Privacy Policy —
How bip177 Protects Your Data

01 Information We Collect

bip177 collects personal data from you through several channels: directly when you register an account or contact our support team; automatically when you use our platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

1.1 Account Registration Data

When you create a bip177 account, we ask you to provide the following information:

• Full legal name as it appears on your government-issued identity document;
• Date of birth — used exclusively to verify that you meet the 18+ age requirement;
• Residential address including city, district, and postal code within Bangladesh;
• Mobile number — used for account authentication, transaction notifications, and support;
• Email address — used for account correspondence, promotional communications (where consented), and security alerts;
• Username and password — password is stored in hashed form and is never readable by bip177 staff.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is required before processing withdrawals and for ongoing compliance — we may collect:

• A copy of your National Identity Card (NID), passport, or driving licence;
• A recent utility bill or bank statement as proof of address (issued within the last three months);
• A selfie or live photograph for facial comparison with your identity document;
• Source of funds declaration where required for high-value transactions.

1.3 Financial Transaction Data

To facilitate deposits and withdrawals, bip177 processes financial data including:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with your transactions;
• Visa or Mastercard partial card numbers (last four digits only — full card data is never stored by bip177 and is handled exclusively by our PCI-DSS compliant payment processors);
• USDT wallet addresses for cryptocurrency transactions;
• Transaction amounts, timestamps, and reference numbers for every deposit and withdrawal.

1.4 Usage and Technical Data

When you access and use the bip177 platform, we automatically collect technical and behavioural data, including:

• IP address — used for geolocation, fraud detection, and access control;
• Device information — including device type, operating system, browser type and version, and screen resolution;
• Session data — pages visited, features used, time spent on the platform, and navigation paths;
• Gaming activity — games played, wager amounts, win/loss data, bonus activity, and promotional participation;
• Cookies and similar tracking technologies — see Section 5 (Cookies & Tracking) for full details.

1.5 Communications Data

If you contact bip177 via live chat, email, or any other support channel, we retain records of that correspondence including the content of messages, timestamps, and any supporting documentation you provide. This data is used to resolve disputes, improve our support quality, and meet our record-keeping obligations.

02 How We Use Your Data

bip177 uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those stated below, and we will not sell your personal data to any third party for their own marketing purposes under any circumstances.

Where we rely on your consent as the legal basis for processing — for example, to send you promotional emails or SMS notifications about new bonuses, tournaments, or seasonal offers relevant to Bangladeshi players — you may withdraw that consent at any time by contacting our support team at [email protected] or by updating your notification preferences in your account settings. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

03 Legal Basis for Processing

bip177 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contract performance: Processing is necessary to perform the contract between you and bip177 — specifically, to provide you with account access, accept your deposits, settle your wagers, and process your withdrawals. Without this processing, bip177 cannot deliver the Services to you.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations. This includes age verification, Know Your Customer (KYC) checks, anti-money laundering (AML) monitoring, and responsible gaming requirements. Compliance with these obligations is mandatory and not subject to opt-out.
• Legitimate interests: Processing is necessary for bip177's legitimate business interests, provided those interests are not overridden by your fundamental rights. This covers fraud prevention, platform security, internal analytics, and improving the quality of our Services.
• Consent: For optional processing activities such as sending you marketing communications, personalising promotional offers, or placing non-essential cookies on your device, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your account status.

04 Data Sharing & Third Parties

bip177 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, bip177 shares the minimum necessary financial data with our payment partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each payment partner operates under its own privacy policy and processes your payment data solely to execute the transaction. bip177 does not store full card numbers — these are handled exclusively by PCI-DSS compliant processors.

4.2 Identity Verification Providers

bip177 uses third-party KYC verification services to validate the identity documents you submit. These providers process your identity data on bip177's behalf under strict data processing agreements and are prohibited from using your data for any purpose other than verification on behalf of bip177.

4.3 Game Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver their game content to your device. These providers do not receive your full name, payment details, or contact information. All such data sharing is governed by data processing agreements consistent with applicable data protection standards.

4.4 Legal and Regulatory Disclosure

bip177 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities if we are required to do so by applicable law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering, or other criminal activity. We will notify you of such a disclosure to the extent permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bip177's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed as a result.

05 Cookies & Tracking

bip177 uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to remember your preferences, to keep you securely logged in, and to gather anonymised analytics data that helps us improve the platform experience for all Bangladeshi players.

5.1 Types of Cookies We Use

5.2 Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary or fraud prevention cookies may significantly degrade your ability to use the bip177 platform — including preventing you from logging in or accessing your account balance. Analytics and functional cookies can be disabled without affecting core platform functionality.

Most modern browsers allow you to view currently stored cookies, block cookies from specific sites, and delete all cookies stored by a site. Consult your browser's help documentation for specific instructions applicable to your browser and device.

