lb77 Privacy Policy

This Privacy Policy ("Policy") applies to all individuals who access, browse, register on, or otherwise interact with the lb77 online betting and casino platform available at lb77.io ("Platform"), operated by lb77 ("we", "us", "our", "lb77"). This Policy forms part of your overall agreement with lb77 and should be read alongside the lb77 Terms & Conditions and Responsible Gaming Policy.

By accessing or using the lb77 Platform, registering an account, making a deposit, or placing a bet, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must cease using the lb77 Platform immediately.

lb77 is committed to protecting the privacy and personal data of every player who uses our platform. We operate a Bangladeshi Taka (BDT) betting and casino service that enables players aged 21 and above to place bets on cricket, access live casino games, play slots, and enjoy fishing and crash game titles from leading Game Providers including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Ezugi, Microgaming, and SA Gaming.

In delivering these services, lb77 necessarily collects, processes, and stores certain categories of personal data. This Policy describes those data activities with full transparency so that you can make informed decisions about how you interact with our Platform.

lb77 applies the following overarching privacy principles to all data processing activities:

• Lawfulness, fairness, and transparency: We process personal data only where we have a lawful basis to do so, and we communicate our data practices clearly.
• Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes and is not processed in ways incompatible with those purposes.
• Data minimisation: We collect only the data that is necessary for the purposes described in this Policy. We do not collect personal data speculatively or without a clear operational need.
• Accuracy: We take reasonable steps to ensure that personal data held by lb77 is accurate and up to date. Players may correct their account information at any time by contacting support.
• Storage limitation: Personal data is retained only for as long as is necessary for the purposes described in this Policy or as required by applicable law. See Section 7 for specific retention periods.
• Integrity and confidentiality: We implement robust technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.

lb77 collects personal data from players in three ways: data you provide directly, data generated automatically through your use of the Platform, and data we receive from third-party service providers. The specific categories of data we collect are set out below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, country of residence, and chosen username collected when you create an lb77 account.
• KYC verification documents: Government-issued photographic identification (national ID card, passport, or driving licence), proof of address (utility bill or bank statement dated within 90 days), and proof of payment method ownership, collected when you request a withdrawal or when lb77 initiates a verification review.
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (account holder name, account number, bank name, branch), Visa/Mastercard last four digits and billing details, collected for the purpose of processing deposits and withdrawals.
• Communications data: The content of emails, live chat messages, and support tickets you submit to the lb77 support team, together with associated metadata such as timestamp and message subject.
• Responsible gaming preferences: Deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests submitted by you via your account dashboard or through support.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, device language setting, and unique device identifiers.
• Usage data: Pages visited on lb77.io, time spent on each page, navigation paths, search queries entered on the Platform, game sessions initiated, bets placed, bet amounts, game outcomes, and session start/end timestamps.
• Transaction data: Deposit amounts, withdrawal amounts, payment method used, transaction timestamps, transaction reference numbers, and wallet balance history, generated automatically by the lb77 payment processing system.
• Location data: General geographic location derived from your IP address (country and city level). lb77 does not collect precise GPS location data.
• Cookie and tracking data: Session cookies, persistent cookies, and similar tracking technologies as described in Section 6 of this Policy.

2.3 Data Received from Third Parties

• Payment provider data: Transaction confirmation status and basic transaction metadata received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard to verify that a deposit or withdrawal has been executed successfully.
• Game Provider data: Game session results, bet histories, and RNG outcomes received from licensed Game Providers (including Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Ezugi, Microgaming, and SA Gaming) for the purpose of settling bets and maintaining accurate account records.
• Fraud and risk intelligence: Device fingerprint risk scores and flagged IP addresses received from third-party fraud detection and security screening services used by lb77 to detect and prevent account abuse, money laundering, and underage gambling.

