Privacy Policy — th77 Online Casino
At th77, protecting your personal information is a core responsibility we take seriously. This Privacy Policy explains exactly what data we collect from players in Bangladesh, how it is used, who it may be shared with, and the rights you hold over your own information at every stage of your account lifecycle.
End-to-End Encryption
All data transmitted between your device and the th77 platform is protected using 256-bit SSL/TLS encryption — the same standard used by leading financial institutions across Bangladesh and globally.
No Data Sales
th77 does not sell, rent, or trade your personal information to any third-party advertiser, data broker, or marketing agency. Your data exists solely to support your account and improve your experience on the platform.
Minimal Data Collection
We collect only the information strictly necessary to operate your account, process payments via bKash, Nagad, Rocket, Upay, and supported banks, verify your identity, and comply with responsible gaming obligations.
Your Rights, Always Active
You retain the right to access, correct, export, and request deletion of your personal data at any point. th77 honour these rights fully and will respond to any valid data request within 30 calendar days.
Transparent Cookie Use
th77 uses cookies strictly for session management, platform performance, and fraud prevention. We do not deploy third-party advertising cookies or cross-site tracking scripts on any page of the platform.
Direct Privacy Contact
For any privacy-related query, data access request, or deletion request, contact our dedicated privacy team directly at [email protected]. All privacy requests receive a response within 2 business hours.
1. Information We Collect
th77 collects personal information from Players in several ways: directly through the registration and account verification process, automatically through your use of the platform, and in some cases from third-party identity verification or payment service providers. We collect only information that is necessary and proportionate to the purposes described in this Privacy Policy.
Information You Provide Directly:
- Registration data: Full legal name, date of birth, gender, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number.
- Identity verification documents: National Identity Card (NID) number, passport details, or driving licence number, as required to satisfy th77's KYC obligations.
- Payment information: Mobile banking account references (bKash, Nagad, Rocket, Upay) and bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) necessary to process deposits and withdrawals. th77 does not store full card numbers or mobile banking PINs.
- Communication data: Messages, emails, and live chat transcripts exchanged between you and the th77 support team at [email protected].
- Responsible gaming preferences: Self-exclusion requests, deposit limits, and time-out settings you configure through the platform.
Information Collected Automatically:
- Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and preferred language settings.
- Usage and behavioural data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the th77 platform.
- Transaction data: A full record of all deposits, withdrawals, bonus activations, wagers, and winnings associated with your account.
- Geolocation data: General geographic location derived from your IP address, used to verify that you are accessing the platform from a permitted location and to detect unusual login activity.
- Cookie and session data: See Section 4 (Cookies and Tracking Technologies) for full details.
Information from Third Parties:
In certain circumstances, th77 may receive information about you from trusted third-party providers including identity verification services, payment processors, fraud prevention agencies, and responsible gaming databases. This information is used solely to verify your identity, process payments securely, and fulfil th77's obligations under applicable responsible gaming standards.
Note on sensitive data: th77 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where such data is contained incidentally within an identity document submitted for KYC verification. In such cases, only the minimum necessary information is processed and the document is stored securely.
2. How We Use Your Information
th77 uses the personal information collected from Players for clearly defined and legitimate purposes. We do not use your data in any way that is incompatible with the purposes set out below. The primary purposes for which th77 processes personal data are as follows:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Name, email, date of birth, address, phone number | Contractual necessity |
| Identity verification (KYC) | NID, passport, proof of address documents | Legal obligation / contractual necessity |
| Processing deposits and withdrawals | Payment method references, transaction records | Contractual necessity |
| Fraud prevention and security monitoring | IP address, device data, transaction history, geolocation | Legitimate interest |
| Responsible gaming compliance | Betting patterns, session data, self-exclusion preferences | Legal obligation / legitimate interest |
| Customer support and communications | Contact details, support transcripts | Contractual necessity |
| Platform improvement and analytics | Anonymised usage and behavioural data | Legitimate interest |
| Promotional communications (where opted in) | Email address, communication preferences | Consent |
th77 will never use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without providing an opportunity to request human review. Where automated tools are used for fraud detection or responsible gaming monitoring, any consequential account action (such as a temporary suspension) can be reviewed by contacting our support team at [email protected].
If you have opted in to receive promotional communications from th77, we may use your email address to send you information about bonuses, new games, seasonal offers tied to events such as Eid, Pohela Boishakh, BPL season, or T20 World Cup, and other platform updates. You may withdraw this consent at any time by contacting our support team or by using the unsubscribe link included in every promotional email.
3. Sharing and Disclosure of Data
th77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Service Providers and Technology Partners: th77 works with carefully selected third-party service providers who assist in operating the platform. These include payment processing partners (such as those facilitating bKash, Nagad, Rocket, and Upay transactions), identity verification services, cloud hosting providers, cybersecurity firms, and customer support software providers. All such partners are contractually bound to process your data only on th77's instructions and to maintain appropriate security standards.
Game Software Providers: Where you play games developed by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — certain session and transaction data necessary to operate the game and validate outcomes may be processed by those providers. Each provider operates under their own data protection obligations and is permitted to process only the minimum data needed to deliver the game service.
Fraud Prevention and Anti-Money Laundering: th77 may share data with fraud prevention agencies, financial intelligence services, and anti-money laundering databases where required to detect or prevent fraud, money laundering, or other criminal activity. Access to such data is strictly controlled and limited to authorised personnel.
