent

Upon expiry of the applicable retention period, ih77 will securely delete or anonymise the relevant personal data such that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes.

6.1 Extended Retention

ih77 may retain personal data beyond the standard retention periods described above where: (a) ih77 is required to do so by a court order, regulatory investigation, or law enforcement hold; (b) the data is relevant to an ongoing dispute, litigation, or internal investigation that has not been fully resolved; or (c) the account holder has given specific consent for extended retention in connection with a loyalty programme or long-term promotion. In all cases of extended retention, ih77 will apply the same security measures that apply to actively used data.

As a registered ih77 user, you hold the following rights with respect to your personal data. ih77 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. To submit a data rights request, contact ih77's support team via live chat or by email at [email protected] (plain text — not a clickable link), stating clearly which right you wish to exercise and providing sufficient information to verify your identity.

7.1 Right of Access

You have the right to request a copy of all personal data ih77 holds about you, together with information about the purposes for which it is processed, the categories of data held, the retention periods applied, and any third parties with whom it has been shared. ih77 will provide this information in a structured, machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data ih77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For registration data such as your name and address, corrections can be initiated directly from your ih77 Account Settings. For KYC-verified data, a fresh verification document may be required to support the correction.

7.3 Right to Erasure

You may request that ih77 delete your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) you object to processing and ih77 has no overriding legitimate interest. Note that erasure requests are subject to ih77's legal retention obligations — ih77 cannot erase financial transaction records or KYC documents that must be retained under applicable AML regulations, even if you request closure of your ih77 account.

7.4 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and to transmit it to another service provider. ih77 will provide a data export covering your account registration details, betting history, and transaction history on receipt of a verified portability request.

7.5 Right to Object and Restrict Processing

You have the right to object to processing of your personal data where ih77 relies on legitimate interest as the legal basis for that processing, and where you believe your individual interests override ih77's legitimate interest. You also have the right to request that processing be restricted — meaning that ih77 continues to hold your data but does not actively process it — while a data rights request or dispute is being resolved.

7.6 Right to Withdraw Marketing Consent

Where you have previously opted in to receive marketing communications from ih77, you may withdraw that consent at any time. To do so, update your communication preferences in Account Settings, or contact ih77 support via live chat. Following withdrawal, ih77 will cease sending marketing communications within 5 business days. Your account and gameplay will not be affected by a withdrawal of marketing consent.

ih77 reserves the right to update this Privacy Policy at any time to reflect changes in platform practices, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this page and in the "Last Updated" bar immediately beneath the Table of Contents.

Where an update to this Privacy Policy is material — meaning it substantively changes how ih77 collects, uses, or shares your personal data, or alters any of your privacy rights — ih77 will notify registered account holders via their registered email address at least 14 days before the revised policy takes effect.

For minor amendments, such as typographical corrections or clarifications that do not change the substantive meaning of any provision, ih77 may update this Privacy Policy without advance notice. In all cases, the revised policy will be published at ih77.bio/privacy-policy with an updated effective date.

Continued use of the ih77 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should cease using the ih77 platform and contact ih77 support to request account closure before the revised policy takes effect.