lb77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account management: Creating and maintaining your lb77 account, managing your account settings, processing account closure requests, and communicating account-related notifications to you.
• Identity and age verification (KYC): Confirming that you are at least 21 years of age, verifying your identity prior to processing withdrawals, and meeting anti-money laundering (AML) due diligence obligations.
• Payment processing: Executing deposit and withdrawal transactions via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), reconciling your wallet balance, and maintaining accurate transaction records.
• Service delivery: Enabling you to place bets on cricket and other sports, access live casino games, play slot titles, and use all features of the lb77 platform.
• Responsible gaming monitoring: Monitoring betting patterns and account activity to identify signs of problem gambling, enforcing deposit limits, loss limits, session limits, and self-exclusion orders, and providing proactive outreach where concerning behaviour is detected.
• Fraud and security: Detecting and preventing fraudulent account creation, unauthorised access, bonus abuse, money laundering, and other forms of financial crime or platform abuse.
• Customer support: Responding to your support enquiries, resolving disputes, and maintaining support correspondence records for quality assurance purposes.
• Legal and regulatory compliance: Meeting applicable anti-money laundering, data protection, and platform security obligations, and responding to lawful requests from courts or regulatory authorities.
• Platform analytics and improvement: Analysing aggregated, anonymised usage data to understand how players interact with the lb77 platform and to guide product development and performance optimisation decisions.
• Promotional communications: Sending promotional emails and SMS notifications about lb77 offers, bonuses, and new game releases to players who have opted in to marketing communications. You may unsubscribe at any time by contacting [email protected].

lb77 processes personal data only where a valid legal basis exists. The legal bases we rely on for the data processing activities described in this Policy are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and lb77 — that is, to provide the betting and gaming services you have registered for. This includes account management, payment processing, bet settlement, and customer support.
• Legal obligation: Processing that is necessary for lb77 to comply with applicable legal obligations, including anti-money laundering (AML) due diligence, KYC verification requirements, record retention obligations, and responses to lawful court or regulatory authority requests.
• Legitimate interests: Processing carried out to further lb77's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interest bases include fraud detection and prevention, platform security, responsible gaming monitoring, and aggregated platform analytics.
• Consent: Processing for which lb77 relies on your freely given, specific, informed, and unambiguous consent — primarily the sending of promotional marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

lb77 does not share your personal data with third parties except in the limited circumstances described below. All third-party recipients of lb77 player data are contractually bound to protect that data and to use it only for the purposes described in this Policy.

• Payment providers: We share the minimum data necessary to execute deposit and withdrawal transactions with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard). This typically includes your name, account identifier, and transaction amount.
• Game Providers: We share your player session identifier and bet data with the Game Provider supplying the specific game you are playing (e.g., Evolution Gaming for live casino games, Pragmatic Play for slot titles, Spribe for crash games). This data is necessary for the Game Provider to deliver the game session and return the result to lb77 for bet settlement.
• KYC and identity verification services: We may share identity document images and personal details with accredited third-party identity verification services to assist with KYC checks. These services are bound by strict data processing agreements and are prohibited from retaining or repurposing your documents.
• Fraud detection and AML screening services: We may share device fingerprint data, IP addresses, and transaction patterns with anti-fraud and AML compliance technology providers to detect and prevent financial crime and platform abuse.
• Legal authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where we are required to do so by law, court order, or in connection with an investigation of suspected criminal activity, fraud, or money laundering.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of lb77's business, player personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players in advance of any such transfer and the applicable privacy terms.

lb77 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies do not give us access to your device or any data stored on it beyond what the cookie itself contains.

The categories of cookies lb77 uses are as follows:

• Strictly necessary cookies: These cookies are essential for the lb77 Platform to function correctly. They enable core features such as secure login sessions, wallet balance displays, bet slip functionality, and payment processing. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: These cookies remember your preferences and settings, such as your preferred language, display settings, and session timeout preferences, so that you do not have to re-enter them each time you use the Platform.
• Analytics cookies: These cookies collect anonymised information about how players use the lb77 Platform — such as which pages are most visited, how long players stay on each page, and where players navigate from. This data is used in aggregate form only to improve the Platform's usability and performance.
• Security and fraud detection cookies: These cookies help lb77 identify and block suspicious activity, including bot traffic, multiple account creation, and patterns associated with bonus abuse or money laundering.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the lb77 Platform.

lb77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

When data is no longer required for the purposes for which it was collected, lb77 will securely delete or anonymise it. Secure deletion involves overwriting stored data using industry-standard data erasure protocols so that it cannot be recovered.

lb77 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All data transmitted between your device and the lb77 Platform is encrypted using 256-bit SSL/TLS 1.3 protocols. This applies to all page loads, login sessions, API calls, and payment transactions.
• Encryption at rest: Sensitive personal data stored in lb77's databases, including KYC documents and financial account details, is encrypted at rest using AES-256 encryption.
• Password protection: Player passwords are stored using bcrypt hashing with a unique salt per account. lb77 does not store plaintext passwords at any time. In the event of a data breach, hashed passwords cannot be directly decoded to obtain the original password.
• Access controls: Access to personal data within lb77's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific job function. All internal access is logged and audited.
• Two-factor authentication: lb77 offers SMS OTP two-factor authentication to all account holders free of charge. We strongly recommend enabling 2FA to add an additional layer of protection to your account.
• Security monitoring: lb77's infrastructure is monitored continuously for anomalous activity, intrusion attempts, and suspicious traffic patterns. Security incidents are escalated for immediate investigation.
• Vulnerability management: lb77 conducts regular security assessments of its Platform infrastructure and application code to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, lb77 will notify you without undue delay via the email address registered to your account, and will take all reasonable steps to limit the impact of the breach.

