qu77 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how qu77 ("qu77", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("Player", "User", "you", "your") who access or use the qu77 online betting and gaming platform at https://qu77.io and all associated subdomains, mobile applications, and services (collectively, the "Platform").

By registering for a qu77 account or using any part of the Platform, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

This Policy forms part of our Terms & Conditions, which are available at /terms-conditions. Capitalised terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.

We are committed to protecting the privacy and security of all qu77 players, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh. This Policy was last updated on 1 January 2026.

2. Who We Are

qu77 is an online betting and gaming platform operated under an international gaming licence. We provide sports betting (including cricket BPL and international T20 fixtures), live casino games, slots, crash games, and other interactive gaming content to players in Bangladesh and other eligible jurisdictions.

For any privacy-related enquiries, data subject requests, or concerns about how your personal data is handled, please contact our Data Protection team at [email protected]. Our team operates 24/7 at Bangladesh Standard Time (BST, UTC+6) and will respond to all privacy requests within thirty (30) calendar days of receipt.

3. Data We Collect

3.1 Registration Data

When you create a qu77 account, we collect the following personal information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, district, and postcode)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred language and currency (BDT)

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request and collect copies of the following documents to verify your identity and confirm your age and address:

• National Identity Card (NID)
• Passport or driving licence
• Utility bills or bank statements (as proof of address)
• Selfie photographs for biometric comparison

KYC documents are processed securely and retained only for the minimum period required by our compliance obligations.

3.3 Financial & Payment Data

When you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, we collect:

• Mobile wallet numbers (e.g., bKash, Nagad, Rocket account numbers)
• Transaction reference numbers
• Deposit and withdrawal amounts in BDT (৳)
• Payment method type and last four digits of any card used

qu77 does not store full card numbers on its servers. Payment card data is processed exclusively through PCI-DSS compliant third-party gateways.

3.4 Transactional & Gaming Data

We maintain records of your betting and gaming activity on the Platform, including:

• Bet placement history, bet types, stake amounts, and outcomes
• Casino game session records
• Bonus and promotion usage history
• Account balance movements and transaction logs
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

When you access the Platform, our systems automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps and duration
• Pages visited and features used within the Platform
• Referring URL (if you arrived via a link from another site)

3.6 Communication Data

If you contact qu77 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance and dispute resolution purposes.

4. How We Collect Data

qu77 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact our support team, or update your account profile.
• Automatically: through cookies, web beacons, server logs, and analytics tools as you browse and interact with the Platform.
• From third-party service providers: including payment processors (bKash, Nagad, Rocket, etc.), identity verification providers, and fraud prevention services, which may share data with us as part of their service delivery.
• From publicly available sources: where necessary for fraud prevention, compliance, or responsible gaming purposes — for example, checking against self-exclusion registers or sanctions lists.

5. How We Use Your Data

qu77 uses the personal data we collect for the following specific purposes:

Purpose	Legal Basis	Data Used
Account registration and management	Contractual necessity	Registration data, contact details
Identity verification (KYC/AML)	Legal obligation	KYC documents, registration data
Processing deposits and withdrawals	Contractual necessity	Financial data, transaction records
Delivering betting and gaming services	Contractual necessity	Gaming data, account balance
Fraud prevention and security monitoring	Legitimate interest / legal obligation	Technical data, transaction data
Responsible gaming enforcement	Legal obligation / legitimate interest	Gaming data, responsible gaming settings
Customer support and dispute resolution	Contractual necessity / legitimate interest	Communication data, account data
Platform analytics and improvement	Legitimate interest	Technical data, usage data
Regulatory reporting and compliance	Legal obligation	All relevant data categories
Sending account and transactional notifications	Contractual necessity	Contact details, transaction data
Sending promotional communications (where consented)	Consent	Contact details, gaming preferences

qu77 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where required by law or explicitly disclosed to you.

6. Data Sharing & Disclosure

6.1 Service Providers

qu77 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These providers act as data processors on our behalf and are contractually bound to process your data only as directed by qu77, in accordance with this Policy, and under appropriate security standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, SureCash, Visa/Mastercard gateway operators)
• Identity verification and KYC providers
• Fraud detection and anti-money-laundering (AML) compliance services
• Cloud hosting and infrastructure providers
• Customer support platform operators
• Analytics and Platform performance monitoring tools
• Game content providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, and others)

6.2 Legal & Regulatory Disclosure

qu77 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of qu77, our players, or the public. Such disclosures are made in strict accordance with applicable law and without prior notice to you where legally required.

6.3 Business Transfers

In the event that qu77 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via email or a prominent notice on the Platform, and the acquiring entity will be required to honour this Privacy Policy.

6.4 No Commercial Data Sales

qu77 does not and will not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Your data is yours. We use it only to deliver the qu77 service and to meet our obligations as a licensed operator.

