D77 Privacy Policy — How Safe Is Your Data with Us

D77 (operated by: D77 Entertainment Ltd.) places the highest priority on the privacy of its platform users. This Privacy Policy governs d77's website d77.cash, the mobile app, and all related services.

By using any d77 service, you are considered to have agreed to this Privacy Policy. Please read it carefully before registering. This policy is aligned with the international data protection standard GDPR (General Data Protection Regulation).

This policy is written in plain language so every d77 member in Bangladesh can clearly understand exactly what we do with their data. No complex legal jargon, no hidden agenda.

D77 only collects information that is genuinely necessary to operate the platform. We don't ask for data we don't need. The information collected falls into three main categories:

a. Identity & Contact Information (at registration):

• Full name (as it appears on your National ID or passport)
• Date of Birth (for age verification)
• Mobile number (for OTP verification and support contact)
• Email address (for notifications and security alerts)
• District or city of residence (for legal compliance)

b. Financial Information (at the time of transaction):

• Mobile Banking Number (bKash/Nagad/Rocket)
• Transaction Amount & Time
• Transaction Reference Number

C. Device & Usage Data (Collected Automatically):

• IP address (for fraud prevention)
• Browser Type & Device Model
• Cookie & Session Data
• Time spent on the platform (for UX improvement)

D77 never uses any data without a clear reason. The sections below outline exactly what data is used and why:

1. Account Creation & Management: Your name, phone number, and email are used to identify and secure your account.
2. Identity Verification (KYC): To verify age and identity under international anti-money laundering regulations.
3. Transaction Processing: Your mobile number is used to process deposits and withdrawals without interruption.
4. Fraud Prevention: IP and device data are analyzed to detect multiple accounts or suspicious transactions.
5. Customer Support: Account history is reviewed to resolve your issues quickly.
6. Service Improvement: Anonymous usage data is analyzed to make the platform faster and easier to use.
7. Legal Compliance: Only the minimum data required to comply with regulatory guidelines is retained.

D77 does not send marketing communications without your consent. You can opt out of promotional messages at any time from your account settings.

D77 stores all your data using internationally recognised security technology — covering not just technical protection, but organisational safeguards as well.

Technical Security Measures:

• TLS/SSL 256-bit Encryption: All data transmitted from your device to d77's servers is encrypted — no third party can intercept or read it in transit.
• AES-256 Data Encryption: Sensitive data stored on our servers is encrypted independently.
• Multi-Factor Authentication: OTP verification is required at login.
• DDoS Protection: Advanced firewalls are active to protect against cyberattacks.
• Regular Penetration Testing: System verification by independent third-party cybersecurity experts twice a year.

Data Retention Period: Data is retained while your account is active. Upon account closure, personal data is deleted within 5 years — though transaction records may be kept for up to 10 years where legally required.

D77 never sells your personal data to advertisers or data brokers. However, limited data may be shared with specific parties under certain circumstances:

• Payment Processor: bKash, Nagad, and Rocket — only the minimum information necessary to complete transactions.
• KYC Partner: Internationally accredited verification partners for identity verification.
• Cybersecurity Provider: Limited pattern data used for fraud detection.
• Regulatory Authority: To meet legal obligations in response to valid requests from licensing authorities.
• Law Enforcement Agencies: Where a valid court order requires it.

Outside of the list above, d77 never shares your data with any other party. Every third party is contractually bound to uphold d77's privacy standards.

The d77 website and app use cookies and similar technologies. Cookies are small files stored in your browser that help make your experience smoother.

You can delete or block cookies at any time from your browser settings. However, disabling essential cookies will prevent you from logging in to d77 properly.

Every d77 member has important rights regarding their personal data. To exercise these rights, email us at support@d77.cash:

D77 will respond within 30 business days of receiving your request.

D77 services are strictly for users aged 18 and above. We do not knowingly collect or store data from anyone under 18.

D77 collects date of birth at registration for age verification and may request a copy of your national ID if needed. If an underage account is identified:

• The account will be closed immediately
• Deposited funds will be returned
• Collected data will be deleted
• A parent or guardian will be notified if necessary

Parents are urged to ensure d77 is not accessible on any device used by children.

D77 may update this Privacy Policy in response to technological, legal, or business changes. If updates are made:

• The update date on this page will change accordingly.
• You will be notified at your registered email address if any significant changes are made.
• At least 14 days' notice will be given before any significant changes take effect.

Continued use of d77 after the notice is issued will be considered acceptance of the updated policy.

For any privacy-related questions, complaints, or requests, please contact d77's Data Protection Team:

• Email: privacy@d77.cash
• General Support: support@d77.cash
• Live Chat: Via the live chat widget on the website, 24/7
• Response Time: Within 3 business days (data requests: within 30 days)

If d77 is unable to resolve your complaint, you have the right to escalate it to an international data protection authority.