As a player whose personal data is processed by lb77, you hold the following rights with respect to your data. To exercise any of these rights, please contact [email protected] with a clear description of your request. lb77 will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data that lb77 holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to rectification: You have the right to request that lb77 correct any inaccurate or incomplete personal data held about you without undue delay.
• Right to erasure ("right to be forgotten"): You have the right to request that lb77 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other lawful basis applies), or where processing is otherwise unlawful. This right is subject to lb77's legal obligations to retain certain data (e.g., AML records) for specified periods.
• Right to restriction of processing: You have the right to request that lb77 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interest objection is under assessment.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have that data transmitted to another data controller where technically feasible and where processing is based on consent or contractual necessity.
• Right to object: You have the right to object at any time to processing of your personal data that is based on lb77's legitimate interests. lb77 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To submit a data rights request, email [email protected] with the subject line "Data Rights Request" and include your registered username, the email address associated with your lb77 account, and a clear description of the right you wish to exercise. lb77 may require identity verification before processing your request to ensure that data is not disclosed to unauthorised parties.

The lb77 Platform is strictly intended for adults aged 21 years and above. lb77 does not knowingly collect or process personal data from any individual under the age of 21. We apply a mandatory age verification process at the point of account registration and prior to the processing of any withdrawal, and we reserve the right to request government-issued identification from any player at any time to confirm their age.

If lb77 discovers that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the relevant data as quickly as is legally permissible, and return any deposited Real Money Funds to the originating payment method following the completion of our investigation.

Players who have children in their household are strongly encouraged to use parental control software to restrict access to the lb77 Platform on shared devices. lb77 cannot control access to shared household devices and accordingly accepts no responsibility for access by minors to shared devices that are not adequately protected by parental controls.

The lb77 Platform incorporates services and content supplied by third-party Game Providers and payment processors. When you interact with a game supplied by a third-party provider, your game session data is necessarily processed by that provider's systems in accordance with their own privacy policies.

lb77 only works with Game Providers who are reputable, licensed operators with established data protection practices. However, lb77 is not responsible for the privacy practices of third-party Game Providers or payment processors beyond the contractual data processing obligations we impose on them. We encourage you to review the privacy policies of relevant third-party providers if you have concerns about how they handle your data.

The lb77 Platform does not contain links to third-party websites other than those necessary for the delivery of game content and payment services. Where any third-party link is present, please be aware that those sites operate under their own privacy policies and lb77 accepts no responsibility for the content or data practices of those sites.

lb77 operates a platform that is accessible globally, and some of our Game Providers and technical infrastructure partners are based outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than Bangladesh in the course of delivering our services.

Where personal data is transferred internationally, lb77 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements with all third-party recipients of lb77 player data, incorporating binding obligations regarding data protection, confidentiality, and security standards consistent with internationally recognised best practices.

If you have concerns about the international transfer of your personal data, please contact [email protected] and our team will provide further information about the specific safeguards applicable to your data.

lb77 reserves the right to amend this Privacy Policy at any time. Changes may be required due to updates in applicable law, the introduction of new platform features, changes to our payment or game provider relationships, or improvements to our data protection practices.

When material changes are made to this Policy, lb77 will notify registered players by email to the address on file at least 7 days prior to the changes taking effect. The updated Policy will be published at lb77.io/privacy-policy with a revised effective date shown at the top of the document.

If you have any questions, concerns, or requests relating to this Privacy Policy or lb77's handling of your personal data, please contact the lb77 data support team using the details below. All privacy-related communications are handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: Data Rights Request
• Subject line for privacy concerns: Privacy Enquiry
• Availability: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response time: Standard privacy enquiries within 30 days; urgent data breach notifications within 24 hours (BST)
• Time zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming support, including deposit limit requests, self-exclusion, or cooling-off activation, please visit our dedicated Responsible Gaming page or contact support with the subject line Responsible Gaming Request.