7. Data Retention

qu77 retains your personal data for the following periods, after which it is securely deleted or anonymised:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years	Regulatory compliance, dispute resolution
KYC / identity verification documents	Duration of account + 5 years	AML legal obligation
Financial transaction records	7 years from transaction date	Financial regulatory requirement
Betting and gaming history	Duration of account + 3 years	Dispute resolution, responsible gaming
Customer support communications	3 years from last interaction	Quality assurance, dispute resolution
Technical / device / IP data	13 months from collection	Security monitoring, fraud prevention
Marketing consent records	Until consent withdrawn + 3 years	Evidence of lawful processing

When your account is closed — whether voluntarily or by qu77 — your active account data will be deactivated immediately. However, certain categories of data (as listed above) must be retained for the specified periods to comply with our legal and regulatory obligations. We will not use retained data for any purpose other than those legal and compliance functions during the retention period.

8. Data Security

qu77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and qu77's servers.
• Encryption at rest for all sensitive personal and financial data stored on our servers.
• PCI-DSS compliant payment processing — qu77 does not store full payment card numbers on its servers.
• Role-based access controls (RBAC) ensuring that only authorised qu77 personnel can access personal data, and only to the extent required for their job function.
• Multi-factor authentication (MFA) for all internal systems that process personal data.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• 24/7 intrusion detection and monitoring across all Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, qu77 will notify you without undue delay and take all reasonable steps to contain and remediate the breach.

You are responsible for keeping your qu77 login credentials confidential. qu77 will never ask for your password through email, live chat, or any other channel. If you believe your account has been compromised, contact our support team immediately at [email protected].

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember information about your visit — such as your login session, language preference, and usage patterns — making it easier for you to use the Platform on return visits.

9.2 Cookies Used by qu77

Cookie Type	Purpose	Duration
Essential / Session	Maintain your login session, prevent fraud, enable core Platform functions	Session (deleted on browser close)
Functional / Preference	Remember your language, currency (BDT), and display preferences	Up to 12 months
Analytics	Understand aggregate usage patterns to improve the Platform; no personally identifiable data is shared externally	Up to 13 months

9.3 What We Do Not Use

qu77 does not deploy third-party advertising cookies, cross-site tracking pixels, social media retargeting tags, or behavioural profiling trackers of any kind. Our analytics tools are configured to anonymise IP addresses and do not share individually identifiable data with external parties.

9.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies may impair core Platform functionality, including your ability to log in and maintain an active betting session. Detailed instructions for managing cookies in popular browsers are available from each browser vendor's support pages.

10. Your Privacy Rights

As a qu77 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with your registered email address and a description of your request. We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of all personal data qu77 holds about you, along with information about how it is used and shared.
• Right to Rectification: If any of your personal data held by qu77 is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that qu77 delete your personal data. Note that this right is subject to our legal retention obligations — data we are legally required to keep cannot be erased until the applicable retention period expires.
• Right to Restriction of Processing: In certain circumstances, you may request that qu77 restrict the processing of your data — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: You may object to qu77 processing your personal data for legitimate interest purposes or for direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where qu77 processes your data on the basis of your consent (e.g., for promotional email communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. Children & Minors

The qu77 Platform is strictly intended for adults aged 21 years and above. qu77 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to us, we will immediately close the account, delete all associated data, and return any deposits to the payment method used — minus amounts already wagered.

If you believe that a minor has gained access to the qu77 Platform or has created an account, please notify us immediately at [email protected] so that we can take prompt action. We encourage all qu77 account holders to ensure that minors in their household cannot access the Platform or their qu77 account credentials.

12. International Data Transfers

qu77 operates globally and your personal data may be transferred to, stored in, or processed in countries outside Bangladesh. Where such transfers occur, qu77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or exceeding, that required under applicable data protection principles.

Safeguards used by qu77 for international data transfers include:

• Contractual data processing agreements with all third-party processors that include binding data protection obligations.
• Transfer only to jurisdictions that maintain adequate data protection standards recognised internationally.
• Encryption of all data in transit, regardless of the destination country.

If you have questions about the specific safeguards applied to international transfers of your data, please contact our Data Protection team at [email protected].

13. Changes to This Policy

qu77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify you by:

• Sending an email notification to your registered qu77 email address, at least seven (7) days before the revised Policy takes effect; and/or
• Displaying a prominent notice on the qu77 Platform for a period of no less than fourteen (14) days following the update.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this page periodically so that you remain informed of how qu77 protects your privacy. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact & Data Requests

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding qu77's handling of your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Subject Request" in the subject line of your email for faster routing.
• Response Time: We aim to respond to all privacy requests within thirty (30) calendar days. Complex requests may take up to sixty (60) days; we will notify you if an extension is required.
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.