5b77 Privacy Policy:
Your Data, Your Rights

1

Introduction

5b77 ("we", "us", "our", "the Platform") operates an online betting and casino platform accessible at https://5b77.io. This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users ("you", "your", "User") who access or use the 5b77 platform and all associated services.

This Policy applies to all personal data processed in connection with your use of 5b77, regardless of whether you access the platform via a web browser, mobile application, or any other interface. By registering an account on 5b77, making a deposit, placing a bet, or otherwise engaging with the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the 5b77 Terms & Conditions, which together form the complete agreement governing your relationship with the platform. In the event of any inconsistency between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2

Personal Data We Collect

5b77 collects personal data through several means: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party service providers. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

When you create a 5b77 account, we collect the information necessary to establish and verify your identity, including:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the minimum age requirement of 21 years)
• Email address and mobile phone number
• Residential address, including city, district, and postal code
• Username and encrypted password credentials
• Preferred language and currency settings

2.2 KYC Verification Documents

As part of our Know Your Customer (KYC) process, we may collect copies or images of the following documents:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements, or official correspondence dated within three months)
• Proof of payment method ownership (confirmation screenshots or statements from bKash, Nagad, Rocket, Upay, or bank accounts)
• Selfie photographs or video verification images where required to confirm document authenticity

2.3 Financial & Transaction Data

We collect data relating to all financial transactions conducted through your 5b77 account, including:

• Deposit amounts, timestamps, payment method references, and transaction identifiers
• Withdrawal requests, amounts, destination payment method details, and processing status
• Betting history, casino game activity, wager amounts, and outcomes
• Bonus claims, promotional credits applied to your account, and wagering requirement progress
• Account balance history and statement records

2.4 Technical & Device Data

When you access 5b77, our systems automatically collect certain technical data about your device and browsing session:

• IP address and approximate geolocation derived from it
• Device type, operating system, browser type, and version
• Session start and end times, pages visited, and features used
• Referring URL and navigation path through the platform
• Cookie identifiers and similar tracking data (see Section 6)

2.5 Communications Data

If you contact 5b77 via our support channels, we retain records of those communications, including email correspondence, live chat transcripts, and any attachments you send us. This data is used to resolve your query, maintain service quality, and comply with our record-keeping obligations.

3

How We Use Your Personal Data

5b77 uses the personal data it collects for the following specific and legitimate purposes:

5b77 does not use your personal data for automated decision-making or profiling in ways that produce significant legal effects on you, without first providing you with notice and the opportunity to object.

4

Legal Basis for Processing

5b77 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing is necessary to perform the contract between you and 5b77 — that is, to provide you with the platform's betting, casino, and payment services as described in our Terms & Conditions.
• Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification obligations, and fraud reporting duties.
• Legitimate interests: Processing is carried out in pursuit of 5b77's legitimate business interests — including fraud prevention, platform security, service improvement, and responsible gaming monitoring — provided that those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for sending promotional communications — you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5

Data Sharing & Disclosure

5b77 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. We may share your personal data with third parties only in the specific and limited circumstances described below:

5.1 Payment Processing Partners

To facilitate deposits and withdrawals, 5b77 shares necessary financial data with payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. These providers are authorised to use your data only for the purpose of processing your transactions and are bound by strict data protection obligations.

5.2 Identity Verification Providers

5b77 works with specialist third-party KYC and identity verification services to authenticate the documents submitted during the account verification process. These providers process your identity documents in accordance with their own privacy policies and applicable data protection law. They are not permitted to retain or use your documents for any purpose beyond identity verification.

5.3 Game Technology Providers

The casino games and live dealer products available on 5b77 are supplied by third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming. These providers may receive technical data (such as your session identifier and game activity) to the extent necessary to deliver their game products. They do not receive your full personal profile.

5.4 Legal & Regulatory Authorities

5b77 may be required to disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally compelled to do so — for example, in response to a lawful order, subpoena, or to comply with AML reporting obligations. In such cases, 5b77 will disclose only the minimum data necessary to satisfy the legal requirement.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 5b77's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via your registered email address in advance of your data being subject to a different privacy policy.

6

Cookies & Tracking Technologies

5b77 uses cookies and similar tracking technologies to operate the platform efficiently, understand how users interact with the site, and deliver a personalised experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

6.1 Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account session management, login authentication, and the shopping basket equivalent in the sportsbook. You cannot opt out of these cookies without disabling the platform itself.
• Performance & analytics cookies: These cookies collect anonymised data about how visitors use the platform — including which pages are visited most frequently and any error messages encountered. This data is used to improve the platform's performance and usability.
• Functionality cookies: These cookies remember your preferences — such as your language settings, preferred display options, and last-visited game categories — to personalise your experience on return visits.
• Targeting & advertising cookies: Where you have provided consent, these cookies track your activity on the platform to help us deliver relevant promotional content. You may withdraw consent for targeting cookies at any time.

6.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may configure your browser to refuse all cookies, to accept only certain types, or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will impair your ability to use 5b77's platform, including the ability to log in and access your account.