Legal and Regulatory Disclosure: th77 may disclose your personal information where required to do so by applicable law, court order, or at the request of a competent government authority. In such cases, th77 will disclose only the minimum information required to satisfy the legal obligation and will, where permitted, notify the affected Player.
Business Transfers: In the event that th77 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance via your registered email address, and the acquiring entity will be required to honour the terms of this Privacy Policy with respect to your data.
th77 does not transfer personal data to countries or organisations that do not maintain an adequate standard of data protection without first ensuring appropriate safeguards are in place, such as contractual protections equivalent to those required under internationally recognised data protection frameworks.
5. Data Retention and Storage
th77 retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations, dispute resolution requirements, and responsible gaming commitments. The following general retention periods apply:
- Account and identity data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, to satisfy anti-money laundering record-keeping obligations.
- Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping best practices.
- Support communications: Retained for 3 years from the date of the last interaction, to allow for accurate resolution of any late-arising disputes or follow-up queries.
- Responsible gaming records: Self-exclusion, deposit limit, and time-out records are retained indefinitely to prevent circumvention of these protections, even if an account is subsequently closed.
- Technical and usage logs: Retained for up to 12 months in aggregated form for platform performance analysis and fraud detection purposes.
- Marketing consent records: Retained for the duration of the active consent and for 3 years after consent is withdrawn, as evidence of your original opt-in.
When personal data is no longer required for any of the above purposes, th77 will securely delete or irreversibly anonymise it. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical analysis and platform improvement purposes.
th77 stores all Player data on secure servers protected by industry-standard physical and technical security measures. Access to production data systems is restricted to authorised personnel on a strict need-to-know basis, with all access events logged and monitored.
6. Your Rights Over Your Personal Data
th77 respects your right to control your own personal information. As a Player, you hold the following rights with respect to the data we hold about you. To exercise any of these rights, contact us at [email protected] with your request. We will acknowledge your request within 2 business hours and provide a full response within 30 calendar days.
Right of Access
Request a copy of all personal data th77 holds about you, including account data, transaction history, and KYC records.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held on your account. You may also update basic details directly through your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that legal retention obligations may prevent full deletion in some cases.
Right to Restrict Processing
Request that th77 limits the processing of your data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service if you choose.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on th77's legitimate interests and you believe those interests are overridden by your own.
th77 will not charge a fee for handling any data rights request unless the request is manifestly unfounded or excessive in scope. Where a request is declined, th77 will provide a clear written explanation of the reason and advise on available remedies. th77 will never retaliate against a Player for legitimately exercising their data rights.
7. Data Security Measures
th77 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following key controls:
- Transport Layer Security: All data exchanged between your device and th77's servers is encrypted in transit using TLS 1.2 or higher, enforced across every page and API endpoint on the platform.
- Data Encryption at Rest: Sensitive data stored in th77's databases — including KYC documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to production systems and databases is restricted to a small number of authorised personnel. All access requires multi-factor authentication and is logged and reviewed on a regular basis.
- Intrusion Detection: th77 operates continuous network monitoring and intrusion detection systems that alert our security team to unusual access patterns or potential threats in real time.
- Vulnerability Management: th77 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate weaknesses before they can be exploited.
- Staff Training: All th77 staff with access to personal data receive regular data protection and security training. Staff are subject to confidentiality obligations as a condition of their engagement.
Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a data breach that poses a risk to Players, th77 will notify affected individuals via their registered email address and take all reasonable steps to contain and remediate the breach promptly.
Players are also encouraged to take their own security precautions, including using a strong, unique password for their th77 account, never sharing login credentials with any other person, and logging out fully after each session, particularly when using a shared or public device.
Security reminder: th77 support staff will never ask you for your password, PIN, or OTP (one-time password) via email, live chat, or phone. If you receive such a request purportedly from th77, please report it immediately to [email protected].
8. Updates to This Privacy Policy
th77 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. The most current version of this Privacy Policy is always available at https://th77.ws/privacy-policy.
Where a change to this Privacy Policy is material — meaning it affects how we collect, use, or share your personal data in a way that is significantly different from what was previously disclosed — th77 will notify you via your registered email address at least 14 days before the change takes effect. For non-material updates (such as clarifications of existing practices, corrections of typographic errors, or improvements to readability), the updated policy will be published without advance notice.
Your continued use of the th77 platform following the effective date of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may request the closure of your account and the return of any remaining real-money balance by contacting [email protected] before the change takes effect.
This Privacy Policy is written in English. In the event of any inconsistency between the English-language version and any translation or summary of this policy, the English version shall prevail.
For all privacy-related enquiries, data access requests, or concerns about how th77 handles your personal information, please contact our support team directly:
- Email: [email protected] (plain text — not a clickable link)
- Response time: Within 2 hours during normal business hours, Bangladesh Standard Time (BST, UTC+6)
- Availability: 24 hours a day, 7 days a week
This Privacy Policy should be read alongside th77's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between Players and th77.
Your Privacy Is Protected — Now Explore th77
We take your data security seriously so you can focus on what matters — enjoying Bangladesh's best online casino experience. Ready to explore our games or have further questions?
🔞 18+ only. Please gamble responsibly. th77 is committed to safe and fair gaming for all eligible players in Bangladesh.