2778bd Privacy Policy —
How We Protect Your Data

1 Information We Collect

When you register for and use a 2778bd account, we collect personal data that falls into two broad categories: information you provide directly to us, and information we collect automatically through your use of the Platform.

1.1 Information You Provide Directly

The following categories of personal data are collected at the point of registration or during the ongoing management of your account:

• Identity data: Full legal name, date of birth, and gender (where provided).
• Contact data: Email address, mobile phone number, and residential address (including city, division, and postcode within Bangladesh).
• Verification documents: Copies of government-issued photo identification (National Identity Card, passport, or driving licence) and proof of address submitted during KYC verification.
• Payment data: Mobile financial service account references for bKash, Nagad, Rocket, and Upay. We do not store full card numbers or mobile banking PINs on our servers.
• Account preferences: Language settings, communication preferences, responsible gaming limit settings, and self-exclusion choices.
• Support communications: Records of live chat conversations, emails, and any other correspondence you send to the 2778bd support team.

1.2 Information Collected Automatically

When you visit 2778bd.net or use our Platform, we automatically collect certain technical and behavioural data:

• Device and connection data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage data: Pages visited, features used, games played, bet history, session duration, click patterns, and navigation paths within the Platform.
• Cookie and session data: Session identifiers, authentication tokens, and cookie data as described in Section 5 of this policy.
• Location data: General geographic location derived from your IP address (country and city level). We do not collect GPS-level location data.

2 How We Use Your Data

2778bd uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with those stated below. The primary purposes for which we process your personal data are:

2778bd does not use your personal data for the purpose of selling advertising space to third parties, profiling you for sale to data brokers, or sharing your information with political organisations or government entities except where legally compelled to do so.

3 Legal Basis for Processing

2778bd processes your personal data only where there is a valid legal basis for doing so. The legal bases upon which we rely are as follows:

• Contractual necessity: Processing your identity data, contact data, and payment data is necessary to perform the contract between you and 2778bd — that is, to operate your account and provide the gaming services you have requested.
• Legal obligation: We are required by applicable laws to collect and retain certain data for KYC verification, anti-money laundering compliance, and responsible gaming obligations.
• Legitimate interests: We process device data and usage data on the basis of our legitimate interest in preventing fraud, maintaining platform security, and improving our service — provided those interests are not overridden by your rights and freedoms.
• Consent: Where we send you marketing or promotional communications (e.g., bonus offers and tournament notifications), we do so on the basis of your explicit consent, which you can withdraw at any time through your account settings or by contacting support.

4 Data Sharing & Disclosure

2778bd does not sell, lease, or trade your personal data to any third party. However, in order to operate the Platform and deliver services to you, we work with a limited number of trusted third-party partners and service providers. In each case, data is shared only to the extent strictly necessary for the stated purpose, and all third-party processors are required to handle your data in accordance with applicable data protection standards.

4.1 Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Game providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive pseudonymous session identifiers to facilitate game delivery and record bet outcomes. They do not receive your full identity details.
• KYC and identity verification services: In order to verify the identity documents you submit, we may use specialist third-party KYC verification providers. These partners process your documents strictly for verification purposes and do not retain them beyond the verification period.
• IT and infrastructure providers: Cloud hosting, CDN, and cybersecurity service providers that support the technical operation of the Platform may process your data as data processors acting on our instructions.
• Analytics providers: We use privacy-respecting analytics tools to understand aggregate usage patterns on the Platform. Individual user data is not shared with analytics providers in an identifiable form.

4.2 Legal Disclosures

2778bd may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a valid court order, a statutory request from a financial intelligence unit, or an investigation into suspected fraud or money laundering. In such cases, we will disclose only the data that is specifically requested and legally required.

5 Cookies & Tracking Technologies

2778bd uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to keep your session active while you play, and to gather anonymised analytics about how the Platform is used. The following table describes the categories of cookies we use:

2778bd does not use advertising cookies, retargeting pixels, social media tracking cookies, or any cross-site tracking technologies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.

6 Data Retention

2778bd retains your personal data only for as long as it is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable laws and regulations. The following general retention periods apply:

• Active account data (identity, contact, payment, and transaction records): Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction, to allow for dispute resolution and quality assurance.
• Analytics and usage data: Retained in aggregated, anonymised form for up to thirteen (13) months, after which individual session records are deleted.
• Responsible gaming records (self-exclusion history, deposit limit records): Retained for the duration of the restriction plus five (5) years, to prevent circumvention of safeguards.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where anonymisation is not technically possible, data is restricted to prevent further processing pending deletion.

Players who request account closure may submit a data deletion request (see Section 7 below). Note that deletion of certain categories of data may not be possible where retention is required by law or is necessary for ongoing legal proceedings.

7 Your Rights Over Your Data

As a player on 2778bd, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting the 2778bd support team via live chat or at support @ 2778bd.net — there is no fee for making a request.

• Right of access: You have the right to request a copy of the personal data 2778bd holds about you, together with information about how it is being processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update information directly through account settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (for consent-based processing), or where you object to processing on legitimate-interest grounds and there are no overriding legitimate grounds. Note that we cannot erase data we are legally required to retain.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or pending a decision on an erasure request.
• Right to data portability: You have the right to receive the personal data you have provided to 2778bd in a structured, machine-readable format, and to transfer it to another controller where processing is based on consent or contractual necessity.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to the use of your data for direct marketing purposes. You may opt out of marketing communications through your account settings at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

8 Data Security Measures

2778bd takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data in transit between your browser and 2778bd.net is encrypted using SSL/TLS technology with a minimum of 256-bit key strength.
• Encrypted data storage: Sensitive data fields — including identity document references and payment method identifiers — are encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data is restricted on a strict need-to-know basis. Staff accounts follow a role-based access control (RBAC) model, and privileged access is logged and audited.
• Intrusion detection: 2778bd employs automated security monitoring tools to detect unusual access patterns, brute-force attempts, and other indicators of compromise in real time.
• Regular security testing: The Platform undergoes periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Incident response: 2778bd maintains a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify affected players promptly and take all appropriate remediation steps.

While 2778bd implements robust security controls, no internet-based platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password and never sharing your login credentials with any other person.

9 Third-Party Links & Services

The 2778bd Platform integrates with third-party game providers, payment services, and infrastructure partners as described in this policy. In addition, the Platform may occasionally reference or display information relating to third-party sports organisations (such as the Bangladesh Cricket Board, ICC, BPL, and IPL) for informational purposes in connection with sports betting markets.

Where third-party services are integrated into the Platform — for example, live game streams delivered by Evolution Gaming, or game interfaces powered by Pragmatic Play — those providers may set their own session cookies within their iframe contexts. 2778bd is not responsible for the privacy practices of third-party game providers or payment processors and recommends that you review their individual privacy policies where applicable.

2778bd does not embed social media widgets, share buttons, or external tracking scripts from social platforms on the Platform. We do not use Facebook Pixel, Google Ads tracking tags, or any equivalent cross-platform advertising tracking technology.

10 Updates to This Policy

2778bd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or the legal requirements applicable to us. When material changes are made — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players by email or via an in-platform notification prior to the changes taking effect.

The "Last updated" date at the top of this page reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how 2778bd protects your data. The current version of the Privacy Policy, as published on this page, supersedes all prior versions.

If you have any questions about this Privacy Policy, or wish to exercise any of your data rights, please contact the 2778bd support team via live chat (available 24/7, Bangladesh Standard Time, UTC+6) or at: support @ 2778bd.net