Privacy
Policy

Overview & Scope

This Privacy Policy ("Policy") describes how brt177 ("the Platform", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("Player", "you", "your") who access or use any service available through brt177.net. This Policy applies to all personal data collected through the website, mobile-optimised interface, customer support channels, and any other touchpoint through which you interact with brt177.

brt177 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We collect only the data necessary to deliver our services, comply with our legal obligations, and improve the brt177 platform experience for players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy should be read alongside the brt177 Terms & Conditions and Responsible Gaming page, which together form the complete framework governing your relationship with the platform. If you do not agree with this Policy, you must not register an account or submit personal data to brt177.

Data We Collect

brt177 collects personal data through multiple channels and at different stages of your relationship with the platform. The categories of data collected are outlined below, together with the specific data points within each category.

Registration Data

When you create a brt177 account, we collect the information you provide directly, including your full legal name, date of birth, email address, mobile phone number (used for bKash, Nagad, and Rocket payment verification), and the username and password you choose. This information is required to create and manage your account.

Identity Verification (KYC) Data

To comply with our know-your-customer (KYC) obligations and to verify that you are aged 18 or above, we may collect copies of your National Identity Card (NID), passport, or other government-issued photo identification. We may also collect proof of address documents such as a utility bill or bank statement. KYC documents are processed securely and are not shared with third parties except where required by law.

Financial & Transaction Data

We record all deposit and withdrawal transactions associated with your brt177 account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), the transaction amount in BDT (৳), timestamps, and transaction reference numbers. We do not store full mobile wallet PINs, card numbers, or banking passwords — these are handled exclusively by your payment provider.

Gameplay & Betting Data

brt177 logs all gameplay activity on your account, including game sessions, bet amounts, game results, win/loss records, bonus usage, and wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform analytics.

Technical & Device Data

When you access brt177, our systems automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited, and session duration. This data is used for fraud detection, security monitoring, and improving the platform.

Communications Data

If you contact brt177 through live chat, email, or any other support channel, we retain records of those communications, including the content of your messages, the time and date of contact, and the outcome of any queries or complaints raised. These records are used for quality assurance, dispute resolution, and staff training purposes.

How We Use Your Data

brt177 processes your personal data only for the purposes described in this section. We rely on one or more of the following lawful bases for each processing activity: performance of a contract (operating your account and delivering platform services), compliance with a legal obligation (KYC, anti-money laundering, age verification), legitimate interests (fraud prevention, platform security, analytics), and consent (where you have actively opted in to a specific use, such as marketing communications).

Primary Uses

• Creating, managing, and operating your brt177 player account throughout its lifecycle.
• Processing deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining accurate transaction records.
• Verifying your identity and age (18+) as part of the KYC process to comply with our player protection obligations.
• Providing customer support, responding to queries, handling complaints, and resolving disputes related to your account or gameplay.
• Monitoring your account for fraud, collusion, bonus abuse, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Enforcing responsible gaming measures including self-exclusion, deposit limits, and session time reminders linked to your account activity.
• Sending transactional communications related to your account — including deposit confirmations, withdrawal updates, security alerts, and KYC requests.
• Complying with applicable legal, regulatory, and financial reporting obligations.

Secondary Uses (with Consent)

• Sending promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (Eid, BPL, IPL, Pohela Boishakh), and platform updates — only where you have opted in to marketing communications.
• Conducting anonymised analytics to understand player behaviour patterns, improve platform navigation, optimise game selection, and enhance the overall brt177 experience.
• Personalising the platform interface and game recommendations based on your gameplay history and preferences.

Data Sharing & Third Parties

brt177 does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Service Providers

brt177 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks), identity verification providers, game software suppliers (including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi), platform hosting infrastructure providers, customer support tooling providers, and fraud detection services. All such providers are contractually bound to process data only for the purposes instructed by brt177 and to maintain appropriate security standards.

Legal & Regulatory Disclosure

brt177 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law, court order, or legal process. Where legally permissible, brt177 will notify you of such a disclosure request before complying.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of brt177's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity prior to your data being transferred, and you will retain your rights under this Policy.

International Transfers

Some of brt177's service providers (particularly game software suppliers and hosting infrastructure partners) may process data on servers located outside Bangladesh. Where personal data is transferred internationally, brt177 ensures appropriate safeguards are in place — such as standard contractual clauses or equivalent data transfer mechanisms — to protect the data to a standard at least equivalent to that required under this Policy.

Cookies & Tracking

brt177 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, detect fraud, and analyse how the platform is used. This section explains each category of cookie in use on brt177.net.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain core features of the brt177 platform from functioning correctly, including the ability to log in and maintain an active session. Clearing cookies will log you out of your current session.

Data Retention

brt177 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. The following retention schedule applies to the main categories of personal data held by brt177.