06 Data Retention

bip177 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category:

When your personal data is no longer required under these retention periods, bip177 will securely delete or anonymise it so that it can no longer be attributed to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical purposes as it no longer constitutes personal data.

07 Data Security

bip177 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bip177 platform is encrypted using industry-standard TLS 1.3. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal data — including identity document scans and financial records — is stored in encrypted form at rest, using AES-256 encryption. Encryption keys are managed separately from encrypted data.
• Access controls: Access to personal data within bip177's systems is restricted on a strict need-to-know basis. Staff are granted only the minimum level of access required to perform their job function. All internal access is logged and subject to periodic audit.
• Two-factor authentication: bip177 strongly recommends enabling two-factor authentication (2FA) on your player account. 2FA adds a second verification step at login, significantly reducing the risk of unauthorised access even if your password is compromised.
• Penetration testing: bip177's platform undergoes periodic security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, bip177 will notify affected players without undue delay and take immediate steps to contain the breach and prevent further exposure.

08 Your Rights

As a user of the bip177 platform, you hold a set of rights with respect to the personal data we hold about you. bip177 is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights below, contact us at [email protected] with the subject line "Data Rights Request" and a description of your request.

• Right of access: You have the right to request a copy of the personal data bip177 holds about you, together with information about how it is used, where it came from, and with whom it has been shared. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. You can update many details (such as your email address or mobile number) directly from within your account settings.
• Right to erasure ("right to be forgotten"): You may request that bip177 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that we are legally required to retain certain categories of data (particularly financial records and KYC documentation) for defined periods even after account closure, and erasure requests cannot override these obligations.
• Right to restrict processing: In certain circumstances — for example, while you contest the accuracy of data we hold, or where you object to processing based on legitimate interest — you may request that we restrict the processing of your data to storage only while the matter is resolved.
• Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you have the right to receive the personal data you provided to bip177 in a structured, commonly used, machine-readable format (e.g., CSV or JSON) and to transmit it to another service provider.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bip177's legitimate interests. Upon receipt of an objection, bip177 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, contact [email protected] or update your preferences in your account dashboard.

bip177 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

09 Children's Privacy

bip177 is an online gambling platform intended exclusively for adults aged 18 years and above. We do not knowingly collect, process, or retain the personal data of any individual under the age of 18. Access to the bip177 platform by minors is strictly prohibited.

If bip177 discovers or reasonably suspects that personal data has been submitted by or on behalf of a person under the age of 18, we will immediately suspend the associated account, delete all personal data associated with that account, and reverse any financial transactions where technically possible. No funds deposited by an underage user will be retained by bip177.

Parents and guardians who believe their child may have accessed or registered on the bip177 platform are urged to contact our support team at [email protected] immediately. We take underage gambling extremely seriously and will act on all such reports without delay.

10 Policy Updates

bip177 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the features and structure of the bip177 platform. The most current version of this Policy will always be accessible at bip177.vip/privacy-policy.

When we make material changes to this Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by one or more of the following methods:

• A prominent notice displayed on the bip177 platform upon your next login;
• An email notification sent to the address registered on your account;
• An SMS notification sent to the mobile number registered on your account.

Your continued use of the bip177 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any material change, you may close your account by contacting our support team prior to the effective date of the revision. The "Last Updated" date at the top of this page reflects when the most recent version of this Policy came into effect.

11 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bip177 processes your personal data, our privacy team is available to assist you at any time.

11.1 How to Contact Us

• Email: Send your privacy-related enquiry to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". We aim to acknowledge all privacy-related emails within 24 hours and provide a substantive response within 30 calendar days.
• Live Chat: Our support team is available 24 hours a day, 7 days a week via the live chat feature on the bip177 platform. For formal data rights requests, we recommend using email so that your request is documented in writing.
• WhatsApp: Available 24/7 for general support enquiries. For formal privacy requests requiring a written record, email is the preferred channel.

11.2 Complaints Process

If you believe that bip177 has handled your personal data in a manner that is inconsistent with this Privacy Policy or your applicable data protection rights, we encourage you to raise the matter with us directly in the first instance so that we have the opportunity to investigate and resolve the issue. To raise a privacy complaint:

• Contact [email protected] with the subject line "Privacy Complaint";
• Describe the nature of your complaint in as much detail as possible, including relevant dates, the specific data involved, and the outcome you are seeking;
• Our privacy team will acknowledge your complaint within 48 hours and provide a full written response within 30 calendar days;
• If you are not satisfied with our response, the matter may be escalated to bip177 management for a final review within a further 14 calendar days.

bip177 treats all privacy complaints seriously and will investigate each one thoroughly and impartially. Our goal is to resolve every complaint to your satisfaction, and we will communicate our findings and proposed remedies clearly and transparently throughout the process.