For detailed guidance on managing cookies in your specific browser, visit your browser's official help documentation. Note that cookie preferences may need to be set separately for each browser and device you use to access 5b77.

7

Data Retention

5b77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 5b77's internal data disposal procedures. Anonymised data, which can no longer identify you, may be retained indefinitely for statistical and analytical purposes.

8

Data Security

5b77 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 5b77's servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for all sensitive account data and KYC documents stored on 5b77's servers, ensuring that data at rest is protected against unauthorised access.
• Access controls and authentication restricting internal access to personal data to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Firewall and intrusion detection systems monitoring 5b77's network infrastructure for suspicious activity and potential threats on a continuous basis.
• Regular security assessments including vulnerability scanning and penetration testing conducted by qualified security professionals to identify and address potential weaknesses in the platform.
• Staff training ensuring that all 5b77 personnel who handle personal data understand their data protection obligations and follow established security procedures.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, 5b77 will notify affected users and relevant authorities in accordance with applicable legal requirements.

9

Your Privacy Rights

As a user of 5b77, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. 5b77 will respond to all valid data rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 5b77 holds about you, together with information about how it is processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain personal details directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request that 5b77 delete your personal data. This right is subject to exceptions — for example, where 5b77 is required to retain your data to comply with a legal obligation or to defend against a legal claim.
• Right to restriction of processing: You have the right to request that 5b77 restricts the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured , machine-readable format and to request that it be transmitted to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where 5b77 relies on legitimate interests as the legal basis for that processing. You also have an unconditional right to object to the use of your personal data for direct marketing purposes.
• Right to withdraw consent: Where 5b77 relies on your consent as the basis for processing — for example, for sending promotional emails or SMS messages — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Please note that some rights are not absolute and may be subject to limitations under applicable law. Where 5b77 is unable to fulfil a data rights request in full, we will explain the reasons for any limitation in our written response to you.

10

Minors & Age Policy

5b77 is strictly an adult-only platform. Users must be 21 years of age or older to register an account or use any of the platform's betting and casino services. 5b77 does not knowingly collect personal data from any individual under the age of 21.

As part of our registration process and KYC verification procedures, 5b77 takes active steps to verify that all users meet the minimum age requirement. Where 5b77 has reasonable grounds to believe that a user is under 21 years of age, the account in question will be immediately suspended pending age verification. If the user cannot confirm that they are 21 or older, the account will be permanently closed and any funds deposited will be returned in full.

If you are a parent or guardian and believe that a minor has registered an account on 5b77 or has submitted personal data to the platform without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate the matter and, if confirmed, to delete the account and all associated personal data without undue delay.

11

International Data Transfers

5b77 operates as an international online platform. Your personal data may be transferred to, and processed in, countries other than Bangladesh where 5b77's servers, data centres, or third-party service providers are located. In certain cases, these countries may not have data protection laws equivalent in scope to those with which you may be familiar.

Where personal data is transferred internationally, 5b77 ensures that appropriate safeguards are in place to protect your information. These safeguards may include:

• Contractual clauses requiring the receiving party to maintain data protection standards consistent with this Policy
• Transferring data only to organisations that have implemented equivalent technical and organisational security measures
• Conducting due diligence assessments on the data protection practices of international processors prior to transferring data

By using the 5b77 platform, you acknowledge and consent to the transfer of your personal data to international locations as described in this section, subject to the safeguards outlined above.

12

Third-Party Links & Services

The 5b77 platform may contain references to or integrations with third-party services, including game providers, payment processors, and technology vendors. While 5b77 exercises care in selecting its third-party partners, this Privacy Policy applies only to data processed directly by 5b77 and does not extend to the privacy practices of third-party organisations.

Each third-party service provider operates under its own privacy policy and is independently responsible for its data handling practices. 5b77 encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the platform, in particular those of your chosen payment provider (e.g., bKash, Nagad, or your bank).

5b77 is not responsible for the privacy practices, data collection methods, or security standards of third-party services and cannot be held liable for any data breach, loss, or misuse occurring on a third-party platform.

13

Changes to This Privacy Policy

5b77 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws and regulations, platform features, or business operations. All changes will take effect from the date indicated in the updated "Last Updated" field at the top of this page.

Where we make material changes to this Policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and by posting a prominent notice on the platform. For non-material clarificatory updates, we may update this page without direct individual notification.

Your continued use of the 5b77 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and request account closure as described in our Terms & Conditions.

14

Contact & Data Rights Requests

If you wish to exercise any of your privacy rights, have a question about this Policy, or want to raise a concern about how 5b77 handles your personal data, please contact us using the details below. All enquiries related to data privacy will be handled by our dedicated compliance and support team.

Email: [email protected] — please include "Privacy Request" or "Data Rights Request" in the subject line of your email to ensure your enquiry is directed to the appropriate team without delay.

Response Times: 5b77 aims to acknowledge all data privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days of receiving a valid, complete request. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it before the initial 30-day period expires.

Identity Verification: To protect your personal data from unauthorised disclosure, 5b77 may require you to verify your identity before we can action a data rights request. This may involve confirming your registered email address, answering security questions, or providing a copy of a government-issued identity document.