• Account registration data — retained for the duration of your active account, plus a minimum of five years following account closure to comply with anti-money laundering record-keeping obligations.
• KYC / identity verification documents — retained for a minimum of five years from the date of verification, or longer if required by applicable law or an ongoing investigation.
• Transaction records — all deposit and withdrawal records are retained for a minimum of five years from the date of each transaction in compliance with financial record-keeping obligations.
• Gameplay and betting logs — retained for a minimum of three years from the date of each session to support dispute resolution, audit requirements, and responsible gaming monitoring.
• Customer support communications — retained for two years from the date of the last interaction, unless the communication relates to an unresolved dispute or legal claim, in which case it is retained until the matter is finally resolved.
• Marketing consent records — retained for the duration of your account and for two years after consent is withdrawn, to demonstrate compliance with consent obligations.
• Technical and device data (logs) — retained for up to 12 months on a rolling basis, unless flagged for fraud investigation, in which case the relevant logs are retained until the investigation concludes.

When the applicable retention period expires, brt177 will securely delete, anonymise, or pseudonymise the relevant personal data so that it can no longer be attributed to any identifiable individual. You may request early deletion of your data subject to the limitations described in the "Your Rights" section below.

Data Security

brt177 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no system can guarantee absolute security, our layered approach is designed to significantly reduce the likelihood and impact of any data security incident.

Technical Measures

• All data transmitted between your browser and brt177 servers is encrypted using TLS 1.2 or higher (256-bit SSL), indicated by the padlock icon in your browser address bar.
• Passwords are stored using one-way cryptographic hashing with salting — brt177 staff cannot read your password, and it is never stored in plain text.
• Player accounts are protected by session tokens that expire after periods of inactivity to reduce the risk of session hijacking.
• Access to production systems containing personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication.
• brt177 infrastructure is hosted in secured data centres with physical access controls, redundant power systems, and continuous network monitoring.
• Regular automated vulnerability scans and periodic penetration testing are conducted to identify and remediate security weaknesses.

Organisational Measures

• All brt177 staff who handle personal data receive regular training on data protection obligations and secure data handling practices.
• Data access is granted on a need-to-know basis — staff only access the minimum personal data necessary to perform their role.
• Third-party service providers with access to player data are vetted for security standards and bound by contractual data protection obligations.
• brt177 maintains an incident response plan. In the event of a data breach that poses a risk to player rights or freedoms, affected players will be notified promptly in accordance with applicable notification obligations.

Your Rights

As a player whose personal data is processed by brt177, you hold a number of rights in relation to that data. brt177 is committed to honouring these rights and to responding to all valid data subject requests within a reasonable timeframe — typically 30 calendar days from receipt of a verified request.

• Right of Access: You have the right to request a copy of the personal data brt177 holds about you, along with information about how it is processed and the purposes for which it is used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and brt177 has no overriding grounds to continue. Note that erasure rights are subject to legal retention obligations — brt177 cannot delete transaction records required by financial regulation.
• Right to Restrict Processing: In certain circumstances, you may request that brt177 restrict the processing of your personal data — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on brt177's legitimate interests, including profiling for personalisation purposes. You may also object to the use of your data for direct marketing at any time.
• Rights Related to Automated Decision-Making: If brt177 makes any decision about you based solely on automated processing that produces a significant legal or similarly significant effect, you have the right to request human review of that decision.

To exercise any of the above rights, submit your request in writing to [email protected] with the subject line "Data Subject Request — [Your Request Type]". brt177 may ask you to verify your identity before processing a request to ensure that data is not disclosed to or actioned by an unauthorised party. We will not charge a fee for exercising your rights under normal circumstances.

Children & Minors

brt177 is strictly an adults-only platform. Our services are intended solely for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 18. 18+

As part of our registration and KYC process, all players are required to confirm their date of birth and provide identity documentation to verify that they meet the minimum age requirement. Any account found to have been registered by or on behalf of a person under 18 will be immediately suspended, all funds will be held pending investigation, and the account will be permanently closed in accordance with our Terms & Conditions and responsible gaming obligations.

If you have reason to believe that a person under 18 has registered an account on brt177 or has provided personal data through our platform, please contact us immediately at [email protected]. We will investigate promptly and take all necessary action, including the deletion of any personal data collected from or relating to the minor, to the extent permissible by law.

Changes to This Policy

brt177 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, new platform features, or changes to the services we offer. The "Last Updated" date at the top of this page will always indicate when the most recent version of the Policy came into effect.

Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data, or meaningfully reduce your rights — brt177 will provide advance notice to registered players via email to the address on file, or via a prominent notice on the brt177.net homepage, at least 7 days before the revised Policy takes effect. For non-material changes such as typographical corrections or clarifications that do not alter the substance of the Policy, the updated version will be published without prior notice.

Your continued use of the brt177 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you must stop using the platform and may request account closure by contacting [email protected] before the revised Policy takes effect.